Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 16 execve("/bin/su", ["su", "postgres"], [/* 12 vars */]) = 0
- 16 brk(0) = 0x7f07a590c000
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea4000
- 16 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
- 16 open("/etc/ld.so.cache", O_RDONLY) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=12780, ...}) = 0
- 16 mmap(NULL, 12780, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f07a4ea0000
- 16 close(3) = 0
- 16 open("/lib64/libpam.so.0", O_RDONLY) = 3
- 16 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320#\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(3, {st_mode=S_IFREG|0755, st_size=55848, ...}) = 0
- 16 mmap(NULL, 2150944, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f07a4a78000
- 16 mprotect(0x7f07a4a84000, 2097152, PROT_NONE) = 0
- 16 mmap(0x7f07a4c84000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7f07a4c84000
- 16 close(3) = 0
- 16 open("/lib64/libpam_misc.so.0", O_RDONLY) = 3
- 16 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\17\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(3, {st_mode=S_IFREG|0755, st_size=14584, ...}) = 0
- 16 mmap(NULL, 2109712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f07a4874000
- 16 mprotect(0x7f07a4876000, 2097152, PROT_NONE) = 0
- 16 mmap(0x7f07a4a76000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f07a4a76000
- 16 close(3) = 0
- 16 open("/lib64/libc.so.6", O_RDONLY) = 3
- 16 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\356\1\0\0\0\0\0"..., 832) = 832
- 16 fstat(3, {st_mode=S_IFREG|0755, st_size=1921176, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4e9f000
- 16 mmap(NULL, 3750152, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f07a44e0000
- 16 mprotect(0x7f07a466a000, 2097152, PROT_NONE) = 0
- 16 mmap(0x7f07a486a000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x18a000) = 0x7f07a486a000
- 16 mmap(0x7f07a486f000, 18696, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f07a486f000
- 16 close(3) = 0
- 16 open("/lib64/libaudit.so.1", O_RDONLY) = 3
- 16 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20(\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(3, {st_mode=S_IFREG|0755, st_size=141768, ...}) = 0
- 16 mmap(NULL, 2236976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f07a42bd000
- 16 mprotect(0x7f07a42d4000, 2097152, PROT_NONE) = 0
- 16 mmap(0x7f07a44d4000, 49152, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7f07a44d4000
- 16 close(3) = 0
- 16 open("/lib64/libdl.so.2", O_RDONLY) = 3
- 16 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(3, {st_mode=S_IFREG|0755, st_size=19536, ...}) = 0
- 16 mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f07a40b9000
- 16 mprotect(0x7f07a40bb000, 2097152, PROT_NONE) = 0
- 16 mmap(0x7f07a42bb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f07a42bb000
- 16 close(3) = 0
- 16 open("/lib64/libcrypt.so.1", O_RDONLY) = 3
- 16 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\f\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(3, {st_mode=S_IFREG|0755, st_size=40400, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4e9e000
- 16 mmap(NULL, 2318816, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f07a3e82000
- 16 mprotect(0x7f07a3e89000, 2097152, PROT_NONE) = 0
- 16 mmap(0x7f07a4089000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f07a4089000
- 16 mmap(0x7f07a408b000, 184800, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f07a408b000
- 16 close(3) = 0
- 16 open("/lib64/libfreebl3.so", O_RDONLY) = 3
- 16 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\n\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(3, {st_mode=S_IFREG|0755, st_size=10312, ...}) = 0
- 16 mmap(NULL, 2105520, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f07a3c7f000
- 16 mprotect(0x7f07a3c81000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a3e80000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7f07a3e80000
