877 03:18:34.984379 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffda6868e50 /* 18 vars */) = 0 <0.002232> 877 03:18:34.986842 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000071> 877 03:18:34.987679 brk(NULL) = 0x55ee7cd73000 <0.000033> 877 03:18:34.987888 fcntl(0, F_GETFD) = 0 <0.000049> 877 03:18:34.988132 fcntl(1, F_GETFD) = 0 <0.000024> 877 03:18:34.988211 fcntl(2, F_GETFD) = 0 <0.000023> 877 03:18:34.988290 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000027> 877 03:18:34.988400 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f67eee42000 <0.000030> 877 03:18:34.988484 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000029> 877 03:18:34.988572 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000725> 877 03:18:34.989401 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000113> 877 03:18:34.990480 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000046> 877 03:18:34.990636 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000049> 877 03:18:34.990758 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000035> 877 03:18:34.990862 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000093> 877 03:18:34.991040 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000046> 877 03:18:34.991192 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000045> 877 03:18:34.991342 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000048> 877 03:18:34.991494 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000033> 877 03:18:34.991613 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 877 03:18:34.991715 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000032> 877 03:18:34.991815 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 877 03:18:34.991934 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000045> 877 03:18:34.992049 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 877 03:18:34.992150 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000032> 877 03:18:34.992250 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 877 03:18:34.992351 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000032> 877 03:18:34.992451 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 877 03:18:34.992575 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000032> 877 03:18:34.992679 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 877 03:18:34.992781 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000033> 877 03:18:34.992880 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000059> 877 03:18:34.993009 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000035> 877 03:18:34.993114 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000036> 877 03:18:34.993218 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000034> 877 03:18:34.993330 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000053> 877 03:18:34.993492 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000046> 877 03:18:34.993740 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 877 03:18:34.993854 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000033> 877 03:18:34.994068 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 877 03:18:34.994177 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000041> 877 03:18:34.994310 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 877 03:18:34.994412 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000031> 877 03:18:34.994505 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000036> 877 03:18:34.994602 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7ffd2648e850, 0) = -1 ENOENT (No such file or directory) <0.000031> 877 03:18:34.994695 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000047> 877 03:18:34.994826 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000030> 877 03:18:34.995003 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000036> 877 03:18:34.995134 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000031> 877 03:18:34.995236 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eee3e000 <0.000044> 877 03:18:34.995366 close(3) = 0 <0.000041> 877 03:18:34.995501 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000035> 877 03:18:34.995618 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000033> 877 03:18:34.995715 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000031> 877 03:18:34.995815 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f67eee0d000 <0.000037> 877 03:18:34.995974 mmap(0x7f67eee10000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f67eee10000 <0.000064> 877 03:18:34.996110 mmap(0x7f67eee17000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7f67eee17000 <0.000047> 877 03:18:34.996239 mmap(0x7f67eee2c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7f67eee2c000 <0.000052> 877 03:18:34.996387 mmap(0x7f67eee2e000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f67eee2e000 <0.000036> 877 03:18:34.996499 close(3) = 0 <0.000036> 877 03:18:34.996612 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000039> 877 03:18:34.996736 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 877 03:18:34.996844 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000027> 877 03:18:34.996942 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000028> 877 03:18:34.997031 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f67eeddf000 <0.000034> 877 