871 03:16:55.674661 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffea45b8250 /* 18 vars */) = 0 <0.001877> 871 03:16:55.676842 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000099> 871 03:16:55.677717 brk(NULL) = 0x5627ac8bd000 <0.000045> 871 03:16:55.677990 fcntl(0, F_GETFD) = 0 <0.000052> 871 03:16:55.678278 fcntl(1, F_GETFD) = 0 <0.000044> 871 03:16:55.678395 fcntl(2, F_GETFD) = 0 <0.000044> 871 03:16:55.678517 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000038> 871 03:16:55.678692 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa28bb73000 <0.000062> 871 03:16:55.678855 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000038> 871 03:16:55.678966 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000725> 871 03:16:55.679891 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000065> 871 03:16:55.680843 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000047> 871 03:16:55.680961 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000095> 871 03:16:55.681120 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 871 03:16:55.681216 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.681306 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 871 03:16:55.681406 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.681497 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 871 03:16:55.681588 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.681678 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 871 03:16:55.681768 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.681858 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 871 03:16:55.681949 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000046> 871 03:16:55.682055 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 871 03:16:55.682150 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.682240 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 871 03:16:55.682332 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.682423 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 871 03:16:55.682530 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000030> 871 03:16:55.682622 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000035> 871 03:16:55.682717 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.682807 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 871 03:16:55.682903 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.683014 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000064> 871 03:16:55.683176 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000033> 871 03:16:55.683275 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000047> 871 03:16:55.683462 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000032> 871 03:16:55.683556 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.683646 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000030> 871 03:16:55.683734 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000036> 871 03:16:55.683827 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000030> 871 03:16:55.683915 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 871 03:16:55.684051 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000102> 871 03:16:55.684255 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 871 03:16:55.684389 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7fffb28c8000, 0) = -1 ENOENT (No such file or directory) <0.000034> 871 03:16:55.684496 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 871 03:16:55.684603 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000035> 871 03:16:55.684729 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 871 03:16:55.684854 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000035> 871 03:16:55.684964 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28bb6f000 <0.000061> 871 03:16:55.685091 close(3) = 0 <0.000032> 871 03:16:55.685208 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000040> 871 03:16:55.685326 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000035> 871 03:16:55.685432 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000033> 871 03:16:55.685540 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa28bb3e000 <0.000040> 871 03:16:55.685661 mmap(0x7fa28bb41000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fa28bb41000 <0.000062> 871 03:16:55.685788 mmap(0x7fa28bb48000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7fa28bb48000 <0.000046> 871 03:16:55.685898 mmap(0x7fa28bb5d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7fa28bb5d000 <0.000051> 871 03:16:55.686033 mmap(0x7fa28bb5f000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa28bb5f000 <0.000041> 871 03:16:55.686146 close(3) = 0 <0.000031> 871 03:16:55.686243 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000042> 871 03:16:55.686358 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 871 03:16:55.686472 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000034> 871 03:16:55.686572 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000034> 871 03:16:55.686683 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa28bb10000 <0.000044> 871 03:16:55.686791 mmap(0x7fa28bb17000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7fa28bb17000 <0.000058> 871 03:16:55.686912 