Ok, I give up!
Forget about user, it was the easy part.
On root, I ran pspy, noticed the non absolute path process, had some hints from ippsec’s lazy path video, tried that, non has given me a shell!
I’d appreciate some help here, I don’t want to skip this machine.
Thanks