1234 07:07:30.951841 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffee2d75430 /* 18 vars */) = 0 <0.002110> 1234 07:07:30.954371 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000167> 1234 07:07:30.959336 brk(NULL) = 0x5624d2e10000 <0.000011> 1234 07:07:30.959497 fcntl(0, F_GETFD) = 0 <0.000013> 1234 07:07:30.959654 fcntl(1, F_GETFD) = 0 <0.000010> 1234 07:07:30.959700 fcntl(2, F_GETFD) = 0 <0.000010> 1234 07:07:30.959746 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000015> 1234 07:07:30.959831 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd15e451000 <0.000019> 1234 07:07:30.959891 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.959942 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.009591> 1234 07:07:30.969617 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000021> 1234 07:07:30.970803 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000016> 1234 07:07:30.970864 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.970906 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000011> 1234 07:07:30.970946 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.970985 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000020> 1234 07:07:30.971060 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.971103 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000011> 1234 07:07:30.971144 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000009> 1234 07:07:30.971181 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000016> 1234 07:07:30.971267 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000011> 1234 07:07:30.971310 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.971353 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.971394 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000011> 1234 07:07:30.971437 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000011> 1234 07:07:30.971478 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000013> 1234 07:07:30.971522 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.971563 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000011> 1234 07:07:30.971620 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.971661 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.971702 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000011> 1234 07:07:30.971744 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000018> 1234 07:07:30.971793 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000009> 1234 07:07:30.971829 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.971870 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000009> 1234 07:07:30.971906 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.971946 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000009> 1234 07:07:30.971985 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000011> 1234 07:07:30.972054 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.972097 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000016> 1234 07:07:30.972142 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000033> 1234 07:07:30.972204 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.972245 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000009> 1234 07:07:30.972284 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000016> 1234 07:07:30.972331 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7ffd04c82aa0, 0) = -1 ENOENT (No such file or directory) <0.000011> 1234 07:07:30.972373 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000016> 1234 07:07:30.972421 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000010> 1234 07:07:30.972468 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000016> 1234 07:07:30.972530 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000010> 1234 07:07:30.972576 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e44d000 <0.000021> 1234 07:07:30.972628 close(3) = 0 <0.000010> 1234 07:07:30.972675 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000018> 1234 07:07:30.972729 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000011> 1234 07:07:30.972771 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.972820 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd15e41c000 <0.000020> 1234 07:07:30.972882 mmap(0x7fd15e41f000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fd15e41f000 <0.000032> 1234 07:07:30.972945 mmap(0x7fd15e426000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7fd15e426000 <0.000022> 1234 07:07:30.972998 mmap(0x7fd15e43b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7fd15e43b000 <0.000052> 1234 07:07:30.973091 mmap(0x7fd15e43d000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fd15e43d000 <0.000016> 1234 07:07:30.973145 close(3) = 0 <0.000010> 1234 07:07:30.973190 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000020> 1234 07:07:30.973248 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000014> 1234 07:07:30.973300 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000011> 1234 07:07:30.973341 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.973388 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd15e3ee000 <0.000022> 1234 07:07:30.973439 mmap(0x7fd15e3f5000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7fd15e3f5000 <0.000028> 1234 07:07:30.973495 