Advertisement
Guest User

Untitled

a guest
Sep 6th, 2017
390
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 43.27 KB | None | 0 0
  1. root@6d17d7f7b496:/tomcat# strace su tomcat -c "touch logs/test.log"
  2. execve("/bin/su", ["su", "tomcat", "-c", "touch logs/test.log"], [/* 8 vars */]) = 0
  3. brk(0) = 0x55b48bc97000
  4. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  5. mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0c000
  6. access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  7. open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  8. fstat(3, {st_mode=S_IFREG|0644, st_size=13818, ...}) = 0
  9. mmap(NULL, 13818, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f50d4e08000
  10. close(3) = 0
  11. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  12. open("/lib/x86_64-linux-gnu/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
  13. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300&\0\0\0\0\0\0"..., 832) = 832
  14. fstat(3, {st_mode=S_IFREG|0644, st_size=64024, ...}) = 0
  15. mmap(NULL, 2159200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f50d49de000
  16. mprotect(0x7f50d49eb000, 2097152, PROT_NONE) = 0
  17. mmap(0x7f50d4beb000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f50d4beb000
  18. close(3) = 0
  19. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  20. open("/lib/x86_64-linux-gnu/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
  21. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\20\0\0\0\0\0\0"..., 832) = 832
  22. fstat(3, {st_mode=S_IFREG|0644, st_size=14456, ...}) = 0
  23. mmap(NULL, 2109760, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f50d47da000
  24. mprotect(0x7f50d47dd000, 2093056, PROT_NONE) = 0
  25. mmap(0x7f50d49dc000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f50d49dc000
  26. close(3) = 0
  27. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  28. open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
  29. read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\34\2\0\0\0\0\0"..., 832) = 832
  30. fstat(3, {st_mode=S_IFREG|0755, st_size=1738176, ...}) = 0
  31. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e07000
  32. mmap(NULL, 3844640, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f50d442f000
  33. mprotect(0x7f50d45d0000, 2097152, PROT_NONE) = 0
  34. mmap(0x7f50d47d0000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a1000) = 0x7f50d47d0000
  35. mmap(0x7f50d47d6000, 14880, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f50d47d6000
  36. close(3) = 0
  37. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  38. open("/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3
  39. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20*\0\0\0\0\0\0"..., 832) = 832
  40. fstat(3, {st_mode=S_IFREG|0644, st_size=113024, ...}) = 0
  41. mmap(NULL, 2249344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f50d4209000
  42. mprotect(0x7f50d4223000, 2093056, PROT_NONE) = 0
  43. mmap(0x7f50d4422000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19000) = 0x7f50d4422000
  44. mmap(0x7f50d4425000, 37504, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f50d4425000
  45. close(3) = 0
  46. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  47. open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
  48. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\16\0\0\0\0\0\0"..., 832) = 832
  49. fstat(3, {st_mode=S_IFREG|0644, st_size=14664, ...}) = 0
  50. mmap(NULL, 2109712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f50d4005000
  51. mprotect(0x7f50d4008000, 2093056, PROT_NONE) = 0
  52. mmap(0x7f50d4207000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f50d4207000
  53. close(3) = 0
  54. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e06000
  55. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e05000
  56. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e04000
  57. arch_prctl(ARCH_SET_FS, 0x7f50d4e05700) = 0
  58. mprotect(0x7f50d47d0000, 16384, PROT_READ) = 0
  59. mprotect(0x7f50d4207000, 4096, PROT_READ) = 0
  60. mprotect(0x7f50d4422000, 8192, PROT_READ) = 0
  61. mprotect(0x7f50d4beb000, 8192, PROT_READ) = 0
  62. mprotect(0x7f50d49dc000, 4096, PROT_READ) = 0
  63. mprotect(0x55b48a44d000, 4096, PROT_READ) = 0
  64. mprotect(0x7f50d4e0e000, 4096, PROT_READ) = 0
  65. munmap(0x7f50d4e08000, 13818) = 0
  66. brk(0) = 0x55b48bc97000
  67. brk(0x55b48bcb8000) = 0x55b48bcb8000
  68. getuid() = 0
  69. ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
  70. fstat(0, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 4), ...}) = 0
  71. readlink("/proc/self/fd/0", "/4", 4095) = 2
  72. stat("/4", 0x7ffdb8e477b0) = -1 ENOENT (No such file or directory)
  73. stat("/dev/pts", {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
  74. openat(AT_FDCWD, "/dev/pts", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  75. getdents(3, /* 3 entries */, 32768) = 72
  76. getdents(3, /* 0 entries */, 32768) = 0
  77. close(3) = 0
  78. openat(AT_FDCWD, "/dev", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  79. getdents(3, /* 187 entries */, 32768) = 5608
