spacepaste

  1.  
  2. execve("/usr/bin/chroot", ["/usr/bin/chroot", "img1/17.0-no-multilib_20180202-1"..., "/bin/bash", "-l", "-c", "su - root -c date"], 0x7ffeea037608 /* 24 vars */) = 0
  3. brk(NULL) = 0x5563164d5000
  4. mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1049464000
  5. access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  6. open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  7. fstat(3, {st_mode=S_IFREG|0644, st_size=60810, ...}) = 0
  8. mmap(NULL, 60810, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f1049455000
  9. close(3) = 0
  10. open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
  11. read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\6\2\0\0\0\0\0"..., 832) = 832
  12. fstat(3, {st_mode=S_IFREG|0755, st_size=1807920, ...}) = 0
  13. mmap(NULL, 3915192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f1048e86000
  14. mprotect(0x7f1049038000, 2097152, PROT_NONE) = 0
  15. mmap(0x7f1049238000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b2000) = 0x7f1049238000
  16. mmap(0x7f104923e000, 15800, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f104923e000
  17. close(3) = 0
  18. mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1049452000
  19. arch_prctl(ARCH_SET_FS, 0x7f1049452700) = 0
  20. mprotect(0x7f1049238000, 16384, PROT_READ) = 0
  21. mprotect(0x55631611c000, 4096, PROT_READ) = 0
  22. mprotect(0x7f1049466000, 4096, PROT_READ) = 0
  23. munmap(0x7f1049455000, 60810) = 0
  24. brk(NULL) = 0x5563164d5000
  25. brk(0x5563164f6000) = 0x5563164f6000
  26. open("/usr/lib64/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
  27. fstat(3, {st_mode=S_IFREG|0644, st_size=4127728, ...}) = 0
  28. mmap(NULL, 4127728, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f1048a96000
  29. close(3) = 0
  30. getcwd("/home/tinderbox", 4096) = 16
  31. lstat("/home/tinderbox/img1", {st_mode=S_IFDIR|0755, st_size=6802, ...}) = 0
  32. lstat("/home/tinderbox/img1/17.0-no-multilib_20180202-195308", {st_mode=S_IFDIR|0755, st_size=140, ...}) = 0
  33. chroot("img1/17.0-no-multilib_20180202-195308") = 0
  34. chdir("/") = 0
  35. execve("/bin/bash", ["/bin/bash", "-l", "-c", "su - root -c date"], 0x7ffcec02c360 /* 24 vars */) = 0
  36. brk(NULL) = 0x557c4ccba000
  37. access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  38. openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  39. fstat(3, {st_mode=S_IFREG|0644, st_size=132378, ...}) = 0
  40. mmap(NULL, 132378, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd28b981000
  41. close(3) = 0
  42. openat(AT_FDCWD, "/lib64/libreadline.so.7", O_RDONLY|O_CLOEXEC) = 3
  43. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000m\1\0\0\0\0\0"..., 832) = 832
  44. fstat(3, {st_mode=S_IFREG|0555, st_size=308952, ...}) = 0
  45. mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd28b97f000
  46. mmap(NULL, 2409704, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd28b531000
  47. mprotect(0x7fd28b574000, 2097152, PROT_NONE) = 0
  48. mmap(0x7fd28b774000, 32768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x43000) = 0x7fd28b774000
  49. mmap(0x7fd28b77c000, 5352, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fd28b77c000
  50. close(3) = 0
  51. openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
  52. read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\20\2\0\0\0\0\0"..., 832) = 832
  53. fstat(3, {st_mode=S_IFREG|0755, st_size=1865472, ...}) = 0
  54. mmap(NULL, 3971712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd28b167000
  55. mprotect(0x7fd28b327000, 2097152, PROT_NONE) = 0
  56. mmap(0x7fd28b527000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c0000) = 0x7fd28b527000
  57. mmap(0x7fd28b52d000, 14976, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fd28b52d000
  58. close(3) = 0
  59. openat(AT_FDCWD, "/lib64/libncurses.so.6", O_RDONLY|O_CLOEXEC) = 3
  60. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`W\1\0\0\0\0\0"..., 832) = 832
  61. fstat(3, {st_mode=S_IFREG|0755, st_size=370296, ...}) = 0
  62. mmap(NULL, 2467952, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd28af0c000
  63. mprotect(0x7fd28af62000, 2093056, PROT_NONE) = 0
  64. mmap(0x7fd28b161000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x55000) = 0x7fd28b161000
  65. mmap(0x7fd28b166000, 2160, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fd28b166000
  66. close(3) = 0
  67. mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd28b97c000
  68. arch_prctl(ARCH_SET_FS, 0x7fd28b97c740) = 0
  69. mprotect(0x7fd28b527000, 16384, PROT_READ) = 0
  70. mprotect(0x7fd28b161000, 16384, PROT_READ) = 0
  71. mprotect(0x7fd28b774000, 8192, PROT_READ) = 0
  72. mprotect(0x557c4bcbf000, 8192, PROT_READ) = 0
  73. mprotect(0x7fd28b9a2000, 4096, PROT_READ) = 0
  74. munmap(0x7fd28b981000, 132378) = 0
  75. openat(AT_FDCWD, "/dev/tty", O_RDWR|O_NONBLOCK) = 3
  76. close(3) = 0
  77. brk(NULL) = 0x557c4ccba000
  78. brk(0x557c4ccdb000) = 0x557c4ccdb000
  79. open("/usr/lib64/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
  80. fstat(3, {st_mode=S_IFREG|0644, st_size=4183504, ...}) = 0
  81. mmap(NULL, 4183504, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd28ab0e000
  82. close(3) = 0
  83. getuid() = 0
  84. getgid() = 0
  85. geteuid() = 0
  86. getegid() = 0
  87. rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  88. ioctl(-1, TIOCGPGRP, 0x7fff3f2104e4) = -1 EBADF (Bad file descriptor)
  89. sysinfo({uptime=19686, loads=[749504, 760800, 787872], totalram=66952282112, freeram=35870228480, sharedram=3277058048, bufferram=286425088, totalswap=68719472640, freeswap=68719472640, procs=379, totalhigh=0, freehigh=0, mem_unit=1}) = 0
  90. rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
  91. rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  92. rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
  93. rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  94. rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
  95. rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  96. rt_sigaction(SIGTSTP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
  97. rt_sigaction(SIGTSTP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  98. rt_sigaction(SIGTTIN, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
  99. rt_sigaction(SIGTTIN, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  100. rt_sigaction(SIGTTOU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
