There are conditions it's possible to obtains local root access having access to USB keyboard during boot process.
vulners.com/securityvulns/securityvulns:doc:5340