  80. stat("/dev/random", {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 8), ...}) = 0
  81. getdents(3, /* 0 entries */, 32768) = 0
  82. close(3) = 0
  83. openat(AT_FDCWD, "/dev", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  84. getdents(3, /* 187 entries */, 32768) = 5608
  85. stat("/dev/.", {st_mode=S_IFDIR|0755, st_size=3740, ...}) = 0
  86. stat("/dev/..", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  87. stat("/dev/core", {st_mode=S_IFREG|0400, st_size=140737477881856, ...}) = 0
  88. stat("/dev/fd", {st_mode=S_IFDIR|0500, st_size=0, ...}) = 0
  89. stat("/dev/console", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 4), ...}) = 0
  90. close(3) = 0
  91. ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
  92. open("/proc/self/loginuid", O_RDONLY) = 3
  93. read(3, "4294967295", 12) = 10
  94. close(3) = 0
  95. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
  96. connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  97. close(3) = 0
  98. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
  99. connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  100. close(3) = 0
  101. open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3
  102. fstat(3, {st_mode=S_IFREG|0644, st_size=497, ...}) = 0
  103. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  104. read(3, "# /etc/nsswitch.conf\n#\n# Example"..., 4096) = 497
  105. read(3, "", 4096) = 0
  106. close(3) = 0
  107. munmap(0x7f50d4e0b000, 4096) = 0
  108. open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  109. fstat(3, {st_mode=S_IFREG|0644, st_size=13818, ...}) = 0
  110. mmap(NULL, 13818, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f50d4e08000
  111. close(3) = 0
  112. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  113. open("/lib/x86_64-linux-gnu/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = 3
  114. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\23\0\0\0\0\0\0"..., 832) = 832
  115. fstat(3, {st_mode=S_IFREG|0644, st_size=31632, ...}) = 0
  116. mmap(NULL, 2126976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f50d3dfd000
  117. mprotect(0x7f50d3e04000, 2093056, PROT_NONE) = 0
  118. mmap(0x7f50d4003000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f50d4003000
  119. close(3) = 0
  120. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  121. open("/lib/x86_64-linux-gnu/libnsl.so.1", O_RDONLY|O_CLOEXEC) = 3
  122. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`A\0\0\0\0\0\0"..., 832) = 832
  123. fstat(3, {st_mode=S_IFREG|0644, st_size=89104, ...}) = 0
  124. mmap(NULL, 2194072, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f50d3be5000
  125. mprotect(0x7f50d3bfa000, 2093056, PROT_NONE) = 0
  126. mmap(0x7f50d3df9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x7f50d3df9000
  127. mmap(0x7f50d3dfb000, 6808, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f50d3dfb000
  128. close(3) = 0
  129. mprotect(0x7f50d3df9000, 4096, PROT_READ) = 0
  130. mprotect(0x7f50d4003000, 4096, PROT_READ) = 0
  131. munmap(0x7f50d4e08000, 13818) = 0
  132. open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  133. fstat(3, {st_mode=S_IFREG|0644, st_size=13818, ...}) = 0
  134. mmap(NULL, 13818, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f50d4e08000
  135. close(3) = 0
  136. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  137. open("/lib/x86_64-linux-gnu/libnss_nis.so.2", O_RDONLY|O_CLOEXEC) = 3
  138. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240!\0\0\0\0\0\0"..., 832) = 832
  139. fstat(3, {st_mode=S_IFREG|0644, st_size=43592, ...}) = 0
  140. mmap(NULL, 2139560, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f50d39da000
  141. mprotect(0x7f50d39e4000, 2093056, PROT_NONE) = 0
  142. mmap(0x7f50d3be3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7f50d3be3000
  143. close(3) = 0
  144. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  145. open("/lib/x86_64-linux-gnu/libnss_files.so.2", O_RDONLY|O_CLOEXEC) = 3
  146. read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\"\0\0\0\0\0\0"..., 832) = 832
  147. fstat(3, {st_mode=S_IFREG|0644, st_size=47712, ...}) = 0
  148. mmap(NULL, 2144392, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f50d37ce000
  149. mprotect(0x7f50d37d9000, 2093056, PROT_NONE) = 0
  150. mmap(0x7f50d39d8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7f50d39d8000
  151. close(3) = 0
  152. mprotect(0x7f50d39d8000, 4096, PROT_READ) = 0
  153. mprotect(0x7f50d3be3000, 4096, PROT_READ) = 0
  154. munmap(0x7f50d4e08000, 13818) = 0
  155. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  156. lseek(3, 0, SEEK_CUR) = 0
  157. fstat(3, {st_mode=S_IFREG|0644, st_size=1322, ...}) = 0
  158. mmap(NULL, 1322, PROT_READ, MAP_SHARED, 3, 0) = 0x7f50d4e0b000
  159. lseek(3, 1322, SEEK_SET) = 1322
  160. fstat(3, {st_mode=S_IFREG|0644, st_size=1322, ...}) = 0
  161. munmap(0x7f50d4e0b000, 1322) = 0
  162. close(3) = 0
  163. ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
