Advertisement
Guest User

Untitled

a guest
Jan 27th, 2016
133
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 33.06 KB | None | 0 0
  1. [root@sapper-lx-test01 ~]# strace useradd -G operator -m -s /bin/sh -u 2020 operator1
  2. execve("/usr/sbin/useradd", ["useradd", "-G", "operator", "-m", "-s", "/bin/sh", "-u", "2020", "operator1"], [/* 22 vars */]) = 0
  3. brk(0) = 0x1000
  4. uname({sys="Linux", node="lume-lx-test01", ...}) = 0
  5. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fffff060000
  6. access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  7. open("/etc/ld.so.cache", O_RDONLY) = 3
  8. fstat(3, {st_mode=S_IFREG|0644, st_size=14295, ...}) = 0
  9. mmap(NULL, 14295, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fffff050000
  10. close(3) = 0
  11. open("/lib64/libaudit.so.1", O_RDONLY) = 3
  12. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20(\0\0\0\0\0\0"..., 832) = 832
  13. fstat(3, {st_mode=S_IFREG|0755, st_size=141768, ...}) = 0
  14. mmap(NULL, 2236976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffea00000
  15. mprotect(0x7ffffea17000, 2097152, PROT_NONE) = 0
  16. mmap(0x7ffffec17000, 49152, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7ffffec17000
  17. close(3) = 0
  18. open("/lib64/libselinux.so.1", O_RDONLY) = 3
  19. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320X\0\0\0\0\0\0"..., 832) = 832
  20. fstat(3, {st_mode=S_IFREG|0755, st_size=122040, ...}) = 0
  21. mmap(NULL, 2221912, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffe600000
  22. mprotect(0x7ffffe61d000, 2093056, PROT_NONE) = 0
  23. mmap(0x7ffffe81c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c000) = 0x7ffffe81c000
  24. mmap(0x7ffffe81e000, 1880, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffffe81e000
  25. close(3) = 0
  26. open("/lib64/libacl.so.1", O_RDONLY) = 3
  27. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\36\0\0\0\0\0\0"..., 832) = 832
  28. fstat(3, {st_mode=S_IFREG|0755, st_size=31280, ...}) = 0
  29. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fffff040000
  30. mmap(NULL, 2126416, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffe200000
  31. mprotect(0x7ffffe207000, 2093056, PROT_NONE) = 0
  32. mmap(0x7ffffe406000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7ffffe406000
  33. close(3) = 0
  34. open("/lib64/libc.so.6", O_RDONLY) = 3
  35. read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\356\1\0\0\0\0\0"..., 832) = 832
  36. fstat(3, {st_mode=S_IFREG|0755, st_size=1921176, ...}) = 0
  37. mmap(NULL, 3750152, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffde00000
  38. mprotect(0x7ffffdf8a000, 2097152, PROT_NONE) = 0
  39. mmap(0x7ffffe18a000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x18a000) = 0x7ffffe18a000
  40. mmap(0x7ffffe18f000, 18696, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffffe18f000
  41. close(3) = 0
  42. open("/lib64/libdl.so.2", O_RDONLY) = 3
  43. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"..., 832) = 832
  44. fstat(3, {st_mode=S_IFREG|0755, st_size=19536, ...}) = 0
  45. mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffda00000
  46. mprotect(0x7ffffda02000, 2097152, PROT_NONE) = 0
  47. mmap(0x7ffffdc02000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7ffffdc02000
  48. close(3) = 0
  49. open("/lib64/libattr.so.1", O_RDONLY) = 3
  50. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\23\0\0\0\0\0\0"..., 832) = 832
  51. fstat(3, {st_mode=S_IFREG|0755, st_size=18712, ...}) = 0
  52. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fffff010000
  53. mmap(NULL, 2113888, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffd600000
  54. mprotect(0x7ffffd604000, 2093056, PROT_NONE) = 0
  55. mmap(0x7ffffd803000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7ffffd803000
  56. close(3) = 0
  57. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fffff000000
  58. mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffeff0000
  59. arch_prctl(ARCH_SET_FS, 0x7ffffeff07a0) = 0
  60. mprotect(0x7ffffd803000, 4096, PROT_READ) = 0
  61. mprotect(0x7ffffdc02000, 4096, PROT_READ) = 0
  62. mprotect(0x7ffffe18a000, 16384, PROT_READ) = 0
  63. mprotect(0x7ffffe406000, 4096, PROT_READ) = 0
  64. mprotect(0x7ffffe81c000, 4096, PROT_READ) = 0
  65. mprotect(0x7ffffec17000, 4096, PROT_READ) = 0
  66. mprotect(0x7fffff416000, 4096, PROT_READ) = 0
  67. mprotect(0x7fffff01f000, 4096, PROT_READ) = 0
  68. munmap(0x7fffff050000, 14295) = 0
