[tptacek]

I think a majority of systems security people, if asked, would say they assume an attacker with code execution on a Linux system can raise privileges.