885 03:17:38.914667 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffefa4b2430 /* 18 vars */) = 0 <0.002652> 885 03:17:38.917743 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000201> 885 03:17:38.918995 brk(NULL) = 0x563653b7f000 <0.000099> 885 03:17:38.919386 fcntl(0, F_GETFD) = 0 <0.000119> 885 03:17:38.919842 fcntl(1, F_GETFD) = 0 <0.000198> 885 03:17:38.920189 fcntl(2, F_GETFD) = 0 <0.000072> 885 03:17:38.920377 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000150> 885 03:17:38.920774 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa09e079000 <0.000093> 885 03:17:38.921071 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000063> 885 03:17:38.921244 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000780> 885 03:17:38.922216 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000091> 885 03:17:38.923422 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000073> 885 03:17:38.923835 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000060> 885 03:17:38.923995 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000051> 885 03:17:38.924129 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000125> 885 03:17:38.924388 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000100> 885 03:17:38.924611 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000056> 885 03:17:38.924792 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000057> 885 03:17:38.924956 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000046> 885 03:17:38.925088 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000058> 885 03:17:38.925229 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000048> 885 03:17:38.925362 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000078> 885 03:17:38.925663 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000075> 885 03:17:38.925836 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000065> 885 03:17:38.926012 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000055> 885 03:17:38.926185 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000058> 885 03:17:38.926364 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000127> 885 03:17:38.926601 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000048> 885 03:17:38.926769 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000110> 885 03:17:38.926968 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000049> 885 03:17:38.927116 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000054> 885 03:17:38.927283 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000073> 885 03:17:38.927489 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000055> 885 03:17:38.927656 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000048> 885 03:17:38.927789 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000048> 885 03:17:38.927920 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000051> 885 03:17:38.928055 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000048> 885 03:17:38.928186 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000050> 885 03:17:38.928319 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000048> 885 03:17:38.928471 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000159> 885 03:17:38.928736 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000047> 885 03:17:38.928930 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000050> 885 03:17:38.929073 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000098> 885 03:17:38.929253 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000057> 885 03:17:38.929391 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7ffdd28dc930, 0) = -1 ENOENT (No such file or directory) <0.000060> 885 03:17:38.929535 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000053> 885 03:17:38.929670 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000051> 885 03:17:38.929813 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000061> 885 03:17:38.929982 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000048> 885 03:17:38.930116 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09e075000 <0.000068> 885 03:17:38.930264 close(3) = 0 <0.000046> 885 03:17:38.930403 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000105> 885 03:17:38.930601 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000052> 885 03:17:38.930740 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000051> 885 03:17:38.930931 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa09e044000 <0.000060> 885 03:17:38.931086 mmap(0x7fa09e047000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fa09e047000 <0.000087> 885 03:17:38.931250 mmap(0x7fa09e04e000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7fa09e04e000 <0.000072> 885 03:17:38.931409 mmap(0x7fa09e063000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7fa09e063000 <0.000071> 885 03:17:38.931577 mmap(0x7fa09e065000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa09e065000 <0.000056> 885 03:17:38.931724 close(3) = 0 <0.000045> 885 03:17:38.931853 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000061> 885 03:17:38.932008 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000052> 885 03:17:38.932150 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000047> 885 03:17:38.932274 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000046> 885 03:17:38.932401 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa09e016000 <0.000080> 