enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.
https://medium.com/@josemlwdf/luz-fc80c45d28df?source=rss------hacking-5