  164. fstat(0, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 4), ...}) = 0
  165. readlink("/proc/self/fd/0", "/4", 511) = 2
  166. stat("/4", 0x7ffdb8e47250) = -1 ENOENT (No such file or directory)
  167. stat("/dev/pts/", {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
  168. openat(AT_FDCWD, "/dev/pts/", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  169. getdents(3, /* 3 entries */, 32768) = 72
  170. getdents(3, /* 0 entries */, 32768) = 0
  171. close(3) = 0
  172. openat(AT_FDCWD, "/dev/", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  173. getdents(3, /* 187 entries */, 32768) = 5608
  174. stat("/dev/random", {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 8), ...}) = 0
  175. getdents(3, /* 0 entries */, 32768) = 0
  176. close(3) = 0
  177. openat(AT_FDCWD, "/dev/", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  178. getdents(3, /* 187 entries */, 32768) = 5608
  179. stat("/dev/.", {st_mode=S_IFDIR|0755, st_size=3740, ...}) = 0
  180. stat("/dev/..", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  181. stat("/dev/core", {st_mode=S_IFREG|0400, st_size=140737477881856, ...}) = 0
  182. stat("/dev/fd", {st_mode=S_IFDIR|0500, st_size=0, ...}) = 0
  183. stat("/dev/console", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 4), ...}) = 0
  184. close(3) = 0
  185. access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or directory)
  186. open("/var/run/utmp", O_RDONLY|O_CLOEXEC) = 3
  187. lseek(3, 0, SEEK_SET) = 0
  188. alarm(0) = 0
  189. rt_sigaction(SIGALRM, {0x7f50d454a7c0, [], SA_RESTORER, 0x7f50d44640e0}, {SIG_DFL, [], 0}, 8) = 0
  190. alarm(10) = 0
  191. fcntl(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) = 0
  192. read(3, "", 384) = 0
  193. fcntl(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
  194. alarm(0) = 10
  195. rt_sigaction(SIGALRM, {SIG_DFL, [], SA_RESTORER, 0x7f50d44640e0}, NULL, 8) = 0
  196. close(3) = 0
  197. getuid() = 0
  198. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  199. lseek(3, 0, SEEK_CUR) = 0
  200. fstat(3, {st_mode=S_IFREG|0644, st_size=1322, ...}) = 0
  201. mmap(NULL, 1322, PROT_READ, MAP_SHARED, 3, 0) = 0x7f50d4e0b000
  202. lseek(3, 1322, SEEK_SET) = 1322
  203. munmap(0x7f50d4e0b000, 1322) = 0
  204. close(3) = 0
  205. stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  206. open("/etc/pam.d/su", O_RDONLY) = 3
  207. fstat(3, {st_mode=S_IFREG|0644, st_size=2257, ...}) = 0
  208. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  209. read(3, "#\n# The PAM configuration file f"..., 4096) = 2257
  210. open("/lib/x86_64-linux-gnu/security/pam_rootok.so", O_RDONLY|O_CLOEXEC) = 4
  211. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\v\0\0\0\0\0\0"..., 832) = 832
  212. fstat(4, {st_mode=S_IFREG|0644, st_size=10192, ...}) = 0
  213. mmap(NULL, 2105528, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f50d35cb000
  214. mprotect(0x7f50d35cd000, 2093056, PROT_NONE) = 0
  215. mmap(0x7f50d37cc000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x1000) = 0x7f50d37cc000
  216. close(4) = 0
  217. open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 4
  218. fstat(4, {st_mode=S_IFREG|0644, st_size=13818, ...}) = 0
  219. mmap(NULL, 13818, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7f50d4e00000
  220. close(4) = 0
  221. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  222. open("/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 4
  223. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20c\0\0\0\0\0\0"..., 832) = 832
  224. fstat(4, {st_mode=S_IFREG|0644, st_size=142728, ...}) = 0
  225. mmap(NULL, 2246896, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f50d33a6000
  226. mprotect(0x7f50d33c7000, 2097152, PROT_NONE) = 0
  227. mmap(0x7f50d35c7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x21000) = 0x7f50d35c7000
  228. mmap(0x7f50d35c9000, 6384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f50d35c9000
  229. close(4) = 0
  230. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  231. open("/lib/x86_64-linux-gnu/libpcre.so.3", O_RDONLY|O_CLOEXEC) = 4
  232. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\27\0\0\0\0\0\0"..., 832) = 832
  233. fstat(4, {st_mode=S_IFREG|0644, st_size=448440, ...}) = 0
  234. mmap(NULL, 2543976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f50d3138000
  235. mprotect(0x7f50d31a4000, 2097152, PROT_NONE) = 0
  236. mmap(0x7f50d33a4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x6c000) = 0x7f50d33a4000
  237. close(4) = 0
  238. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  239. open("/lib/x86_64-linux-gnu/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 4
  240. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320n\0\0\0\0\0\0"..., 832) = 832
  241. fstat(4, {st_mode=S_IFREG|0755, st_size=137384, ...}) = 0
  242. mmap(NULL, 2213008, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f50d2f1b000
  243. mprotect(0x7f50d2f33000, 2093056, PROT_NONE) = 0
  244. mmap(0x7f50d3132000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x17000) = 0x7f50d3132000
