878 03:15:49.663213 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffd9d85e760 /* 18 vars */) = 0 <0.001653> 878 03:15:49.665168 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000085> 878 03:15:49.666028 brk(NULL) = 0x564a5e120000 <0.000047> 878 03:15:49.666237 fcntl(0, F_GETFD) = 0 <0.000051> 878 03:15:49.666513 fcntl(1, F_GETFD) = 0 <0.000047> 878 03:15:49.666653 fcntl(2, F_GETFD) = 0 <0.000055> 878 03:15:49.666794 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000042> 878 03:15:49.666936 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f58e173f000 <0.000043> 878 03:15:49.667057 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000042> 878 03:15:49.667173 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000615> 878 03:15:49.667925 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000081> 878 03:15:49.668803 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000068> 878 03:15:49.668968 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000055> 878 03:15:49.669103 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000044> 878 03:15:49.669226 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000041> 878 03:15:49.669344 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000048> 878 03:15:49.669471 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000039> 878 03:15:49.669589 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000043> 878 03:15:49.669768 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000039> 878 03:15:49.669892 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000043> 878 03:15:49.670013 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000042> 878 03:15:49.670130 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000041> 878 03:15:49.670247 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000040> 878 03:15:49.670366 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000041> 878 03:15:49.670484 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000040> 878 03:15:49.670599 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000041> 878 03:15:49.670728 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000108> 878 03:15:49.670918 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000046> 878 03:15:49.671082 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000032> 878 03:15:49.671210 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000039> 878 03:15:49.671321 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000038> 878 03:15:49.671430 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000041> 878 03:15:49.671543 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000047> 878 03:15:49.671686 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 878 03:15:49.671878 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000037> 878 03:15:49.671986 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 878 03:15:49.672095 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000038> 878 03:15:49.672203 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000039> 878 03:15:49.672312 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000039> 878 03:15:49.672421 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000041> 878 03:15:49.672531 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000038> 878 03:15:49.672637 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000059> 878 03:15:49.672767 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000039> 878 03:15:49.672881 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000042> 878 03:15:49.672995 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7ffc4f04e360, 0) = -1 ENOENT (No such file or directory) <0.000040> 878 03:15:49.673105 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000042> 878 03:15:49.673217 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000037> 878 03:15:49.673336 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000044> 878 03:15:49.673469 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000037> 878 03:15:49.673584 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e173b000 <0.000044> 878 03:15:49.673745 close(3) = 0 <0.000120> 878 03:15:49.673984 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000042> 878 03:15:49.674111 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000038> 878 03:15:49.674217 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000035> 878 03:15:49.674321 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f58e170a000 <0.000041> 878 03:15:49.674443 mmap(0x7f58e170d000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f58e170d000 <0.000053> 878 03:15:49.674567 mmap(0x7f58e1714000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7f58e1714000 <0.000040> 878 03:15:49.674670 mmap(0x7f58e1729000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7f58e1729000 <0.000049> 878 03:15:49.674820 mmap(0x7f58e172b000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f58e172b000 <0.000037> 878 03:15:49.674920 close(3) = 0 <0.000035> 878 03:15:49.675017 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000041> 878 03:15:49.675130 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 878 03:15:49.675239 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000037> 878 03:15:49.675344 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000037> 878 03:15:49.675458 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f58e16dc000 <0.000044> 878 03:15:49.675566 mmap(0x7f58e16e3000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f58e16e3000 <0.000050> 878 03:15:49.675683 mmap(0x7f58e16fe000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f58e16fe000 <0.000170> 878 03:15:49.676007 mmap(0x7f58e1706000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7f58e1706000 <0.000048> 878 03:15:49.676192 mmap(0x7f58e1708000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f58e1708000 <0.000041> 878 03:15:49.676310 close(3) = 0 <0.000040> 878 03:15:49.676433 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000074> 878 03:15:49.676662 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000788> 878 03:15:49.677575 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000156> 878 03:15:49.677853 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f58e16b9000 <0.000051> 878 03:15:49.677984 mmap(0x7f58e16bf000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f58e16bf000 <0.000059> 878 03:15:49.678116 mmap(0x7f58e16d3000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7f58e16d3000 <0.000045> 878 03:15:49.678235 mmap(0x7f58e16da000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7f58e16da000 <0.000047> 878 03:15:49.679098 close(3) = 0 <0.000093> 878 03:15:49.679296 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000057> 878 03:15:49.679448 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000049> 878 03:15:49.679583 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000042> 878 03:15:49.679735 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000038> 878 03:15:49.679855 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000041> 878 03:15:49.679987 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000039> 878 03:15:49.680103 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f58e14d7000 <0.000045> 878 03:15:49.680223 mmap(0x7f58e14fd000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7f58e14fd000 <0.000054> 878 03:15:49.680348 mmap(0x7f58e1653000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7f58e1653000 <0.000046> 878 03:15:49.680469 mmap(0x7f58e16a6000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7f58e16a6000 <0.000050> 878 03:15:49.680595 mmap(0x7f58e16ac000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f58e16ac000 <0.000042> 878 03:15:49.680767 close(3) = 0 <0.000039> 878 03:15:49.680887 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000045> 878 03:15:49.681019 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000042> 878 03:15:49.681138 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000043> 878 03:15:49.681267 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f58e14cf000 <0.000045> 878 03:15:49.681386 mmap(0x7f58e14d1000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f58e14d1000 <0.000057> 878 03:15:49.681516 mmap(0x7f58e14d4000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f58e14d4000 <0.000047> 878 03:15:49.681635 mmap(0x7f58e14d5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f58e14d5000 <0.000200> 878 03:15:49.681978 close(3) = 0 <0.000030> 878 03:15:49.682133 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000038> 878 03:15:49.682275 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000032> 878 03:15:49.682379 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000032> 878 03:15:49.682498 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f58e14cd000 <0.000029> 878 03:15:49.682588 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f58e1433000 <0.000031> 878 03:15:49.682683 mmap(0x7f58e1435000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f58e1435000 <0.000048> 878 03:15:49.682818 mmap(0x7f58e14a0000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7f58e14a0000 <0.000036> 878 03:15:49.682916 mmap(0x7f58e14cb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7f58e14cb000 <0.000035> 878 03:15:49.683046 close(3) = 0 <0.000032> 878 03:15:49.683848 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f58e1430000 <0.000129> 878 03:15:49.684099 arch_prctl(ARCH_SET_FS, 0x7f58e1430840) = 0 <0.000036> 878 03:15:49.684220 set_tid_address(0x7f58e1430b10) = 878 <0.000031> 878 03:15:49.684305 set_robust_list(0x7f58e1430b20, 24) = 0 <0.000031> 878 03:15:49.684390 rseq(0x7f58e1431160, 0x20, 0, 0x53053053) = 0 <0.000031> 878 03:15:49.684612 mprotect(0x7f58e16a6000, 16384, PROT_READ) = 0 <0.000043> 878 03:15:49.684749 mprotect(0x7f58e14cb000, 4096, PROT_READ) = 0 <0.000033> 878 03:15:49.684911 mprotect(0x7f58e14d5000, 4096, PROT_READ) = 0 <0.000043> 878 03:15:49.685112 mprotect(0x7f58e16da000, 4096, PROT_READ) = 0 <0.000035> 878 03:15:49.685266 mprotect(0x7f58e1706000, 4096, PROT_READ) = 0 <0.000036> 878 03:15:49.685373 mprotect(0x7f58e1729000, 4096, PROT_READ) = 0 <0.000034> 878 03:15:49.685579 mprotect(0x564a4465e000, 8192, PROT_READ) = 0 <0.000033> 878 03:15:49.685741 mprotect(0x7f58e1772000, 8192, PROT_READ) = 0 <0.000047> 878 03:15:49.685863 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000021> 878 03:15:49.685978 munmap(0x7f58e173b000, 14575) = 0 <0.000038> 878 03:15:49.686088 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000041> 878 03:15:49.686219 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000030> 878 03:15:49.686319 read(3, "40\n", 7) = 3 <0.000033> 878 03:15:49.686425 close(3) = 0 <0.000033> 878 03:15:49.686519 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000031> 878 03:15:49.686605 prctl(PR_GET_SECUREBITS) = 0 <0.000031> 878 03:15:49.686706 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000031> 878 03:15:49.686793 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000031> 878 03:15:49.686891 statfs("/sys/fs/selinux", 0x7ffc4f04f0f0) = -1 ENOENT (No such file or directory) <0.000034> 878 03:15:49.687001 statfs("/selinux", 0x7ffc4f04f0f0) = -1 ENOENT (No such file or directory) <0.000032> 878 03:15:49.687098 getrandom("\xf8\xde\x73\xd0\x83\x56\x6c\x43", 8, GRND_NONBLOCK) = 8 <0.000031> 878 03:15:49.687188 brk(NULL) = 0x564a5e120000 <0.000031> 878 03:15:49.687271 brk(0x564a5e141000) = 0x564a5e141000 <0.000031> 878 03:15:49.687364 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000035> 878 03:15:49.687475 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000032> 878 03:15:49.687587 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbd"..., 1024) = 347 <0.000040> 878 03:15:49.687706 read(3, "", 1024) = 0 <0.000038> 878 03:15:49.687805 close(3) = 0 <0.000032> 878 03:15:49.687896 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000033> 878 03:15:49.688008 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000021> 878 03:15:49.688088 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 878 03:15:49.688178 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 878 03:15:49.688256 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000031> 878 03:15:49.688344 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 878 03:15:49.688432 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000032> 878 03:15:49.688535 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000032> 878 03:15:49.688623 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 878 03:15:49.688728 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000032> 878 03:15:49.688820 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000031> 878 03:15:49.688909 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000031> 878 03:15:49.688997 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000032> 878 03:15:49.689090 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000031> 878 03:15:49.689179 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 878 03:15:49.689267 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000031> 878 03:15:49.689354 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000032> 878 03:15:49.689443 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000032> 878 03:15:49.689545 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000032> 878 03:15:49.689639 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000123> 878 03:15:49.689836 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 878 03:15:49.689949 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000033> 878 03:15:49.690050 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e1000000 <0.000035> 878 03:15:49.690148 close(3) = 0 <0.000029> 878 03:15:49.690230 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 878 03:15:49.690325 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000029> 878 03:15:49.690418 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000027> 878 03:15:49.690515 read(3, "", 4096) = 0 <0.000029> 878 03:15:49.690599 close(3) = 0 <0.000029> 878 03:15:49.690686 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 878 03:15:49.690802 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 878 03:15:49.690899 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000030> 878 03:15:49.691003 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e173e000 <0.000033> 878 03:15:49.691104 close(3) = 0 <0.000028> 878 03:15:49.691189 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000029> 878 03:15:49.691285 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000029> 878 03:15:49.691377 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7f58e1429000 <0.000031> 878 03:15:49.691464 close(3) = 0 <0.000029> 878 03:15:49.691547 futex(0x7f58e16aba4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000027> 878 03:15:49.691626 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 878 03:15:49.691741 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 878 03:15:49.691839 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000029> 878 03:15:49.691931 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e173d000 <0.000030> 878 03:15:49.692017 close(3) = 0 <0.000028> 878 03:15:49.692102 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000027> 878 03:15:49.692189 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 878 03:15:49.692284 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000029> 878 03:15:49.692375 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e173c000 <0.000029> 878 03:15:49.692459 close(3) = 0 <0.000029> 878 03:15:49.692545 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000027> 878 03:15:49.692631 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 878 03:15:49.692837 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000032> 878 03:15:49.693008 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e173b000 <0.000035> 878 03:15:49.693116 close(3) = 0 <0.000031> 878 03:15:49.693214 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 878 03:15:49.693334 