  69. statfs("/selinux", {f_type="EXT2_SUPER_MAGIC", f_bsize=512, f_blocks=252958613, f_bfree=251133226, f_bavail=251133226, f_files=251160149, f_ffree=251133226, f_fsid={23658520, 0}, f_namelen=255, f_frsize=512}) = 0
  70. brk(0) = 0x1000
  71. brk(0x22000) = 0x22000
  72. open("/proc/filesystems", O_RDONLY) = 3
  73. fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
  74. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefe0000
  75. read(3, "nodev\tautofs\nnodev\tcgroup\nnodev\t"..., 512) = 71
  76. read(3, "", 512) = 0
  77. close(3) = 0
  78. munmap(0x7ffffefe0000, 4096) = 0
  79. socket(PF_NETLINK, SOCK_RAW, 9) = 3
  80. fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  81. open("/usr/lib/locale/locale-archive", O_RDONLY) = 4
  82. fstat(4, {st_mode=S_IFREG|0644, st_size=99158576, ...}) = 0
  83. mmap(NULL, 99158576, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7ffff7600000
  84. close(4) = 0
  85. open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 4
  86. read(4, "16\n", 31) = 3
  87. close(4) = 0
  88. access("/etc/shadow", F_OK) = 0
  89. access("/etc/gshadow", F_OK) = 0
  90. open("/etc/default/useradd", O_RDONLY) = 4
  91. fstat(4, {st_mode=S_IFREG|0600, st_size=119, ...}) = 0
  92. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefe0000
  93. read(4, "# useradd defaults file\nGROUP=10"..., 512) = 119
  94. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
  95. connect(5, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  96. close(5) = 0
  97. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
  98. connect(5, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  99. close(5) = 0
  100. open("/etc/nsswitch.conf", O_RDONLY) = 5
  101. fstat(5, {st_mode=S_IFREG|0644, st_size=1688, ...}) = 0
  102. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefd0000
  103. read(5, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 2048) = 1688
  104. read(5, "", 2048) = 0
  105. close(5) = 0
  106. munmap(0x7ffffefd0000, 4096) = 0
  107. open("/etc/ld.so.cache", O_RDONLY) = 5
  108. fstat(5, {st_mode=S_IFREG|0644, st_size=14295, ...}) = 0
  109. mmap(NULL, 14295, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7ffffefd0000
  110. close(5) = 0
  111. open("/lib64/libnss_files.so.2", O_RDONLY) = 5
  112. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360!\0\0\0\0\0\0"..., 832) = 832
  113. fstat(5, {st_mode=S_IFREG|0755, st_size=65928, ...}) = 0
  114. mmap(NULL, 2151824, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7ffff7200000
  115. mprotect(0x7ffff720c000, 2097152, PROT_NONE) = 0
  116. mmap(0x7ffff740c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xc000) = 0x7ffff740c000
  117. close(5) = 0
  118. mprotect(0x7ffff740c000, 4096, PROT_READ) = 0
  119. munmap(0x7ffffefd0000, 14295) = 0
  120. open("/etc/group", O_RDONLY|O_CLOEXEC) = 5
  121. fcntl(5, F_GETFD) = 0x1 (flags FD_CLOEXEC)
  122. fstat(5, {st_mode=S_IFREG|0644, st_size=566, ...}) = 0
  123. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefd0000
  124. read(5, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 1024) = 566
  125. close(5) = 0
  126. munmap(0x7ffffefd0000, 4096) = 0
  127. read(4, "", 512) = 0
  128. close(4) = 0
  129. munmap(0x7ffffefe0000, 4096) = 0
  130. open("/etc/group", O_RDONLY|O_CLOEXEC) = 4
  131. fstat(4, {st_mode=S_IFREG|0644, st_size=566, ...}) = 0
  132. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefe0000
  133. read(4, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 1024) = 566
  134. read(4, "", 1024) = 0
  135. close(4) = 0
  136. munmap(0x7ffffefe0000, 4096) = 0
  137. open("/usr/share/locale/locale.alias", O_RDONLY) = 4
  138. fstat(4, {st_mode=S_IFREG|0644, st_size=2512, ...}) = 0
  139. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefe0000
  140. read(4, "# Locale name alias data base.\n#"..., 2560) = 2512
  141. read(4, "", 2560) = 0
  142. close(4) = 0
  143. munmap(0x7ffffefe0000, 4096) = 0
  144. open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  145. open("/usr/share/locale/en_US.utf8/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  146. open("/usr/share/locale/en_US/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  147. open("/usr/share/locale/en.UTF-8/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  148. open("/usr/share/locale/en.utf8/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  149. open("/usr/share/locale/en/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
  150. write(2, "useradd: group 'operator' does n"..., 41useradd: group 'operator' does not exist
  151. ) = 41
  152. exit_group(6) = ?