  101. rt_sigaction(SIGTTOU, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  102. rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  103. rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  104. uname({sysname="Linux", nodename="mr-fox", ...}) = 0
  105. stat("/home/tinderbox", 0x7fff3f2101e0) = -1 ENOENT (No such file or directory)
  106. getcwd("/", 4096) = 2
  107. stat("/root", {st_mode=S_IFDIR|0700, st_size=120, ...}) = 0
  108. getpid() = 17779
  109. open("/usr/lib64/gconv/gconv-modules.cache", O_RDONLY) = 3
  110. fstat(3, {st_mode=S_IFREG|0644, st_size=26244, ...}) = 0
  111. mmap(NULL, 26244, PROT_READ, MAP_SHARED, 3, 0) = 0x7fd28b99b000
  112. close(3) = 0
  113. getppid() = 17775
  114. gettimeofday({tv_sec=1517765283, tv_usec=873951}, NULL) = 0
  115. getpid() = 17779
  116. getpgrp() = 17775
  117. ioctl(2, TIOCGPGRP, [17775]) = 0
  118. rt_sigaction(SIGCHLD, {sa_handler=0x557c4ba3f5d0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  119. prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=255389, rlim_max=255389}) = 0
  120. rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  121. openat(AT_FDCWD, "/etc/profile", O_RDONLY) = 3
  122. fstat(3, {st_mode=S_IFREG|0644, st_size=1963, ...}) = 0
  123. read(3, "# /etc/profile: login shell setu"..., 1963) = 1963
  124. close(3) = 0
  125. rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  126. stat("/etc/profile.env", {st_mode=S_IFREG|0644, st_size=2085, ...}) = 0
  127. openat(AT_FDCWD, "/etc/profile.env", O_RDONLY) = 3
  128. fstat(3, {st_mode=S_IFREG|0644, st_size=2085, ...}) = 0
  129. read(3, "# THIS FILE IS AUTOMATICALLY GEN"..., 2085) = 2085
  130. close(3) = 0
  131. rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  132. umask(022) = 022
  133. stat("/etc/bash/bashrc", {st_mode=S_IFREG|0644, st_size=3524, ...}) = 0
  134. openat(AT_FDCWD, "/etc/bash/bashrc", O_RDONLY) = 3
  135. fstat(3, {st_mode=S_IFREG|0644, st_size=3524, ...}) = 0
  136. read(3, "# /etc/bash/bashrc\n#\n# This file"..., 3524) = 3524
  137. close(3) = 0
  138. rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  139. open("/etc/profile.d/", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  140. fstat(3, {st_mode=S_IFDIR|0755, st_size=106, ...}) = 0
  141. getdents(3, /* 7 entries */, 32768) = 224
  142. getdents(3, /* 0 entries */, 32768) = 0
  143. close(3) = 0
  144. faccessat(AT_FDCWD, "/etc/profile.d/gawk.sh", R_OK) = 0
  145. openat(AT_FDCWD, "/etc/profile.d/gawk.sh", O_RDONLY) = 3
  146. fstat(3, {st_mode=S_IFREG|0644, st_size=757, ...}) = 0
  147. read(3, "gawkpath_default () {\n\tunset AWK"..., 757) = 757
  148. close(3) = 0
  149. rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  150. faccessat(AT_FDCWD, "/etc/profile.d/java-config-2.sh", R_OK) = 0
  151. openat(AT_FDCWD, "/etc/profile.d/java-config-2.sh", O_RDONLY) = 3
  152. fstat(3, {st_mode=S_IFREG|0644, st_size=1093, ...}) = 0
  153. read(3, "# Copyright 1999-2013 Gentoo Fou"..., 1093) = 1093
  154. close(3) = 0
  155. rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  156. lstat("/root/.gentoo/java-config-2/current-user-vm", 0x7fff3f20f640) = -1 ENOENT (No such file or directory)
  157. lstat("/etc/java-config-2/current-system-vm", {st_mode=S_IFLNK|0777, st_size=27, ...}) = 0
  158. openat(AT_FDCWD, "/root/.bash_profile", O_RDONLY) = -1 ENOENT (No such file or directory)
  159. openat(AT_FDCWD, "/root/.bash_login", O_RDONLY) = -1 ENOENT (No such file or directory)
  160. openat(AT_FDCWD, "/root/.profile", O_RDONLY) = -1 ENOENT (No such file or directory)
  161. rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  162. stat(".", {st_mode=S_IFDIR|0755, st_size=140, ...}) = 0
  163. stat("/usr/x86_64-pc-linux-gnu/gcc-bin/7.3.0/su", 0x7fff3f210040) = -1 ENOENT (No such file or directory)
  164. stat("/usr/lib/llvm/5/bin/su", 0x7fff3f210040) = -1 ENOENT (No such file or directory)
  165. stat("/usr/local/sbin/su", 0x7fff3f210040) = -1 ENOENT (No such file or directory)
  166. stat("/usr/local/bin/su", 0x7fff3f210040) = -1 ENOENT (No such file or directory)
  167. stat("/usr/sbin/su", 0x7fff3f210040) = -1 ENOENT (No such file or directory)
  168. stat("/usr/bin/su", 0x7fff3f210040) = -1 ENOENT (No such file or directory)
  169. stat("/sbin/su", 0x7fff3f210040) = -1 ENOENT (No such file or directory)
  170. stat("/bin/su", {st_mode=S_IFREG|S_ISUID|0711, st_size=41312, ...}) = 0
  171. stat("/bin/su", {st_mode=S_IFREG|S_ISUID|0711, st_size=41312, ...}) = 0
  172. geteuid() = 0
  173. getegid() = 0
  174. getuid() = 0
  175. getgid() = 0
  176. access("/bin/su", X_OK) = 0
  177. stat("/bin/su", {st_mode=S_IFREG|S_ISUID|0711, st_size=41312, ...}) = 0
  178. geteuid() = 0
  179. getegid() = 0
  180. getuid() = 0
  181. getgid() = 0
  182. access("/bin/su", R_OK) = 0
  183. stat("/bin/su", {st_mode=S_IFREG|S_ISUID|0711, st_size=41312, ...}) = 0
  184. stat("/bin/su", {st_mode=S_IFREG|S_ISUID|0711, st_size=41312, ...}) = 0
  185. geteuid() = 0
  186. getegid() = 0
  187. getuid() = 0
  188. getgid() = 0
  189. access("/bin/su", X_OK) = 0
  190. stat("/bin/su", {st_mode=S_IFREG|S_ISUID|0711, st_size=41312, ...}) = 0
  191. geteuid() = 0
  192. getegid() = 0
  193. getuid() = 0
  194. getgid() = 0
  195. access("/bin/su", R_OK) = 0
  196. rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  197. rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  198. rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fd28b19d0f0}, {sa_handler=0x557c4ba3f5d0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fd28b19d0f0}, 8) = 0
  199. execve("/bin/su", ["su", "-", "root", "-c", "date"], 0x557c4ccc49d0 /* 38 vars */) = 0
  200. brk(NULL) = 0x557d7a40a000
  201. access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  202. openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  203. fstat(3, {st_mode=S_IFREG|0644, st_size=132378, ...}) = 0
  204. mmap(NULL, 132378, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc7ff37b000
  205. close(3) = 0
  206. openat(AT_FDCWD, "/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
  207. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200&\0\0\0\0\0\0"..., 832) = 832
  208. fstat(3, {st_mode=S_IFREG|0755, st_size=55736, ...}) = 0
  209. mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc7ff379000