- 16 close(3) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4e9d000
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4e9c000
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4e9b000
- 16 arch_prctl(ARCH_SET_FS, 0x7f07a4e9c700) = 0
- 16 mprotect(0x7f07a3e80000, 4096, PROT_READ) = 0
- 16 mprotect(0x7f07a4089000, 4096, PROT_READ) = 0
- 16 mprotect(0x7f07a42bb000, 4096, PROT_READ) = 0
- 16 mprotect(0x7f07a44d4000, 4096, PROT_READ) = 0
- 16 mprotect(0x7f07a486a000, 16384, PROT_READ) = 0
- 16 mprotect(0x7f07a4a76000, 4096, PROT_READ) = 0
- 16 mprotect(0x7f07a4c84000, 4096, PROT_READ) = 0
- 16 mprotect(0x7f07a50af000, 4096, PROT_READ) = 0
- 16 mprotect(0x7f07a4ea5000, 4096, PROT_READ) = 0
- 16 munmap(0x7f07a4ea0000, 12780) = 0
- 16 brk(0) = 0x7f07a590c000
- 16 brk(0x7f07a592d000) = 0x7f07a592d000
- 16 open("/usr/lib/locale/locale-archive", O_RDONLY) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=3337856, ...}) = 0
- 16 mmap(NULL, 3337856, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f07a3950000
- 16 close(3) = 0
- 16 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- 16 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
- 16 close(3) = 0
- 16 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- 16 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
- 16 close(3) = 0
- 16 open("/etc/nsswitch.conf", O_RDONLY) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=1688, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1688
- 16 read(3, "", 4096) = 0
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 open("/etc/ld.so.cache", O_RDONLY) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=12780, ...}) = 0
- 16 mmap(NULL, 12780, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f07a4ea0000
- 16 close(3) = 0
- 16 open("/lib64/libnss_files.so.2", O_RDONLY) = 3
- 16 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360!\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(3, {st_mode=S_IFREG|0755, st_size=65928, ...}) = 0
- 16 mmap(NULL, 2151824, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f07a3742000
- 16 mprotect(0x7f07a374e000, 2097152, PROT_NONE) = 0
- 16 mmap(0x7f07a394e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7f07a394e000
- 16 close(3) = 0
- 16 mprotect(0x7f07a394e000, 4096, PROT_READ) = 0
- 16 munmap(0x7f07a4ea0000, 12780) = 0
- 16 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
- 16 fcntl(3, F_GETFD) = 0x1 (flags FD_CLOEXEC)
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=838, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 838
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
- 16 open("/etc/pam.d/su", O_RDONLY) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=487, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "#%PAM-1.0\nauth\t\tsufficient\tpam_r"..., 4096) = 487
- 16 open("/lib64/security/pam_rootok.so", O_RDONLY) = 4
- 16 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\5\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(4, {st_mode=S_IFREG|0755, st_size=6056, ...}) = 0
- 16 mmap(NULL, 2101304, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f07a3540000
- 16 mprotect(0x7f07a3541000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a3740000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0) = 0x7f07a3740000
- 16 close(4) = 0
- 16 open("/etc/ld.so.cache", O_RDONLY) = 4
- 16 fstat(4, {st_mode=S_IFREG|0644, st_size=12780, ...}) = 0
- 16 mmap(NULL, 12780, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7f07a4e97000
- 16 close(4) = 0
- 16 open("/lib64/libselinux.so.1", O_RDONLY) = 4
- 16 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320X\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(4, {st_mode=S_IFREG|0755, st_size=122040, ...}) = 0
- 16 mmap(NULL, 2221912, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f07a3321000