  153. +++ exited with 6 +++
  154. [root@lume-lx-test01 ~]# strace useradd -m -s /bin/sh -u 2020 operator1
  155. execve("/usr/sbin/useradd", ["useradd", "-m", "-s", "/bin/sh", "-u", "2020", "operator1"], [/* 22 vars */]) = 0
  156. brk(0) = 0x1000
  157. uname({sys="Linux", node="lume-lx-test01", ...}) = 0
  158. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fffff070000
  159. access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  160. open("/etc/ld.so.cache", O_RDONLY) = 3
  161. fstat(3, {st_mode=S_IFREG|0644, st_size=14295, ...}) = 0
  162. mmap(NULL, 14295, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fffff060000
  163. close(3) = 0
  164. open("/lib64/libaudit.so.1", O_RDONLY) = 3
  165. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20(\0\0\0\0\0\0"..., 832) = 832
  166. fstat(3, {st_mode=S_IFREG|0755, st_size=141768, ...}) = 0
  167. mmap(NULL, 2236976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffea00000
  168. mprotect(0x7ffffea17000, 2097152, PROT_NONE) = 0
  169. mmap(0x7ffffec17000, 49152, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7ffffec17000
  170. close(3) = 0
  171. open("/lib64/libselinux.so.1", O_RDONLY) = 3
  172. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320X\0\0\0\0\0\0"..., 832) = 832
  173. fstat(3, {st_mode=S_IFREG|0755, st_size=122040, ...}) = 0
  174. mmap(NULL, 2221912, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffe600000
  175. mprotect(0x7ffffe61d000, 2093056, PROT_NONE) = 0
  176. mmap(0x7ffffe81c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c000) = 0x7ffffe81c000
  177. mmap(0x7ffffe81e000, 1880, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffffe81e000
  178. close(3) = 0
  179. open("/lib64/libacl.so.1", O_RDONLY) = 3
  180. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\36\0\0\0\0\0\0"..., 832) = 832
  181. fstat(3, {st_mode=S_IFREG|0755, st_size=31280, ...}) = 0
  182. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fffff050000
  183. mmap(NULL, 2126416, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffe200000
  184. mprotect(0x7ffffe207000, 2093056, PROT_NONE) = 0
  185. mmap(0x7ffffe406000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7ffffe406000
  186. close(3) = 0
  187. open("/lib64/libc.so.6", O_RDONLY) = 3
  188. read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\356\1\0\0\0\0\0"..., 832) = 832
  189. fstat(3, {st_mode=S_IFREG|0755, st_size=1921176, ...}) = 0
  190. mmap(NULL, 3750152, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffde00000
  191. mprotect(0x7ffffdf8a000, 2097152, PROT_NONE) = 0
  192. mmap(0x7ffffe18a000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x18a000) = 0x7ffffe18a000
  193. mmap(0x7ffffe18f000, 18696, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffffe18f000
  194. close(3) = 0
  195. open("/lib64/libdl.so.2", O_RDONLY) = 3
  196. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"..., 832) = 832
  197. fstat(3, {st_mode=S_IFREG|0755, st_size=19536, ...}) = 0
  198. mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffda00000
  199. mprotect(0x7ffffda02000, 2097152, PROT_NONE) = 0
  200. mmap(0x7ffffdc02000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7ffffdc02000
  201. close(3) = 0
  202. open("/lib64/libattr.so.1", O_RDONLY) = 3
  203. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\23\0\0\0\0\0\0"..., 832) = 832
  204. fstat(3, {st_mode=S_IFREG|0755, st_size=18712, ...}) = 0
  205. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fffff040000
  206. mmap(NULL, 2113888, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffffd600000