  210. mmap(NULL, 2151000, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc7fef6a000
  211. mprotect(0x7fc7fef77000, 2093056, PROT_NONE) = 0
  212. mmap(0x7fc7ff176000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7fc7ff176000
  213. close(3) = 0
  214. openat(AT_FDCWD, "/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
  215. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\17\0\0\0\0\0\0"..., 832) = 832
  216. fstat(3, {st_mode=S_IFREG|0755, st_size=14360, ...}) = 0
  217. mmap(NULL, 2109744, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc7fed66000
  218. mprotect(0x7fc7fed69000, 2093056, PROT_NONE) = 0
  219. mmap(0x7fc7fef68000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fc7fef68000
  220. close(3) = 0
  221. openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
  222. read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\20\2\0\0\0\0\0"..., 832) = 832
  223. fstat(3, {st_mode=S_IFREG|0755, st_size=1865472, ...}) = 0
  224. mmap(NULL, 3971712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc7fe99c000
  225. mprotect(0x7fc7feb5c000, 2097152, PROT_NONE) = 0
  226. mmap(0x7fc7fed5c000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c0000) = 0x7fc7fed5c000
  227. mmap(0x7fc7fed62000, 14976, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc7fed62000
  228. close(3) = 0
  229. openat(AT_FDCWD, "/lib64/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
  230. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 \16\0\0\0\0\0\0"..., 832) = 832
  231. fstat(3, {st_mode=S_IFREG|0755, st_size=14320, ...}) = 0
  232. mmap(NULL, 2109712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc7fe798000
  233. mprotect(0x7fc7fe79b000, 2093056, PROT_NONE) = 0
  234. mmap(0x7fc7fe99a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fc7fe99a000
  235. close(3) = 0
  236. mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc7ff377000
  237. arch_prctl(ARCH_SET_FS, 0x7fc7ff377b80) = 0
  238. mprotect(0x7fc7fed5c000, 16384, PROT_READ) = 0
  239. mprotect(0x7fc7fe99a000, 4096, PROT_READ) = 0
  240. mprotect(0x7fc7ff176000, 4096, PROT_READ) = 0
  241. mprotect(0x7fc7fef68000, 4096, PROT_READ) = 0
  242. mprotect(0x557d7a330000, 4096, PROT_READ) = 0
  243. mprotect(0x7fc7ff39c000, 4096, PROT_READ) = 0
  244. munmap(0x7fc7ff37b000, 132378) = 0
  245. brk(NULL) = 0x557d7a40a000
  246. brk(0x557d7a42b000) = 0x557d7a42b000
  247. open("/usr/lib64/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
  248. fstat(3, {st_mode=S_IFREG|0644, st_size=4183504, ...}) = 0
  249. mmap(NULL, 4183504, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc7fe39a000
  250. close(3) = 0
  251. getuid() = 0
  252. ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0
  253. fstat(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 5), ...}) = 0
  254. readlink("/proc/self/fd/0", "/dev/pts/5", 4095) = 10
  255. stat("/dev/pts/5", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 5), ...}) = 0
  256. ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0
  257. open("/proc/self/loginuid", O_RDONLY) = 3
  258. read(3, "1001", 12) = 4
  259. close(3) = 0
  260. socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
  261. connect(3, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  262. close(3) = 0
  263. socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
  264. connect(3, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  265. close(3) = 0
  266. open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3
  267. fstat(3, {st_mode=S_IFREG|0644, st_size=447, ...}) = 0
  268. read(3, "# /etc/nsswitch.conf:\n# $Header:"..., 4096) = 447
  269. read(3, "", 4096) = 0
  270. close(3) = 0
  271. openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  272. fstat(3, {st_mode=S_IFREG|0644, st_size=132378, ...}) = 0
  273. mmap(NULL, 132378, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc7ff37b000
  274. close(3) = 0
  275. openat(AT_FDCWD, "/lib64/tls/x86_64/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  276. stat("/lib64/tls/x86_64/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  277. openat(AT_FDCWD, "/lib64/tls/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  278. stat("/lib64/tls/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  279. openat(AT_FDCWD, "/lib64/tls/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  280. stat("/lib64/tls/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  281. openat(AT_FDCWD, "/lib64/tls/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  282. stat("/lib64/tls", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  283. openat(AT_FDCWD, "/lib64/x86_64/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  284. stat("/lib64/x86_64/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  285. openat(AT_FDCWD, "/lib64/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  286. stat("/lib64/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  287. openat(AT_FDCWD, "/lib64/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  288. stat("/lib64/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  289. openat(AT_FDCWD, "/lib64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  290. stat("/lib64", {st_mode=S_IFDIR|0755, st_size=4078, ...}) = 0
  291. openat(AT_FDCWD, "/usr/lib64/tls/x86_64/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  292. stat("/usr/lib64/tls/x86_64/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  293. openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  294. stat("/usr/lib64/tls/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  295. openat(AT_FDCWD, "/usr/lib64/tls/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  296. stat("/usr/lib64/tls/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  297. openat(AT_FDCWD, "/usr/lib64/tls/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  298. stat("/usr/lib64/tls", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  299. openat(AT_FDCWD, "/usr/lib64/x86_64/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  300. stat("/usr/lib64/x86_64/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  301. openat(AT_FDCWD, "/usr/lib64/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  302. stat("/usr/lib64/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  303. openat(AT_FDCWD, "/usr/lib64/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  304. stat("/usr/lib64/x86_64", 0x7fff78746fa0) = -1 ENOENT (No such file or directory)