mmap(0x7fd15e410000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7fd15e410000 <0.000019> 1234 07:07:30.973542 mmap(0x7fd15e418000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7fd15e418000 <0.000022> 1234 07:07:30.973601 mmap(0x7fd15e41a000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fd15e41a000 <0.000014> 1234 07:07:30.973654 close(3) = 0 <0.000008> 1234 07:07:30.973692 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000048> 1234 07:07:30.973776 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.002656> 1234 07:07:30.976506 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000014> 1234 07:07:30.976608 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd15e3cb000 <0.000025> 1234 07:07:30.976672 mmap(0x7fd15e3d1000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fd15e3d1000 <0.000048> 1234 07:07:30.976755 mmap(0x7fd15e3e5000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7fd15e3e5000 <0.000024> 1234 07:07:30.976813 mmap(0x7fd15e3ec000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7fd15e3ec000 <0.000024> 1234 07:07:30.977787 close(3) = 0 <0.000013> 1234 07:07:30.977864 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000036> 1234 07:07:30.977970 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000020> 1234 07:07:30.978055 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000014> 1234 07:07:30.978118 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000012> 1234 07:07:30.978165 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000013> 1234 07:07:30.978218 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000011> 1234 07:07:30.978264 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd15e1e9000 <0.000024> 1234 07:07:30.978320 mmap(0x7fd15e20f000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7fd15e20f000 <0.000037> 1234 07:07:30.978390 mmap(0x7fd15e365000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7fd15e365000 <0.000024> 1234 07:07:30.978447 mmap(0x7fd15e3b8000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7fd15e3b8000 <0.000026> 1234 07:07:30.978514 mmap(0x7fd15e3be000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fd15e3be000 <0.000019> 1234 07:07:30.978583 close(3) = 0 <0.000011> 1234 07:07:30.978637 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000018> 1234 07:07:30.978698 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000012> 1234 07:07:30.978744 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000012> 1234 07:07:30.978795 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd15e1e1000 <0.000018> 1234 07:07:30.978844 mmap(0x7fd15e1e3000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fd15e1e3000 <0.000034> 1234 07:07:30.978911 mmap(0x7fd15e1e6000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fd15e1e6000 <0.000022> 1234 07:07:30.978966 mmap(0x7fd15e1e7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fd15e1e7000 <0.000020> 1234 07:07:30.979055 close(3) = 0 <0.000011> 1234 07:07:30.979106 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000016> 1234 07:07:30.979162 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000012> 1234 07:07:30.979248 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000013> 1234 07:07:30.979300 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd15e1df000 <0.000016> 1234 07:07:30.979350 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fd15e145000 <0.000016> 1234 07:07:30.979399 mmap(0x7fd15e147000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fd15e147000 <0.000030> 1234 07:07:30.979461 mmap(0x7fd15e1b2000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7fd15e1b2000 <0.000027> 1234 07:07:30.979520 mmap(0x7fd15e1dd000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7fd15e1dd000 <0.000024> 1234 07:07:30.979604 close(3) = 0 <0.000012> 1234 07:07:30.980499 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd15e142000 <0.000017> 1234 07:07:30.980558 arch_prctl(ARCH_SET_FS, 0x7fd15e142840) = 0 <0.000010> 1234 07:07:30.980594 set_tid_address(0x7fd15e142b10) = 1234 <0.000010> 1234 07:07:30.980629 set_robust_list(0x7fd15e142b20, 24) = 0 <0.000009> 1234 07:07:30.980663 rseq(0x7fd15e143160, 0x20, 0, 0x53053053) = 0 <0.000010> 1234 07:07:30.980869 mprotect(0x7fd15e3b8000, 16384, PROT_READ) = 0 <0.000022> 1234 07:07:30.980925 mprotect(0x7fd15e1dd000, 4096, PROT_READ) = 0 <0.000017> 1234 07:07:30.980989 mprotect(0x7fd15e1e7000, 4096, PROT_READ) = 0 <0.000017> 1234 07:07:30.981141 mprotect(0x7fd15e3ec000, 4096, PROT_READ) = 0 <0.000019> 1234 07:07:30.981266 mprotect(0x7fd15e418000, 4096, PROT_READ) = 0 <0.000017> 1234 07:07:30.981339 mprotect(0x7fd15e43b000, 4096, PROT_READ) = 0 <0.000016> 1234 07:07:30.982168 mprotect(0x5624bc142000, 8192, PROT_READ) = 0 <0.000053> 1234 07:07:30.982348 mprotect(0x7fd15e484000, 8192, PROT_READ) = 0 <0.000040> 1234 07:07:30.982483 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000017> 1234 07:07:30.982603 munmap(0x7fd15e44d000, 14575) = 0 <0.000043> 1234 07:07:30.982737 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000040> 1234 07:07:30.982877 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000019> 1234 07:07:30.982987 read(3, "40\n", 7) = 3 <0.000060> 1234 07:07:30.983154 close(3) = 0 <0.000069> 1234 07:07:30.983289 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000017> 1234 07:07:30.983350 prctl(PR_GET_SECUREBITS) = 0 <0.000016> 1234 07:07:30.983404 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000016> 1234 07:07:30.983459 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000016> 1234 07:07:30.983551 statfs("/sys/fs/selinux", 0x7ffd04c83830) = -1 ENOENT (No such file or directory) <0.000026> 1234 07:07:30.983640 statfs("/selinux", 0x7ffd04c83830) = -1 ENOENT (No such file or directory) <0.000018> 1234 07:07:30.983720 getrandom("\xa6\x88\x41\x8c\x78\xf0\x25\x5d", 8, GRND_NONBLOCK) = 8 <0.000019> 1234 07:07:30.983789 brk(NULL) = 0x5624d2e10000 <0.000018> 1234 07:07:30.983846 brk(0x5624d2e31000) = 0x5624d2e31000 <0.000023> 1234 07:07:30.983931 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 1234 07:07:30.984073 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000020> 1234 07:07:30.984160 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tpr"..., 1024) = 336 <0.000039> 1234 07:07:30.984257 read(3, "", 1024) = 0 <0.000017> 1234 07:07:30.984321 close(3) = 0 <0.000021> 1234 07:07:30.984389 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000025> 1234 07:07:30.984504 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000016> 1234 07:07:30.984569 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000016> 1234 07:07:30.984628 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000016> 1234 07:07:30.984686 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000018> 1234 07:07:30.984746 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000016> 1234 07:07:30.984804 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000016> 1234 07:07:30.984881 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000013> 1234 07:07:30.984934 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000012> 1234 07:07:30.984984 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000012> 1234 07:07:30.985091 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000012> 1234 07:07:30.985148 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000012> 1234 07:07:30.985199 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000013> 1234 07:07:30.985254 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000013> 1234 07:07:30.985306 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000012> 1234 07:07:30.985357 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000013> 1234 07:07:30.985407 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000012> 1234 07:07:30.985460 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000013> 1234 07:07:30.985522 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000011> 1234 07:07:30.985572 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000011> 1234 07:07:30.985631 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000021> 1234 07:07:30.985703 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000014> 1234 07:07:30.985765 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15de00000 <0.000028> 1234 07:07:30.985846 close(3) = 0 <0.000012> 1234 07:07:30.985900 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 1234 07:07:30.986003 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000021> 1234 07:07:30.986129 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000016> 1234 07:07:30.986226 read(3, "", 4096) = 0 <0.000012> 1234 07:07:30.986279 close(3) = 0 <0.000013> 1234 07:07:30.986347 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000016> 1234 07:07:30.986411 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000017> 1234 07:07:30.986478 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000013> 1234 07:07:30.986538 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e450000 <0.000025> 1234 07:07:30.986602 close(3) = 0 <0.000011> 1234 07:07:30.986661 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000018> 1234 07:07:30.986728 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000013> 1234 07:07:30.986788 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7fd15e13b000 <0.000020> 1234 07:07:30.986854 close(3) = 0 <0.000017> 1234 07:07:30.986936 futex(0x7fd15e3bda4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000019> 1234 07:07:30.987020 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000021> 1234 07:07:30.987150 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000066> 1234 07:07:30.987275 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000014> 1234 07:07:30.987339 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e44f000 <0.000022> 1234 07:07:30.987401 close(3) = 0 <0.000011> 1234 07:07:30.987466 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000015> 1234 07:07:30.987527 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000017> 1234 07:07:30.987592 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000013> 1234 07:07:30.987652 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e44e000 <0.000019> 1234 07:07:30.987710 close(3) = 0 <0.000011> 1234 07:07:30.987771 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000015> 1234 07:07:30.987831 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000016> 1234 07:07:30.987896 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000020> 1234 07:07:30.987981 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e44d000 <0.000098> 1234 07:07:30.988140 close(3) = 0 <0.000012> 1234 07:07:30.988210 