  207. mprotect(0x7ffffd604000, 2093056, PROT_NONE) = 0
  208. mmap(0x7ffffd803000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7ffffd803000
  209. close(3) = 0
  210. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fffff010000
  211. mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fffff000000
  212. arch_prctl(ARCH_SET_FS, 0x7fffff0007a0) = 0
  213. mprotect(0x7ffffd803000, 4096, PROT_READ) = 0
  214. mprotect(0x7ffffdc02000, 4096, PROT_READ) = 0
  215. mprotect(0x7ffffe18a000, 16384, PROT_READ) = 0
  216. mprotect(0x7ffffe406000, 4096, PROT_READ) = 0
  217. mprotect(0x7ffffe81c000, 4096, PROT_READ) = 0
  218. mprotect(0x7ffffec17000, 4096, PROT_READ) = 0
  219. mprotect(0x7fffff416000, 4096, PROT_READ) = 0
  220. mprotect(0x7fffff01f000, 4096, PROT_READ) = 0
  221. munmap(0x7fffff060000, 14295) = 0
  222. statfs("/selinux", {f_type="EXT2_SUPER_MAGIC", f_bsize=512, f_blocks=252958613, f_bfree=251133226, f_bavail=251133226, f_files=251160149, f_ffree=251133226, f_fsid={23658520, 0}, f_namelen=255, f_frsize=512}) = 0
  223. brk(0) = 0x1000
  224. brk(0x22000) = 0x22000
  225. open("/proc/filesystems", O_RDONLY) = 3
  226. fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
  227. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffeff0000
  228. read(3, "nodev\tautofs\nnodev\tcgroup\nnodev\t"..., 512) = 71
  229. read(3, "", 512) = 0
  230. close(3) = 0
  231. munmap(0x7ffffeff0000, 4096) = 0
  232. socket(PF_NETLINK, SOCK_RAW, 9) = 3
  233. fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  234. open("/usr/lib/locale/locale-archive", O_RDONLY) = 4
  235. fstat(4, {st_mode=S_IFREG|0644, st_size=99158576, ...}) = 0
  236. mmap(NULL, 99158576, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7ffff7600000
  237. close(4) = 0
  238. open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 4
  239. read(4, "16\n", 31) = 3
  240. close(4) = 0
  241. access("/etc/shadow", F_OK) = 0
  242. access("/etc/gshadow", F_OK) = 0
  243. open("/etc/default/useradd", O_RDONLY) = 4
  244. fstat(4, {st_mode=S_IFREG|0600, st_size=119, ...}) = 0
  245. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffeff0000
  246. read(4, "# useradd defaults file\nGROUP=10"..., 512) = 119
  247. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
  248. connect(5, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  249. close(5) = 0
  250. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
  251. connect(5, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  252. close(5) = 0
  253. open("/etc/nsswitch.conf", O_RDONLY) = 5
  254. fstat(5, {st_mode=S_IFREG|0644, st_size=1688, ...}) = 0
  255. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefe0000
  256. read(5, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 2048) = 1688
  257. read(5, "", 2048) = 0
  258. close(5) = 0
  259. munmap(0x7ffffefe0000, 4096) = 0
  260. open("/etc/ld.so.cache", O_RDONLY) = 5
  261. fstat(5, {st_mode=S_IFREG|0644, st_size=14295, ...}) = 0
  262. mmap(NULL, 14295, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7ffffefe0000
  263. close(5) = 0
  264. open("/lib64/libnss_files.so.2", O_RDONLY) = 5
  265. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360!\0\0\0\0\0\0"..., 832) = 832
  266. fstat(5, {st_mode=S_IFREG|0755, st_size=65928, ...}) = 0
  267. mmap(NULL, 2151824, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7ffff7200000
  268. mprotect(0x7ffff720c000, 2097152, PROT_NONE) = 0
  269. mmap(0x7ffff740c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xc000) = 0x7ffff740c000
  270. close(5) = 0
