rooted. Initial shell was a pain. got user and root with one exploit. not sure if it was the intended way.