  245. mmap(0x7f50d3134000, 13456, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f50d3134000
  246. close(4) = 0
  247. mprotect(0x7f50d3132000, 4096, PROT_READ) = 0
  248. mprotect(0x7f50d33a4000, 4096, PROT_READ) = 0
  249. mprotect(0x7f50d35c7000, 4096, PROT_READ) = 0
  250. mprotect(0x7f50d37cc000, 4096, PROT_READ) = 0
  251. set_tid_address(0x7f50d4e059d0) = 36
  252. set_robust_list(0x7f50d4e059e0, 24) = 0
  253. rt_sigaction(SIGRTMIN, {0x7f50d2f219b0, [], SA_RESTORER|SA_SIGINFO, 0x7f50d2f2a890}, NULL, 8) = 0
  254. rt_sigaction(SIGRT_1, {0x7f50d2f21a40, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7f50d2f2a890}, NULL, 8) = 0
  255. rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
  256. getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
  257. statfs("/sys/fs/selinux", 0x7ffdb8e46af0) = -1 ENOENT (No such file or directory)
  258. statfs("/selinux", 0x7ffdb8e46af0) = -1 ENOENT (No such file or directory)
  259. open("/proc/filesystems", O_RDONLY) = 4
  260. fstat(4, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
  261. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0a000
  262. read(4, "nodev\tsysfs\nnodev\trootfs\nnodev\tr"..., 1024) = 388
  263. read(4, "", 1024) = 0
  264. close(4) = 0
  265. munmap(0x7f50d4e0a000, 4096) = 0
  266. munmap(0x7f50d4e00000, 13818) = 0
  267. open("/lib/x86_64-linux-gnu/security/pam_env.so", O_RDONLY|O_CLOEXEC) = 4
  268. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\r\0\0\0\0\0\0"..., 832) = 832
  269. fstat(4, {st_mode=S_IFREG|0644, st_size=14336, ...}) = 0
  270. mmap(NULL, 2109672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f50d2d17000
  271. mprotect(0x7f50d2d1a000, 2093056, PROT_NONE) = 0
  272. mmap(0x7f50d2f19000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x2000) = 0x7f50d2f19000
  273. close(4) = 0
  274. mprotect(0x7f50d2f19000, 4096, PROT_READ) = 0
  275. open("/lib/x86_64-linux-gnu/security/pam_mail.so", O_RDONLY|O_CLOEXEC) = 4
  276. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\v\0\0\0\0\0\0"..., 832) = 832
  277. fstat(4, {st_mode=S_IFREG|0644, st_size=10200, ...}) = 0
  278. mmap(NULL, 2105536, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f50d2b14000
  279. mprotect(0x7f50d2b16000, 2093056, PROT_NONE) = 0
  280. mmap(0x7f50d2d15000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x1000) = 0x7f50d2d15000
  281. close(4) = 0
  282. mprotect(0x7f50d2d15000, 4096, PROT_READ) = 0
  283. open("/lib/x86_64-linux-gnu/security/pam_limits.so", O_RDONLY|O_CLOEXEC) = 4
  284. read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\24\0\0\0\0\0\0"..., 832) = 832
  285. fstat(4, {st_mode=S_IFREG|0644, st_size=26856, ...}) = 0
  286. mmap(NULL, 2122120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7f50d290d000
  287. mprotect(0x7f50d2912000, 2093056, PROT_NONE) = 0
  288. mmap(0x7f50d2b11000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x4000) = 0x7f50d2b11000
  289. close(4) = 0
  290. mprotect(0x7f50d2b11000, 8192, PROT_READ) = 0
  291. stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  292. open("/etc/pam.d/common-auth", O_RDONLY) = 4
  293. fstat(4, {st_mode=S_IFREG|0644, st_size=1221, ...}) = 0
  294. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0a000
  295. read(4, "#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1221
  296. open("/lib/x86_64-linux-gnu/security/pam_unix.so", O_RDONLY|O_CLOEXEC) = 5
  297. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300)\0\0\0\0\0\0"..., 832) = 832
  298. fstat(5, {st_mode=S_IFREG|0644, st_size=60160, ...}) = 0
  299. mmap(NULL, 2204800, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f50d26f2000
  300. mprotect(0x7f50d2700000, 2093056, PROT_NONE) = 0
  301. mmap(0x7f50d28ff000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xd000) = 0x7f50d28ff000
  302. mmap(0x7f50d2901000, 46208, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f50d2901000
  303. close(5) = 0
  304. open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 5
  305. fstat(5, {st_mode=S_IFREG|0644, st_size=13818, ...}) = 0
  306. mmap(NULL, 13818, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f50d4e00000
  307. close(5) = 0
  308. access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  309. open("/lib/x86_64-linux-gnu/libcrypt.so.1", O_RDONLY|O_CLOEXEC) = 5
  310. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\f\0\0\0\0\0\0"..., 832) = 832
  311. fstat(5, {st_mode=S_IFREG|0644, st_size=35176, ...}) = 0
  312. mmap(NULL, 2318848, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f50d24bb000
  313. mprotect(0x7f50d24c3000, 2093056, PROT_NONE) = 0
  314. mmap(0x7f50d26c2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x7000) = 0x7f50d26c2000
  315. mmap(0x7f50d26c4000, 184832, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f50d26c4000
  316. close(5) = 0
  317. mprotect(0x7f50d26c2000, 4096, PROT_READ) = 0
  318. mprotect(0x7f50d28ff000, 4096, PROT_READ) = 0
  319. munmap(0x7f50d4e00000, 13818) = 0
  320. open("/lib/x86_64-linux-gnu/security/pam_deny.so", O_RDONLY|O_CLOEXEC) = 5