885 03:17:38.932555 mmap(0x7fa09e01d000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7fa09e01d000 <0.000072> 885 03:17:38.932696 mmap(0x7fa09e038000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7fa09e038000 <0.000061> 885 03:17:38.932827 mmap(0x7fa09e040000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7fa09e040000 <0.000066> 885 03:17:38.932974 mmap(0x7fa09e042000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa09e042000 <0.000055> 885 03:17:38.933123 close(3) = 0 <0.000049> 885 03:17:38.933250 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000108> 885 03:17:38.933442 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.001223> 885 03:17:38.934811 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000119> 885 03:17:38.935083 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa09dff3000 <0.000058> 885 03:17:38.935206 mmap(0x7fa09dff9000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fa09dff9000 <0.000103> 885 03:17:38.935371 mmap(0x7fa09e00d000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7fa09e00d000 <0.000071> 885 03:17:38.935508 mmap(0x7fa09e014000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7fa09e014000 <0.000060> 885 03:17:38.936541 close(3) = 0 <0.000075> 885 03:17:38.936724 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000096> 885 03:17:38.936900 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000053> 885 03:17:38.937030 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000042> 885 03:17:38.937153 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000043> 885 03:17:38.937265 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000044> 885 03:17:38.937382 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000040> 885 03:17:38.937514 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa09de11000 <0.000135> 885 03:17:38.937716 mmap(0x7fa09de37000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7fa09de37000 <0.000073> 885 03:17:38.937852 mmap(0x7fa09df8d000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7fa09df8d000 <0.000060> 885 03:17:38.937976 mmap(0x7fa09dfe0000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7fa09dfe0000 <0.000062> 885 03:17:38.938114 mmap(0x7fa09dfe6000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa09dfe6000 <0.000046> 885 03:17:38.938242 close(3) = 0 <0.000040> 885 03:17:38.938359 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000055> 885 03:17:38.938509 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000044> 885 03:17:38.938623 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000044> 885 03:17:38.938741 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa09de09000 <0.000050> 885 03:17:38.938886 mmap(0x7fa09de0b000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa09de0b000 <0.000071> 885 03:17:38.939027 mmap(0x7fa09de0e000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fa09de0e000 <0.000059> 885 03:17:38.939157 mmap(0x7fa09de0f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fa09de0f000 <0.000062> 885 03:17:38.939306 close(3) = 0 <0.000045> 885 03:17:38.939422 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000099> 885 03:17:38.939693 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000122> 885 03:17:38.939960 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000045> 885 03:17:38.940107 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa09de07000 <0.000056> 885 03:17:38.940258 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa09dd6d000 <0.000072> 885 03:17:38.940392 mmap(0x7fa09dd6f000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa09dd6f000 <0.000117> 885 03:17:38.940564 mmap(0x7fa09ddda000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7fa09ddda000 <0.000062> 885 03:17:38.940679 mmap(0x7fa09de05000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7fa09de05000 <0.000060> 885 03:17:38.940840 close(3) = 0 <0.000039> 885 03:17:38.941953 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa09dd6a000 <0.000079> 885 03:17:38.942129 arch_prctl(ARCH_SET_FS, 0x7fa09dd6a840) = 0 <0.000037> 885 03:17:38.942215 set_tid_address(0x7fa09dd6ab10) = 885 <0.000038> 885 03:17:38.942327 set_robust_list(0x7fa09dd6ab20, 24) = 0 <0.000053> 885 03:17:38.942428 rseq(0x7fa09dd6b160, 0x20, 0, 0x53053053) = 0 <0.000061> 885 03:17:38.942852 mprotect(0x7fa09dfe0000, 16384, PROT_READ) = 0 <0.000082> 885 03:17:38.943016 mprotect(0x7fa09de05000, 4096, PROT_READ) = 0 <0.000054> 885 03:17:38.943180 mprotect(0x7fa09de0f000, 4096, PROT_READ) = 0 <0.000048> 885 03:17:38.943430 mprotect(0x7fa09e014000, 4096, PROT_READ) = 0 <0.000084> 885 03:17:38.943700 mprotect(0x7fa09e040000, 4096, PROT_READ) = 0 <0.000051> 885 03:17:38.943860 mprotect(0x7fa09e063000, 4096, PROT_READ) = 0 <0.000046> 885 03:17:38.944206 mprotect(0x563647672000, 8192, PROT_READ) = 0 <0.000062> 885 03:17:38.944347 mprotect(0x7fa09e0ac000, 8192, PROT_READ) = 0 <0.000070> 885 03:17:38.944572 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000129> 885 03:17:38.944855 munmap(0x7fa09e075000, 14575) = 0 <0.000068> 885 03:17:38.945017 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000061> 885 03:17:38.945159 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000050> 885 03:17:38.945280 read(3, "40\n", 7) = 3 <0.000042> 885 03:17:38.945398 close(3) = 0 <0.000055> 885 03:17:38.945508 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000036> 885 