  305. openat(AT_FDCWD, "/usr/lib64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  306. stat("/usr/lib64", {st_mode=S_IFDIR|0755, st_size=72346, ...}) = 0
  307. munmap(0x7fc7ff37b000, 132378) = 0
  308. openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  309. fstat(3, {st_mode=S_IFREG|0644, st_size=132378, ...}) = 0
  310. mmap(NULL, 132378, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc7ff37b000
  311. close(3) = 0
  312. openat(AT_FDCWD, "/lib64/libnss_files.so.2", O_RDONLY|O_CLOEXEC) = 3
  313. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20#\0\0\0\0\0\0"..., 832) = 832
  314. fstat(3, {st_mode=S_IFREG|0755, st_size=47320, ...}) = 0
  315. mmap(NULL, 2168632, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc7fe188000
  316. mprotect(0x7fc7fe193000, 2093056, PROT_NONE) = 0
  317. mmap(0x7fc7fe392000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7fc7fe392000
  318. mmap(0x7fc7fe394000, 22328, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc7fe394000
  319. close(3) = 0
  320. mprotect(0x7fc7fe392000, 4096, PROT_READ) = 0
  321. munmap(0x7fc7ff37b000, 132378) = 0
  322. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  323. fstat(3, {st_mode=S_IFREG|0644, st_size=1870, ...}) = 0
  324. read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1870
  325. read(3, "", 4096) = 0
  326. close(3) = 0
  327. ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0
  328. fstat(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 5), ...}) = 0
  329. readlink("/proc/self/fd/0", "/dev/pts/5", 511) = 10
  330. stat("/dev/pts/5", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 5), ...}) = 0
  331. access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or directory)
  332. open("/var/run/utmp", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  333. access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or directory)
  334. open("/var/run/utmp", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  335. getuid() = 0
  336. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  337. fstat(3, {st_mode=S_IFREG|0644, st_size=1870, ...}) = 0
  338. read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1870
  339. close(3) = 0
  340. stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=586, ...}) = 0
  341. openat(AT_FDCWD, "/etc/pam.d/su", O_RDONLY) = 3
  342. fstat(3, {st_mode=S_IFREG|0644, st_size=278, ...}) = 0
  343. read(3, "auth sufficient\tpam_rootok"..., 4096) = 278
  344. openat(AT_FDCWD, "/lib64/security/pam_rootok.so", O_RDONLY|O_CLOEXEC) = 4
  345. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\5\0\0\0\0\0\0"..., 832) = 832
  346. fstat(4, {st_mode=S_IFREG|0755, st_size=5880, ...}) = 0
  347. mmap(NULL, 2101304, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7fc7fdf86000
  348. mprotect(0x7fc7fdf87000, 2093056, PROT_NONE) = 0
  349. mmap(0x7fc7fe186000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0) = 0x7fc7fe186000
  350. close(4) = 0
  351. mprotect(0x7fc7fe186000, 4096, PROT_READ) = 0
  352. openat(AT_FDCWD, "/lib64/security/pam_wheel.so", O_RDONLY|O_CLOEXEC) = 4
  353. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\10\0\0\0\0\0\0"..., 832) = 832
  354. fstat(4, {st_mode=S_IFREG|0755, st_size=10056, ...}) = 0
  355. mmap(NULL, 2105480, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7fc7fdd83000
  356. mprotect(0x7fc7fdd85000, 2093056, PROT_NONE) = 0
  357. mmap(0x7fc7fdf84000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x1000) = 0x7fc7fdf84000
  358. close(4) = 0
  359. mprotect(0x7fc7fdf84000, 4096, PROT_READ) = 0
  360. openat(AT_FDCWD, "/etc/pam.d/system-auth", O_RDONLY) = 4
  361. fstat(4, {st_mode=S_IFREG|0644, st_size=552, ...}) = 0
  362. read(4, "auth\t\trequired\tpam_env.so \nauth\t"..., 4096) = 552
  363. openat(AT_FDCWD, "/lib64/security/pam_env.so", O_RDONLY|O_CLOEXEC) = 5
  364. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\r\0\0\0\0\0\0"..., 832) = 832
  365. fstat(5, {st_mode=S_IFREG|0755, st_size=14256, ...}) = 0
  366. mmap(NULL, 2109680, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fdb7f000
  367. mprotect(0x7fc7fdb82000, 2093056, PROT_NONE) = 0
  368. mmap(0x7fc7fdd81000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7fc7fdd81000
  369. close(5) = 0
  370. mprotect(0x7fc7fdd81000, 4096, PROT_READ) = 0
  371. openat(AT_FDCWD, "/lib64/security/pam_ssh.so", O_RDONLY|O_CLOEXEC) = 5
  372. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240D\0\0\0\0\0\0"..., 832) = 832
  373. fstat(5, {st_mode=S_IFREG|0755, st_size=282264, ...}) = 0
  374. mmap(NULL, 2377856, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fd93a000
  375. mprotect(0x7fc7fd97d000, 2097152, PROT_NONE) = 0
  376. mmap(0x7fc7fdb7d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x43000) = 0x7fc7fdb7d000
  377. close(5) = 0
  378. openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 5
  379. fstat(5, {st_mode=S_IFREG|0644, st_size=132378, ...}) = 0
  380. mmap(NULL, 132378, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7fc7ff37b000
  381. close(5) = 0
  382. openat(AT_FDCWD, "/usr/lib64/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = 5
  383. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0s\6\0\0\0\0\0"..., 832) = 832
  384. fstat(5, {st_mode=S_IFREG|0555, st_size=2324968, ...}) = 0
  385. mmap(NULL, 4434552, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fd4ff000
  386. mprotect(0x7fc7fd710000, 2093056, PROT_NONE) = 0
  387. mmap(0x7fc7fd90f000, 163840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x210000) = 0x7fc7fd90f000
  388. mmap(0x7fc7fd937000, 10872, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc7fd937000
  389. close(5) = 0
  390. openat(AT_FDCWD, "/lib64/libz.so.1", O_RDONLY|O_CLOEXEC) = 5
  391. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320$\0\0\0\0\0\0"..., 832) = 832
  392. fstat(5, {st_mode=S_IFREG|0755, st_size=92400, ...}) = 0
  393. mmap(NULL, 2187664, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fd2e8000
  394. mprotect(0x7fc7fd2fe000, 2093056, PROT_NONE) = 0
  395. mmap(0x7fc7fd4fd000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x15000) = 0x7fc7fd4fd000
  396. close(5) = 0
  397. mprotect(0x7fc7fd4fd000, 4096, PROT_READ) = 0
  398. mprotect(0x7fc7fd90f000, 114688, PROT_READ) = 0
  399. mprotect(0x7fc7fdb7d000, 4096, PROT_READ) = 0
  400. munmap(0x7fc7ff37b000, 132378) = 0