mmap(0x7fa28bb32000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7fa28bb32000 <0.000055> 871 03:16:55.687029 mmap(0x7fa28bb3a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7fa28bb3a000 <0.000051> 871 03:16:55.687155 mmap(0x7fa28bb3c000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa28bb3c000 <0.000040> 871 03:16:55.687265 close(3) = 0 <0.000033> 871 03:16:55.687362 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000073> 871 03:16:55.687512 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000947> 871 03:16:55.688567 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000038> 871 03:16:55.688733 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa28baed000 <0.000044> 871 03:16:55.688839 mmap(0x7fa28baf3000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fa28baf3000 <0.000065> 871 03:16:55.688960 mmap(0x7fa28bb07000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7fa28bb07000 <0.000054> 871 03:16:55.689070 mmap(0x7fa28bb0e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7fa28bb0e000 <0.000040> 871 03:16:55.690041 close(3) = 0 <0.000067> 871 03:16:55.690212 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000047> 871 03:16:55.690333 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 871 03:16:55.690428 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000033> 871 03:16:55.690531 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000030> 871 03:16:55.690622 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000030> 871 03:16:55.690716 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000027> 871 03:16:55.690803 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa28b90b000 <0.000042> 871 03:16:55.690903 mmap(0x7fa28b931000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7fa28b931000 <0.000064> 871 03:16:55.691045 mmap(0x7fa28ba87000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7fa28ba87000 <0.000113> 871 03:16:55.691278 mmap(0x7fa28bada000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7fa28bada000 <0.000057> 871 03:16:55.691452 mmap(0x7fa28bae0000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa28bae0000 <0.000039> 871 03:16:55.691569 close(3) = 0 <0.000031> 871 03:16:55.691674 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000040> 871 03:16:55.691807 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000032> 871 03:16:55.691908 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000033> 871 03:16:55.692231 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa28b903000 <0.000040> 871 03:16:55.692397 mmap(0x7fa28b905000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa28b905000 <0.000052> 871 03:16:55.692514 mmap(0x7fa28b908000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fa28b908000 <0.000043> 871 03:16:55.692613 mmap(0x7fa28b909000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fa28b909000 <0.000036> 871 03:16:55.692718 close(3) = 0 <0.000029> 871 03:16:55.692805 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000035> 871 03:16:55.692916 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000029> 871 03:16:55.693024 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000031> 871 03:16:55.693126 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa28b901000 <0.000030> 871 03:16:55.693209 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa28b867000 <0.000033> 871 03:16:55.693293 mmap(0x7fa28b869000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa28b869000 <0.000045> 871 03:16:55.693390 mmap(0x7fa28b8d4000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7fa28b8d4000 <0.000041> 871 03:16:55.693482 mmap(0x7fa28b8ff000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7fa28b8ff000 <0.000038> 871 03:16:55.693605 close(3) = 0 <0.000029> 871 03:16:55.694616 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa28b864000 <0.000060> 871 03:16:55.694758 arch_prctl(ARCH_SET_FS, 0x7fa28b864840) = 0 <0.000040> 871 03:16:55.694841 set_tid_address(0x7fa28b864b10) = 871 <0.000025> 871 03:16:55.694906 set_robust_list(0x7fa28b864b20, 24) = 0 <0.000026> 871 03:16:55.694974 rseq(0x7fa28b865160, 0x20, 0, 0x53053053) = 0 <0.000036> 871 03:16:55.695224 mprotect(0x7fa28bada000, 16384, PROT_READ) = 0 <0.000038> 871 03:16:55.695308 mprotect(0x7fa28b8ff000, 4096, PROT_READ) = 0 <0.000033> 871 03:16:55.695405 mprotect(0x7fa28b909000, 4096, PROT_READ) = 0 <0.000031> 871 03:16:55.695569 mprotect(0x7fa28bb0e000, 4096, PROT_READ) = 0 <0.000037> 871 03:16:55.695744 mprotect(0x7fa28bb3a000, 4096, PROT_READ) = 0 <0.000033> 871 03:16:55.695878 mprotect(0x7fa28bb5d000, 4096, PROT_READ) = 0 <0.000035> 871 03:16:55.696141 mprotect(0x5627a9a52000, 8192, PROT_READ) = 0 <0.000035> 871 03:16:55.696230 mprotect(0x7fa28bba6000, 8192, PROT_READ) = 0 <0.000035> 871 03:16:55.696330 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000027> 871 03:16:55.696433 munmap(0x7fa28bb6f000, 14575) = 0 <0.000040> 871 03:16:55.696544 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000040> 871 03:16:55.696646 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000028> 871 03:16:55.696731 read(3, "40\n", 7) = 3 <0.000033> 871 03:16:55.696827 close(3) = 0 <0.000030> 871 03:16:55.696906 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000030> 871 03:16:55.696978 prctl(PR_GET_SECUREBITS) = 0 <0.000044> 871 03:16:55.697134 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000033> 871 03:16:55.697214 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000030> 871 03:16:55.697343 statfs("/sys/fs/selinux", 0x7fffb28c8d90) = -1 ENOENT (No such file or directory) <0.000043> 871 03:16:55.697448 statfs("/selinux", 0x7fffb28c8d90) = -1 ENOENT (No such file or directory) <0.000032> 871 03:16:55.697542 getrandom("\xc4\x8d\xfe\x0a\xd0\xb4\x6f\x18", 8, GRND_NONBLOCK) = 8 <0.000035> 871 03:16:55.697635 brk(NULL) = 0x5627ac8bd000 <0.000031> 871 03:16:55.697714 brk(0x5627ac8de000) = 0x5627ac8de000 <0.000038> 871 03:16:55.697820 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000046> 871 03:16:55.697929 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000034> 871 03:16:55.698062 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tpr"..., 1024) = 336 <0.000052> 871 03:16:55.698188 read(3, "", 1024) = 0 <0.000031> 871 03:16:55.698272 close(3) = 0 <0.000038> 871 03:16:55.698362 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000040> 871 03:16:55.698493 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000029> 871 03:16:55.698574 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000044> 871 03:16:55.698668 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 871 03:16:55.698748 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000031> 871 03:16:55.698831 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000032> 871 03:16:55.698912 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 871 03:16:55.699011 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000033> 871 03:16:55.699095 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 871 03:16:55.699175 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000032> 871 03:16:55.699257 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000032> 871 03:16:55.699337 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000031> 871 03:16:55.699416 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000033> 871 03:16:55.699499 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000032> 871 03:16:55.699581 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 871 03:16:55.699661 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000030> 871 03:16:55.699739 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000032> 871 03:16:55.699822 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000033> 871 03:16:55.699914 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000032> 871 03:16:55.700019 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000026> 871 03:16:55.700117 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000040> 871 03:16:55.700215 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000032> 871 03:16:55.700305 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28b400000 <0.000047> 871 03:16:55.700415 close(3) = 0 <0.000031> 871 03:16:55.700498 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 871 03:16:55.700598 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000035> 871 03:16:55.700697 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000034> 871 03:16:55.700822 read(3, "", 4096) = 0 <0.000030> 871 03:16:55.700904 close(3) = 0 <0.000035> 871 03:16:55.701016 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 871 03:16:55.701110 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 871 03:16:55.701208 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000032> 871 03:16:55.701297 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28bb72000 <0.000042> 871 03:16:55.701389 close(3) = 0 <0.000031> 871 03:16:55.701480 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000038> 871 03:16:55.701577 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000033> 871 03:16:55.701667 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7fa28b85d000 <0.000040> 871 03:16:55.701759 close(3) = 0 <0.000031> 871 03:16:55.701847 futex(0x7fa28badfa4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000033> 871 03:16:55.701937 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000035> 871 03:16:55.702044 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000092> 871 03:16:55.702190 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000028> 871 03:16:55.702268 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28bb71000 <0.000036> 871 03:16:55.702348 close(3) = 0 <0.000023> 871 03:16:55.702437 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000027> 871 03:16:55.702510 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 871 03:16:55.702594 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000027> 871 03:16:55.702671 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28bb70000 <0.000031> 871 03:16:55.702746 close(3) = 0 <0.000025> 871 03:16:55.702822 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 871 03:16:55.702898 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 871 03:16:55.702980 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000049> 871 03:16:55.703083 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28bb6f000 <0.000031> 871 03:16:55.703162 close(3) = 0 <0.000026> 871 03:16:55.703242 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 871 03:16:55.703315 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 871 03:16:55.703392 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000026> 871 03:16:55.703464 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28b85c000 <0.000033> 871 03:16:55.703541 close(3) = 0 <0.000024> 871 03:16:55.703615 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 871 03:16:55.703689 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 871 03:16:55.703767 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000026> 871 03:16:55.703840 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28b85b000 <0.000032> 871 03:16:55.703914 close(3) = 0 <0.000025> 871 03:16:55.703989 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 871 03:16:55.704096 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 871 03:16:55.704173 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000025> 871 03:16:55.704246 close(3) = 0 <0.000027> 871 03:16:55.704314 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 871 03:16:55.704389 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000027> 871 03:16:55.704468 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28b85a000 <0.000030> 871 03:16:55.704542 close(3) = 0 <0.000027> 871 03:16:55.704624 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000027> 871 03:16:55.704695 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 871 03:16:55.704773 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000026> 871 03:16:55.704846 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28b859000 <0.000030> 871 03:16:55.704919 close(3) = 0 <0.000025> 871 03:16:55.704994 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000035> 871 03:16:55.705103 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 871 03:16:55.705185 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000025> 871 03:16:55.705255 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28b858000 <0.000029> 871 03:16:55.705326 close(3) = 0 <0.000025> 871 03:16:55.705405 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 871 03:16:55.705478 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 871 03:16:55.705554 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000025> 871 03:16:55.705622 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28b857000 <0.000028> 871 03:16:55.705689 close(3) = 0 <0.000024> 871 03:16:55.705759 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000026> 871 03:16:55.705829 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000026> 871 03:16:55.705901 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000025> 871 03:16:55.705968 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28b856000 <0.000068> 871 03:16:55.706079 close(3) = 0 <0.000023> 871 03:16:55.706149 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000026> 871 03:16:55.706218 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 871 03:16:55.706292 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000025> 871 03:16:55.706360 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa28b7ff000 <0.000027> 871 03:16:55.706425 close(3) = 0 <0.000023> 871 03:16:55.706507 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 871 03:16:55.706577 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000023> 871 03:16:55.706643 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000025> 871 03:16:55.706720 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000024> 871 03:16:55.706788 lseek(3, -60, SEEK_CUR) = 54 <0.000024> 871 03:16:55.706853 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000023> 871 03:16:55.706919 close(3) = 0 <0.000024> 871 03:16:55.706993 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000030> 871 03:16:55.707078 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000025> 871 03:16:55.707145 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000024> 871 03:16:55.707209 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000024> 871 03:16:55.707279 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000024> 871 03:16:55.707342 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000024> 871 03:16:55.707415 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.000745> 871 03:16:55.708254 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000032> 871 03:16:55.708332 read(3, "", 4096) = 0 <0.000022> 871 03:16:55.708393 close(3) = 0 <0.000023> 871 03:16:55.708480 geteuid() = 1000 <0.000021> 871 03:16:55.708535 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000024> 871 03:16:55.708604 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000031> 871 03:16:55.708676 access("/usr/bin/sudo", X_OK) = 0 <0.000026> 871 03:16:55.708739 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000025> 871 03:16:55.708812 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000027> 871 03:16:55.708881 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000025> 871 03:16:55.708945 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000025> 871 03:16:55.709029 write(2, "sudo", 4) = 4 <0.000047> 871 03:16:55.709118 write(2, ": ", 2) = 2 <0.000028> 871 03:16:55.709195 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000026> 871 03:16:55.709267 ioctl(2, TCGETS, 0x7fffb28c74b0) = -1 ENOTTY (Inappropriate ioctl for device) <0.000025> 871 03:16:55.709335 write(2, "\n", 1) = 1 <0.000026> 871 03:16:55.709455 exit_group(1) = ? 871 03:16:55.709796 +++ exited with 1 +++