03:17:38.945593 prctl(PR_GET_SECUREBITS) = 0 <0.000035> 885 03:17:38.945677 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000035> 885 03:17:38.945758 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000034> 885 03:17:38.945873 statfs("/sys/fs/selinux", 0x7ffdd28dd6c0) = -1 ENOENT (No such file or directory) <0.000043> 885 03:17:38.945980 statfs("/selinux", 0x7ffdd28dd6c0) = -1 ENOENT (No such file or directory) <0.000039> 885 03:17:38.946095 getrandom("\x6b\x13\xe6\x63\x2f\xd9\xdd\x3f", 8, GRND_NONBLOCK) = 8 <0.000045> 885 03:17:38.946200 brk(NULL) = 0x563653b7f000 <0.000037> 885 03:17:38.946284 brk(0x563653ba0000) = 0x563653ba0000 <0.000042> 885 03:17:38.946401 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000125> 885 03:17:38.946601 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000038> 885 03:17:38.946702 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tpr"..., 1024) = 336 <0.000056> 885 03:17:38.946821 read(3, "", 1024) = 0 <0.000048> 885 03:17:38.946951 close(3) = 0 <0.000039> 885 03:17:38.947042 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000051> 885 03:17:38.947206 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000035> 885 03:17:38.947303 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000037> 885 03:17:38.947400 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000059> 885 03:17:38.947518 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000036> 885 03:17:38.947613 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000039> 885 03:17:38.947711 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000038> 885 03:17:38.947820 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000034> 885 03:17:38.947904 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000036> 885 03:17:38.947993 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000034> 885 03:17:38.948077 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000035> 885 03:17:38.948165 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000034> 885 03:17:38.948249 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000037> 885 03:17:38.948345 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000038> 885 03:17:38.948433 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000060> 885 03:17:38.948543 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000034> 885 03:17:38.948626 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000035> 885 03:17:38.948713 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000037> 885 03:17:38.948814 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000036> 885 03:17:38.948908 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000036> 885 03:17:38.949010 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000048> 885 03:17:38.949122 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000039> 885 03:17:38.949219 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09da00000 <0.000056> 885 03:17:38.949353 close(3) = 0 <0.000040> 885 03:17:38.949471 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000060> 885 03:17:38.949602 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000037> 885 03:17:38.949710 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000042> 885 03:17:38.949843 read(3, "", 4096) = 0 <0.000041> 885 03:17:38.949941 close(3) = 0 <0.000044> 885 03:17:38.950070 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000041> 885 03:17:38.950179 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000044> 885 03:17:38.950295 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000039> 885 03:17:38.950396 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09e078000 <0.000070> 885 03:17:38.950556 close(3) = 0 <0.000039> 885 03:17:38.950670 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000044> 885 03:17:38.950783 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000066> 885 03:17:38.950944 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7fa09dd63000 <0.000053> 885 03:17:38.951054 close(3) = 0 <0.000035> 885 03:17:38.951153 futex(0x7fa09dfe5a4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000037> 885 03:17:38.951257 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 885 03:17:38.951373 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000041> 885 03:17:38.951494 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000036> 885 03:17:38.951596 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09e077000 <0.000040> 885 03:17:38.951692 close(3) = 0 <0.000032> 885 03:17:38.951783 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000039> 885 03:17:38.951875 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 885 03:17:38.951971 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000036> 885 03:17:38.952063 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09e076000 <0.000041> 885 03:17:38.952159 close(3) = 0 <0.000036> 885 03:17:38.952264 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000039> 885 03:17:38.952365 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 885 03:17:38.952596 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000070> 885 03:17:38.952838 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09e075000 <0.000067> 885 03:17:38.953019 close(3) = 0 <0.000059> 885 03:17:38.953208 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000072> 885 03:17:38.953417 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000064> 885 