  401. openat(AT_FDCWD, "/lib64/security/pam_unix.so", O_RDONLY|O_CLOEXEC) = 5
  402. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`!\0\0\0\0\0\0"..., 832) = 832
  403. fstat(5, {st_mode=S_IFREG|0755, st_size=47576, ...}) = 0
  404. mmap(NULL, 2192128, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fd0d0000
  405. mprotect(0x7fc7fd0db000, 2093056, PROT_NONE) = 0
  406. mmap(0x7fc7fd2da000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xa000) = 0x7fc7fd2da000
  407. mmap(0x7fc7fd2dc000, 45824, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc7fd2dc000
  408. close(5) = 0
  409. openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 5
  410. fstat(5, {st_mode=S_IFREG|0644, st_size=132378, ...}) = 0
  411. mmap(NULL, 132378, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7fc7ff37b000
  412. close(5) = 0
  413. openat(AT_FDCWD, "/lib64/libcrypt.so.1", O_RDONLY|O_CLOEXEC) = 5
  414. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\f\0\0\0\0\0\0"..., 832) = 832
  415. fstat(5, {st_mode=S_IFREG|0755, st_size=38936, ...}) = 0
  416. mmap(NULL, 2322944, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fce98000
  417. mprotect(0x7fc7fcea1000, 2093056, PROT_NONE) = 0
  418. mmap(0x7fc7fd0a0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x8000) = 0x7fc7fd0a0000
  419. mmap(0x7fc7fd0a2000, 184832, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc7fd0a2000
  420. close(5) = 0
  421. mprotect(0x7fc7fd0a0000, 4096, PROT_READ) = 0
  422. mprotect(0x7fc7fd2da000, 4096, PROT_READ) = 0
  423. munmap(0x7fc7ff37b000, 132378) = 0
  424. openat(AT_FDCWD, "/lib64/security/pam_permit.so", O_RDONLY|O_CLOEXEC) = 5
  425. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\6\0\0\0\0\0\0"..., 832) = 832
  426. fstat(5, {st_mode=S_IFREG|0755, st_size=5888, ...}) = 0
  427. mmap(NULL, 2101312, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fcc96000
  428. mprotect(0x7fc7fcc97000, 2093056, PROT_NONE) = 0
  429. mmap(0x7fc7fce96000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0) = 0x7fc7fce96000
  430. close(5) = 0
  431. mprotect(0x7fc7fce96000, 4096, PROT_READ) = 0
  432. read(4, "", 4096) = 0
  433. close(4) = 0
  434. openat(AT_FDCWD, "/etc/pam.d/system-auth", O_RDONLY) = 4
  435. fstat(4, {st_mode=S_IFREG|0644, st_size=552, ...}) = 0
  436. read(4, "auth\t\trequired\tpam_env.so \nauth\t"..., 4096) = 552
  437. read(4, "", 4096) = 0
  438. close(4) = 0
  439. openat(AT_FDCWD, "/etc/pam.d/system-auth", O_RDONLY) = 4
  440. fstat(4, {st_mode=S_IFREG|0644, st_size=552, ...}) = 0
  441. read(4, "auth\t\trequired\tpam_env.so \nauth\t"..., 4096) = 552
  442. openat(AT_FDCWD, "/lib64/security/pam_cracklib.so", O_RDONLY|O_CLOEXEC) = 5
  443. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\f\0\0\0\0\0\0"..., 832) = 832
  444. fstat(5, {st_mode=S_IFREG|0755, st_size=14264, ...}) = 0
  445. mmap(NULL, 2109688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fca92000
  446. mprotect(0x7fc7fca95000, 2093056, PROT_NONE) = 0
  447. mmap(0x7fc7fcc94000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7fc7fcc94000
  448. close(5) = 0
  449. openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 5
  450. fstat(5, {st_mode=S_IFREG|0644, st_size=132378, ...}) = 0
  451. mmap(NULL, 132378, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7fc7ff37b000
  452. close(5) = 0
  453. openat(AT_FDCWD, "/lib64/libcrack.so.2", O_RDONLY|O_CLOEXEC) = 5
  454. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P<\0\0\0\0\0\0"..., 832) = 832
  455. fstat(5, {st_mode=S_IFREG|0755, st_size=43312, ...}) = 0
  456. mmap(NULL, 2155200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fc883000
  457. mprotect(0x7fc7fc88c000, 2097152, PROT_NONE) = 0
  458. mmap(0x7fc7fca8c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x9000) = 0x7fc7fca8c000
  459. mmap(0x7fc7fca8e000, 12992, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc7fca8e000
  460. close(5) = 0
  461. mprotect(0x7fc7fca8c000, 4096, PROT_READ) = 0
  462. mprotect(0x7fc7fcc94000, 4096, PROT_READ) = 0
  463. munmap(0x7fc7ff37b000, 132378) = 0
  464. read(4, "", 4096) = 0
  465. close(4) = 0
  466. openat(AT_FDCWD, "/etc/pam.d/system-auth", O_RDONLY) = 4
  467. fstat(4, {st_mode=S_IFREG|0644, st_size=552, ...}) = 0
  468. read(4, "auth\t\trequired\tpam_env.so \nauth\t"..., 4096) = 552
  469. openat(AT_FDCWD, "/lib64/security/pam_limits.so", O_RDONLY|O_CLOEXEC) = 5
  470. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\22\0\0\0\0\0\0"..., 832) = 832
  471. fstat(5, {st_mode=S_IFREG|0755, st_size=18528, ...}) = 0
  472. mmap(NULL, 2113872, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7fc7fc67e000
  473. mprotect(0x7fc7fc682000, 2093056, PROT_NONE) = 0
  474. mmap(0x7fc7fc881000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x3000) = 0x7fc7fc881000
  475. close(5) = 0
  476. mprotect(0x7fc7fc881000, 4096, PROT_READ) = 0
  477. read(4, "", 4096) = 0
  478. close(4) = 0
  479. openat(AT_FDCWD, "/lib64/security/pam_xauth.so", O_RDONLY|O_CLOEXEC) = 4
  480. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\25\0\0\0\0\0\0"..., 832) = 832
  481. fstat(4, {st_mode=S_IFREG|0755, st_size=18592, ...}) = 0
  482. mmap(NULL, 2114016, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7fc7fc479000
  483. mprotect(0x7fc7fc47d000, 2093056, PROT_NONE) = 0
  484. mmap(0x7fc7fc67c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x3000) = 0x7fc7fc67c000
  485. close(4) = 0
  486. mprotect(0x7fc7fc67c000, 4096, PROT_READ) = 0
  487. read(3, "", 4096) = 0
  488. close(3) = 0
  489. openat(AT_FDCWD, "/etc/pam.d/other", O_RDONLY) = 3
  490. fstat(3, {st_mode=S_IFREG|0644, st_size=128, ...}) = 0
  491. read(3, "auth required\tpam_deny.so\n"..., 4096) = 128
  492. openat(AT_FDCWD, "/lib64/security/pam_deny.so", O_RDONLY|O_CLOEXEC) = 4
  493. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\4\0\0\0\0\0\0"..., 832) = 832
  494. fstat(4, {st_mode=S_IFREG|0755, st_size=5720, ...}) = 0
  495. mmap(NULL, 2101288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7fc7fc277000
  496. mprotect(0x7fc7fc278000, 2093056, PROT_NONE) = 0
  497. mmap(0x7fc7fc477000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0) = 0x7fc7fc477000
  498. close(4) = 0
  499. mprotect(0x7fc7fc477000, 4096, PROT_READ) = 0
  500. read(3, "", 4096) = 0
  501. close(3) = 0
  502. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  503. fstat(3, {st_mode=S_IFREG|0644, st_size=1870, ...}) = 0