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000016> 1234 07:07:30.988274 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000018> 1234 07:07:30.988340 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000013> 1234 07:07:30.988399 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e13a000 <0.000025> 1234 07:07:30.988463 close(3) = 0 <0.000011> 1234 07:07:30.988523 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000015> 1234 07:07:30.988583 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000014> 1234 07:07:30.988639 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.988687 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e139000 <0.000016> 1234 07:07:30.988734 close(3) = 0 <0.000009> 1234 07:07:30.988784 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.988834 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000015> 1234 07:07:30.988889 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000016> 1234 07:07:30.988959 close(3) = 0 <0.000017> 1234 07:07:30.989046 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000017> 1234 07:07:30.989108 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000012> 1234 07:07:30.989170 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e138000 <0.000019> 1234 07:07:30.989221 close(3) = 0 <0.000009> 1234 07:07:30.989273 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.989323 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000013> 1234 07:07:30.989375 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.989423 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e137000 <0.000016> 1234 07:07:30.989471 close(3) = 0 <0.000009> 1234 07:07:30.989519 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.989568 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000013> 1234 07:07:30.989620 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.989668 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e136000 <0.000015> 1234 07:07:30.989715 close(3) = 0 <0.000009> 1234 07:07:30.989769 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.989818 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000013> 1234 07:07:30.989870 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.989925 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e135000 <0.000022> 1234 07:07:30.989998 close(3) = 0 <0.000033> 1234 07:07:30.990084 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000013> 1234 07:07:30.990138 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000014> 1234 07:07:30.990192 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.990241 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15e134000 <0.000016> 1234 07:07:30.990289 close(3) = 0 <0.000009> 1234 07:07:30.990337 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.990386 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000013> 1234 07:07:30.990438 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.990486 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fd15dda9000 <0.000016> 1234 07:07:30.990533 close(3) = 0 <0.000009> 1234 07:07:30.990602 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000014> 1234 07:07:30.990660 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.990710 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000012> 1234 07:07:30.990779 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000012> 1234 07:07:30.990829 lseek(3, -60, SEEK_CUR) = 54 <0.000010> 1234 07:07:30.990872 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000010> 1234 07:07:30.990924 close(3) = 0 <0.000016> 1234 07:07:30.991003 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000019> 1234 07:07:30.991114 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000011> 1234 07:07:30.991166 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000010> 1234 07:07:30.991257 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000010> 1234 07:07:30.991308 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000009> 1234 07:07:30.991351 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000010> 1234 07:07:30.991407 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.002408> 1234 07:07:30.993905 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000009> 1234 07:07:30.993966 read(3, "", 4096) = 0 <0.000008> 1234 07:07:30.994002 close(3) = 0 <0.000048> 1234 07:07:30.994126 geteuid() = 1000 <0.000008> 1234 07:07:30.994158 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000009> 1234 07:07:30.994201 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000016> 1234 07:07:30.994250 access("/usr/bin/sudo", X_OK) = 0 <0.000011> 1234 07:07:30.994286 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000010> 1234 07:07:30.994338 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000012> 1234 07:07:30.994382 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.994422 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000010> 1234 07:07:30.994465 write(2, "sudo", 4) = 4 <0.000031> 1234 07:07:30.994532 write(2, ": ", 2) = 2 <0.000010> 1234 07:07:30.994582 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000010> 1234 07:07:30.994624 ioctl(2, TCGETS, 0x7ffd04c81f50) = -1 ENOTTY (Inappropriate ioctl for device) <0.000010> 1234 07:07:30.994667 write(2, "\n", 1) = 1 <0.000010> 1234 07:07:30.994748 exit_group(1) = ? 1234 07:07:30.995056 +++ exited with 1 +++