  321. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\6\0\0\0\0\0\0"..., 832) = 832
  322. fstat(5, {st_mode=S_IFREG|0644, st_size=5896, ...}) = 0
  323. mmap(NULL, 2101304, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f50d22b9000
  324. mprotect(0x7f50d22ba000, 2093056, PROT_NONE) = 0
  325. mmap(0x7f50d24b9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0) = 0x7f50d24b9000
  326. close(5) = 0
  327. mprotect(0x7f50d24b9000, 4096, PROT_READ) = 0
  328. open("/lib/x86_64-linux-gnu/security/pam_permit.so", O_RDONLY|O_CLOEXEC) = 5
  329. read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\7\0\0\0\0\0\0"..., 832) = 832
  330. fstat(5, {st_mode=S_IFREG|0644, st_size=5992, ...}) = 0
  331. mmap(NULL, 2101328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f50d20b7000
  332. mprotect(0x7f50d20b8000, 2093056, PROT_NONE) = 0
  333. mmap(0x7f50d22b7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0) = 0x7f50d22b7000
  334. close(5) = 0
  335. mprotect(0x7f50d22b7000, 4096, PROT_READ) = 0
  336. read(4, "", 4096) = 0
  337. close(4) = 0
  338. munmap(0x7f50d4e0a000, 4096) = 0
  339. stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  340. open("/etc/pam.d/common-account", O_RDONLY) = 4
  341. fstat(4, {st_mode=S_IFREG|0644, st_size=1208, ...}) = 0
  342. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0a000
  343. read(4, "#\n# /etc/pam.d/common-account - "..., 4096) = 1208
  344. read(4, "", 4096) = 0
  345. close(4) = 0
  346. munmap(0x7f50d4e0a000, 4096) = 0
  347. stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  348. open("/etc/pam.d/common-session", O_RDONLY) = 4
  349. fstat(4, {st_mode=S_IFREG|0644, st_size=1156, ...}) = 0
  350. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0a000
  351. read(4, "#\n# /etc/pam.d/common-session - "..., 4096) = 1156
  352. read(4, "", 4096) = 0
  353. close(4) = 0
  354. munmap(0x7f50d4e0a000, 4096) = 0
  355. read(3, "", 4096) = 0
  356. close(3) = 0
  357. munmap(0x7f50d4e0b000, 4096) = 0
  358. open("/etc/pam.d/other", O_RDONLY) = 3
  359. fstat(3, {st_mode=S_IFREG|0644, st_size=520, ...}) = 0
  360. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  361. read(3, "#\n# /etc/pam.d/other - specify t"..., 4096) = 520
  362. stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  363. open("/etc/pam.d/common-auth", O_RDONLY) = 4
  364. fstat(4, {st_mode=S_IFREG|0644, st_size=1221, ...}) = 0
  365. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0a000
  366. read(4, "#\n# /etc/pam.d/common-auth - aut"..., 4096) = 1221
  367. read(4, "", 4096) = 0
  368. close(4) = 0
  369. munmap(0x7f50d4e0a000, 4096) = 0
  370. stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  371. open("/etc/pam.d/common-account", O_RDONLY) = 4
  372. fstat(4, {st_mode=S_IFREG|0644, st_size=1208, ...}) = 0
  373. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0a000
  374. read(4, "#\n# /etc/pam.d/common-account - "..., 4096) = 1208
  375. read(4, "", 4096) = 0
  376. close(4) = 0
  377. munmap(0x7f50d4e0a000, 4096) = 0
  378. stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  379. open("/etc/pam.d/common-password", O_RDONLY) = 4
  380. fstat(4, {st_mode=S_IFREG|0644, st_size=1440, ...}) = 0
  381. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0a000
  382. read(4, "#\n# /etc/pam.d/common-password -"..., 4096) = 1440
  383. read(4, "", 4096) = 0
  384. close(4) = 0
  385. munmap(0x7f50d4e0a000, 4096) = 0
  386. stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  387. open("/etc/pam.d/common-session", O_RDONLY) = 4
  388. fstat(4, {st_mode=S_IFREG|0644, st_size=1156, ...}) = 0
  389. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0a000
  390. read(4, "#\n# /etc/pam.d/common-session - "..., 4096) = 1156
  391. read(4, "", 4096) = 0
  392. close(4) = 0
  393. munmap(0x7f50d4e0a000, 4096) = 0
  394. read(3, "", 4096) = 0
  395. close(3) = 0
  396. munmap(0x7f50d4e0b000, 4096) = 0
  397. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  398. lseek(3, 0, SEEK_CUR) = 0
  399. fstat(3, {st_mode=S_IFREG|0644, st_size=1322, ...}) = 0
  400. mmap(NULL, 1322, PROT_READ, MAP_SHARED, 3, 0) = 0x7f50d4e0b000
  401. lseek(3, 1322, SEEK_SET) = 1322
  402. munmap(0x7f50d4e0b000, 1322) = 0
  403. close(3) = 0
  404. rt_sigaction(SIGINT, {SIG_IGN, [INT], SA_RESTORER|SA_RESTART, 0x7f50d44640e0}, {SIG_DFL, [], 0}, 8) = 0
  405. rt_sigaction(SIGQUIT, {SIG_IGN, [QUIT], SA_RESTORER|SA_RESTART, 0x7f50d44640e0}, {SIG_DFL, [], 0}, 8) = 0
  406. getuid() = 0
  407. socket(PF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 3
  408. fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  409. readlink("/proc/self/exe", "/bin/su", 4096) = 7
  410. sendto(3, "x\0\0\0L\4\5\0\1\0\0\0\0\0\0\0op=PAM:authentic"..., 120, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 120
  411. poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
  412. recvfrom(3, "$\0\0\0\2\0\0\0\1\0\0\0$\0\0\0\0\0\0\0x\0\0\0L\4\5\0\1\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  413. recvfrom(3, "$\0\0\0\2\0\0\0\1\0\0\0$\0\0\0\0\0\0\0x\0\0\0L\4\5\0\1\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  414. close(3) = 0
