- Last login: Wed Jun 2 21:53:21 on ttys000
- USER-NAMEs-macbook:~ USERNAME$ sudo dtruss -f su USERNAME -c crontab
- crontab: you (USERNAME) are not allowed to use this program
- PID/THRD SYSCALL(args) = return
- 17735/0x59799: getpid(0x7FFF5FBFF8F0, 0x7FFFFFE00050, 0x0) = 17735 0
- 17735/0x59799: open_nocancel("/dev/urandom\0", 0x0, 0x0) = 3 0
- 17735/0x59799: read_nocancel(0x3, "(\\\202\263g\251\353J\006\256\305\\\214\361y\322;\377C\n\354\215Eu\035\277\246v\261s\202\203\257@\337\320\347\323\376=\247XW\205\342\004>\245\260\037\355~\255\341\220\276\352,\302\330=t\247\376%A\306\344\256\376>\235\315\230y=\311\201Y\272K]\365\335\320\177}\t\306\371\022\272\r#\314(.\300\205\340\233\364;\335S\360\207\250\0", 0x6C) = 108 0
- 17735/0x59799: close_nocancel(0x3) = 0 0
- 17735/0x59799: issetugid(0x100000000, 0x7FFF5FBFFBC8, 0x7FFF5FC40530) = 0 0
- 17735/0x59799: geteuid(0x100000000, 0x7FFF5FBFFBC8, 0x0) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD7E0, 0x2, 0x7FFF5FBFD7A0) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD7A0, 0x2, 0x7FFF5FBFD83C) = 0 0
- 17735/0x59799: shared_region_check_np(0x7FFF5FBFD9A8, 0x0, 0x7FFF5FC1DC86) = 0 0
- 17735/0x59799: stat64("/usr/lib/dtrace/libdtrace_dyld.dylib\0", 0x7FFF5FBFCDB0, 0x7FFF5FBFD3F0) = 0 0
- 17735/0x59799: open("/usr/lib/dtrace/libdtrace_dyld.dylib\0", 0x0, 0x0) = 3 0
- 17735/0x59799: pread(0x3, "\312\376\272\276\0", 0x1000, 0x0) = 4096 0
- 17735/0x59799: pread(0x3, "\317\372\355\376\a\0", 0x1000, 0x1000) = 4096 0
- 17735/0x59799: mmap(0x100007000, 0x2000, 0x5, 0x12, 0x3, 0x7FFF00000001) = 0x7000 0
- 17735/0x59799: mmap(0x100009000, 0x1000, 0x3, 0x12, 0x3, 0x7FFF00000001) = 0x9000 0
- 17735/0x59799: mmap(0x10000A000, 0x1F10, 0x1, 0x12, 0x3, 0x7FFF00000001) = 0xA000 0
- 17735/0x59799: close(0x3) = 0 0
- 17735/0x59799: stat64("/usr/lib/libpam.2.dylib\0", 0x7FFF5FBFCB30, 0x7FFF5FBFD170) = 0 0
- 17735/0x59799: stat64("/usr/lib/libbsm.0.dylib\0", 0x7FFF5FBFCB30, 0x7FFF5FBFD170) = 0 0
- 17735/0x59799: stat64("/usr/lib/libSystem.B.dylib\0", 0x7FFF5FBFCB30, 0x7FFF5FBFD170) = 0 0
- 17735/0x59799: stat64("/usr/lib/system/libmathCommon.A.dylib\0", 0x7FFF5FBFC890, 0x7FFF5FBFCED0) = 0 0
- 17735/0x59799: madvise(0x7FFF88E07000, 0x2000, 0x5) = 0 0
- 17735/0x59799: open("/dev/dtracehelper\0", 0x2, 0x7FFF5FC45348) = 3 0
- 17735/0x59799: ioctl(0x3, 0x80086804, 0x7FFF5FBFD740) = 0 0
- 17735/0x59799: close(0x3) = 0 0
- 17735/0x59799: stat64("/usr/lib/libstdc++.6.dylib\0", 0x7FFF5FBFCB50, 0x7FFF5FBFD190) = 0 0
- 17735/0x59799: open("/dev/dtracehelper\0", 0x2, 0x7FFF5FC45410) = 3 0
- 17735/0x59799: ioctl(0x3, 0x80086804, 0x7FFF5FBFD740) = 0 0
- 17735/0x59799: close(0x3) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD630, 0x2, 0x7FFF5FBFD620) = 0 0
- 17735/0x59799: bsdthread_register(0x7FFF87C8775C, 0x7FFF87C68378, 0x2000) = 0 0
- 17735/0x59799: thread_selfid(0x7FFF87C8775C, 0x7FFF87C68378, 0x0) = 366489 0
- 17735/0x59799: open_nocancel("/dev/urandom\0", 0x0, 0x7FFF70E89B20) = 3 0
- 17735/0x59799: read_nocancel(0x3, "\343\244C\034ut!\336,\376!\374\342c\204\037t\373`-\241\316g]\024\244\230\272\a=O\271\206\214\301\0", 0x40) = 64 0
- 17735/0x59799: close_nocancel(0x3) = 0 0
- 17735/0x59799: mmap(0x0, 0x3000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0xC000 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD4B0, 0x2, 0x7FFF5FBFD470) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD470, 0x2, 0x7FFF5FBFD508) = 0 0
- 17735/0x59799: getpid(0x7FFF5FBFD400, 0x7FFFFFE00050, 0x0) = 17735 0
- 17735/0x59799: open_nocancel("/dev/urandom\0", 0x0, 0x0) = 3 0
- 17735/0x59799: read_nocancel(0x3, "L9`\245}wx\267\345K2\257k\355\247\326\355$\231\251\362!\322\177 v\356Q\206\354\351\250>\335\311w\301.\241~\350\271\277\315dl\213X}\022\325.\225]\243I\327.H?\371\224\037\023\a1aU[\204\v\033\\DDF\300\251Nb\322ji]R\207 D\303`Q\305=\001\221E\373\275\031\2700\373\211\325\325\242\300\244\0", 0x6C) = 108 0
- 17735/0x59799: close_nocancel(0x3) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD4B0, 0x2, 0x7FFF5FBFD4DC) = 0 0
- 17735/0x59799: mmap(0x0, 0xD000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0xF000 0
- 17735/0x59799: mmap(0x0, 0xD000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0x1C000 0
- 17735/0x59799: mmap(0x0, 0x1000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0x29000 0
- 17735/0x59799: mmap(0x0, 0x200000, 0x3, 0x1002, 0x7000000, 0x7FFF00000001) = 0x2A000 0
- 17735/0x59799: munmap(0x10002A000, 0xD6000) = 0 0
- 17735/0x59799: munmap(0x100200000, 0x2A000) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD610, 0x2, 0x7FFF5FBFD5D0) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD5D0, 0x2, 0x7FFF70E96680) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD610, 0x2, 0x7FFF5FBFD5D0) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD5D0, 0x2, 0x7FFF70E96684) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD610, 0x2, 0x7FFF5FBFD5D0) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD5D0, 0x2, 0x7FFF70E96688) = 0 0
- 17735/0x59799: mmap(0x0, 0x3000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0x2A000 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD5E0, 0x2, 0x7FFF5FBFD5A0) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD5A0, 0x2, 0x7FFF5FBFD638) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD5E0, 0x2, 0x7FFF5FBFD60C) = 0 0
- 17735/0x59799: mmap(0x0, 0xD000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0x2D000 0
- 17735/0x59799: mmap(0x0, 0xD000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0x3A000 0
- 17735/0x59799: mmap(0x0, 0x200000, 0x3, 0x1002, 0x7000000, 0x7FFF00000001) = 0x200000 0
- 17735/0x59799: munmap(0x100300000, 0x100000) = 0 0
- 17735/0x59799: getrlimit(0x1008, 0x7FFF5FBFEF50, 0x7FFF87C51CCC) = 0 0
- 17735/0x59799: open_nocancel("/etc/sysinfo.conf\0", 0x0, 0x1B6) = -1 Err#2
- 17735/0x59799: open_nocancel("/etc/pam.d/su\0", 0x0, 0x1B6) = 3 0
- 17735/0x59799: fstat64(0x3, 0x7FFF5FBFEE30, 0x7FFF5FBFEEFC) = 0 0
- 17735/0x59799: read_nocancel(0x3, "# su: auth account session\nauth sufficient pam_rootok.so \nauth required pam_opendirectory.so\naccount required pam_group.so no_warn group=admin,wheel ruser root_only fail_safe\naccount required pam_opendirectory.so no_", 0x1000) = 356 0
- 17735/0x59799: stat64("/usr/lib/pam/pam_rootok.so.2\0", 0x7FFF5FBFE430, 0x7FFF5FBFEA70) = 0 0
- 17735/0x59799: open("/usr/lib/pam/pam_rootok.so.2\0", 0x0, 0x0) = 4 0
