same privileges, the attacker does not have full control of the system.