  271. mprotect(0x7ffff740c000, 4096, PROT_READ) = 0
  272. munmap(0x7ffffefe0000, 14295) = 0
  273. open("/etc/group", O_RDONLY|O_CLOEXEC) = 5
  274. fcntl(5, F_GETFD) = 0x1 (flags FD_CLOEXEC)
  275. fstat(5, {st_mode=S_IFREG|0644, st_size=566, ...}) = 0
  276. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefe0000
  277. read(5, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 1024) = 566
  278. close(5) = 0
  279. munmap(0x7ffffefe0000, 4096) = 0
  280. read(4, "", 512) = 0
  281. close(4) = 0
  282. munmap(0x7ffffeff0000, 4096) = 0
  283. open("/etc/login.defs", O_RDONLY) = 4
  284. fstat(4, {st_mode=S_IFREG|0644, st_size=1816, ...}) = 0
  285. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffeff0000
  286. read(4, "#\n# Please note that the paramet"..., 2048) = 1816
  287. read(4, "", 2048) = 0
  288. close(4) = 0
  289. munmap(0x7ffffeff0000, 4096) = 0
  290. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  291. connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  292. close(4) = 0
  293. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  294. connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  295. close(4) = 0
  296. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 4
  297. fstat(4, {st_mode=S_IFREG|0644, st_size=1116, ...}) = 0
  298. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffeff0000
  299. read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 1536) = 1116
  300. read(4, "", 1536) = 0
  301. close(4) = 0
  302. munmap(0x7ffffeff0000, 4096) = 0
  303. open("/etc/group", O_RDONLY|O_CLOEXEC) = 4
  304. fstat(4, {st_mode=S_IFREG|0644, st_size=566, ...}) = 0
  305. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffeff0000
  306. read(4, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 1024) = 566
  307. read(4, "", 1024) = 0
  308. close(4) = 0
  309. munmap(0x7ffffeff0000, 4096) = 0
  310. open("/etc/.pwd.lock", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 4
  311. fcntl(4, F_GETFD) = 0x1 (flags FD_CLOEXEC)
  312. rt_sigaction(SIGALRM, {0x7ffffdeef1b0, ~[], SA_RESTORER, 0x7ffffde326a0}, {SIG_DFL, [], 0}, 8) = 0
  313. rt_sigprocmask(SIG_UNBLOCK, [ALRM], [], 8) = 0
  314. alarm(15) = 0
  315. fcntl(4, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) = 0
  316. alarm(0) = 15
  317. rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
  318. rt_sigaction(SIGALRM, {SIG_DFL, [], SA_RESTORER, 0x7ffffde326a0}, NULL, 8) = 0
  319. getpid() = 15267
  320. open("/etc/passwd.15267", O_WRONLY|O_CREAT|O_EXCL, 0600) = 5
  321. write(5, "15267\0", 6) = 6
  322. close(5) = 0
  323. link("/etc/passwd.15267", "/etc/passwd.lock") = 0
  324. stat("/etc/passwd.15267", {st_mode=S_IFREG|0600, st_size=6, ...}) = 0
  325. unlink("/etc/passwd.15267") = 0
  326. open("/etc/passwd", O_RDWR) = 5
  327. fcntl(5, F_SETFD, FD_CLOEXEC) = 0
  328. fstat(5, {st_mode=S_IFREG|0644, st_size=1116, ...}) = 0
  329. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffeff0000
  330. read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 1536) = 1116
  331. read(5, "", 1536) = 0
  332. open("/etc/shadow.15267", O_WRONLY|O_CREAT|O_EXCL, 0600) = 6
  333. write(6, "15267\0", 6) = 6
  334. close(6) = 0
  335. link("/etc/shadow.15267", "/etc/shadow.lock") = 0
  336. stat("/etc/shadow.15267", {st_mode=S_IFREG|0600, st_size=6, ...}) = 0
  337. unlink("/etc/shadow.15267") = 0
  338. open("/etc/shadow", O_RDWR) = 6
  339. fcntl(6, F_SETFD, FD_CLOEXEC) = 0
  340. fstat(6, {st_mode=S_IFREG, st_size=1364, ...}) = 0
  341. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefe0000
