876 03:16:01.602310 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffca7856290 /* 18 vars */) = 0 <0.001571> 876 03:16:01.604101 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000140> 876 03:16:01.604912 brk(NULL) = 0x55dce6b2d000 <0.000037> 876 03:16:01.605109 fcntl(0, F_GETFD) = 0 <0.000042> 876 03:16:01.605367 fcntl(1, F_GETFD) = 0 <0.000038> 876 03:16:01.605483 fcntl(2, F_GETFD) = 0 <0.000038> 876 03:16:01.605616 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.605741 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa179809000 <0.000034> 876 03:16:01.605845 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.605942 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000725> 876 03:16:01.606793 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000074> 876 03:16:01.607648 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 876 03:16:01.607818 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000037> 876 03:16:01.607931 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000023> 876 03:16:01.608012 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.608113 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000036> 876 03:16:01.608218 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.608322 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.608423 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.608526 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 876 03:16:01.608637 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000034> 876 03:16:01.608742 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.608842 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.608943 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 876 03:16:01.609044 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000030> 876 03:16:01.609142 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.609242 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.609341 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.609460 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.609580 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 876 03:16:01.609690 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.609791 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 876 03:16:01.609896 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000032> 876 03:16:01.609996 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.610094 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.610197 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.610295 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.610397 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.610498 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000032> 876 03:16:01.610641 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000036> 876 03:16:01.610749 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.610853 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.610959 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000020> 876 03:16:01.611073 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 876 03:16:01.611204 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7fff1d5db020, 0) = -1 ENOENT (No such file or directory) <0.000032> 876 03:16:01.611323 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 876 03:16:01.611423 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000031> 876 03:16:01.611524 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000051> 876 03:16:01.611663 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000041> 876 03:16:01.611866 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa179805000 <0.000036> 876 03:16:01.611980 close(3) = 0 <0.000029> 876 03:16:01.612070 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 876 03:16:01.612179 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000035> 876 03:16:01.612293 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000030> 876 03:16:01.612398 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa1797d4000 <0.000034> 876 03:16:01.612501 mmap(0x7fa1797d7000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fa1797d7000 <0.000059> 876 03:16:01.612621 mmap(0x7fa1797de000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7fa1797de000 <0.000036> 876 03:16:01.612714 mmap(0x7fa1797f3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7fa1797f3000 <0.000036> 876 03:16:01.612813 mmap(0x7fa1797f5000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa1797f5000 <0.000032> 876 03:16:01.612903 close(3) = 0 <0.000028> 876 03:16:01.612988 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 876 03:16:01.613087 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 876 03:16:01.613191 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000029> 876 03:16:01.613281 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000030> 876 03:16:01.613378 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa1797a6000 <0.000034> 876 03:16:01.613470 mmap(0x7fa1797ad000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7fa1797ad000 <0.000039> 876 03:16:01.613577 mmap(0x7fa1797c8000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7fa1797c8000 <0.000036> 876 03:16:01.613671 mmap(0x7fa1797d0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7fa1797d0000 <0.000038> 876 03:16:01.613768 mmap(0x7fa1797d2000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa1797d2000 <0.000032> 876 03:16:01.613858 close(3) = 0 <0.000029> 876 03:16:01.613943 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000048> 876 03:16:01.614059 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000885> 876 03:16:01.615026 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000033> 876 03:16:01.615152 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa179783000 <0.000034> 876 03:16:01.615252 mmap(0x7fa179789000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fa179789000 <0.000045> 876 03:16:01.615359 mmap(0x7fa17979d000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7fa17979d000 <0.000031> 876 03:16:01.615441 mmap(0x7fa1797a4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7fa1797a4000 <0.000033> 876 03:16:01.616127 close(3) = 0 <0.000055> 876 03:16:01.616250 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000048> 876 03:16:01.616359 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 876 03:16:01.616448 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000027> 876 03:16:01.616537 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000032> 876 03:16:01.616626 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000027> 876 03:16:01.616714 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000025> 876 03:16:01.616791 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa1795a1000 <0.000031> 876 03:16:01.616872 mmap(0x7fa1795c7000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7fa1795c7000 <0.000045> 876 03:16:01.616964 mmap(0x7fa17971d000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7fa17971d000 <0.000031> 876 03:16:01.617044 mmap(0x7fa179770000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7fa179770000 <0.000033> 876 03:16:01.617131 mmap(0x7fa179776000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa179776000 <0.000029> 876 03:16:01.617214 close(3) = 0 <0.000025> 876 03:16:01.617291 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 876 03:16:01.617380 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000026> 876 03:16:01.617460 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000027> 876 03:16:01.617548 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa179599000 <0.000182> 876 03:16:01.617813 mmap(0x7fa17959b000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa17959b000 <0.000093> 876 03:16:01.617969 mmap(0x7fa17959e000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fa17959e000 <0.000052> 876 03:16:01.618081 mmap(0x7fa17959f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fa17959f000 <0.000051> 876 03:16:01.618229 close(3) = 0 <0.000034> 876 03:16:01.618334 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000055> 876 03:16:01.618460 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000045> 876 03:16:01.618597 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000048> 876 03:16:01.618725 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa179597000 <0.000049> 876 03:16:01.618844 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa1794fd000 <0.000049> 876 03:16:01.618955 mmap(0x7fa1794ff000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa1794ff000 <0.000080> 876 03:16:01.619098 mmap(0x7fa17956a000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7fa17956a000 <0.000075> 876 03:16:01.619234 mmap(0x7fa179595000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7fa179595000 <0.000059> 876 03:16:01.619397 close(3) = 0 <0.000039> 876 03:16:01.620390 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa1794fa000 <0.000094> 876 03:16:01.620589 arch_prctl(ARCH_SET_FS, 0x7fa1794fa840) = 0 <0.000029> 876 03:16:01.620666 set_tid_address(0x7fa1794fab10) = 876 <0.000030> 876 03:16:01.620741 set_robust_list(0x7fa1794fab20, 24) = 0 <0.000031> 876 03:16:01.620819 rseq(0x7fa1794fb160, 0x20, 0, 0x53053053) = 0 <0.000029> 876 03:16:01.621120 mprotect(0x7fa179770000, 16384, PROT_READ) = 0 <0.000084> 876 03:16:01.621268 mprotect(0x7fa179595000, 4096, PROT_READ) = 0 <0.000059> 876 03:16:01.621423 mprotect(0x7fa17959f000, 4096, PROT_READ) = 0 <0.000036> 876 03:16:01.621665 mprotect(0x7fa1797a4000, 4096, PROT_READ) = 0 <0.000044> 876 03:16:01.621889 mprotect(0x7fa1797d0000, 4096, PROT_READ) = 0 <0.000077> 876 03:16:01.622067 mprotect(0x7fa1797f3000, 4096, PROT_READ) = 0 <0.000039> 876 03:16:01.622364 mprotect(0x55dcc1e27000, 8192, PROT_READ) = 0 <0.000051> 876 03:16:01.622490 mprotect(0x7fa17983c000, 8192, PROT_READ) = 0 <0.000053> 876 03:16:01.622642 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 876 03:16:01.622756 munmap(0x7fa179805000, 14575) = 0 <0.000045> 876 03:16:01.622877 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000047> 876 03:16:01.622990 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000029> 876 03:16:01.623082 read(3, "40\n", 7) = 3 <0.000036> 876 03:16:01.623185 close(3) = 0 <0.000030> 876 03:16:01.623268 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000029> 876 03:16:01.623343 prctl(PR_GET_SECUREBITS) = 0 <0.000030> 876 03:16:01.623419 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000028> 876 03:16:01.623491 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000028> 876 03:16:01.623596 statfs("/sys/fs/selinux", 0x7fff1d5dbdb0) = -1 ENOENT (No such file or directory) <0.000037> 876 03:16:01.623690 statfs("/selinux", 0x7fff1d5dbdb0) = -1 ENOENT (No such file or directory) <0.000029> 876 03:16:01.623806 getrandom("\x66\xac\x49\x6d\x53\xca\x8e\x0e", 8, GRND_NONBLOCK) = 8 <0.000028> 876 03:16:01.623889 brk(NULL) = 0x55dce6b2d000 <0.000027> 876 03:16:01.623961 brk(0x55dce6b4e000) = 0x55dce6b4e000 <0.000032> 876 03:16:01.624050 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000036> 876 03:16:01.624147 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000034> 876 03:16:01.624241 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tpr"..., 1024) = 336 <0.000044> 876 03:16:01.624343 read(3, "", 1024) = 0 <0.000028> 876 03:16:01.624422 close(3) = 0 <0.000032> 876 03:16:01.624504 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000034> 876 03:16:01.624626 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 876 03:16:01.624703 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000029> 876 03:16:01.624780 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000026> 876 03:16:01.624853 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000029> 876 03:16:01.624932 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000027> 876 03:16:01.625005 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 876 03:16:01.625088 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000030> 876 03:16:01.625164 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 876 03:16:01.625238 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000027> 876 03:16:01.625313 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000028> 876 03:16:01.625391 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000031> 876 03:16:01.625468 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000027> 876 03:16:01.625542 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000122> 876 03:16:01.625763 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000036> 876 03:16:01.625884 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000030> 876 03:16:01.625969 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 876 03:16:01.626057 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000032> 876 03:16:01.626162 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000033> 876 03:16:01.626251 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000031> 876 03:16:01.626347 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 876 03:16:01.626457 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000031> 876 03:16:01.626556 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa179200000 <0.000039> 876 03:16:01.626685 close(3) = 0 <0.000029> 876 03:16:01.626772 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 876 03:16:01.626877 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000031> 876 03:16:01.626976 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000033> 876 03:16:01.627094 read(3, "", 4096) = 0 <0.000030> 876 03:16:01.627180 close(3) = 0 <0.000031> 876 03:16:01.627279 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 876 03:16:01.627379 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000035> 876 03:16:01.627480 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000035> 876 03:16:01.627597 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa179808000 <0.000039> 876 