03:18:34.997116 mmap(0x7f67eede6000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f67eede6000 <0.000040> 877 03:18:34.997209 mmap(0x7f67eee01000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f67eee01000 <0.000036> 877 03:18:34.997296 mmap(0x7f67eee09000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7f67eee09000 <0.000036> 877 03:18:34.997389 mmap(0x7f67eee0b000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f67eee0b000 <0.000032> 877 03:18:34.997478 close(3) = 0 <0.000026> 877 03:18:34.997554 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000075> 877 03:18:34.997694 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.001114> 877 03:18:34.999009 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000119> 877 03:18:34.999302 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f67eedbc000 <0.000091> 877 03:18:34.999492 mmap(0x7f67eedc2000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f67eedc2000 <0.000107> 877 03:18:34.999677 mmap(0x7f67eedd6000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7f67eedd6000 <0.000040> 877 03:18:34.999773 mmap(0x7f67eeddd000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7f67eeddd000 <0.000040> 877 03:18:35.001021 close(3) = 0 <0.000052> 877 03:18:35.001178 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000081> 877 03:18:35.001328 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 877 03:18:35.001421 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000048> 877 03:18:35.001558 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000034> 877 03:18:35.001685 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000027> 877 03:18:35.001774 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000025> 877 03:18:35.001851 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f67eebda000 <0.000036> 877 03:18:35.001934 mmap(0x7f67eec00000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7f67eec00000 <0.000047> 877 03:18:35.002030 mmap(0x7f67eed56000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7f67eed56000 <0.000036> 877 03:18:35.002115 mmap(0x7f67eeda9000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7f67eeda9000 <0.000035> 877 03:18:35.002203 mmap(0x7f67eedaf000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f67eedaf000 <0.000030> 877 03:18:35.002290 close(3) = 0 <0.000024> 877 03:18:35.002368 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 877 03:18:35.002455 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000026> 877 03:18:35.002531 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000025> 877 03:18:35.002612 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f67eebd2000 <0.000029> 877 03:18:35.002691 mmap(0x7f67eebd4000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f67eebd4000 <0.000041> 877 03:18:35.002779 mmap(0x7f67eebd7000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f67eebd7000 <0.000032> 877 03:18:35.002858 mmap(0x7f67eebd8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f67eebd8000 <0.000035> 877 03:18:35.003113 close(3) = 0 <0.000046> 877 03:18:35.003279 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000041> 877 03:18:35.003401 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000031> 877 03:18:35.003506 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000031> 877 03:18:35.003618 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f67eebd0000 <0.000033> 877 03:18:35.003703 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f67eeb36000 <0.000029> 877 03:18:35.003778 mmap(0x7f67eeb38000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f67eeb38000 <0.000048> 877 03:18:35.003870 mmap(0x7f67eeba3000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7f67eeba3000 <0.000065> 877 03:18:35.003980 mmap(0x7f67eebce000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7f67eebce000 <0.000030> 877 03:18:35.004084 close(3) = 0 <0.000024> 877 03:18:35.005192 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f67eeb33000 <0.000067> 877 03:18:35.005359 arch_prctl(ARCH_SET_FS, 0x7f67eeb33840) = 0 <0.000037> 877 03:18:35.005457 set_tid_address(0x7f67eeb33b10) = 877 <0.000030> 877 03:18:35.005542 set_robust_list(0x7f67eeb33b20, 24) = 0 <0.000027> 877 03:18:35.005661 rseq(0x7f67eeb34160, 0x20, 0, 0x53053053) = 0 <0.000032> 877 03:18:35.005949 mprotect(0x7f67eeda9000, 16384, PROT_READ) = 0 <0.000065> 877 03:18:35.006062 mprotect(0x7f67eebce000, 4096, PROT_READ) = 0 <0.000027> 877 03:18:35.006165 mprotect(0x7f67eebd8000, 4096, PROT_READ) = 0 <0.000027> 877 03:18:35.006314 mprotect(0x7f67eeddd000, 4096, PROT_READ) = 0 <0.000030> 877 03:18:35.006461 mprotect(0x7f67eee09000, 4096, PROT_READ) = 0 <0.000034> 877 03:18:35.006581 mprotect(0x7f67eee2c000, 4096, PROT_READ) = 0 <0.000034> 877 03:18:35.006819 mprotect(0x55ee6e392000, 8192, PROT_READ) = 0 <0.000031> 877 03:18:35.006905 mprotect(0x7f67eee75000, 8192, PROT_READ) = 0 <0.000037> 877 03:18:35.007046 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000027> 877 03:18:35.007155 munmap(0x7f67eee3e000, 14575) = 0 <0.000035> 877 03:18:35.007256 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000039> 877 03:18:35.007362 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000026> 877 03:18:35.007446 read(3, "40\n", 7) = 3 <0.000031> 877 03:18:35.007533 close(3) = 0 <0.000024> 877 03:18:35.007600 