  342. read(6, "root:$6$ue/ZiMQWrYVUXhiZ$mC.SOwu"..., 1536) = 1364
  343. read(6, "", 1536) = 0
  344. open("/etc/group.15267", O_WRONLY|O_CREAT|O_EXCL, 0600) = 7
  345. write(7, "15267\0", 6) = 6
  346. close(7) = 0
  347. link("/etc/group.15267", "/etc/group.lock") = 0
  348. stat("/etc/group.15267", {st_mode=S_IFREG|0600, st_size=6, ...}) = 0
  349. unlink("/etc/group.15267") = 0
  350. open("/etc/group", O_RDWR) = 7
  351. fcntl(7, F_SETFD, FD_CLOEXEC) = 0
  352. fstat(7, {st_mode=S_IFREG|0644, st_size=566, ...}) = 0
  353. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefd0000
  354. read(7, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 1024) = 566
  355. read(7, "", 1024) = 0
  356. open("/etc/gshadow.15267", O_WRONLY|O_CREAT|O_EXCL, 0600) = 8
  357. write(8, "15267\0", 6) = 6
  358. close(8) = 0
  359. link("/etc/gshadow.15267", "/etc/gshadow.lock") = 0
  360. stat("/etc/gshadow.15267", {st_mode=S_IFREG|0600, st_size=6, ...}) = 0
  361. unlink("/etc/gshadow.15267") = 0
  362. open("/etc/gshadow", O_RDWR) = 8
  363. fcntl(8, F_SETFD, FD_CLOEXEC) = 0
  364. fstat(8, {st_mode=S_IFREG, st_size=480, ...}) = 0
  365. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefc0000
  366. read(8, "root:::\nbin:::bin,daemon\ndaemon:"..., 512) = 480
  367. read(8, "", 512) = 0
  368. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 9
  369. fstat(9, {st_mode=S_IFREG|0644, st_size=1116, ...}) = 0
  370. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefb0000
  371. read(9, "root:x:0:0:root:/root:/bin/bash\n"..., 1536) = 1116
  372. read(9, "", 1536) = 0
  373. close(9) = 0
  374. munmap(0x7ffffefb0000, 4096) = 0
  375. open("/etc/group", O_RDONLY|O_CLOEXEC) = 9
  376. fstat(9, {st_mode=S_IFREG|0644, st_size=566, ...}) = 0
  377. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefb0000
  378. read(9, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 1024) = 566
  379. read(9, "", 1024) = 0
  380. close(9) = 0
  381. munmap(0x7ffffefb0000, 4096) = 0
  382. time([1453923998]) = 1453923998
  383. open("/etc/localtime", O_RDONLY) = 9
  384. fstat(9, {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
  385. fstat(9, {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
  386. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefb0000
  387. read(9, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0"..., 512) = 118
  388. lseek(9, -62, SEEK_CUR) = 56
  389. read(9, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0"..., 512) = 62
  390. close(9) = 0
  391. munmap(0x7ffffefb0000, 4096) = 0
  392. socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 9
  393. connect(9, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  394. sendto(9, "<86>Jan 27 19:46:38 useradd[1526"..., 71, MSG_NOSIGNAL, NULL, 0) = 71
  395. readlink("/proc/self/exe", "/usr/sbin/useradd", 4096) = 17
  396. ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B9600 opost isig icanon echo ...}) = 0
  397. readlink("/proc/self/fd/0", "/dev/pts/12", 31) = 11
  398. lstat("/dev/pts/12", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 12), ...}) = 0
  399. sendto(3, "x\0\0\0\\\4\5\0\1\0\0\0\0\0\0\0op=adding group "..., 120, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = -1 ECONNREFUSED (Connection refused)
  400. time(NULL) = 1453923998
  401. time([1453923998]) = 1453923998
  402. sendto(9, "<86>Jan 27 19:46:38 useradd[1526"..., 117, MSG_NOSIGNAL, NULL, 0) = 117
  403. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 10
  404. fstat(10, {st_mode=S_IFREG|0644, st_size=1116, ...}) = 0
  405. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefb0000