  415. getuid() = 0
  416. open("/etc/login.defs", O_RDONLY) = 3
  417. fstat(3, {st_mode=S_IFREG|0644, st_size=10478, ...}) = 0
  418. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  419. read(3, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
  420. read(3, " issuing \n# the \"mesg y\" command"..., 4096) = 4096
  421. read(3, "It supports passwords of unlimit"..., 4096) = 2286
  422. close(3) = 0
  423. munmap(0x7f50d4e0b000, 4096) = 0
  424. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  425. lseek(3, 0, SEEK_CUR) = 0
  426. fstat(3, {st_mode=S_IFREG|0644, st_size=1322, ...}) = 0
  427. mmap(NULL, 1322, PROT_READ, MAP_SHARED, 3, 0) = 0x7f50d4e0b000
  428. lseek(3, 1322, SEEK_SET) = 1322
  429. munmap(0x7f50d4e0b000, 1322) = 0
  430. close(3) = 0
  431. open("/etc/shadow", O_RDONLY|O_CLOEXEC) = 3
  432. lseek(3, 0, SEEK_CUR) = 0
  433. fstat(3, {st_mode=S_IFREG|0640, st_size=783, ...}) = 0
  434. mmap(NULL, 783, PROT_READ, MAP_SHARED, 3, 0) = 0x7f50d4e0b000
  435. lseek(3, 783, SEEK_SET) = 783
  436. munmap(0x7f50d4e0b000, 783) = 0
  437. close(3) = 0
  438. socket(PF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 3
  439. fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  440. sendto(3, "t\0\0\0M\4\5\0\2\0\0\0\0\0\0\0op=PAM:accountin"..., 116, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 116
  441. poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
  442. recvfrom(3, "$\0\0\0\2\0\0\0\2\0\0\0$\0\0\0\0\0\0\0t\0\0\0M\4\5\0\2\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  443. recvfrom(3, "$\0\0\0\2\0\0\0\2\0\0\0$\0\0\0\0\0\0\0t\0\0\0M\4\5\0\2\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  444. close(3) = 0
  445. rt_sigaction(SIGINT, {SIG_DFL, [INT], SA_RESTORER|SA_RESTART, 0x7f50d44640e0}, {SIG_IGN, [INT], SA_RESTORER|SA_RESTART, 0x7f50d44640e0}, 8) = 0
  446. rt_sigaction(SIGQUIT, {SIG_DFL, [QUIT], SA_RESTORER|SA_RESTART, 0x7f50d44640e0}, {SIG_IGN, [QUIT], SA_RESTORER|SA_RESTART, 0x7f50d44640e0}, 8) = 0
  447. open("/etc/localtime", O_RDONLY|O_CLOEXEC) = 3
  448. fstat(3, {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
  449. fstat(3, {st_mode=S_IFREG|0644, st_size=118, ...}) = 0
  450. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  451. read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0"..., 4096) = 118
  452. lseek(3, -62, SEEK_CUR) = 56
  453. read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0"..., 4096) = 62
  454. close(3) = 0
  455. munmap(0x7f50d4e0b000, 4096) = 0
  456. socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
  457. connect(3, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
  458. close(3) = 0
  459. open("/etc/login.defs", O_RDONLY) = 3
  460. fstat(3, {st_mode=S_IFREG|0644, st_size=10478, ...}) = 0
  461. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  462. read(3, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
  463. read(3, " issuing \n# the \"mesg y\" command"..., 4096) = 4096
  464. read(3, "It supports passwords of unlimit"..., 4096) = 2286
  465. read(3, "", 4096) = 0
  466. close(3) = 0
  467. munmap(0x7f50d4e0b000, 4096) = 0
  468. socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
  469. connect(3, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
  470. close(3) = 0
  471. setgid(108) = 0
  472. open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 3
  473. read(3, "65536\n", 31) = 6
  474. close(3) = 0
  475. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
  476. connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  477. close(3) = 0
  478. socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
  479. connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  480. close(3) = 0
  481. open("/etc/group", O_RDONLY|O_CLOEXEC) = 3
  482. lseek(3, 0, SEEK_CUR) = 0
  483. fstat(3, {st_mode=S_IFREG|0644, st_size=609, ...}) = 0
  484. mmap(NULL, 609, PROT_READ, MAP_SHARED, 3, 0) = 0x7f50d4e0b000
  485. lseek(3, 609, SEEK_SET) = 609
  486. fstat(3, {st_mode=S_IFREG|0644, st_size=609, ...}) = 0
  487. munmap(0x7f50d4e0b000, 609) = 0
  488. close(3) = 0
  489. setgroups(1, [108]) = 0
  490. socket(PF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 3
  491. fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  492. sendto(3, "p\0\0\0O\4\5\0\3\0\0\0\0\0\0\0op=PAM:setcred a"..., 112, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 112
  493. poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
  494. recvfrom(3, "$\0\0\0\2\0\0\0\3\0\0\0$\0\0\0\0\0\0\0p\0\0\0O\4\5\0\3\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  495. recvfrom(3, "$\0\0\0\2\0\0\0\3\0\0\0$\0\0\0\0\0\0\0p\0\0\0O\4\5\0\3\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  496. close(3) = 0
  497. open("/etc/security/pam_env.conf", O_RDONLY) = 3
  498. fstat(3, {st_mode=S_IFREG|0644, st_size=2972, ...}) = 0
  499. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  500. read(3, "#\n# This is the configuration fi"..., 4096) = 2972
  501. read(3, "", 4096) = 0
  502. close(3) = 0
  503. munmap(0x7f50d4e0b000, 4096) = 0
