SecNotes

The user flag was easy but rooting this is a pain. I’m root on the box but cannot get to the flag. I feel I’m really close and I’m missing one thing. Can anyone PM some pointers?