  406. read(10, "root:x:0:0:root:/root:/bin/bash\n"..., 1536) = 1116
  407. read(10, "", 1536) = 0
  408. close(10) = 0
  409. munmap(0x7ffffefb0000, 4096) = 0
  410. access("/var/log/faillog", F_OK) = -1 ENOENT (No such file or directory)
  411. access("/var/log/lastlog", F_OK) = 0
  412. open("/var/log/lastlog", O_RDWR) = 10
  413. lseek(10, 589840, SEEK_SET) = 589840
  414. write(10, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 292) = 292
  415. fsync(10) = 0
  416. close(10) = 0
  417. ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B9600 opost isig icanon echo ...}) = 0
  418. readlink("/proc/self/fd/0", "/dev/pts/12", 31) = 11
  419. lstat("/dev/pts/12", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 12), ...}) = 0
  420. sendto(3, "p\0\0\0Z\4\5\0\2\0\0\0\0\0\0\0op=adding user i"..., 112, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = -1 ECONNREFUSED (Connection refused)
  421. fstat(5, {st_mode=S_IFREG|0644, st_size=1116, ...}) = 0
  422. fstat(5, {st_mode=S_IFREG|0644, st_size=1116, ...}) = 0
  423. umask(077) = 022
  424. open("/etc/passwd-", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 10
  425. umask(022) = 077
  426. lseek(5, 0, SEEK_SET) = 0
  427. read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 1536) = 1116
  428. fstat(10, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
  429. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefb0000
  430. read(5, "", 1536) = 0
  431. write(10, "root:x:0:0:root:/root:/bin/bash\n"..., 1116) = 1116
  432. fsync(10) = 0
  433. close(10) = 0
  434. munmap(0x7ffffefb0000, 4096) = 0
  435. utime("/etc/passwd-", [2016/01/27-18:07:18, 2016/01/27-18:07:18]) = 0
  436. close(5) = 0
  437. munmap(0x7ffffeff0000, 4096) = 0
  438. umask(0777) = 022
  439. open("/etc/passwd+", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 5
  440. umask(022) = 0777
  441. fchown(5, 0, 0) = 0
  442. fchmod(5, 0644) = 0
  443. fstat(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
  444. mmap(NULL, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffef9f000
  445. write(5, "root:x:0:0:root:/root:/bin/bash\n"..., 1163) = 1163
  446. fsync(5) = 0
  447. close(5) = 0
  448. munmap(0x7ffffef9f000, 131072) = 0
  449. lstat("/etc/passwd", {st_mode=S_IFREG|0644, st_size=1116, ...}) = 0
  450. rename("/etc/passwd+", "/etc/passwd") = 0
  451. fstat(6, {st_mode=S_IFREG, st_size=1364, ...}) = 0
  452. fstat(6, {st_mode=S_IFREG, st_size=1364, ...}) = 0
  453. umask(077) = 022
  454. open("/etc/shadow-", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 5
  455. umask(022) = 077
  456. lseek(6, 0, SEEK_SET) = 0
  457. read(6, "root:$6$ue/ZiMQWrYVUXhiZ$mC.SOwu"..., 1536) = 1364
  458. fstat(5, {st_mode=S_IFREG, st_size=0, ...}) = 0
  459. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefb0000
  460. read(6, "", 1536) = 0
  461. write(5, "root:$6$ue/ZiMQWrYVUXhiZ$mC.SOwu"..., 1364) = 1364
  462. fsync(5) = 0
  463. close(5) = 0
  464. munmap(0x7ffffefb0000, 4096) = 0
  465. utime("/etc/shadow-", [2016/01/27-18:07:19, 2016/01/27-18:07:19]) = 0
  466. close(6) = 0
  467. munmap(0x7ffffefe0000, 4096) = 0
  468. umask(0777) = 022
  469. open("/etc/shadow+", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 5
  470. umask(022) = 0777
  471. fchown(5, 0, 0) = 0
  472. fchmod(5, 0) = 0
  473. fstat(5, {st_mode=S_IFREG, st_size=0, ...}) = 0
  474. mmap(NULL, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefdf000
  475. write(5, "root:$6$ue/ZiMQWrYVUXhiZ$mC.SOwu"..., 1396) = 1396
  476. fsync(5) = 0
  477. close(5) = 0
  478. munmap(0x7ffffefdf000, 131072) = 0
  479. lstat("/etc/shadow", {st_mode=S_IFREG, st_size=1364, ...}) = 0
  480. rename("/etc/shadow+", "/etc/shadow") = 0
  481. fstat(7, {st_mode=S_IFREG|0644, st_size=566, ...}) = 0
  482. fstat(7, {st_mode=S_IFREG|0644, st_size=566, ...}) = 0
  483. umask(077) = 022
  484. open("/etc/group-", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 5
  485. umask(022) = 077
  486. lseek(7, 0, SEEK_SET) = 0
  487. read(7, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 1024) = 566
  488. fstat(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
  489. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffeff0000
  490. read(7, "", 1024) = 0
  491. write(5, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 566) = 566
  492. fsync(5) = 0
  493. close(5) = 0
  494. munmap(0x7ffffeff0000, 4096) = 0
  495. utime("/etc/group-", [2016/01/27-18:07:18, 2016/01/27-18:07:18]) = 0
  496. close(7) = 0
  497. munmap(0x7ffffefd0000, 4096) = 0
  498. umask(0777) = 022
  499. open("/etc/group+", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 5
  500. umask(022) = 0777
  501. fchown(5, 0, 0) = 0
  502. fchmod(5, 0644) = 0
  503. fstat(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
  504. mmap(NULL, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefdf000
  505. write(5, "root:x:0:\nbin:x:1:bin,daemon\ndae"..., 584) = 584
  506. fsync(5) = 0
  507. close(5) = 0
  508. munmap(0x7ffffefdf000, 131072) = 0
  509. lstat("/etc/group", {st_mode=S_IFREG|0644, st_size=566, ...}) = 0
  510. rename("/etc/group+", "/etc/group") = 0
  511. fstat(8, {st_mode=S_IFREG, st_size=480, ...}) = 0
  512. fstat(8, {st_mode=S_IFREG, st_size=480, ...}) = 0
  513. umask(077) = 022
  514. open("/etc/gshadow-", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 5
  515. umask(022) = 077
  516. lseek(8, 0, SEEK_SET) = 0
  517. read(8, "root:::\nbin:::bin,daemon\ndaemon:"..., 512) = 480
  518. fstat(5, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0
  519. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffeff0000
  520. read(8, "", 512) = 0
  521. write(5, "root:::\nbin:::bin,daemon\ndaemon:"..., 480) = 480
  522. fsync(5) = 0
  523. close(5) = 0
  524. munmap(0x7ffffeff0000, 4096) = 0
  525. utime("/etc/gshadow-", [2016/01/27-18:07:18, 2016/01/27-18:07:18]) = 0
  526. close(8) = 0
  527. munmap(0x7ffffefc0000, 4096) = 0
  528. umask(0777) = 022
  529. open("/etc/gshadow+", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 5
  530. umask(022) = 0777
  531. fchown(5, 0, 0) = 0
  532. fchmod(5, 0) = 0
  533. fstat(5, {st_mode=S_IFREG, st_size=0, ...}) = 0
  534. mmap(NULL, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffffefdf000
  535. write(5, "root:::\nbin:::bin,daemon\ndaemon:"..., 494) = 494
  536. fsync(5) = 0
  537. close(5) = 0
  538. munmap(0x7ffffefdf000, 131072) = 0
  539. lstat("/etc/gshadow", {st_mode=S_IFREG, st_size=480, ...}) = 0
  540. rename("/etc/gshadow+", "/etc/gshadow") = 0
  541. unlink("/etc/shadow.lock") = 0
  542. unlink("/etc/passwd.lock") = 0
  543. unlink("/etc/group.lock") = 0
  544. unlink("/etc/gshadow.lock") = 0
  545. vfork( <unfinished ...>
  546. --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15268, si_status=127, si_utime=0, si_stime=0} ---
  547. <... vfork resumed> ) = 15268
  548. wait4(15268, [{WIFEXITED(s) && WEXITSTATUS(s) == 127}], 0, NULL) = 15268
  549. vfork() = 15269
  550. --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x7fffffeff83c} ---
  551. +++ killed by SIGSEGV (core dumped) +++
  552. Segmentation fault (core dumped)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement