How did you verify that it was not in a VM? Did you achieve persistence?

I think the article should have focused more on this as it's the most interesting and important part. execle and system are not really interesting, to paraphrase verroq: that just goes from arbitrary code execution to arbitrary code execution.

And disabling execle by recompiling library wont work, since you could still do a syscall "manually" with inline assembly.