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000023> 877 03:18:35.007662 prctl(PR_GET_SECUREBITS) = 0 <0.000024> 877 03:18:35.007725 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000023> 877 03:18:35.007786 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000023> 877 03:18:35.007870 statfs("/sys/fs/selinux", 0x7ffd2648f5e0) = -1 ENOENT (No such file or directory) <0.000045> 877 03:18:35.008065 statfs("/selinux", 0x7ffd2648f5e0) = -1 ENOENT (No such file or directory) <0.000032> 877 03:18:35.008158 getrandom("\xf4\xc3\x8d\x19\xca\x8b\x30\x49", 8, GRND_NONBLOCK) = 8 <0.000029> 877 03:18:35.008238 brk(NULL) = 0x55ee7cd73000 <0.000026> 877 03:18:35.008305 brk(0x55ee7cd94000) = 0x55ee7cd94000 <0.000034> 877 03:18:35.008405 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000046> 877 03:18:35.008517 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000030> 877 03:18:35.008606 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbd"..., 1024) = 347 <0.000055> 877 03:18:35.008724 read(3, "", 1024) = 0 <0.000028> 877 03:18:35.008802 close(3) = 0 <0.000031> 877 03:18:35.008879 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000146> 877 03:18:35.009188 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000035> 877 03:18:35.009350 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000047> 877 03:18:35.009506 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000034> 877 03:18:35.009607 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000037> 877 03:18:35.009742 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000032> 877 03:18:35.009837 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000041> 877 03:18:35.009994 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000041> 877 03:18:35.010121 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000045> 877 03:18:35.010247 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000033> 877 03:18:35.010347 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000033> 877 03:18:35.010443 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000033> 877 03:18:35.010538 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000035> 877 03:18:35.010640 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000034> 877 03:18:35.010743 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000045> 877 03:18:35.010877 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000104> 877 03:18:35.011051 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000033> 877 03:18:35.011152 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000036> 877 03:18:35.011278 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000031> 877 03:18:35.011398 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000046> 877 03:18:35.011538 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000048> 877 03:18:35.011669 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000042> 877 03:18:35.011815 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67ee800000 <0.000051> 877 03:18:35.012026 close(3) = 0 <0.000031> 877 03:18:35.012123 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000044> 877 03:18:35.012241 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000035> 877 03:18:35.012353 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000034> 877 03:18:35.012479 read(3, "", 4096) = 0 <0.000032> 877 03:18:35.012571 close(3) = 0 <0.000033> 877 03:18:35.012677 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 877 03:18:35.012780 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 877 03:18:35.012887 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000048> 877 03:18:35.013004 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eee41000 <0.000047> 877 03:18:35.013112 close(3) = 0 <0.000033> 877 03:18:35.013214 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000041> 877 03:18:35.013324 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000034> 877 03:18:35.013430 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7f67eeb2c000 <0.000043> 877 03:18:35.013533 close(3) = 0 <0.000031> 877 03:18:35.013656 futex(0x7f67eedaea4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000033> 877 03:18:35.013757 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 877 03:18:35.013872 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000131> 877 03:18:35.014187 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000036> 877 03:18:35.014312 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eee40000 <0.000040> 877 03:18:35.014408 close(3) = 0 <0.000028> 877 03:18:35.014504 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 877 03:18:35.014613 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000041> 877 03:18:35.014740 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000030> 877 03:18:35.014832 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eee3f000 <0.000039> 877 03:18:35.014944 close(3) = 0 <0.000028> 877 03:18:35.015037 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 877 03:18:35.015128 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 877 03:18:35.015220 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000030> 877 03:18:35.015308 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eee3e000 <0.000037> 877 03:18:35.015396 close(3) = 0 <0.000028> 877 03:18:35.015486 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 877 03:18:35.015572 