  504. open("/etc/environment", O_RDONLY) = 3
  505. fstat(3, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
  506. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  507. read(3, "", 4096) = 0
  508. close(3) = 0
  509. munmap(0x7f50d4e0b000, 4096) = 0
  510. open("/etc/security/pam_env.conf", O_RDONLY) = 3
  511. fstat(3, {st_mode=S_IFREG|0644, st_size=2972, ...}) = 0
  512. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  513. read(3, "#\n# This is the configuration fi"..., 4096) = 2972
  514. read(3, "", 4096) = 0
  515. close(3) = 0
  516. munmap(0x7f50d4e0b000, 4096) = 0
  517. open("/etc/default/locale", O_RDONLY) = -1 ENOENT (No such file or directory)
  518. socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
  519. connect(3, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
  520. close(3) = 0
  521. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  522. lseek(3, 0, SEEK_CUR) = 0
  523. fstat(3, {st_mode=S_IFREG|0644, st_size=1322, ...}) = 0
  524. mmap(NULL, 1322, PROT_READ, MAP_SHARED, 3, 0) = 0x7f50d4e0b000
  525. lseek(3, 1322, SEEK_SET) = 1322
  526. munmap(0x7f50d4e0b000, 1322) = 0
  527. close(3) = 0
  528. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  529. lseek(3, 0, SEEK_CUR) = 0
  530. fstat(3, {st_mode=S_IFREG|0644, st_size=1322, ...}) = 0
  531. mmap(NULL, 1322, PROT_READ, MAP_SHARED, 3, 0) = 0x7f50d4e0b000
  532. lseek(3, 1322, SEEK_SET) = 1322
  533. munmap(0x7f50d4e0b000, 1322) = 0
  534. close(3) = 0
  535. getrlimit(RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  536. getrlimit(RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  537. getrlimit(RLIMIT_DATA, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  538. getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
  539. getrlimit(RLIMIT_CORE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  540. getrlimit(RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  541. getrlimit(RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  542. getrlimit(RLIMIT_NOFILE, {rlim_cur=1024*1024, rlim_max=1024*1024}) = 0
  543. getrlimit(RLIMIT_MEMLOCK, {rlim_cur=64*1024, rlim_max=64*1024}) = 0
  544. getrlimit(RLIMIT_AS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  545. getrlimit(RLIMIT_LOCKS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  546. getrlimit(RLIMIT_SIGPENDING, {rlim_cur=64124, rlim_max=64124}) = 0
  547. getrlimit(RLIMIT_MSGQUEUE, {rlim_cur=800*1024, rlim_max=800*1024}) = 0
  548. getrlimit(RLIMIT_NICE, {rlim_cur=0, rlim_max=0}) = 0
  549. getrlimit(RLIMIT_RTPRIO, {rlim_cur=0, rlim_max=0}) = 0
  550. getrlimit(RLIMIT_RTTIME, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  551. open("/proc/1/limits", O_RDONLY) = 3
  552. fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
  553. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  554. read(3, "Limit Soft L"..., 1024) = 1024
  555. read(3, " \nMax msgqueue size 819"..., 1024) = 299
  556. read(3, "", 1024) = 0
  557. close(3) = 0
  558. munmap(0x7f50d4e0b000, 4096) = 0
  559. getpriority(PRIO_PROCESS, 0) = 20
  560. open("/etc/security/limits.conf", O_RDONLY) = 3
  561. fstat(3, {st_mode=S_IFREG|0644, st_size=2150, ...}) = 0
  562. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  563. read(3, "# /etc/security/limits.conf\n#\n#E"..., 4096) = 2150
  564. read(3, "", 4096) = 0
  565. close(3) = 0
  566. munmap(0x7f50d4e0b000, 4096) = 0
  567. openat(AT_FDCWD, "/etc/security/limits.d", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  568. getdents(3, /* 2 entries */, 32768) = 48
  569. getdents(3, /* 0 entries */, 32768) = 0
  570. close(3) = 0
  571. setrlimit(RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  572. setrlimit(RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  573. setrlimit(RLIMIT_DATA, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  574. setrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
  575. setrlimit(RLIMIT_CORE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  576. setrlimit(RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  577. setrlimit(RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  578. setrlimit(RLIMIT_NOFILE, {rlim_cur=1024*1024, rlim_max=1024*1024}) = 0
  579. setrlimit(RLIMIT_MEMLOCK, {rlim_cur=64*1024, rlim_max=64*1024}) = 0
  580. setrlimit(RLIMIT_AS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  581. setrlimit(RLIMIT_LOCKS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  582. setrlimit(RLIMIT_SIGPENDING, {rlim_cur=64124, rlim_max=64124}) = 0
  583. setrlimit(RLIMIT_MSGQUEUE, {rlim_cur=800*1024, rlim_max=800*1024}) = 0
  584. setrlimit(RLIMIT_NICE, {rlim_cur=0, rlim_max=0}) = 0
  585. setrlimit(RLIMIT_RTPRIO, {rlim_cur=0, rlim_max=0}) = 0
  586. setrlimit(RLIMIT_RTTIME, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
  587. setpriority(PRIO_PROCESS, 0, 0) = 0
  588. getuid() = 0
  589. open("/etc/login.defs", O_RDONLY) = 3
  590. fstat(3, {st_mode=S_IFREG|0644, st_size=10478, ...}) = 0
  591. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  592. read(3, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
  593. read(3, " issuing \n# the \"mesg y\" command"..., 4096) = 4096
  594. read(3, "It supports passwords of unlimit"..., 4096) = 2286
  595. close(3) = 0
  596. munmap(0x7f50d4e0b000, 4096) = 0
  597. access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or directory)
  598. open("/var/run/utmp", O_RDONLY|O_CLOEXEC) = 3
  599. lseek(3, 0, SEEK_SET) = 0
  600. alarm(0) = 0
  601. rt_sigaction(SIGALRM, {0x7f50d454a7c0, [], SA_RESTORER, 0x7f50d44640e0}, {SIG_DFL, [], SA_RESTORER, 0x7f50d44640e0}, 8) = 0
  602. alarm(10) = 0
  603. fcntl(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) = 0
  604. read(3, "", 384) = 0
  605. fcntl(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
  606. alarm(0) = 10
  607. rt_sigaction(SIGALRM, {SIG_DFL, [], SA_RESTORER, 0x7f50d44640e0}, NULL, 8) = 0
  608. close(3) = 0
  609. getuid() = 0
  610. socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
  611. connect(3, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
  612. close(3) = 0
  613. socket(PF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 3
  614. fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  615. sendto(3, "t\0\0\0Q\4\5\0\4\0\0\0\0\0\0\0op=PAM:session_o"..., 116, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 116
  616. poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
  617. recvfrom(3, "$\0\0\0\2\0\0\0\4\0\0\0$\0\0\0\0\0\0\0t\0\0\0Q\4\5\0\4\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  618. recvfrom(3, "$\0\0\0\2\0\0\0\4\0\0\0$\0\0\0\0\0\0\0t\0\0\0Q\4\5\0\4\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  619. close(3) = 0
  620. clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f50d4e059d0) = 37
  621. rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1], NULL, 8) = 0
  622. rt_sigaction(SIGTERM, {0x55b48a248f30, [], SA_RESTORER, 0x7f50d44640e0}, NULL, 8) = 0
  623. rt_sigaction(SIGINT, {0x55b48a248f30, [], SA_RESTORER, 0x7f50d44640e0}, NULL, 8) = 0
  624. rt_sigaction(SIGQUIT, {0x55b48a248f30, [], SA_RESTORER, 0x7f50d44640e0}, NULL, 8) = 0
  625. rt_sigaction(SIGTSTP, {0x55b48a248f30, [], SA_RESTORER, 0x7f50d44640e0}, NULL, 8) = 0
  626. rt_sigprocmask(SIG_UNBLOCK, [INT QUIT ALRM TERM TSTP], NULL, 8) = 0
  627. wait4(-1, touch: cannot touch 'logs/test.log': Permission denied
  628. [{WIFEXITED(s) && WEXITSTATUS(s) == 1}], WSTOPPED, NULL) = 37
  629. open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  630. lseek(3, 0, SEEK_CUR) = 0
  631. fstat(3, {st_mode=S_IFREG|0644, st_size=1322, ...}) = 0
  632. mmap(NULL, 1322, PROT_READ, MAP_SHARED, 3, 0) = 0x7f50d4e0b000
  633. lseek(3, 1322, SEEK_SET) = 1322
  634. munmap(0x7f50d4e0b000, 1322) = 0
  635. close(3) = 0
  636. getuid() = 0
  637. open("/etc/login.defs", O_RDONLY) = 3
  638. fstat(3, {st_mode=S_IFREG|0644, st_size=10478, ...}) = 0
  639. mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4e0b000
  640. read(3, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
  641. read(3, " issuing \n# the \"mesg y\" command"..., 4096) = 4096
  642. read(3, "It supports passwords of unlimit"..., 4096) = 2286
  643. close(3) = 0
  644. munmap(0x7f50d4e0b000, 4096) = 0
  645. socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
  646. connect(3, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
  647. close(3) = 0
  648. socket(PF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 3
  649. fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  650. sendto(3, "x\0\0\0R\4\5\0\5\0\0\0\0\0\0\0op=PAM:session_c"..., 120, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 120
  651. poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
  652. recvfrom(3, "$\0\0\0\2\0\0\0\5\0\0\0$\0\0\0\0\0\0\0x\0\0\0R\4\5\0\5\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  653. recvfrom(3, "$\0\0\0\2\0\0\0\5\0\0\0$\0\0\0\0\0\0\0x\0\0\0R\4\5\0\5\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  654. close(3) = 0
  655. socket(PF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 3
  656. fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  657. sendto(3, "p\0\0\0P\4\5\0\6\0\0\0\0\0\0\0op=PAM:setcred a"..., 112, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 112
  658. poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
  659. recvfrom(3, "$\0\0\0\2\0\0\0\6\0\0\0$\0\0\0\0\0\0\0p\0\0\0P\4\5\0\6\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  660. recvfrom(3, "$\0\0\0\2\0\0\0\6\0\0\0$\0\0\0\0\0\0\0p\0\0\0P\4\5\0\6\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
  661. close(3) = 0
  662. munmap(0x7f50d35cb000, 2105528) = 0
  663. munmap(0x7f50d2d17000, 2109672) = 0
  664. munmap(0x7f50d2b14000, 2105536) = 0
  665. munmap(0x7f50d290d000, 2122120) = 0
  666. munmap(0x7f50d26f2000, 2204800) = 0
  667. munmap(0x7f50d33a6000, 2246896) = 0
  668. munmap(0x7f50d3138000, 2543976) = 0
  669. munmap(0x7f50d24bb000, 2318848) = 0
  670. munmap(0x7f50d22b9000, 2101304) = 0
  671. munmap(0x7f50d20b7000, 2101328) = 0
  672. exit_group(1) = ?
  673. +++ exited with 1 +++
  674. root@6d17d7f7b496:/tomcat#
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement