Root privs by file permissions

Many root-only actions are still only controlled by file permissions, not specific kernel restrictions

Replace or install system software

Edit software/daemon configuration files

Access /dev files

Modify kernel configuration via /proc entries