Got root. For me an enjoyable box.
However the very first step was painful to see because it was so simple (strangely). After that, an interesting route with plenty to learn along the way.
For priv-esc, patiently and diligently reading source code is the way, once you have found the jewels.
Feel free to PM me for hints.