- 16 mprotect(0x7f07a333e000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a353d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x1c000) = 0x7f07a353d000
- 16 mmap(0x7f07a353f000, 1880, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f07a353f000
- 16 close(4) = 0
- 16 mprotect(0x7f07a353d000, 4096, PROT_READ) = 0
- 16 mprotect(0x7f07a3740000, 4096, PROT_READ) = 0
- 16 statfs("/selinux", {f_type="EXT2_SUPER_MAGIC", f_bsize=4096, f_blocks=2547534, f_bfree=2443840, f_bavail=2312768, f_files=655360, f_ffree=633762, f_fsid={-1233161252, 555771874}, f_namelen=255, f_frsize=4096}) = 0
- 16 open("/proc/filesystems", O_RDONLY) = 4
- 16 fstat(4, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea2000
- 16 read(4, "nodev\tsysfs\nnodev\trootfs\nnodev\tb"..., 1024) = 333
- 16 close(4) = 0
- 16 munmap(0x7f07a4ea2000, 4096) = 0
- 16 open("/proc/mounts", O_RDONLY) = 4
- 16 fstat(4, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea2000
- 16 read(4, "rootfs / rootfs rw 0 0\n/dev/mapp"..., 1024) = 1024
- 16 statfs("/host/selinux", {f_type=0xf97cff8c, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0}, f_namelen=255, f_frsize=4096}) = 0
- 16 statfs("/host/selinux", {f_type=0xf97cff8c, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0}, f_namelen=255, f_frsize=4096}) = 0
- 16 stat("/host/selinux", {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
- 16 close(4) = 0
- 16 munmap(0x7f07a4ea2000, 4096) = 0
- 16 munmap(0x7f07a4e97000, 12780) = 0
- 16 open("/etc/pam.d/system-auth", O_RDONLY) = 4
- 16 fstat(4, {st_mode=S_IFREG|0644, st_size=692, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea2000
- 16 read(4, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 692
- 16 open("/lib64/security/pam_env.so", O_RDONLY) = 5
- 16 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\r\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(5, {st_mode=S_IFREG|0755, st_size=18592, ...}) = 0
- 16 mmap(NULL, 2113776, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f07a311c000
- 16 mprotect(0x7f07a3120000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a331f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x3000) = 0x7f07a331f000
- 16 close(5) = 0
- 16 mprotect(0x7f07a331f000, 4096, PROT_READ) = 0
- 16 open("/lib64/security/pam_unix.so", O_RDONLY) = 5
- 16 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240&\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(5, {st_mode=S_IFREG|0755, st_size=51960, ...}) = 0
- 16 mmap(NULL, 2196352, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f07a2f03000
- 16 mprotect(0x7f07a2f0f000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a310e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xb000) = 0x7f07a310e000
- 16 mmap(0x7f07a3110000, 45952, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f07a3110000
- 16 close(5) = 0
- 16 open("/etc/ld.so.cache", O_RDONLY) = 5
- 16 fstat(5, {st_mode=S_IFREG|0644, st_size=12780, ...}) = 0
- 16 mmap(NULL, 12780, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f07a4e97000
- 16 close(5) = 0
- 16 open("/lib64/libnsl.so.1", O_RDONLY) = 5
- 16 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p@\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(5, {st_mode=S_IFREG|0755, st_size=113432, ...}) = 0
- 16 mmap(NULL, 2198192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f07a2cea000
- 16 mprotect(0x7f07a2d00000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a2eff000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x15000) = 0x7f07a2eff000
- 16 mmap(0x7f07a2f01000, 6832, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f07a2f01000
- 16 close(5) = 0
- 16 mprotect(0x7f07a2eff000, 4096, PROT_READ) = 0
- 16 mprotect(0x7f07a310e000, 4096, PROT_READ) = 0
- 16 munmap(0x7f07a4e97000, 12780) = 0
- 16 open("/lib64/security/pam_deny.so", O_RDONLY) = 5