- 17735/0x59799: pread(0x4, "\312\376\272\276\0", 0x1000, 0x0) = 4096 0
- 17735/0x59799: pread(0x4, "\317\372\355\376\a\0", 0x1000, 0x1000) = 4096 0
- 17735/0x59799: mmap(0x100048000, 0x1000, 0x5, 0x12, 0x4, 0x100000000) = 0x48000 0
- 17735/0x59799: mmap(0x100049000, 0x1000, 0x3, 0x12, 0x4, 0x100000000) = 0x49000 0
- 17735/0x59799: mmap(0x10004A000, 0x16B0, 0x1, 0x12, 0x4, 0x100000000) = 0x4A000 0
- 17735/0x59799: close(0x4) = 0 0
- 17735/0x59799: stat64("/usr/lib/pam/pam_opendirectory.so.2\0", 0x7FFF5FBFE430, 0x7FFF5FBFEA70) = 0 0
- 17735/0x59799: open("/usr/lib/pam/pam_opendirectory.so.2\0", 0x0, 0x0) = 4 0
- 17735/0x59799: pread(0x4, "\312\376\272\276\0", 0x1000, 0x0) = 4096 0
- 17735/0x59799: pread(0x4, "\317\372\355\376\a\0", 0x1000, 0x1000) = 4096 0
- 17735/0x59799: mmap(0x10004C000, 0x2000, 0x5, 0x12, 0x4, 0x100000000) = 0x4C000 0
- 17735/0x59799: mmap(0x10004E000, 0x1000, 0x3, 0x12, 0x4, 0x100000000) = 0x4E000 0
- 17735/0x59799: mmap(0x10004F000, 0x1DA0, 0x1, 0x12, 0x4, 0x100000000) = 0x4F000 0
- 17735/0x59799: close(0x4) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation\0", 0x7FFF5FBFE1A0, 0x7FFF5FBFE7E0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/OpenDirectory\0", 0x7FFF5FBFE1A0, 0x7FFF5FBFE7E0) = 0 0
- 17735/0x59799: stat64("/usr/lib/libauto.dylib\0", 0x7FFF5FBFDFF0, 0x7FFF5FBFE630) = 0 0
- 17735/0x59799: stat64("/usr/lib/libicucore.A.dylib\0", 0x7FFF5FBFDFF0, 0x7FFF5FBFE630) = 0 0
- 17735/0x59799: stat64("/usr/lib/libobjc.A.dylib\0", 0x7FFF5FBFDFF0, 0x7FFF5FBFE630) = 0 0
- 17735/0x59799: stat64("/usr/lib/libz.1.dylib\0", 0x7FFF5FBFDFF0, 0x7FFF5FBFE630) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation\0", 0x7FFF5FBFDFF0, 0x7FFF5FBFE630) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Versions/A/CFOpenDirectory\0", 0x7FFF5FBFDFF0, 0x7FFF5FBFE630) = 0 0
- 17735/0x59799: stat64("/usr/lib/libxml2.2.dylib\0", 0x7FFF5FBFDDB0, 0x7FFF5FBFE3F0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CFNetwork.framework/Versions/A/CFNetwork\0", 0x7FFF5FBFDDB0, 0x7FFF5FBFE3F0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/SystemConfiguration.framework/Versions/A/SystemConfiguration\0", 0x7FFF5FBFDDB0, 0x7FFF5FBFE3F0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/Security.framework/Versions/A/Security\0", 0x7FFF5FBFDDB0, 0x7FFF5FBFE3F0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices\0", 0x7FFF5FBFDDB0, 0x7FFF5FBFE3F0) = 0 0
- 17735/0x59799: stat64("/usr/lib/libsqlite3.dylib\0", 0x7FFF5FBFDBA0, 0x7FFF5FBFE1E0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/CarbonCore.framework/Versions/A/CarbonCore\0", 0x7FFF5FBFDB70, 0x7FFF5FBFE1B0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/Metadata.framework/Versions/A/Metadata\0", 0x7FFF5FBFDB70, 0x7FFF5FBFE1B0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/OSServices.framework/Versions/A/OSServices\0", 0x7FFF5FBFDB70, 0x7FFF5FBFE1B0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/SearchKit.framework/Versions/A/SearchKit\0", 0x7FFF5FBFDB70, 0x7FFF5FBFE1B0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/AE.framework/Versions/A/AE\0", 0x7FFF5FBFDB70, 0x7FFF5FBFE1B0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/LaunchServices.framework/Versions/A/LaunchServices\0", 0x7FFF5FBFDB70, 0x7FFF5FBFE1B0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreServices.framework/Versions/A/Frameworks/DictionaryServices.framework/Versions/A/DictionaryServices\0", 0x7FFF5FBFDB70, 0x7FFF5FBFE1B0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/IOKit.framework/Versions/A/IOKit\0", 0x7FFF5FBFD960, 0x7FFF5FBFDFA0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/DiskArbitration.framework/Versions/A/DiskArbitration\0", 0x7FFF5FBFD960, 0x7FFF5FBFDFA0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/NetFS.framework/Versions/A/NetFS\0", 0x7FFF5FBFD960, 0x7FFF5FBFDFA0) = 0 0
- 17735/0x59799: stat64("/usr/lib/system/libkxld.dylib\0", 0x7FFF5FBFD7D0, 0x7FFF5FBFDE10) = 0 0
- 17735/0x59799: stat64("/usr/lib/libxslt.1.dylib\0", 0x7FFF5FBFD930, 0x7FFF5FBFDF70) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/Kerberos.framework/Versions/A/Kerberos\0", 0x7FFF5FBFDE30, 0x7FFF5FBFE470) = 0 0
- 17735/0x59799: stat64("/System/Library/PrivateFrameworks/PasswordServer.framework/Versions/A/PasswordServer\0", 0x7FFF5FBFDE30, 0x7FFF5FBFE470) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/DirectoryService.framework/Versions/A/DirectoryService\0", 0x7FFF5FBFDE30, 0x7FFF5FBFE470) = 0 0
- 17735/0x59799: stat64("/usr/lib/libresolv.9.dylib\0", 0x7FFF5FBFDCA0, 0x7FFF5FBFE2E0) = 0 0
- 17735/0x59799: stat64("/usr/lib/libcrypto.0.9.8.dylib\0", 0x7FFF5FBFDC40, 0x7FFF5FBFE280) = 0 0
- 17735/0x59799: stat64("/usr/lib/libsasl2.2.dylib\0", 0x7FFF5FBFDC40, 0x7FFF5FBFE280) = 0 0
- 17735/0x59799: stat64("/System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent\0", 0x7FFF5FBFDAC0, 0x7FFF5FBFE100) = 0 0
- 17735/0x59799: ioctl(0x4, 0x80086804, 0x7FFF5FBFEDC0) = 0 0
- 17735/0x59799: close(0x4) = 0 0
- 17735/0x59799: issetugid(0x7FFF8747D8AC, 0x7FFF5FBFECDC, 0x7FFF5FBFFB08) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/CoreFoundation.framework/CoreFoundation\0", 0x7FFF5FBFD830, 0x7FFF5FBFDE70) = 0 0
- 17735/0x59799: getuid(0x7FFF5FBFED5C, 0x7FFF5FBFED58, 0x0) = 0 0
- 17735/0x59799: geteuid(0x100109F40, 0x11, 0x7FFF70EB55C8) = 0 0
- 17735/0x59799: getuid(0x100109F40, 0x11, 0x0) = 0 0
- 17735/0x59799: issetugid(0x1, 0x2, 0x10010ACF0) = 0 0
- 17735/0x59799: getuid(0x7FFF5FBFE52C, 0x0, 0x0) = 0 0
- 17735/0x59799: stat64("/usr/bin\0", 0x7FFF5FBFDAC0, 0x7) = 0 0
- 17735/0x59799: open_nocancel("/usr/bin\0", 0x100004, 0x0) = 4 0
- 17735/0x59799: fcntl_nocancel(0x4, 0x2, 0x1) = 0 0
- 17735/0x59799: __sysctl(0x7FFF5FBFD0E0, 0x2, 0x7FFF70E8E658) = 0 0
- 17735/0x59799: fstatfs64(0x4, 0x7FFF5FBFD130, 0x0) = 0 0
- 17735/0x59799: getdirentries64(0x4, 0x100827C00, 0x1000) = 4092 0
- 17735/0x59799: getdirentries64(0x4, 0x100827C00, 0x1000) = 4072 0
- 17735/0x59799: getdirentries64(0x4, 0x100827C00, 0x1000) = 4080 0
- 17735/0x59799: getdirentries64(0x4, 0x100827C00, 0x1000) = 4076 0
- 17735/0x59799: getdirentries64(0x4, 0x100827C00, 0x1000) = 4096 0
- 17735/0x59799: getdirentries64(0x4, 0x100827C00, 0x1000) = 4072 0
- 17735/0x59799: getdirentries64(0x4, 0x100827C00, 0x1000) = 4072 0
- 17735/0x59799: getdirentries64(0x4, 0x100827C00, 0x1000) = 2620 0