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 877 03:18:35.015666 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000030> 877 03:18:35.015754 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eeb2b000 <0.000040> 877 03:18:35.015847 close(3) = 0 <0.000028> 877 03:18:35.015953 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 877 03:18:35.016041 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 877 03:18:35.016135 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000032> 877 03:18:35.016223 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eeb2a000 <0.000035> 877 03:18:35.016308 close(3) = 0 <0.000026> 877 03:18:35.016396 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 877 03:18:35.016482 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 877 03:18:35.016578 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000030> 877 03:18:35.016663 close(3) = 0 <0.000029> 877 03:18:35.016740 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 877 03:18:35.016830 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000029> 877 03:18:35.016936 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eeb29000 <0.000098> 877 03:18:35.017089 close(3) = 0 <0.000027> 877 03:18:35.017187 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 877 03:18:35.017274 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 877 03:18:35.017366 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000029> 877 03:18:35.017452 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eeb28000 <0.000030> 877 03:18:35.017532 close(3) = 0 <0.000027> 877 03:18:35.017615 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000029> 877 03:18:35.017732 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 877 03:18:35.017836 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000031> 877 03:18:35.018003 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eeb27000 <0.000033> 877 03:18:35.018095 close(3) = 0 <0.000024> 877 03:18:35.018177 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 877 03:18:35.018258 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 877 03:18:35.018338 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000026> 877 03:18:35.018414 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eeb26000 <0.000029> 877 03:18:35.018488 close(3) = 0 <0.000027> 877 03:18:35.018574 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 877 03:18:35.018670 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 877 03:18:35.018754 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000025> 877 03:18:35.018831 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67eeb25000 <0.000028> 877 03:18:35.018904 close(3) = 0 <0.000026> 877 03:18:35.019001 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 877 03:18:35.019079 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 877 03:18:35.019160 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000026> 877 03:18:35.019241 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f67ee7a9000 <0.000035> 877 03:18:35.019334 close(3) = 0 <0.000024> 877 03:18:35.019425 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 877 03:18:35.019509 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000028> 877 03:18:35.019597 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000032> 877 03:18:35.019716 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000028> 877 03:18:35.019802 lseek(3, -60, SEEK_CUR) = 54 <0.000031> 877 03:18:35.019898 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000029> 877 03:18:35.020017 close(3) = 0 <0.000031> 877 03:18:35.020120 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000034> 877 03:18:35.020226 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000026> 877 03:18:35.020309 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000026> 877 03:18:35.020386 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000025> 877 03:18:35.020463 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000029> 877 03:18:35.020554 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000026> 877 03:18:35.020644 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.001076> 877 03:18:35.021824 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000012> 877 03:18:35.021884 read(3, "", 4096) = 0 <0.000010> 877 03:18:35.021940 close(3) = 0 <0.000013> 877 03:18:35.022041 geteuid() = 1000 <0.000013> 877 03:18:35.022095 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000011> 877 03:18:35.022152 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000018> 877 03:18:35.022206 access("/usr/bin/sudo", X_OK) = 0 <0.000012> 877 03:18:35.022243 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000010> 877 03:18:35.022296 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000015> 877 03:18:35.022351 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000020> 877 03:18:35.022418 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000012> 877 03:18:35.022468 write(2, "sudo", 4) = 4 <0.000034> 877 03:18:35.022537 write(2, ": ", 2) = 2 <0.000011> 877 03:18:35.022599 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000011> 877 03:18:35.022642 ioctl(2, TCGETS, 0x7ffd2648dd00) = -1 ENOTTY (Inappropriate ioctl for device) <0.000012> 877 03:18:35.022686 write(2, "\n", 1) = 1 <0.000011> 877 03:18:35.022771 exit_group(1) = ? 877 03:18:35.023200 +++ exited with 1 +++