It should at least be possible for an attacker to launch and attack
your VM and end up with root.
If you have a not-yet-implemented vulnerability, put some kind of trivial
vulnerability in its place. For example, suppose your final privilege escalation
mechanism isn't ready yet. You could replace it by adding your unprivileged
user to the sudoers list, or by putting the root password in a text file in /tmp
or something like that.
If it's not already there, please create a sudoer account named "slab"
with password "slab" so we can all easily cheat and look around your VM
if necessary (e.g., to get the network working). I'm asking you to name
this account "slab" because it's already present on the sample VM due to an
entertaining typo for "cslab".
To submit this version
Export the VM to your thumb drive
Login to the iMac Olin302-52
Create a folder named /Users/Shared/SecurityComps/YOUR_TEAM_SHORT_NAME/implementation2