03:17:38.953646 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000054> 885 03:17:38.953824 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09dd62000 <0.000065> 885 03:17:38.953999 close(3) = 0 <0.000050> 885 03:17:38.954155 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000047> 885 03:17:38.954292 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000048> 885 03:17:38.954432 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000050> 885 03:17:38.954593 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09dd61000 <0.000063> 885 03:17:38.954742 close(3) = 0 <0.000046> 885 03:17:38.954887 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000048> 885 03:17:38.955023 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000049> 885 03:17:38.955164 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000045> 885 03:17:38.955301 close(3) = 0 <0.000047> 885 03:17:38.955425 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000052> 885 03:17:38.955587 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000045> 885 03:17:38.955739 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09dd60000 <0.000058> 885 03:17:38.955878 close(3) = 0 <0.000043> 885 03:17:38.956016 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000051> 885 03:17:38.956157 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000060> 885 03:17:38.956339 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000114> 885 03:17:38.956702 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09dd5f000 <0.000070> 885 03:17:38.956874 close(3) = 0 <0.000041> 885 03:17:38.957008 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000045> 885 03:17:38.957147 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000047> 885 03:17:38.957282 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000045> 885 03:17:38.957413 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09dd5e000 <0.000069> 885 03:17:38.957555 close(3) = 0 <0.000040> 885 03:17:38.957685 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000045> 885 03:17:38.957815 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000046> 885 03:17:38.957946 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000042> 885 03:17:38.958072 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09dd5d000 <0.000047> 885 03:17:38.958190 close(3) = 0 <0.000039> 885 03:17:38.958310 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000047> 885 03:17:38.958436 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000071> 885 03:17:38.958629 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000045> 885 03:17:38.958759 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09dd5c000 <0.000078> 885 03:17:38.958914 close(3) = 0 <0.000039> 885 03:17:38.959038 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000046> 885 03:17:38.959164 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000044> 885 03:17:38.959299 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000044> 885 03:17:38.959425 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa09dd05000 <0.000160> 885 03:17:38.959732 close(3) = 0 <0.000052> 885 03:17:38.959939 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000086> 885 03:17:38.960120 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000057> 885 03:17:38.960273 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000057> 885 03:17:38.960508 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000066> 885 03:17:38.960781 lseek(3, -60, SEEK_CUR) = 54 <0.000052> 885 03:17:38.960917 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000055> 885 03:17:38.961070 close(3) = 0 <0.000057> 885 03:17:38.961244 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000072> 885 03:17:38.961415 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000108> 885 03:17:38.961633 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000059> 885 03:17:38.961795 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000053> 885 03:17:38.961969 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000059> 885 03:17:38.962131 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000058> 885 03:17:38.962321 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.001459> 885 03:17:38.964011 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000081> 885 03:17:38.964237 read(3, "", 4096) = 0 <0.000052> 885 03:17:38.964372 close(3) = 0 <0.000079> 885 03:17:38.964684 geteuid() = 1000 <0.000093> 885 03:17:38.964854 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000043> 885 03:17:38.964992 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000068> 885 03:17:38.965147 access("/usr/bin/sudo", X_OK) = 0 <0.000060> 885 03:17:38.965282 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000059> 885 03:17:38.965437 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000058> 885 03:17:38.965634 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000061> 885 03:17:38.965791 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000053> 885 03:17:38.965944 write(2, "sudo", 4) = 4 <0.000107> 885 03:17:38.966145 write(2, ": ", 2) = 2 <0.000052> 885 03:17:38.966291 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000049> 885 03:17:38.966422 ioctl(2, TCGETS, 0x7ffdd28dbde0) = -1 ENOTTY (Inappropriate ioctl for device) <0.000076> 885 03:17:38.966593 write(2, "\n", 1) = 1 <0.000053> 885 03:17:38.966873 exit_group(1) = ? 885 03:17:38.967831 +++ exited with 1 +++