- 16 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\5\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(5, {st_mode=S_IFREG|0755, st_size=5952, ...}) = 0
- 16 mmap(NULL, 2101272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f07a2ae8000
- 16 mprotect(0x7f07a2ae9000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a2ce8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0) = 0x7f07a2ce8000
- 16 close(5) = 0
- 16 mprotect(0x7f07a2ce8000, 4096, PROT_READ) = 0
- 16 read(4, "", 4096) = 0
- 16 close(4) = 0
- 16 munmap(0x7f07a4ea2000, 4096) = 0
- 16 open("/lib64/security/pam_succeed_if.so", O_RDONLY) = 4
- 16 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\v\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(4, {st_mode=S_IFREG|0755, st_size=14384, ...}) = 0
- 16 mmap(NULL, 2109624, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f07a28e4000
- 16 mprotect(0x7f07a28e7000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a2ae6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x2000) = 0x7f07a2ae6000
- 16 close(4) = 0
- 16 mprotect(0x7f07a2ae6000, 4096, PROT_READ) = 0
- 16 open("/etc/pam.d/system-auth", O_RDONLY) = 4
- 16 fstat(4, {st_mode=S_IFREG|0644, st_size=692, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea2000
- 16 read(4, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 692
- 16 read(4, "", 4096) = 0
- 16 close(4) = 0
- 16 munmap(0x7f07a4ea2000, 4096) = 0
- 16 open("/etc/pam.d/system-auth", O_RDONLY) = 4
- 16 fstat(4, {st_mode=S_IFREG|0644, st_size=692, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea2000
- 16 read(4, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 692
- 16 open("/lib64/security/pam_cracklib.so", O_RDONLY) = 5
- 16 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\f\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(5, {st_mode=S_IFREG|0755, st_size=14432, ...}) = 0
- 16 mmap(NULL, 2109672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f07a26e0000
- 16 mprotect(0x7f07a26e3000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a28e2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x2000) = 0x7f07a28e2000
- 16 close(5) = 0
- 16 open("/etc/ld.so.cache", O_RDONLY) = 5
- 16 fstat(5, {st_mode=S_IFREG|0644, st_size=12780, ...}) = 0
- 16 mmap(NULL, 12780, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f07a4e97000
- 16 close(5) = 0
- 16 open("/usr/lib64/libcrack.so.2", O_RDONLY) = 5
- 16 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p8\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(5, {st_mode=S_IFREG|0755, st_size=38712, ...}) = 0
- 16 mmap(NULL, 2148896, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f07a24d3000
- 16 mprotect(0x7f07a24db000, 2097152, PROT_NONE) = 0
- 16 mmap(0x7f07a26db000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x8000) = 0x7f07a26db000
- 16 mmap(0x7f07a26dc000, 14880, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f07a26dc000
- 16 close(5) = 0
- 16 mprotect(0x7f07a28e2000, 4096, PROT_READ) = 0
- 16 munmap(0x7f07a4e97000, 12780) = 0
- 16 read(4, "", 4096) = 0
- 16 close(4) = 0
- 16 munmap(0x7f07a4ea2000, 4096) = 0
- 16 open("/etc/pam.d/system-auth", O_RDONLY) = 4
- 16 fstat(4, {st_mode=S_IFREG|0644, st_size=692, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea2000
- 16 read(4, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 692
- 16 open("/lib64/security/pam_keyinit.so", O_RDONLY) = 5
- 16 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\10\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(5, {st_mode=S_IFREG|0755, st_size=10224, ...}) = 0
- 16 mmap(NULL, 2105488, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f07a22d0000
- 16 mprotect(0x7f07a22d2000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a24d1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x1000) = 0x7f07a24d1000
- 16 close(5) = 0
- 16 mprotect(0x7f07a24d1000, 4096, PROT_READ) = 0
- 16 open("/lib64/security/pam_limits.so", O_RDONLY) = 5
