3 ms·

But then malware must run as root.

• julie78787 11y ago
  Not necessarily. Malware only requires privilege if it is violating a security policy. There are a variety of attacks in which a process executing as a user is able to access resources controlled by other processes which are executing as the same user.