  504. read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1870
  505. close(3) = 0
  506. rt_sigaction(SIGINT, {sa_handler=SIG_IGN, sa_mask=[INT], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc7fe9d20f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
  507. rt_sigaction(SIGQUIT, {sa_handler=SIG_IGN, sa_mask=[QUIT], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc7fe9d20f0}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
  508. getuid() = 0
  509. getuid() = 0
  510. openat(AT_FDCWD, "/etc/login.defs", O_RDONLY) = 3
  511. fstat(3, {st_mode=S_IFREG|0644, st_size=12721, ...}) = 0
  512. read(3, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
  513. read(3, "ll be enabled if the file exists"..., 4096) = 4096
  514. read(3, "s\n\n#\n# Number of significant cha"..., 4096) = 4096
  515. read(3, "tion of the line length in the\n#"..., 4096) = 433
  516. read(3, "", 4096) = 0
  517. close(3) = 0
  518. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  519. fstat(3, {st_mode=S_IFREG|0644, st_size=1870, ...}) = 0
  520. read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1870
  521. close(3) = 0
  522. geteuid() = 0
  523. open("/etc/shadow", O_RDONLY|O_CLOEXEC) = 3
  524. fstat(3, {st_mode=S_IFREG|0640, st_size=646, ...}) = 0
  525. read(3, "root:*:10770:0:::::\nhalt:*:9797:"..., 4096) = 646
  526. close(3) = 0
  527. rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[INT], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc7fe9d20f0}, {sa_handler=SIG_IGN, sa_mask=[INT], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc7fe9d20f0}, 8) = 0
  528. rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[QUIT], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc7fe9d20f0}, {sa_handler=SIG_IGN, sa_mask=[QUIT], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7fc7fe9d20f0}, 8) = 0
  529. open("/etc/localtime", O_RDONLY|O_CLOEXEC) = 3
  530. fstat(3, {st_mode=S_IFREG|0644, st_size=2335, ...}) = 0
  531. fstat(3, {st_mode=S_IFREG|0644, st_size=2335, ...}) = 0
  532. read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\t\0\0\0\t\0\0\0\0"..., 4096) = 2335
  533. lseek(3, -1476, SEEK_CUR) = 859
  534. read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\t\0\0\0\t\0\0\0\0"..., 4096) = 1476
  535. close(3) = 0
  536. getpid() = 17779
  537. socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
  538. connect(3, {sa_family=AF_UNIX, sun_path="/dev/log"}, 110) = 0
  539. sendto(3, "<86>Feb 4 18:28:03 su[17779]: S"..., 61, MSG_NOSIGNAL, NULL, 0) = 61
  540. openat(AT_FDCWD, "/etc/login.defs", O_RDONLY) = 4
  541. fstat(4, {st_mode=S_IFREG|0644, st_size=12721, ...}) = 0
  542. read(4, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
  543. read(4, "ll be enabled if the file exists"..., 4096) = 4096
  544. read(4, "s\n\n#\n# Number of significant cha"..., 4096) = 4096
  545. read(4, "tion of the line length in the\n#"..., 4096) = 433
  546. read(4, "", 4096) = 0
  547. close(4) = 0
  548. getpid() = 17779
  549. sendto(3, "<86>Feb 4 18:28:03 su[17779]: +"..., 53, MSG_NOSIGNAL, NULL, 0) = 53
  550. setgid(0) = 0
  551. open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 4
  552. read(4, "65536\n", 31) = 6
  553. close(4) = 0
  554. socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  555. connect(4, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  556. close(4) = 0
  557. socket(AF_UNIX, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  558. connect(4, {sa_family=AF_UNIX, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  559. close(4) = 0
  560. open("/etc/group", O_RDONLY|O_CLOEXEC) = 4
  561. lseek(4, 0, SEEK_CUR) = 0
  562. fstat(4, {st_mode=S_IFREG|0644, st_size=679, ...}) = 0
  563. read(4, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 679
  564. lseek(4, 0, SEEK_CUR) = 679
  565. lseek(4, 0, SEEK_CUR) = 679
  566. lseek(4, 0, SEEK_CUR) = 679
  567. lseek(4, 0, SEEK_CUR) = 679
  568. lseek(4, 0, SEEK_CUR) = 679
  569. lseek(4, 0, SEEK_CUR) = 679
  570. lseek(4, 0, SEEK_CUR) = 679
  571. lseek(4, 0, SEEK_CUR) = 679
  572. lseek(4, 0, SEEK_CUR) = 679
  573. lseek(4, 0, SEEK_CUR) = 679
  574. lseek(4, 0, SEEK_CUR) = 679
  575. lseek(4, 0, SEEK_CUR) = 679
  576. lseek(4, 0, SEEK_CUR) = 679
  577. lseek(4, 0, SEEK_CUR) = 679
  578. lseek(4, 0, SEEK_CUR) = 679
  579. lseek(4, 0, SEEK_CUR) = 679
  580. lseek(4, 0, SEEK_CUR) = 679
  581. lseek(4, 0, SEEK_CUR) = 679
  582. lseek(4, 0, SEEK_CUR) = 679
  583. lseek(4, 0, SEEK_CUR) = 679
  584. lseek(4, 0, SEEK_CUR) = 679
  585. lseek(4, 0, SEEK_CUR) = 679
  586. lseek(4, 0, SEEK_CUR) = 679
  587. lseek(4, 0, SEEK_CUR) = 679
  588. lseek(4, 0, SEEK_CUR) = 679
  589. lseek(4, 0, SEEK_CUR) = 679
  590. lseek(4, 0, SEEK_CUR) = 679
  591. lseek(4, 0, SEEK_CUR) = 679
  592. lseek(4, 0, SEEK_CUR) = 679
  593. lseek(4, 0, SEEK_CUR) = 679
  594. lseek(4, 0, SEEK_CUR) = 679
  595. lseek(4, 0, SEEK_CUR) = 679
  596. lseek(4, 0, SEEK_CUR) = 679
  597. lseek(4, 0, SEEK_CUR) = 679
  598. lseek(4, 0, SEEK_CUR) = 679
  599. lseek(4, 0, SEEK_CUR) = 679
  600. lseek(4, 0, SEEK_CUR) = 679
  601. lseek(4, 0, SEEK_CUR) = 679
  602. lseek(4, 0, SEEK_CUR) = 679
  603. lseek(4, 0, SEEK_CUR) = 679
  604. lseek(4, 0, SEEK_CUR) = 679
  605. lseek(4, 0, SEEK_CUR) = 679
  606. lseek(4, 0, SEEK_CUR) = 679
  607. lseek(4, 0, SEEK_CUR) = 679
  608. lseek(4, 0, SEEK_CUR) = 679
  609. lseek(4, 0, SEEK_CUR) = 679
  610. read(4, "", 4096) = 0
  611. close(4) = 0
  612. setgroups(10, [0, 1, 2, 3, 4, 6, 10, 11, 26, 27]) = 0
  613. close(3) = 0
  614. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  615. fstat(3, {st_mode=S_IFREG|0644, st_size=1870, ...}) = 0
  616. read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1870
  617. close(3) = 0
  618. geteuid() = 0
  619. mmap(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc7ff336000
  620. geteuid() = 0
  621. getegid() = 0
  622. getgroups(65536, [0, 1, 2, 3, 4, 6, 10, 11, 26, 27]) = 10
  623. open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 3
  624. read(3, "65536\n", 31) = 6
  625. close(3) = 0
  626. open("/etc/group", O_RDONLY|O_CLOEXEC) = 3
  627. lseek(3, 0, SEEK_CUR) = 0
  628. fstat(3, {st_mode=S_IFREG|0644, st_size=679, ...}) = 0
  629. read(3, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 679
  630. lseek(3, 0, SEEK_CUR) = 679
  631. lseek(3, 0, SEEK_CUR) = 679
  632. lseek(3, 0, SEEK_CUR) = 679
  633. lseek(3, 0, SEEK_CUR) = 679
  634. lseek(3, 0, SEEK_CUR) = 679
  635. lseek(3, 0, SEEK_CUR) = 679
  636. lseek(3, 0, SEEK_CUR) = 679
  637. lseek(3, 0, SEEK_CUR) = 679
  638. lseek(3, 0, SEEK_CUR) = 679
  639. lseek(3, 0, SEEK_CUR) = 679
  640. lseek(3, 0, SEEK_CUR) = 679
  641. lseek(3, 0, SEEK_CUR) = 679
  642. lseek(3, 0, SEEK_CUR) = 679
  643. lseek(3, 0, SEEK_CUR) = 679
  644. lseek(3, 0, SEEK_CUR) = 679
  645. lseek(3, 0, SEEK_CUR) = 679
  646. lseek(3, 0, SEEK_CUR) = 679
  647. lseek(3, 0, SEEK_CUR) = 679
  648. lseek(3, 0, SEEK_CUR) = 679
  649. lseek(3, 0, SEEK_CUR) = 679
  650. lseek(3, 0, SEEK_CUR) = 679
  651. lseek(3, 0, SEEK_CUR) = 679
  652. lseek(3, 0, SEEK_CUR) = 679
  653. lseek(3, 0, SEEK_CUR) = 679
  654. lseek(3, 0, SEEK_CUR) = 679
  655. lseek(3, 0, SEEK_CUR) = 679
  656. lseek(3, 0, SEEK_CUR) = 679
  657. lseek(3, 0, SEEK_CUR) = 679
  658. lseek(3, 0, SEEK_CUR) = 679
  659. lseek(3, 0, SEEK_CUR) = 679
  660. lseek(3, 0, SEEK_CUR) = 679
  661. lseek(3, 0, SEEK_CUR) = 679
  662. lseek(3, 0, SEEK_CUR) = 679
  663. lseek(3, 0, SEEK_CUR) = 679
  664. lseek(3, 0, SEEK_CUR) = 679
  665. lseek(3, 0, SEEK_CUR) = 679
  666. lseek(3, 0, SEEK_CUR) = 679
  667. lseek(3, 0, SEEK_CUR) = 679
  668. lseek(3, 0, SEEK_CUR) = 679
  669. lseek(3, 0, SEEK_CUR) = 679
  670. lseek(3, 0, SEEK_CUR) = 679
  671. lseek(3, 0, SEEK_CUR) = 679
  672. lseek(3, 0, SEEK_CUR) = 679
  673. lseek(3, 0, SEEK_CUR) = 679
  674. lseek(3, 0, SEEK_CUR) = 679
  675. lseek(3, 0, SEEK_CUR) = 679
  676. read(3, "", 4096) = 0
  677. close(3) = 0
  678. setgroups(10, [0, 1, 2, 3, 4, 6, 10, 11, 26, 27]) = 0
  679. setresgid(-1, 0, -1) = 0
  680. setresuid(-1, 0, -1) = 0
  681. stat("/root/.ssh", 0x7fff78745b50) = -1 ENOENT (No such file or directory)
  682. setresuid(-1, 0, -1) = 0
  683. setgroups(10, [0, 1, 2, 3, 4, 6, 10, 11, 26, 27]) = 0
  684. setresgid(-1, 0, -1) = 0
  685. munmap(0x7fc7ff336000, 266240) = 0
  686. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  687. fstat(3, {st_mode=S_IFREG|0644, st_size=1870, ...}) = 0
  688. read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1870
  689. close(3) = 0
  690. prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  691. prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  692. prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  693. prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
  694. prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0
  695. prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  696. prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=255389, rlim_max=255389}) = 0
  697. prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=4*1024}) = 0
  698. prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=64*1024, rlim_max=64*1024}) = 0
  699. prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  700. prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  701. prlimit64(0, RLIMIT_SIGPENDING, NULL, {rlim_cur=255389, rlim_max=255389}) = 0
  702. prlimit64(0, RLIMIT_MSGQUEUE, NULL, {rlim_cur=800*1024, rlim_max=800*1024}) = 0
  703. prlimit64(0, RLIMIT_NICE, NULL, {rlim_cur=0, rlim_max=0}) = 0
  704. prlimit64(0, RLIMIT_RTPRIO, NULL, {rlim_cur=0, rlim_max=0}) = 0
  705. prlimit64(0, RLIMIT_RTTIME, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  706. getpriority(PRIO_PROCESS, 0) = 20
  707. openat(AT_FDCWD, "/etc/security/limits.conf", O_RDONLY) = 3
  708. fstat(3, {st_mode=S_IFREG|0644, st_size=1835, ...}) = 0
  709. read(3, "# /etc/security/limits.conf\n#\n#E"..., 4096) = 1835
  710. read(3, "", 4096) = 0
  711. close(3) = 0
  712. open("/etc/security/limits.d", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  713. fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
  714. getdents(3, /* 2 entries */, 32768) = 48
  715. open("/usr/lib64/gconv/gconv-modules.cache", O_RDONLY) = 4
  716. fstat(4, {st_mode=S_IFREG|0644, st_size=26244, ...}) = 0
  717. mmap(NULL, 26244, PROT_READ, MAP_SHARED, 4, 0) = 0x7fc7ff395000
  718. close(4) = 0
  719. getdents(3, /* 0 entries */, 32768) = 0
  720. close(3) = 0
  721. setpriority(PRIO_PROCESS, 0, 0) = 0
  722. openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY) = 3
  723. fstat(3, {st_mode=S_IFREG|0644, st_size=2972, ...}) = 0
  724. read(3, "#\n# This is the configuration fi"..., 4096) = 2972
  725. read(3, "", 4096) = 0
  726. close(3) = 0
  727. openat(AT_FDCWD, "/etc/environment", O_RDONLY) = 3
  728. fstat(3, {st_mode=S_IFREG|0644, st_size=97, ...}) = 0
  729. read(3, "#\n# This file is parsed by pam_e"..., 4096) = 97
  730. read(3, "", 4096) = 0
  731. close(3) = 0
  732. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  733. fstat(3, {st_mode=S_IFREG|0644, st_size=1870, ...}) = 0
  734. read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1870
  735. close(3) = 0
  736. stat("/root/.pam_environment", 0x7fff78747990) = -1 ENOENT (No such file or directory)
  737. getuid() = 0
  738. openat(AT_FDCWD, "/etc/login.defs", O_RDONLY) = 3
  739. fstat(3, {st_mode=S_IFREG|0644, st_size=12721, ...}) = 0
  740. read(3, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
  741. read(3, "ll be enabled if the file exists"..., 4096) = 4096
  742. read(3, "s\n\n#\n# Number of significant cha"..., 4096) = 4096
  743. read(3, "tion of the line length in the\n#"..., 4096) = 433
  744. read(3, "", 4096) = 0
  745. close(3) = 0
  746. access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or directory)
  747. open("/var/run/utmp", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  748. access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or directory)
  749. open("/var/run/utmp", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
  750. getuid() = 0
  751. getpid() = 17779
  752. socket(AF_UNIX, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
  753. connect(3, {sa_family=AF_UNIX, sun_path="/dev/log"}, 110) = 0
  754. sendto(3, "<86>Feb 4 18:28:03 su[17779]: p"..., 92, MSG_NOSIGNAL, NULL, 0) = 92
  755. openat(AT_FDCWD, "/etc/security/pam_env.conf", O_RDONLY) = 4
  756. fstat(4, {st_mode=S_IFREG|0644, st_size=2972, ...}) = 0
  757. read(4, "#\n# This is the configuration fi"..., 4096) = 2972
  758. read(4, "", 4096) = 0
  759. close(4) = 0
  760. openat(AT_FDCWD, "/etc/environment", O_RDONLY) = 4
  761. fstat(4, {st_mode=S_IFREG|0644, st_size=97, ...}) = 0
  762. read(4, "#\n# This file is parsed by pam_e"..., 4096) = 97
  763. read(4, "", 4096) = 0
  764. close(4) = 0
  765. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 4
  766. fstat(4, {st_mode=S_IFREG|0644, st_size=1870, ...}) = 0
  767. read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1870
  768. close(4) = 0
  769. stat("/root/.pam_environment", 0x7fff78747990) = -1 ENOENT (No such file or directory)
  770. access("/usr/X11R6/bin/xauth", X_OK) = -1 ENOENT (No such file or directory)
  771. access("/usr/bin/xauth", X_OK) = 0
  772. clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fc7ff377e50) = 17829
  773. rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1], NULL, 8) = 0
  774. rt_sigaction(SIGTERM, {sa_handler=0x557d7a12bfa0, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fc7fe9d20f0}, NULL, 8) = 0
  775. rt_sigaction(SIGINT, {sa_handler=0x557d7a12bfa0, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fc7fe9d20f0}, NULL, 8) = 0
  776. rt_sigaction(SIGQUIT, {sa_handler=0x557d7a12bfa0, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fc7fe9d20f0}, NULL, 8) = 0
  777. rt_sigaction(SIGTSTP, {sa_handler=0x557d7a12bfa0, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7fc7fe9d20f0}, NULL, 8) = 0
  778. rt_sigprocmask(SIG_UNBLOCK, [INT QUIT ALRM TERM TSTP], NULL, 8) = 0
  779. wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WSTOPPED, NULL) = 17829
  780. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 4
  781. fstat(4, {st_mode=S_IFREG|0644, st_size=1870, ...}) = 0
  782. read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1870
  783. close(4) = 0
  784. geteuid() = 0
  785. brk(0x557d7a47b000) = 0x557d7a47b000
  786. geteuid() = 0
  787. getegid() = 0
  788. getgroups(65536, [0, 1, 2, 3, 4, 6, 10, 11, 26, 27]) = 10
  789. open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 4
  790. read(4, "65536\n", 31) = 6
  791. close(4) = 0
  792. open("/etc/group", O_RDONLY|O_CLOEXEC) = 4
  793. lseek(4, 0, SEEK_CUR) = 0
  794. fstat(4, {st_mode=S_IFREG|0644, st_size=679, ...}) = 0
  795. read(4, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 679
  796. lseek(4, 0, SEEK_CUR) = 679
  797. lseek(4, 0, SEEK_CUR) = 679
  798. lseek(4, 0, SEEK_CUR) = 679
  799. lseek(4, 0, SEEK_CUR) = 679
  800. lseek(4, 0, SEEK_CUR) = 679
  801. lseek(4, 0, SEEK_CUR) = 679
  802. lseek(4, 0, SEEK_CUR) = 679
  803. lseek(4, 0, SEEK_CUR) = 679
  804. lseek(4, 0, SEEK_CUR) = 679
  805. lseek(4, 0, SEEK_CUR) = 679
  806. lseek(4, 0, SEEK_CUR) = 679
  807. lseek(4, 0, SEEK_CUR) = 679
  808. lseek(4, 0, SEEK_CUR) = 679
  809. lseek(4, 0, SEEK_CUR) = 679
  810. lseek(4, 0, SEEK_CUR) = 679
  811. lseek(4, 0, SEEK_CUR) = 679
  812. lseek(4, 0, SEEK_CUR) = 679
  813. lseek(4, 0, SEEK_CUR) = 679
  814. lseek(4, 0, SEEK_CUR) = 679
  815. lseek(4, 0, SEEK_CUR) = 679
  816. lseek(4, 0, SEEK_CUR) = 679
  817. lseek(4, 0, SEEK_CUR) = 679
  818. lseek(4, 0, SEEK_CUR) = 679
  819. lseek(4, 0, SEEK_CUR) = 679
  820. lseek(4, 0, SEEK_CUR) = 679
  821. lseek(4, 0, SEEK_CUR) = 679
  822. lseek(4, 0, SEEK_CUR) = 679
  823. lseek(4, 0, SEEK_CUR) = 679
  824. lseek(4, 0, SEEK_CUR) = 679
  825. lseek(4, 0, SEEK_CUR) = 679
  826. lseek(4, 0, SEEK_CUR) = 679
  827. lseek(4, 0, SEEK_CUR) = 679
  828. lseek(4, 0, SEEK_CUR) = 679
  829. lseek(4, 0, SEEK_CUR) = 679
  830. lseek(4, 0, SEEK_CUR) = 679
  831. lseek(4, 0, SEEK_CUR) = 679
  832. lseek(4, 0, SEEK_CUR) = 679
  833. lseek(4, 0, SEEK_CUR) = 679
  834. lseek(4, 0, SEEK_CUR) = 679
  835. lseek(4, 0, SEEK_CUR) = 679
  836. lseek(4, 0, SEEK_CUR) = 679
  837. lseek(4, 0, SEEK_CUR) = 679
  838. lseek(4, 0, SEEK_CUR) = 679
  839. lseek(4, 0, SEEK_CUR) = 679
  840. lseek(4, 0, SEEK_CUR) = 679
  841. lseek(4, 0, SEEK_CUR) = 679
  842. read(4, "", 4096) = 0
  843. close(4) = 0
  844. setgroups(10, [0, 1, 2, 3, 4, 6, 10, 11, 26, 27]) = 0
  845. setresgid(-1, 0, -1) = 0
  846. setresuid(-1, 0, -1) = 0
  847. setresuid(-1, 0, -1) = 0
  848. setgroups(10, [0, 1, 2, 3, 4, 6, 10, 11, 26, 27]) = 0
  849. setresgid(-1, 0, -1) = 0
  850. getuid() = 0
  851. openat(AT_FDCWD, "/etc/login.defs", O_RDONLY) = 4
  852. fstat(4, {st_mode=S_IFREG|0644, st_size=12721, ...}) = 0
  853. read(4, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
  854. read(4, "ll be enabled if the file exists"..., 4096) = 4096
  855. read(4, "s\n\n#\n# Number of significant cha"..., 4096) = 4096
  856. read(4, "tion of the line length in the\n#"..., 4096) = 433
  857. read(4, "", 4096) = 0
  858. close(4) = 0
  859. getpid() = 17779
  860. sendto(3, "<86>Feb 4 18:28:03 su[17779]: p"..., 81, MSG_NOSIGNAL, NULL, 0) = 81
  861. getpid() = 17779
  862. sendto(3, "<83>Feb 4 18:28:03 su[17779]: p"..., 84, MSG_NOSIGNAL, NULL, 0) = 84
  863. open("/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 4
  864. fstat(4, {st_mode=S_IFREG|0644, st_size=2997, ...}) = 0
  865. read(4, "# Locale name alias data base.\n#"..., 4096) = 2997
  866. read(4, "", 4096) = 0
  867. close(4) = 0
  868. open("/usr/share/locale/en_US.utf8/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  869. open("/usr/share/locale/en_US/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  870. open("/usr/share/locale/en.utf8/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  871. open("/usr/share/locale/en/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  872. open("/usr/share/locale/en_US.utf8/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  873. open("/usr/share/locale/en_US/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  874. open("/usr/share/locale/en.utf8/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  875. open("/usr/share/locale/en/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  876. write(2, "su: No module specific data is p"..., 39) = 39
  877. munmap(0x7fc7fdf86000, 2101304) = 0
  878. munmap(0x7fc7fdd83000, 2105480) = 0
  879. munmap(0x7fc7fdb7f000, 2109680) = 0
  880. munmap(0x7fc7fd93a000, 2377856) = 0
  881. munmap(0x7fc7fd4ff000, 4434552) = 0
  882. munmap(0x7fc7fd0d0000, 2192128) = 0
  883. munmap(0x7fc7fce98000, 2322944) = 0
  884. munmap(0x7fc7fcc96000, 2101312) = 0
  885. munmap(0x7fc7fca92000, 2109688) = 0
  886. munmap(0x7fc7fc883000, 2155200) = 0
  887. munmap(0x7fc7fd2e8000, 2187664) = 0
  888. munmap(0x7fc7fc67e000, 2113872) = 0
  889. munmap(0x7fc7fc479000, 2114016) = 0
  890. munmap(0x7fc7fc277000, 2101288) = 0
  891. exit_group(0) = ?
  892. +++ exited with 0 +++
  893.