- 17735/0x59799: getdirentries64(0x4, 0x100827C00, 0x1000) = 0 0
- 17735/0x59799: close_nocancel(0x4) = 0 0
- 17735/0x59799: stat64("/usr/bin/Contents\0", 0x7FFF5FBFDA80, 0xFFFFFFFF) = -1 Err#2
- 17735/0x59799: stat64("/usr/bin/Resources\0", 0x7FFF5FBFDA80, 0xFFFFFFFF) = -1 Err#2
- 17735/0x59799: stat64("/usr/bin/Support Files\0", 0x7FFF5FBFDA80, 0xFFFFFFFF) = -1 Err#2
- 17735/0x59799: stat64("/usr/bin\0", 0x7FFF5FBFDB20, 0xFFFFFFFF) = 0 0
- 17735/0x59799: stat64("/usr/bin/su\0", 0x7FFF5FBFDD30, 0x10010BBFC) = 0 0
- 17735/0x59799: open("/usr/bin/su\0", 0x0, 0x1FF) = 4 0
- 17735/0x59799: read(0x4, "\312\376\272\276\0", 0x200) = 512 0
- 17735/0x59799: lseek(0x4, 0x7000, 0x0) = 28672 0
- 17735/0x59799: read(0x4, "\316\372\355\376\a\0", 0x20) = 32 0
- 17735/0x59799: close(0x4) = 0 0
- 17735/0x59799: stat64("/usr/lib/pam/pam_group.so.2\0", 0x7FFF5FBFE430, 0x7FFF5FBFEA70) = 0 0
- 17735/0x59799: open("/usr/lib/pam/pam_group.so.2\0", 0x0, 0x0) = 4 0
- 17735/0x59799: pread(0x4, "\312\376\272\276\0", 0x1000, 0x0) = 4096 0
- 17735/0x59799: pread(0x4, "\317\372\355\376\a\0", 0x1000, 0x1000) = 4096 0
- 17735/0x59799: mmap(0x100051000, 0x1000, 0x5, 0x12, 0x4, 0x100000000) = 0x51000 0
- 17735/0x59799: mmap(0x100052000, 0x1000, 0x3, 0x12, 0x4, 0x100000000) = 0x52000 0
- 17735/0x59799: mmap(0x100053000, 0x1870, 0x1, 0x12, 0x4, 0x100000000) = 0x53000 0
- 17735/0x59799: close(0x4) = 0 0
- 17735/0x59799: stat64("/usr/lib/pam/pam_launchd.so.2\0", 0x7FFF5FBFE430, 0x7FFF5FBFEA70) = 0 0
- 17735/0x59799: open("/usr/lib/pam/pam_launchd.so.2\0", 0x0, 0x0) = 4 0
- 17735/0x59799: pread(0x4, "\312\376\272\276\0", 0x1000, 0x0) = 4096 0
- 17735/0x59799: pread(0x4, "\317\372\355\376\a\0", 0x1000, 0x1000) = 4096 0
- 17735/0x59799: mmap(0x100055000, 0x1000, 0x5, 0x12, 0x4, 0x100000000) = 0x55000 0
- 17735/0x59799: mmap(0x100056000, 0x1000, 0x3, 0x12, 0x4, 0x100000000) = 0x56000 0
- 17735/0x59799: mmap(0x100057000, 0x1B80, 0x1, 0x12, 0x4, 0x100000000) = 0x57000 0
- 17735/0x59799: close(0x4) = 0 0
- 17735/0x59799: read_nocancel(0x3, "\002\0", 0x1000) = 0 0
- 17735/0x59799: close_nocancel(0x3) = 0 0
- 17735/0x59799: ioctl(0x2, 0x40487413, 0x7FFF5FBFF140) = 0 0
- 17735/0x59799: fstat64(0x2, 0x7FFF5FBFF0B0, 0x0) = 0 0
- 17735/0x59799: open_nocancel("/dev/\0", 0x100004, 0x0) = 3 0
- 17735/0x59799: fcntl_nocancel(0x3, 0x2, 0x1) = 0 0
- 17735/0x59799: fstatfs64(0x3, 0x7FFF5FBFE590, 0x0) = 0 0
- 17735/0x59799: getdirentries64(0x3, 0x100801400, 0x1000) = 3080 0
- 17735/0x59799: lstat64("/dev/.\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/..\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/console\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/tty\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/null\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/zero\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/klog\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/stdin\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/stdout\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/stderr\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/auditpipe\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyp9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyp9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttypa\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptypa\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttypb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptypb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttypc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptypc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttypd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptypd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttype\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptype\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttypf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptypf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyq9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyq9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyqa\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyqa\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyqb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyqb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyqc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyqc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyqd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyqd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyqe\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyqe\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyqf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyqf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyr9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyr9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: getdirentries64(0x3, 0x100801400, 0x1000) = 3072 0
- 17735/0x59799: lstat64("/dev/ttyra\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyra\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyrb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyrb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyrc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyrc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyrd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyrd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyre\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyre\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyrf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyrf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptys9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttysa\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptysa\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttysb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptysb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttysc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptysc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttysd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptysd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyse\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyse\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttysf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptysf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyt9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyt9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyta\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyta\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttytb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptytb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttytc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptytc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttytd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptytd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyte\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyte\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttytf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptytf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyu9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyu9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: getdirentries64(0x3, 0x100801400, 0x1000) = 3112 0
- 17735/0x59799: lstat64("/dev/ttyua\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyua\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyub\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyub\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyuc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyuc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyud\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyud\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyue\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyue\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyuf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyuf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyv9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyv9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyva\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyva\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyvb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyvb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyvc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyvc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyvd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyvd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyve\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyve\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyvf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyvf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttyw9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptyw9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttywa\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptywa\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttywb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptywb\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttywc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptywc\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttywd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptywd\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttywe\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptywe\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttywf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptywf\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ptmx\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/vn0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/vn1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/vn2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/vn3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/bpf0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/bpf1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/bpf2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/bpf3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fsevents\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/random\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/urandom\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/dtrace\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/dtracehelper\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/lockstat\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/sdt\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/systrace\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/machtrace\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fbt\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/profile\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: getdirentries64(0x3, 0x100801400, 0x1000) = 1952 0
- 17735/0x59799: lstat64("/dev/pmCPUClient\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/io8log\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/io8logmt\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/disk0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/rdisk0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/disk0s1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/rdisk0s1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/disk0s2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/rdisk0s2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/cu.Bluetooth-PDA-Sync\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/tty.Bluetooth-PDA-Sync\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/cu.Bluetooth-Modem\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/tty.Bluetooth-Modem\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/cu.Itisaphone-WirelessiAP\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/tty.Itisaphone-WirelessiAP\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/disk1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/rdisk1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/autofs\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/autofs_nowait\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/autofs_control\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/nsmb0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse0\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse4\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse5\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse6\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse7\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse8\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse9\