- 16 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\20\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(5, {st_mode=S_IFREG|0755, st_size=18600, ...}) = 0
- 16 mmap(NULL, 2113848, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f07a20cb000
- 16 mprotect(0x7f07a20cf000, 2093056, PROT_NONE) = 0
- 16 mmap(0x7f07a22ce000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x3000) = 0x7f07a22ce000
- 16 close(5) = 0
- 16 mprotect(0x7f07a22ce000, 4096, PROT_READ) = 0
- 16 read(4, "", 4096) = 0
- 16 close(4) = 0
- 16 munmap(0x7f07a4ea2000, 4096) = 0
- 16 open("/lib64/security/pam_xauth.so", O_RDONLY) = 4
- 16 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\30\0\0\0\0\0\0"..., 832) = 832
- 16 fstat(4, {st_mode=S_IFREG|0755, st_size=22920, ...}) = 0
- 16 mmap(NULL, 2118168, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f07a1ec5000
- 16 mprotect(0x7f07a1ec9000, 2097152, PROT_NONE) = 0
- 16 mmap(0x7f07a20c9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x4000) = 0x7f07a20c9000
- 16 close(4) = 0
- 16 mprotect(0x7f07a20c9000, 4096, PROT_READ) = 0
- 16 read(3, "", 4096) = 0
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 open("/etc/pam.d/other", O_RDONLY) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=154, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "#%PAM-1.0\nauth required "..., 4096) = 154
- 16 read(3, "", 4096) = 0
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 getuid() = 0
- 16 getuid() = 0
- 16 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=838, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 838
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
- 16 readlink("/proc/self/fd/0", "/1", 4095) = 2
- 16 getuid() = 0
- 16 gettid() = 16
- 16 open("/proc/self/task/16/attr/current", O_RDONLY) = 3
- 16 read(3, "unconfined_u:unconfined_r:unconf"..., 4095) = 54
- 16 close(3) = 0
- 16 gettid() = 16
- 16 open("/proc/self/task/16/attr/current", O_RDONLY) = 3
- 16 read(3, "unconfined_u:unconfined_r:unconf"..., 4095) = 54
- 16 close(3) = 0
- 16 gettid() = 16
- 16 open("/proc/self/task/16/attr/prev", O_RDONLY) = 3
- 16 read(3, "unconfined_u:unconfined_r:unconf"..., 4095) = 54
- 16 close(3) = 0
- 16 stat("/host/selinux/class", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
- 16 open("/host/selinux/class/passwd/index", O_RDONLY) = 3
- 16 read(3, "30", 19) = 2
- 16 close(3) = 0
- 16 open("/host/selinux/class/passwd/perms", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
- 16 fcntl(3, F_GETFD) = 0x1 (flags FD_CLOEXEC)
- 16 getdents(3, /* 7 entries */, 32768) = 192
- 16 stat("/host/selinux/class/passwd/perms/.", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
- 16 stat("/host/selinux/class/passwd/perms/..", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
- 16 stat("/host/selinux/class/passwd/perms/crontab", {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
- 16 open("/host/selinux/class/passwd/perms/crontab", O_RDONLY) = 4
- 16 read(4, "5", 19) = 1
- 16 close(4) = 0
- 16 stat("/host/selinux/class/passwd/perms/rootok", {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
- 16 open("/host/selinux/class/passwd/perms/rootok", O_RDONLY) = 4
- 16 read(4, "4", 19) = 1
- 16 close(4) = 0
- 16 stat("/host/selinux/class/passwd/perms/chsh", {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
- 16 open("/host/selinux/class/passwd/perms/chsh", O_RDONLY) = 4
- 16 read(4, "3", 19) = 1
- 16 close(4) = 0
- 16 stat("/host/selinux/class/passwd/perms/chfn", {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
- 16 open("/host/selinux/class/passwd/perms/chfn", O_RDONLY) = 4
- 16 read(4, "2", 19) = 1
- 16 close(4) = 0
- 16 stat("/host/selinux/class/passwd/perms/passwd", {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
- 16 open("/host/selinux/class/passwd/perms/passwd", O_RDONLY) = 4
- 16 read(4, "1", 19) = 1
- 16 close(4) = 0
- 16 getdents(3, /* 0 entries */, 32768) = 0