03:16:01.627695 close(3) = 0 <0.000032> 876 03:16:01.627823 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000037> 876 03:16:01.627929 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000032> 876 03:16:01.628027 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7fa1794f3000 <0.000036> 876 03:16:01.628121 close(3) = 0 <0.000029> 876 03:16:01.628208 futex(0x7fa179775a4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000031> 876 03:16:01.628298 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 876 03:16:01.628407 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 876 03:16:01.628507 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000031> 876 03:16:01.628652 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa179807000 <0.000035> 876 03:16:01.628746 close(3) = 0 <0.000029> 876 03:16:01.628839 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 876 03:16:01.628933 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 876 03:16:01.629031 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000031> 876 03:16:01.629126 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa179806000 <0.000034> 876 03:16:01.629215 close(3) = 0 <0.000029> 876 03:16:01.629303 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.629389 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 876 03:16:01.629484 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000031> 876 03:16:01.629598 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa179805000 <0.000034> 876 03:16:01.629686 close(3) = 0 <0.000029> 876 03:16:01.629775 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.629862 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 876 03:16:01.629954 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000031> 876 03:16:01.630044 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa1794f2000 <0.000035> 876 03:16:01.630130 close(3) = 0 <0.000028> 876 03:16:01.630215 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 876 03:16:01.630302 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 876 03:16:01.630395 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000030> 876 03:16:01.630484 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa1794f1000 <0.000034> 876 03:16:01.630581 close(3) = 0 <0.000028> 876 03:16:01.630669 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.630760 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 876 03:16:01.630853 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000031> 876 03:16:01.630944 close(3) = 0 <0.000030> 876 03:16:01.631027 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 876 03:16:01.631118 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000030> 876 03:16:01.631216 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa1794f0000 <0.000033> 876 03:16:01.631302 close(3) = 0 <0.000028> 876 03:16:01.631387 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.631477 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 876 03:16:01.631605 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000031> 876 03:16:01.631699 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa1794ef000 <0.000033> 876 03:16:01.631811 close(3) = 0 <0.000029> 876 03:16:01.631899 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000029> 876 03:16:01.631982 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 876 03:16:01.632070 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000028> 876 03:16:01.632152 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa1794ee000 <0.000030> 876 03:16:01.632229 close(3) = 0 <0.000027> 876 03:16:01.632313 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 876 03:16:01.632394 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 876 03:16:01.632478 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000027> 876 03:16:01.632557 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa1794ed000 <0.000030> 876 03:16:01.632649 close(3) = 0 <0.000026> 876 03:16:01.632728 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 876 03:16:01.632807 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 876 03:16:01.632890 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000028> 876 03:16:01.632972 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa1794ec000 <0.000029> 876 03:16:01.633049 close(3) = 0 <0.000027> 876 03:16:01.633127 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 876 03:16:01.633206 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 876 03:16:01.633290 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000028> 876 03:16:01.633370 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa1791a9000 <0.000031> 876 03:16:01.633447 close(3) = 0 <0.000025> 876 03:16:01.633538 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000040> 876 03:16:01.633636 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000027> 876 03:16:01.633717 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000028> 876 03:16:01.633811 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000028> 876 03:16:01.633895 lseek(3, -60, SEEK_CUR) = 54 <0.000030> 876 03:16:01.633987 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000029> 876 03:16:01.634092 close(3) = 0 <0.000026> 876 03:16:01.634179 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000038> 876 03:16:01.634290 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000031> 876 03:16:01.634388 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000028> 876 03:16:01.634475 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000026> 876 03:16:01.634554 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000068> 876 03:16:01.634715 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000029> 876 03:16:01.634805 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.000850> 876 03:16:01.635787 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000026> 876 03:16:01.635873 read(3, "", 4096) = 0 <0.000033> 876 03:16:01.635952 close(3) = 0 <0.000027> 876 03:16:01.636058 geteuid() = 1000 <0.000022> 876 03:16:01.636121 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000024> 876 03:16:01.636199 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.636278 access("/usr/bin/sudo", X_OK) = 0 <0.000029> 876 03:16:01.636356 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000031> 876 03:16:01.636445 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000026> 876 03:16:01.636518 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000026> 876 03:16:01.636606 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000031> 876 03:16:01.636697 write(2, "sudo", 4) = 4 <0.000071> 876 03:16:01.636820 write(2, ": ", 2) = 2 <0.000035> 876 03:16:01.636919 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000031> 876 03:16:01.637006 ioctl(2, TCGETS, 0x7fff1d5da4d0) = -1 ENOTTY (Inappropriate ioctl for device) <0.000029> 876 03:16:01.637085 write(2, "\n", 1) = 1 <0.000028> 876 03:16:01.637198 exit_group(1) = ? 876 03:16:01.637478 +++ exited with 1 +++