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse10\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse11\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse12\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse13\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse14\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse15\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse16\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse17\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse18\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse19\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse20\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse21\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse22\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fuse23\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/disk1s1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/rdisk1s1\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/disk1s2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/rdisk1s2\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/disk1s3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/rdisk1s3\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/vmmon\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/fasttrap\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys000\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: lstat64("/dev/ttys001\0", 0x7FFF5FBFEED0, 0x0) = 0 0
- 17735/0x59799: close_nocancel(0x3) = 0 0
- 17735/0x59799: getuid(0x100100DB0, 0x0, 0x0) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework\0", 0x7FFF5FBFDA20, 0xFFFFFFFF) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework\0", 0x7FFF5FBFE5E0, 0xFC080) = 0 0
- 17735/0x59799: open_nocancel("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework\0", 0x100004, 0x0) = 3 0
- 17735/0x59799: fcntl_nocancel(0x3, 0x2, 0x1) = 0 0
- 17735/0x59799: fstatfs64(0x3, 0x7FFF5FBFDC50, 0x0) = 0 0
- 17735/0x59799: getdirentries64(0x3, 0x100801400, 0x1000) = 200 0
- 17735/0x59799: getdirentries64(0x3, 0x100801400, 0x1000) = 0 0
- 17735/0x59799: close_nocancel(0x3) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Resources\0", 0x7FFF5FBFDD50, 0x7FFF70E805F0) = 0 0
- 17735/0x59799: open_nocancel("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Resources\0", 0x100004, 0x0) = 3 0
- 17735/0x59799: fcntl_nocancel(0x3, 0x2, 0x1) = 0 0
- 17735/0x59799: fstatfs64(0x3, 0x7FFF5FBFD3C0, 0x0) = 0 0
- 17735/0x59799: getdirentries64(0x3, 0x100801400, 0x1000) = 284 0
- 17735/0x59799: getdirentries64(0x3, 0x100801400, 0x1000) = 0 0
- 17735/0x59799: close_nocancel(0x3) = 0 0
- 17735/0x59799: open("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Resources/Info.plist\0", 0x0, 0x1B6) = 3 0
- 17735/0x59799: fstat64(0x3, 0x7FFF5FBFDC10, 0x0) = 0 0
- 17735/0x59799: read(0x3, "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\n<!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\" \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n<plist version=\"1.0\">\n<dict>\n\t<key>CFBundleDevelopmentRegion</key>\n\t<string>English</string>\n\t<key>CFBundleExecuta", 0x2A5) = 677 0
- 17735/0x59799: close(0x3) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/CFOpenDirectory\0", 0x7FFF5FBFE550, 0xFFFFFFFF) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/CFOpenDirectory\0", 0x7FFF5FBFDFE0, 0x7FFF5FBFE620) = 0 0
- 17735/0x59799: mmap(0x0, 0x101000, 0x3, 0x1002, 0x3000000, 0x100000000) = 0x300000 0
- 17735/0x59799: mmap(0x0, 0x1000, 0x3, 0x1002, 0x3000000, 0x100000000) = 0x59000 0
- 17735/0x5979d: thread_selfid(0x7FFF70E80600, 0x0, 0xFFFFFFFF) = 366493 0
- 17735/0x5979d: kevent(0x3, 0x0, 0x0) = 1 0
- 17735/0x59799: initgroups(0xC, 0x7FFF5FBFF140, 0x1F5) = 0 0
- 17735/0x59799: sigaction(0x2, 0x7FFF5FBFF190, 0x7FFF5FBFF230) = 0 0
- 17735/0x59799: sigaction(0x3, 0x7FFF5FBFF190, 0x7FFF5FBFF220) = 0 0
- 17735/0x59799: sigaction(0xD, 0x7FFF5FBFF190, 0x7FFF5FBFF210) = 0 0
- 17735/0x59799: sigaction(0x12, 0x7FFF5FBFF190, 0x0) = 0 0
- 17735/0x59799: pipe(0x7FFF5FBFF260, 0x7FFF5FBFF190, 0x0) = 4 0
- 17735/0x59799: fork() = 17736 0
- 17735/0x59799: sigaction(0x16, 0x7FFF5FBFF190, 0x0) = 0 0
- 17735/0x59799: close(0x4) = 0 0
- 17735/0x59799: setpgid(0x4548, 0x4548, 0x0) = 0 0
- 17735/0x59799: ioctl(0x2, 0x4004667A, 0x7FFF5FBFF11C) = 0 0
- 17735/0x59799: ioctl(0x2, 0x40047477, 0x7FFF5FBFF19C) = 0 0
- 17735/0x59799: getpgrp(0x2, 0x40047477, 0x0) = 17732 0
- 17735/0x59799: ioctl(0x2, 0x4004667A, 0x7FFF5FBFF11C) = 0 0
- 17735/0x59799: ioctl(0x2, 0x80047476, 0x7FFF5FBFF19C) = 0 0
- 17735/0x59799: close(0x5) = 0 0
- 17735/0x59799: sigaction(0xD, 0x7FFF5FBFF190, 0x0) = 0 0
- 17736/0x5979e: ioctl(0x3, 0x80086804, 0x7FFF5FBFD7D0) = 0 0
- 17736/0x5979e: close(0x3) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD6C0, 0x2, 0x7FFF5FBFD6B0) = 0 0
- 17736/0x5979e: bsdthread_register(0x7FFF87C8775C, 0x7FFF87C68378, 0x2000) = 0 0
- 17736/0x5979e: thread_selfid(0x7FFF87C8775C, 0x7FFF87C68378, 0x0) = 366494 0
- 17736/0x5979e: open_nocancel("/dev/urandom\0", 0x0, 0x7FFF70E89B20) = 3 0
- 17736/0x5979e: read_nocancel(0x3, "\227Y\344\217\005\313\300<JJ\212\376\311\371\233\272\0063\275\037\325i\3363\317u\0305M\bP\025}z\r\375\252\267\364H}\376\323\036l\316\024\354d\326\307\365\345\262@J\360\035\336\344_\"\241\244\0", 0x40) = 64 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: mmap(0x0, 0x3000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0xC1000 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD540, 0x2, 0x7FFF5FBFD500) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD500, 0x2, 0x7FFF5FBFD598) = 0 0
- 17736/0x5979e: getpid(0x7FFF5FBFD490, 0x7FFFFFE00050, 0x0) = 17736 0
- 17736/0x5979e: open_nocancel("/dev/urandom\0", 0x0, 0x0) = 3 0
- 17736/0x5979e: read_nocancel(0x3, "\253\262\206\371\207^\224\002d\025hK\031\b1\376z6\331\264?[\3775\001\313S*\004w\3027:\375\312D\344\002AA\321\254O\243\346\033\255\374\230\033AX\361y\b\217\366k>A\317\345\343\274n^\337\354\002R\307\326\357,R\031\310\347\224\340\231\017\350\207\377\313\235=\233\234u\2640\217PF\367jX\260\333dY\254\351\a\364$\0", 0x6C) = 108 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD540, 0x2, 0x7FFF5FBFD56C) = 0 0
- 17736/0x5979e: mmap(0x0, 0xD000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0xC4000 0
- 17736/0x5979e: mmap(0x0, 0xD000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0xD1000 0
- 17736/0x5979e: mmap(0x0, 0x1000, 0x3, 0x1002, 0x1000000, 0x7FFF00000001) = 0xDE000 0
- 17736/0x5979e: mmap(0x0, 0x200000, 0x3, 0x1002, 0x7000000, 0x7FFF00000001) = 0xDF000 0
- 17736/0x5979e: munmap(0x1000DF000, 0x21000) = 0 0
- 17736/0x5979e: munmap(0x100200000, 0xDF000) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD6A0, 0x2, 0x7FFF5FBFD660) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD660, 0x2, 0x7FFF70E96680) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD6A0, 0x2, 0x7FFF5FBFD660) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD660, 0x2, 0x7FFF70E96684) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD6A0, 0x2, 0x7FFF5FBFD660) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD660, 0x2, 0x7FFF70E96688) = 0 0
- 17736/0x5979e: sigprocmask(0x1, 0x0, 0x7FFF5FBFF9B0) = 0x0 0
- 17736/0x5979e: sigaltstack(0x0, 0x7FFF5FBFF9A0, 0x0) = 0 0
- 17736/0x5979e: open("/dev/tty\0", 0x6, 0x0) = 3 0
- 17736/0x5979e: close(0x3) = 0 0
- 17736/0x5979e: getrlimit(0x1008, 0x7FFF5FBFF330, 0x7FFF87C51CCC) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_COLLATE\0", 0x0, 0x1B6) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF300, 0x7FFF5FBFF3CC) = 0 0
- 17736/0x5979e: mmap(0x0, 0x1000000, 0x3, 0x1002, 0x2000000, 0x7FFF00000001) = 0x200000 0
- 17736/0x5979e: munmap(0x100200000, 0x600000) = 0 0
- 17736/0x5979e: munmap(0x101000000, 0x200000) = 0 0
- 17736/0x5979e: read_nocancel(0x3, "1.1A\n\0", 0x1000) = 2086 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_CTYPE\0", 0x0, 0x1B6) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF3E0, 0x0) = 0 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF1C0, 0x7FFF5FBFF28C) = 0 0
- 17736/0x5979e: lseek(0x3, 0x0, 0x1) = 0 0
- 17736/0x5979e: lseek(0x3, 0x0, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, "RuneMagAUTF-8\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "@\004\211\0", 0xDB70) = 56176 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_MONETARY\0", 0x0, 0x7FFF5FBFF4AA) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF3F0, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, "USD \n$\n.\n,\n3;3\n\n-\n2\n2\n1\n0\n1\n0\n1\n1\n\b\0", 0x22) = 34 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_NUMERIC\0", 0x0, 0x7FFF5FBFF4B9) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF400, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, ".\n,\n3;3\n@$\b\0", 0x8) = 8 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_TIME\0", 0x0, 0x7FFF5FBFF4B6) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF400, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, "Jan\nFeb\nMar\nApr\nMay\nJun\nJul\nAug\nSep\nOct\nNov\nDec\nJanuary\nFebruary\nMarch\nApril\nMay\nJune\nJuly\nAugust\nSeptember\nOctober\nNovember\nDecember\nSun\nMon\nTue\nWed\nThu\nFri\nSat\nSunday\nMonday\nTuesday\nWednesday\nThursday\nFriday\nSaturday\n%H:%M:%S\n%m/%d/%Y\n%a %b %e %X %Y\nAM\nP", 0x179) = 377 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/LC_MESSAGES\0", 0x0, 0x7FFF5FBFF4C6) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF400, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, "^[yYsS].*\n^[nN].*\n(\0", 0x12) = 18 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: getuid(0x1001006F5, 0x1000710B9, 0x0) = 501 0
- 17736/0x5979e: getgid(0x0, 0x1000710B9, 0x0) = 20 0
- 17736/0x5979e: geteuid(0x0, 0x1000710B9, 0x0) = 501 0
- 17736/0x5979e: getegid(0x0, 0x1000710B9, 0x0) = 20 0
- 17736/0x5979e: sigprocmask(0x1, 0x0, 0x7FFF5FBFF9B0) = 0x0 0
- 17736/0x5979e: sigaltstack(0x0, 0x7FFF5FBFF9A0, 0x0) = 0 0
- 17736/0x5979e: fstat64(0x2, 0x7FFF5FBFF8B0, 0x7FFF5FBFF98C) = 0 0
- 17736/0x5979e: fstat64(0x1, 0x7FFF5FBFF8B0, 0x7FFF5FBFF98C) = 0 0
- 17736/0x5979e: sigaction(0x14, 0x7FFF5FBFF950, 0x7FFF5FBFF980) = 0 0
- 17736/0x5979e: sigaction(0x14, 0x7FFF5FBFF950, 0x7FFF5FBFF980) = 0 0
- 17736/0x5979e: sigaction(0x2, 0x7FFF5FBFF950, 0x7FFF5FBFF980) = 0 0
- 17736/0x5979e: sigaction(0x2, 0x7FFF5FBFF950, 0x7FFF5FBFF980) = 0 0
- 17736/0x5979e: sigaction(0x3, 0x7FFF5FBFF950, 0x7FFF5FBFF980) = 0 0
- 17736/0x5979e: sigaction(0x3, 0x7FFF5FBFF950, 0x7FFF5FBFF980) = 0 0
- 17736/0x5979e: sigprocmask(0x1, 0x0, 0x1000A69D8) = 0x0 0
- 17736/0x5979e: sigaction(0x3, 0x7FFF5FBFF900, 0x7FFF5FBFF990) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFF880, 0x2, 0x7FFF5FBFF890) = 0 0
- 17736/0x5979e: stat64("/Users/USERNAME\0", 0x7FFF5FBFF860, 0x0) = 0 0
- 17736/0x5979e: stat64(".\0", 0x7FFF5FBFF7D0, 0x0) = 0 0
- 17736/0x5979e: getppid(0x1000C2000, 0x100100000, 0xFC080) = 17735 0
- 17736/0x5979e: stat64(".\0", 0x7FFF5FBFF860, 0x7FFF5FBFFC48) = 0 0
- 17736/0x5979e: stat64("/usr/bin/bash\0", 0x7FFF5FBFF760, 0x1001022EE) = -1 Err#2
- 17736/0x5979e: stat64("/bin/bash\0", 0x7FFF5FBFF760, 0x1001022EA) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFF6D0, 0x2, 0x7FFF5FBFF6FC) = 0 0
- 17736/0x5979e: getgroups(0x10, 0x1001022F0, 0x0) = 12 0
- 17736/0x5979e: stat64("/bin/bash\0", 0x7FFF5FBFF7A0, 0x7FFF70E805F0) = 0 0
- 17736/0x5979e: getpgrp(0x0, 0x100102F6, 0x0) = 17736 0
- 17736/0x5979e: sigaction(0x14, 0x7FFF5FBFF940, 0x7FFF5FBFF970) = 0 0
- 17736/0x5979e: getrlimit(0x1007, 0x7FFF5FBFF930, 0x7FFF87C51CCC) = 0 0
- 17736/0x5979e: sigprocmask(0x1, 0x0, 0x7FFF5FBFF9B0) = 0x0 0
- 17736/0x5979e: sigaltstack(0x0, 0x7FFF5FBFF9A0, 0x0) = 0 0
- 17736/0x5979e: getpeername(0x0, 0x7FFF5FBFF990, 0x7FFF5FBFF98C) = -1 Err#38
- 17736/0x5979e: sigprocmask(0x1, 0x0, 0x7FFF5FBFF980) = 0x0 0
- 17736/0x5979e: sigaltstack(0x0, 0x7FFF5FBFF970, 0x0) = 0 0
- 17736/0x5979e: sigprocmask(0x1, 0x0, 0x7FFF5FBFF920) = 0x0 0
- 17736/0x5979e: sigaltstack(0x0, 0x7FFF5FBFF910, 0x0) = 0 0
- 17736/0x5979e: stat64(".\0", 0x7FFF5FBFF6C0, 0x100103AA0) = 0 0
- 17736/0x5979e: stat64("/usr/bin/crontab\0", 0x7FFF5FBFF5C0, 0x100103B21) = 0 0
- 17736/0x5979e: stat64("/usr/bin/crontab\0", 0x7FFF5FBFF600, 0x7FFF70E805F0) = 0 0
- 17736/0x5979e: sigaction(0x2, 0x7FFF5FBFF720, 0x7FFF5FBFF750) = 0 0
- 17736/0x5979e: sigaction(0x3, 0x7FFF5FBFF720, 0x7FFF5FBFF750) = 0 0
- 17736/0x5979e: sigaction(0x14, 0x7FFF5FBFF720, 0x7FFF5FBFF750) = 0 0
- 17736/0x5979e: execve(0x100103B10, 0x100103DE0, 0x100103060) = 0 0
- 17736/0x5979e: getpid(0x7FFF5FBFF990, 0x7FFFFFE00050, 0x0) = 17736 0
- 17736/0x5979e: open_nocancel("/dev/urandom\0", 0x0, 0x0) = 3 0