- 16 close(3) = 0
- 16 open("/host/selinux/access", O_RDWR) = 3
- 16 write(3, "unconfined_u:unconfined_r:unconf"..., 112) = 112
- 16 read(3, "1f ffffffff 0 ffffffff 1 0", 4095) = 26
- 16 close(3) = 0
- 16 socket(PF_NETLINK, SOCK_RAW, 9) = 3
- 16 fcntl(3, F_SETFD, FD_CLOEXEC) = 0
- 16 readlink("/proc/self/exe", "/bin/su", 4096) = 7
- 16 sendto(3, "p\0\0\0L\4\5\0\1\0\0\0\0\0\0\0op=PAM:authentic"..., 112, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 112
- 16 poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\1\0\0\0z\23\0\0\0\0\0\0p\0\0\0L\4\5\0\1\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\1\0\0\0z\23\0\0\0\0\0\0p\0\0\0L\4\5\0\1\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 close(3) = 0
- 16 getuid() = 0
- 16 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=838, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 838
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 socket(PF_NETLINK, SOCK_RAW, 9) = 3
- 16 fcntl(3, F_SETFD, FD_CLOEXEC) = 0
- 16 sendto(3, "l\0\0\0M\4\5\0\2\0\0\0\0\0\0\0op=PAM:accountin"..., 108, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 108
- 16 poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\2\0\0\0z\23\0\0\0\0\0\0l\0\0\0M\4\5\0\2\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\2\0\0\0z\23\0\0\0\0\0\0l\0\0\0M\4\5\0\2\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 close(3) = 0
- 16 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=838, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 838
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 getuid() = 0
- 16 getgid() = 0
- 16 setregid(10000, 4294967295) = 0
- 16 setreuid(10000, 4294967295) = 0
- 16 keyctl(0, 0xfffffffd, 0, 0x2710, 0) = 967538307
- 16 keyctl(0, 0xfffffffb, 0, 0, 0) = 331670018
- 16 setreuid(0, 4294967295) = 0
- 16 setregid(0, 4294967295) = 0
- 16 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=838, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 838
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 getrlimit(RLIMIT_CPU, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0
- 16 getrlimit(RLIMIT_FSIZE, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0
- 16 getrlimit(RLIMIT_DATA, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0
- 16 getrlimit(RLIMIT_STACK, {rlim_cur=10240*1024, rlim_max=RLIM_INFINITY}) = 0
- 16 getrlimit(RLIMIT_CORE, {rlim_cur=0, rlim_max=0}) = 0
- 16 getrlimit(RLIMIT_RSS, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0
- 16 getrlimit(RLIMIT_NPROC, {rlim_cur=62820, rlim_max=62820}) = 0
- 16 getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=4*1024}) = 0
- 16 getrlimit(RLIMIT_MEMLOCK, {rlim_cur=64*1024, rlim_max=64*1024}) = 0
- 16 getrlimit(RLIMIT_AS, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0
- 16 getrlimit(RLIMIT_LOCKS, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0
- 16 getrlimit(RLIMIT_SIGPENDING, {rlim_cur=62820, rlim_max=62820}) = 0
- 16 getrlimit(RLIMIT_MSGQUEUE, {rlim_cur=800*1024, rlim_max=800*1024}) = 0
- 16 getrlimit(RLIMIT_NICE, {rlim_cur=0, rlim_max=0}) = 0
- 16 getrlimit(RLIMIT_RTPRIO, {rlim_cur=0, rlim_max=0}) = 0
- 16 getpriority(PRIO_PROCESS, 0) = 20
- 16 open("/etc/security/limits.conf", O_RDONLY) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=1835, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "# /etc/security/limits.conf\n#\n#E"..., 4096) = 1835
- 16 read(3, "", 4096) = 0
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 open("/etc/security/limits.d", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
- 16 getdents(3, /* 3 entries */, 32768) = 88
- 16 open("/usr/lib64/gconv/gconv-modules.cache", O_RDONLY) = 4
- 16 fstat(4, {st_mode=S_IFREG|0644, st_size=26060, ...}) = 0
- 16 mmap(NULL, 26060, PROT_READ, MAP_SHARED, 4, 0) = 0x7f07a4e94000
- 16 close(4) = 0
- 16 getdents(3, /* 0 entries */, 32768) = 0
- 16 close(3) = 0