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 878 03:15:49.693439 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000032> 878 03:15:49.693542 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e1428000 <0.000034> 878 03:15:49.693639 close(3) = 0 <0.000089> 878 03:15:49.693798 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 878 03:15:49.693903 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 878 03:15:49.694010 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000031> 878 03:15:49.694111 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e1427000 <0.000033> 878 03:15:49.694205 close(3) = 0 <0.000031> 878 03:15:49.694298 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 878 03:15:49.694400 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 878 03:15:49.694506 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000032> 878 03:15:49.694608 close(3) = 0 <0.000021> 878 03:15:49.694704 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 878 03:15:49.694813 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000034> 878 03:15:49.694938 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e1426000 <0.000032> 878 03:15:49.695034 close(3) = 0 <0.000031> 878 03:15:49.695126 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 878 03:15:49.695225 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 878 03:15:49.695329 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000033> 878 03:15:49.695432 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e1425000 <0.000031> 878 03:15:49.695525 close(3) = 0 <0.000031> 878 03:15:49.695619 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 878 03:15:49.695727 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 878 03:15:49.695839 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000031> 878 03:15:49.695940 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e1424000 <0.000032> 878 03:15:49.696033 close(3) = 0 <0.000031> 878 03:15:49.696134 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 878 03:15:49.696232 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 878 03:15:49.696336 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000032> 878 03:15:49.696439 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e1423000 <0.000032> 878 03:15:49.696531 close(3) = 0 <0.000031> 878 03:15:49.696625 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 878 03:15:49.696739 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 878 03:15:49.696857 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000021> 878 03:15:49.696949 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e1422000 <0.000033> 878 03:15:49.697043 close(3) = 0 <0.000031> 878 03:15:49.697135 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 878 03:15:49.697233 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 878 03:15:49.697336 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000032> 878 03:15:49.697437 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f58e13cb000 <0.000034> 878 03:15:49.697532 close(3) = 0 <0.000031> 878 03:15:49.697636 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000065> 878 03:15:49.697834 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000049> 878 03:15:49.697963 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000036> 878 03:15:49.698102 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000041> 878 03:15:49.698217 lseek(3, -60, SEEK_CUR) = 54 <0.000035> 878 03:15:49.698320 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000035> 878 03:15:49.698475 close(3) = 0 <0.000111> 878 03:15:49.698714 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000056> 878 03:15:49.698875 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000036> 878 03:15:49.698995 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000035> 878 03:15:49.699099 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000034> 878 03:15:49.699208 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000034> 878 03:15:49.699309 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000036> 878 03:15:49.699426 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.000893> 878 03:15:49.700461 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000045> 878 03:15:49.700598 read(3, "", 4096) = 0 <0.000033> 878 03:15:49.700711 close(3) = 0 <0.000035> 878 03:15:49.700863 geteuid() = 1000 <0.000043> 878 03:15:49.700965 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000033> 878 03:15:49.701081 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000043> 878 03:15:49.701195 access("/usr/bin/sudo", X_OK) = 0 <0.000036> 878 03:15:49.701292 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000035> 878 03:15:49.701411 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000038> 878 03:15:49.701519 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000035> 878 03:15:49.701624 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000104> 878 03:15:49.701808 write(2, "sudo", 4) = 4 <0.000064> 878 03:15:49.701948 write(2, ": ", 2) = 2 <0.000037> 878 03:15:49.702062 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000036> 878 03:15:49.702169 ioctl(2, TCGETS, 0x7ffc4f04d810) = -1 ENOTTY (Inappropriate ioctl for device) <0.000036> 878 03:15:49.702293 write(2, "\n", 1) = 1 <0.000037> 878 03:15:49.702465 exit_group(1) = ? 878 03:15:49.702866 +++ exited with 1 +++