- 17736/0x5979e: read_nocancel(0x3, "hB\326>\220\217\315\016O\343l\343[H\033\216\345:6\312\221\027\336\230K;#\214D\24025\343\212\261\3471\242#\272\272\216jA\271\022\312\223H\300v\035\202>[A\345\212\240\303\243\233\347\323\177\201\273W\346\313-\344\374\362O\236~W\324!\257\016\277\365\311\251n\305\270\035G*\210B\v\022\032\350\\r\202\3031\021\217\337\006q@\004\b\0", 0x6C) = 108 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: issetugid(0x100000000, 0x7FFF5FBFFC48, 0x7FFF5FC40530) = 1 0
- 17736/0x5979e: geteuid(0x100000000, 0x7FFF5FBFFC48, 0x0) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD880, 0x2, 0x7FFF5FBFD840) = 0 0
- 17736/0x5979e: __sysctl(0x7FFF5FBFD840, 0x2, 0x7FFF5FBFD8DC) = 0 0
- 17736/0x5979e: shared_region_check_np(0x7FFF5FBFDA48, 0x0, 0x7FFF5FC1DC86) = 0 0
- 17736/0x5979e: stat64("/usr/lib/libcrypto.0.9.8.dylib\0", 0x7FFF5FBFCBF0, 0x7FFF5FBFD230) = 0 0
- 17736/0x5979e: stat64("/usr/lib/libSystem.B.dylib\0", 0x7FFF5FBFCBF0, 0x7FFF5FBFD230) = 0 0
- 17736/0x5979e: stat64("/System/Library/PrivateFrameworks/TrustEvaluationAgent.framework/Versions/A/TrustEvaluationAgent\0", 0x7FFF5FBFCA70, 0x7FFF5FBFD0B0) = 0 0
- 17736/0x5979e: stat64("/usr/lib/libz.1.dylib\0", 0x7FFF5FBFCA70, 0x7FFF5FBFD0B0) = 0 0
- 17736/0x5979e: stat64("/usr/lib/system/libmathCommon.A.dylib\0", 0x7FFF5FBFC7D0, 0x7FFF5FBFCE10) = 0 0
- 17736/0x5979e: madvise(0x7FFF88E07000, 0x2000, 0x5) = 0 0
- 17736/0x5979e: open("/dev/dtracehelper\0", 0x2, 0x7FFF5FC452D0) = 3 0
- 17736/0x5979e: lseek(0x3, 0x0, 0x1) = 0 0
- 17736/0x5979e: lseek(0x3, 0x0, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, "RuneMagAUTF-8\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "\0", 0x1000) = 4096 0
- 17736/0x5979e: read_nocancel(0x3, "@\004\211\0", 0xDB70) = 56176 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_MONETARY\0", 0x0, 0x7FFF5FBFF33A) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF280, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, "USD \n$\n.\n,\n3;3\n\n-\n2\n2\n1\n0\n1\n0\n1\n1\n\b\0", 0x22) = 34 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_NUMERIC\0", 0x0, 0x7FFF5FBFF349) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF290, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, ".\n,\n3;3\n@$\b\0", 0x8) = 8 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_TIME\0", 0x0, 0x7FFF5FBFF346) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF290, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, "Jan\nFeb\nMar\nApr\nMay\nJun\nJul\nAug\nSep\nOct\nNov\nDec\nJanuary\nFebruary\nMarch\nApril\nMay\nJune\nJuly\nAugust\nSeptember\nOctober\nNovember\nDecember\nSun\nMon\nTue\nWed\nThu\nFri\nSat\nSunday\nMonday\nTuesday\nWednesday\nThursday\nFriday\nSaturday\n%H:%M:%S\n%m/%d/%Y\n%a %b %e %X %Y\nAM\nP", 0x179) = 377 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: open_nocancel("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/LC_MESSAGES\0", 0x0, 0x7FFF5FBFF356) = 3 0
- 17736/0x5979e: fstat64(0x3, 0x7FFF5FBFF290, 0x0) = 0 0
- 17736/0x5979e: read_nocancel(0x3, "^[yYsS].*\n^[nN].*\n(\0", 0x12) = 18 0
- 17736/0x5979e: close_nocancel(0x3) = 0 0
- 17736/0x5979e: fstat64(0x2, 0x7FFF5FBFF720, 0x7FFF5FBFF7FC) = 0 0
- 17736/0x5979e: getuid(0xFFFFFFFF, 0x10000, 0x7FFF87CA277E) = 501 0
- 17736/0x5979e: seteuid(0x0, 0x100004C48, 0x1) = 0 0
- 17736/0x5979e: stat64("/usr/lib/cron\0", 0x7FFF5FBFF790, 0x0) = 0 0
- 17736/0x5979e: chdir("/usr/lib/cron\0", 0x7FFF5FBFF790, 0x0) = 0 0
- 17736/0x5979e: stat64("tabs\0", 0x7FFF5FBFF790, 0x100005530) = 0 0
- 17736/0x5979e: open_nocancel("cron.allow\0", 0x0, 0x1B6) = -1 Err#2
- 17736/0x5979e: open_nocancel("cron.deny\0", 0x0, 0x1B6) = -1 Err#2
- 17736/0x5979e: write_nocancel(0x2, "crontab: you (USERNAME) are not allowed to use this program\n\0", 0x3F) = 63 0
- 17735/0x59799: munmap(0x10004E000, 0x1000) = 0 0
- 17735/0x59799: munmap(0x10004F000, 0x2000) = 0 0
- 17735/0x59799: munmap(0x10004C000, 0x2000) = 0 0
- 17735/0x5979d: kevent(0x3, 0x0, 0x0) = -1 Err#4
- 17735/0x59799: geteuid(0x4, 0x1, 0xFFFFFFFF) = 0 0
- 17735/0x59799: getpriority(0x0, 0x0, 0x100100098) = 0 0
- 17735/0x59799: setpriority(0x0, 0x0, 0xFFFFFFFE) = 0 0
- 17735/0x59799: shm_open(0x7FFF87DA1D80, 0x0, 0x0) = 3 0
- 17735/0x59799: mmap(0x0, 0x1000, 0x1, 0x1, 0x3, 0x100000000) = 0x47000 0
- 17735/0x59799: close_nocancel(0x3) = 0 0
- 17735/0x59799: mmap(0x0, 0x1000000, 0x3, 0x1002, 0x2000000, 0x100000000) = 0x300000 0
- 17735/0x59799: munmap(0x100300000, 0x500000) = 0 0
- 17735/0x59799: munmap(0x101000000, 0x300000) = 0 0
- 17735/0x59799: geteuid(0x7FFF70E82180, 0x0, 0x1) = 0 0
- 17735/0x59799: getuid(0x0, 0x7FFF70E805F0, 0x7FFF70E805F0) = 0 0
- 17735/0x59799: getlogin(0x7FFF70E88560, 0xFF, 0x0) = 0 0
- 17735/0x59799: madvise(0x7FFF88DF7000, 0x2000, 0x5) = 0 0
- 17735/0x59799: madvise(0x7FFF88DA5000, 0x2000, 0x5) = 0 0
- 17735/0x59799: madvise(0x7FFF88DBF000, 0x2000, 0x5) = 0 0
- 17735/0x59799: madvise(0x7FFF88DCB000, 0x2000, 0x5) = 0 0
- 17735/0x59799: madvise(0x7FFF88DC1000, 0x2000, 0x5) = 0 0
- 17735/0x59799: madvise(0x7FFF88DD1000, 0x2000, 0x5) = 0 0
- 17735/0x59799: madvise(0x7FFF88D96000, 0x2000, 0x5) = 0 0
- 17735/0x59799: madvise(0x7FFF88DC3000, 0x2000, 0x5) = 0 0
- 17735/0x59799: madvise(0x7FFF88E08000, 0x4000, 0x5) = 0 0
- 17735/0x59799: madvise(0x7FFF88DB4000, 0x2000, 0x5) = 0 0
- 17735/0x59799: open("/dev/dtracehelper\0", 0x2, 0x100102F38) = 4 0
- 17735/0x59799: madvise(0x100300000, 0x101000, 0x9) = 0 0
- 17735/0x59799: geteuid(0x7FFF70C56240, 0x0, 0x0) = 0 0
- 17735/0x59799: geteuid(0x100109460, 0x7FFF70C43130, 0x0) = 0 0
- 17735/0x59799: geteuid(0x100109460, 0x7FFF70C43130, 0x0) = 0 0
- 17735/0x59799: getuid(0x100109460, 0x7FFF70C43130, 0x0) = 0 0
- 17735/0x59799: issetugid(0x100101140, 0x10010112C, 0x100101140) = 0 0
- 17735/0x59799: geteuid(0x100117F40, 0x0, 0x86) = 0 0
- 17735/0x59799: stat64("/Library/Managed Preferences\0", 0x7FFF5FBFD5F0, 0x7) = -1 Err#2
- 17735/0x59799: getuid(0x100109460, 0x7FFF70C43230, 0x7FFF70C43270) = 0 0
- 17735/0x59799: gethostuuid(0x7FFF5FBFDA50, 0x7FFF5FBFDA40, 0x0) = 0 0
- 17735/0x59799: geteuid(0x7FFF70C43230, 0x7FFF70C43230, 0x7FFF5FBFD7A0) = 0 0
- 17735/0x59799: getuid(0x7FFF70C43230, 0x7FFF70C43230, 0x0) = 0 0
- 17735/0x59799: geteuid(0x0, 0x7FFF70C43270, 0x0) = 0 0
- 17735/0x59799: getuid(0x0, 0x7FFF70C43270, 0x0) = 0 0
- 17735/0x59799: stat64("/var/root\0", 0x7FFF5FBFD5A0, 0x7) = 0 0
- 17735/0x59799: geteuid(0x7FFF70C2C450, 0x7FFF70C43170, 0x100107AF8) = 0 0
- 17735/0x59799: getegid(0x7FFF70C2C450, 0x7FFF70C43170, 0x0) = 0 0
- 17735/0x59799: geteuid(0x7FFF70C43230, 0x7FFF70C43230, 0x0) = 0 0
- 17735/0x59799: getuid(0x7FFF70C43230, 0x7FFF70C43230, 0x0) = 0 0
- 17735/0x59799: geteuid(0x0, 0x7FFF70C43290, 0x0) = 0 0
- 17735/0x59799: getuid(0x0, 0x7FFF70C43290, 0x0) = 0 0
- 17735/0x59799: stat64("/var/root\0", 0x7FFF5FBFD5A0, 0x7) = 0 0
- 17735/0x59799: geteuid(0x1001082B0, 0x0, 0x100107D68) = 0 0
- 17735/0x59799: getegid(0x1001082B0, 0x0, 0x0) = 0 0
- 17735/0x59799: geteuid(0x7FFF70C430F0, 0x7FFF70C430F0, 0x20) = 0 0
- 17735/0x59799: getuid(0x7FFF70C430F0, 0x7FFF70C430F0, 0x0) = 0 0
- 17735/0x59799: geteuid(0x7FFF70C43230, 0x7FFF70C43230, 0x7FFF70C43270) = 0 0
- 17735/0x59799: getuid(0x7FFF70C43230, 0x7FFF70C43230, 0x0) = 0 0
- 17735/0x59799: geteuid(0x0, 0x7FFF70C43270, 0x0) = 0 0
- 17735/0x59799: getuid(0x0, 0x7FFF70C43270, 0x0) = 0 0
- 17735/0x59799: stat64("/var/root\0", 0x7FFF5FBFD5A0, 0x7) = 0 0
- 17735/0x59799: geteuid(0x1001180B0, 0x0, 0x1001182B8) = 0 0
- 17735/0x59799: getegid(0x1001180B0, 0x0, 0x0) = 0 0
- 17735/0x59799: geteuid(0x7FFF70C43230, 0x7FFF70C43230, 0x0) = 0 0
- 17735/0x59799: getuid(0x7FFF70C43230, 0x7FFF70C43230, 0x0) = 0 0
- 17735/0x59799: geteuid(0x0, 0x7FFF70C43290, 0x0) = 0 0
- 17735/0x59799: getuid(0x0, 0x7FFF70C43290, 0x0) = 0 0
- 17735/0x59799: stat64("/var/root\0", 0x7FFF5FBFD5A0, 0x7) = 0 0
- 17735/0x59799: geteuid(0x1001183B0, 0x0, 0x100118368) = 0 0
- 17735/0x59799: getegid(0x1001183B0, 0x0, 0x0) = 0 0
- 17735/0x59799: geteuid(0x100108A00, 0x0, 0x100108978) = 0 0
- 17735/0x59799: getegid(0x100108A00, 0x0, 0x0) = 0 0
- 17735/0x59799: geteuid(0x100107E60, 0x0, 0x100107F98) = 0 0
- 17735/0x59799: getegid(0x100107E60, 0x0, 0x0) = 0 0
- 17735/0x59799: stat64("/var/root/Library/Preferences/ByHost/su.18520AB6-954E-5D2F-B7FA-3EDF03176C9B.plist\0", 0x7FFF5FBFD5B0, 0xFC080) = -1 Err#2
- 17735/0x59799: stat64("/var/root/Library/Preferences/su.plist\0", 0x7FFF5FBFD5B0, 0xFC080) = -1 Err#2
- 17735/0x59799: stat64("/var/root/Library/Preferences/ByHost/.GlobalPreferences.18520AB6-954E-5D2F-B7FA-3EDF03176C9B.plist\0", 0x7FFF5FBFD5B0, 0xFC080) = -1 Err#2
- 17735/0x59799: stat64("/var/root/Library/Preferences/.GlobalPreferences.plist\0", 0x7FFF5FBFD5B0, 0xFC080) = 0 0
- 17735/0x59799: open("/var/root/Library/Preferences/.GlobalPreferences.plist\0", 0x0, 0x0) = 3 0
- 17735/0x59799: read(0x3, "bplist00\322\001\002\003\004[AppleLocale_\020\023AppleKeyboardUIModeUen_US\020\003\b\r\031/5\0", 0x2000) = 92 0
- 17735/0x59799: read(0x3, "\0", 0x2000) = 0 0
- 17735/0x59799: fstat64(0x3, 0x7FFF5FBFD590, 0x7FFF70E80580) = 0 0
- 17735/0x59799: close(0x3) = 0 0
- 17735/0x59799: stat64("/Library/Preferences/su.plist\0", 0x7FFF5FBFD5B0, 0xFC080) = -1 Err#2
- 17735/0x59799: stat64("/Library/Preferences/.GlobalPreferences.plist\0", 0x7FFF5FBFD5B0, 0xFC080) = 0 0
- 17735/0x59799: open("/Library/Preferences/.GlobalPreferences.plist\0", 0x0, 0x0) = 3 0
- 17735/0x59799: read(0x3, "bplist00\330\0", 0x2000) = 5731 0
- 17735/0x59799: read(0x3, "fi_FIUit_ITUpt_BR[Kleuren-LCDYFarge-LCDYKolor LCDYColor LCD[LCD a Coresi\0", 0x2000) = 0 0
- 17735/0x59799: fstat64(0x3, 0x7FFF5FBFD590, 0x7FFF70E80580) = 0 0
- 17735/0x59799: close(0x3) = 0 0
- 17735/0x59799: stat64("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Resources/English.lproj\0", 0x7FFF5FBFDB00, 0x7FFF70E805F0) = 0 0
- 17735/0x59799: open_nocancel("/System/Library/Frameworks/OpenDirectory.framework/Versions/A/Frameworks/CFOpenDirectory.framework/Resources/English.lproj\0", 0x100004, 0x0) = 3 0
- 17735/0x59799: fcntl_nocancel(0x3, 0x2, 0x1) = 0 0
- 17735/0x59799: fstatfs64(0x3, 0x7FFF5FBFD170, 0x0) = 0 0
- 17735/0x59799: getdirentries64(0x3, 0x100828600, 0x1000) = 136 0
- 17735/0x59799: getdirentries64(0x3, 0x100828600, 0x1000) = 0 0
- 17735/0x59799: close_nocancel(0x3) = 0 0
- 17735/0x59799: getuid(0x10011CCA0, 0x3, 0x1C03) = 0 0
- 17735/0x59799: getuid(0x10011CDE0, 0x3, 0x1B03) = 0 0
- 17735/0x59799: kqueue(0x0, 0x0, 0x1) = 3 0
- 17735/0x59799: kevent(0x3, 0x7FFF87DC5500, 0x1) = 0 0
- 17735/0x59799: bsdthread_register(0x7FFF87C8775C, 0x7FFF87C68378, 0x2000) = -1 Err#22
- 17735/0x59799: mmap(0x0, 0x1000000, 0x3, 0x1002, 0x2000000, 0x100000000) = 0x1000000 0
- 17735/0x59799: munmap(0x101800000, 0x800000) = 0 0
- 17735/0x59799: workq_open(0x10100F120, 0x0, 0x10100F120) = 0 0
- 17735/0x59799: workq_kernreturn(0x1, 0x101000000, 0x0) = 0 0
- 17735/0x59799: kevent(0x3, 0x7FFF5FBFE7D0, 0x1) = 1 0
- 17735/0x59799: mmap(0x0, 0x200000, 0x3, 0x1002, 0x7000000, 0x100000000) = 0x401000 0
- 17735/0x59799: munmap(0x100401000, 0xFF000) = 0 0
- 17735/0x59799: munmap(0x100600000, 0x1000) = 0 0
- 17735/0x59799: kevent(0x3, 0x7FFF5FBFE6C0, 0x1) = 1 0
- 17735/0x59799: mmap(0x0, 0x101000, 0x3, 0x1002, 0x3000000, 0x100000000) = 0x1800000 0
- 17735/0x59799: madvise(0x101800000, 0x101000, 0x9) = 0 0
- 17735/0x59799: madvise(0x100300000, 0x101000, 0x9) = 0 0
- 17735/0x59799: setpriority(0x0, 0x0, 0x0) = 0 0
- 17736/0x5979e: fork() = 0 0
- 17736/0x5979e: thread_selfid(0x7FFF70E8CBC0, 0x3, 0xFFFFFFFF) = 366494 0
- 17736/0x5979e: getpid(0x7FFF70E8CBC0, 0x3, 0x0) = 17736 0
- 17736/0x5979e: bsdthread_register(0x7FFF87C8775C, 0x7FFF87C68378, 0x2000) = -1 Err#22
- 17736/0x5979e: workq_open(0x100834520, 0x0, 0x100834520) = 0 0
- 17736/0x5979e: close(0x5) = 0 0
- 17736/0x5979e: read(0x4, "\0", 0x1) = 0 0
- 17736/0x5979e: close(0x4) = 0 0
- 17736/0x5979e: sigaction(0xD, 0x7FFF5FBFF190, 0x0) = 0 0
- 17736/0x5979e: sigaction(0x2, 0x7FFF5FBFF190, 0x0) = 0 0
- 17736/0x5979e: sigaction(0x3, 0x7FFF5FBFF190, 0x0) = 0 0
- 17736/0x5979e: setgid(0x14, 0x7FFF5FBFF190, 0x100101060) = 0 0
- 17736/0x5979e: initgroups(0xC, 0x7FFF5FBFF140, 0x1F5) = 0 0
- 17736/0x5979e: setuid(0x1F5, 0xC, 0x100101060) = 0 0
- 17736/0x5979e: execve(0x7FFF5FBFF680, 0x1001000A0, 0x7FFF5FBFFB08) = 0 0
- 17736/0x5979e: getpid(0x7FFF5FBFF980, 0x7FFFFFE00050, 0x0) = 17736 0
- 17736/0x5979e: open_nocancel("/dev/urandom\0", 0x0, 0x0) = 3 0
- 17736/0x5979e: read_nocancel(0x3, "Y\026\256x\322\277b\216+\223\036\364\321.\035\356\315\2517\201\265\307\264j\021\032/\306\217\334L\033$#pn;\374PuD\276\333\2561\235\027q\227\\.*\021\340\364x\267\207\247\206f\255Y\224\030f\232\006.Z\017XU8*6\231\034\224\335\200~m^]\252\367Y\255\362\350\005\232c\024`@\304\353\3512!\027T\231\365\016\006\0", 0x6C) = 108 0
- 17736/0x5979e: close_nocancel(0x