- 16 open("/etc/security/limits.d/90-nproc.conf", O_RDONLY) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=191, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "# Default limit for number of us"..., 4096) = 191
- 16 read(3, "", 4096) = 0
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 setrlimit(RLIMIT_NPROC, {rlim_cur=1024, rlim_max=62820}) = 0
- 16 setpriority(PRIO_PROCESS, 0, 0) = 0
- 16 getuid() = 0
- 16 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=838, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 838
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 getuid() = 0
- 16 access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or directory)
- 16 open("/var/run/utmp", O_RDONLY|O_CLOEXEC) = 3
- 16 lseek(3, 0, SEEK_SET) = 0
- 16 alarm(0) = 0
- 16 rt_sigaction(SIGALRM, {0x7f07a46045e0, [], SA_RESTORER, 0x7f07a45126a0}, {SIG_DFL, [], 0}, 8) = 0
- 16 alarm(10) = 0
- 16 fcntl(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) = 0
- 16 read(3, "", 384) = 0
- 16 fcntl(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
- 16 alarm(0) = 10
- 16 rt_sigaction(SIGALRM, {SIG_DFL, [], SA_RESTORER, 0x7f07a45126a0}, NULL, 8) = 0
- 16 close(3) = 0
- 16 getuid() = 0
- 16 open("/etc/localtime", O_RDONLY) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0"..., 4096) = 118
- 16 lseek(3, -62, SEEK_CUR) = 56
- 16 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0"..., 4096) = 62
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
- 16 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
- 16 close(3) = 0
- 16 access("/usr/X11R6/bin/xauth", X_OK) = -1 ENOENT (No such file or directory)
- 16 access("/usr/bin/xauth", X_OK) = -1 ENOENT (No such file or directory)
- 16 access("/usr/bin/X11/xauth", X_OK) = -1 ENOENT (No such file or directory)
- 16 socket(PF_NETLINK, SOCK_RAW, 9) = 3
- 16 fcntl(3, F_SETFD, FD_CLOEXEC) = 0
- 16 sendto(3, "l\0\0\0Q\4\5\0\3\0\0\0\0\0\0\0op=PAM:session_o"..., 108, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 108
- 16 poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\3\0\0\0z\23\0\0\0\0\0\0l\0\0\0Q\4\5\0\3\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\3\0\0\0z\23\0\0\0\0\0\0l\0\0\0Q\4\5\0\3\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 close(3) = 0
- 16 socket(PF_NETLINK, SOCK_RAW, 9) = 3
- 16 fcntl(3, F_SETFD, FD_CLOEXEC) = 0
- 16 sendto(3, "h\0\0\0O\4\5\0\4\0\0\0\0\0\0\0op=PAM:setcred a"..., 104, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 104
- 16 poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\4\0\0\0z\23\0\0\0\0\0\0h\0\0\0O\4\5\0\4\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\4\0\0\0z\23\0\0\0\0\0\0h\0\0\0O\4\5\0\4\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 close(3) = 0
- 16 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f07a4e9c9d0) = 17
- 16 rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1], <unfinished ...>
- 17 open("/proc/sys/kernel/ngroups_max", O_RDONLY <unfinished ...>
- 16 <... rt_sigprocmask resumed> NULL, 8) = 0
- 16 rt_sigaction(SIGTERM, {0x7f07a4eaa390, [], SA_RESTORER, 0x7f07a45126a0}, <unfinished ...>
- 17 <... open resumed> ) = 3
- 16 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
- 17 read(3, <unfinished ...>
- 16 rt_sigprocmask(SIG_UNBLOCK, [ALRM TERM], <unfinished ...>
- 17 <... read resumed> "65536\n", 31) = 6
- 16 <... rt_sigprocmask resumed> NULL, 8) = 0
- 17 close(3 <unfinished ...>
- 16 wait4(17, <unfinished ...>
- 17 <... close resumed> ) = 0
- 17 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- 17 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
- 17 close(3) = 0
- 17 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- 17 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
- 17 close(3) = 0
- 17 open("/etc/group", O_RDONLY|O_CLOEXEC) = 3
- 17 fstat(3, {st_mode=S_IFREG|0644, st_size=421, ...}) = 0
- 17 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 17 lseek(3, 0, SEEK_CUR) = 0
- 17 read(3, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 4096) = 421
- 17 read(3, "", 4096) = 0
- 17 close(3) = 0
- 17 munmap(0x7f07a4ea3000, 4096) = 0
- 17 setgroups(1, [10000]) = 0
- 17 setgid(10000) = 0
- 17 setuid(10000) = 0
- 17 munmap(0x7f07a3540000, 2101304) = 0
- 17 munmap(0x7f07a311c000, 2113776) = 0
- 17 munmap(0x7f07a2f03000, 2196352) = 0
- 17 munmap(0x7f07a2cea000, 2198192) = 0
- 17 munmap(0x7f07a2ae8000, 2101272) = 0
- 17 munmap(0x7f07a28e4000, 2109624) = 0
- 17 munmap(0x7f07a26e0000, 2109672) = 0
- 17 munmap(0x7f07a24d3000, 2148896) = 0
- 17 munmap(0x7f07a22d0000, 2105488) = 0
- 17 munmap(0x7f07a20cb000, 2113848) = 0
- 17 munmap(0x7f07a1ec5000, 2118168) = 0
- 17 munmap(0x7f07a3321000, 2221912) = 0
- 17 execve("/bin/bash", ["bash"], [/* 15 vars */]) = -1 EACCES (Permission denied)
- 17 write(2, "su: ", 4) = 4
- 17 write(2, "/bin/bash", 9) = 9
- 17 open("/usr/share/locale/locale.alias", O_RDONLY) = -1 EACCES (Permission denied)
- 17 open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 EACCES (Permission denied)
- 17 open("/usr/share/locale/en_US.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 EACCES (Permission denied)
- 17 open("/usr/share/locale/en_US/LC_MESSAGES/libc.mo", O_RDONLY) = -1 EACCES (Permission denied)
- 17 open("/usr/share/locale/en.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 EACCES (Permission denied)
- 17 open("/usr/share/locale/en.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 EACCES (Permission denied)
- 17 open("/usr/share/locale/en/LC_MESSAGES/libc.mo", O_RDONLY) = -1 EACCES (Permission denied)
- 17 write(2, ": Permission denied", 19) = 19
- 17 write(2, "\n", 1) = 1
- 17 close(1) = 0
- 17 close(2) = 0
- 17 exit_group(126) = ?
- 16 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 126}], WSTOPPED, NULL) = 17
- 16 socket(PF_NETLINK, SOCK_RAW, 9) = 3
- 16 fcntl(3, F_SETFD, FD_CLOEXEC) = 0
- 16 sendto(3, "h\0\0\0P\4\5\0\5\0\0\0\0\0\0\0op=PAM:setcred a"..., 104, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 104
- 16 poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\5\0\0\0z\23\0\0\0\0\0\0h\0\0\0P\4\5\0\5\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\5\0\0\0z\23\0\0\0\0\0\0h\0\0\0P\4\5\0\5\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 close(3) = 0
- 16 getuid() = 0
- 16 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
- 16 fstat(3, {st_mode=S_IFREG|0644, st_size=838, ...}) = 0
- 16 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f07a4ea3000
- 16 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 838
- 16 close(3) = 0
- 16 munmap(0x7f07a4ea3000, 4096) = 0
- 16 getuid() = 0
- 16 socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
- 16 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
- 16 close(3) = 0
- 16 socket(PF_NETLINK, SOCK_RAW, 9) = 3
- 16 fcntl(3, F_SETFD, FD_CLOEXEC) = 0
- 16 sendto(3, "p\0\0\0R\4\5\0\6\0\0\0\0\0\0\0op=PAM:session_c"..., 112, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 112
- 16 poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\6\0\0\0z\23\0\0\0\0\0\0p\0\0\0R\4\5\0\6\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 recvfrom(3, "$\0\0\0\2\0\0\0\6\0\0\0z\23\0\0\0\0\0\0p\0\0\0R\4\5\0\6\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- 16 close(3) = 0
- 16 munmap(0x7f07a3540000, 2101304) = 0
- 16 munmap(0x7f07a311c000, 2113776) = 0
- 16 munmap(0x7f07a2f03000, 2196352) = 0
- 16 munmap(0x7f07a2cea000, 2198192) = 0
- 16 munmap(0x7f07a2ae8000, 2101272) = 0
- 16 munmap(0x7f07a28e4000, 2109624) = 0
- 16 munmap(0x7f07a26e0000, 2109672) = 0
- 16 munmap(0x7f07a24d3000, 2148896) = 0
- 16 munmap(0x7f07a22d0000, 2105488) = 0
- 16 munmap(0x7f07a20cb000, 2113848) = 0
- 16 munmap(0x7f07a1ec5000, 2118168) = 0
- 16 munmap(0x7f07a3321000, 2221912) = 0
- 16 close(1) = 0
- 16 close(2) = 0
- 16 exit_group(126) = ?
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement