872 03:05:05.214025 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffd574c7a90 /* 18 vars */) = 0 <0.002066> 872 03:05:05.216580 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000179> 872 03:05:05.217775 brk(NULL) = 0x55e880abb000 <0.000056> 872 03:05:05.218044 fcntl(0, F_GETFD) = 0 <0.000053> 872 03:05:05.218415 fcntl(1, F_GETFD) = 0 <0.000063> 872 03:05:05.218586 fcntl(2, F_GETFD) = 0 <0.000070> 872 03:05:05.218761 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000059> 872 03:05:05.218980 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffaf2175000 <0.000052> 872 03:05:05.219150 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000047> 872 03:05:05.219309 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000847> 872 03:05:05.220347 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000075> 872 03:05:05.221422 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000107> 872 03:05:05.221661 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000057> 872 03:05:05.221811 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000064> 872 03:05:05.221969 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000058> 872 03:05:05.222114 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000109> 872 03:05:05.222307 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000045> 872 03:05:05.222434 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000079> 872 03:05:05.222622 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000080> 872 03:05:05.222888 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000054> 872 03:05:05.223066 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000060> 872 03:05:05.223260 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000056> 872 03:05:05.223418 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000044> 872 03:05:05.223544 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000049> 872 03:05:05.223710 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000082> 872 03:05:05.223899 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000052> 872 03:05:05.224053 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000061> 872 03:05:05.224235 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000062> 872 03:05:05.224420 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000043> 872 03:05:05.224548 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000047> 872 03:05:05.224707 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000046> 872 03:05:05.224853 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000076> 872 03:05:05.225031 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000052> 872 03:05:05.225169 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000048> 872 03:05:05.225296 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000043> 872 03:05:05.225418 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000055> 872 03:05:05.225559 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000078> 872 03:05:05.225805 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000160> 872 03:05:05.226243 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000039> 872 03:05:05.226366 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000036> 872 03:05:05.226444 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000023> 872 03:05:05.226506 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000027> 872 03:05:05.226571 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000023> 872 03:05:05.226630 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000042> 872 03:05:05.226732 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7fffe4743950, 0) = -1 ENOENT (No such file or directory) <0.000029> 872 03:05:05.226806 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000046> 872 03:05:05.226904 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000037> 872 03:05:05.226994 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 872 03:05:05.227089 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000026> 872 03:05:05.227159 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf2171000 <0.000042> 872 03:05:05.227242 close(3) = 0 <0.000024> 872 03:05:05.227320 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 872 03:05:05.227395 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000028> 872 03:05:05.227466 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000025> 872 03:05:05.227536 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffaf2140000 <0.000032> 872 03:05:05.227622 mmap(0x7ffaf2143000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7ffaf2143000 <0.000076> 872 03:05:05.227738 mmap(0x7ffaf214a000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7ffaf214a000 <0.000038> 872 03:05:05.227815 mmap(0x7ffaf215f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7ffaf215f000 <0.000040> 872 03:05:05.227906 mmap(0x7ffaf2161000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffaf2161000 <0.000033> 872 03:05:05.227990 close(3) = 0 <0.000023> 872 03:05:05.228056 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 872 03:05:05.228135 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 872 03:05:05.228220 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000035> 872 03:05:05.228300 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000036> 872 03:05:05.228386 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffaf2112000 <0.000042> 872 03:05:05.228466 mmap(0x7ffaf2119000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7ffaf2119000 <0.000047> 872 03:05:05.228551 mmap(0x7ffaf2134000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7ffaf2134000 <0.000036> 872 03:05:05.228626 mmap(0x7ffaf213c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7ffaf213c000 <0.000106> 872 03:05:05.228793 mmap(0x7ffaf213e000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffaf213e000 <0.000021> 872 03:05:05.228855 close(3) = 0 <0.000019> 872 03:05:05.228912 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000053> 872 03:05:05.229007 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000904> 872 03:05:05.229967 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000028> 872 03:05:05.230041 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffaf20ef000 <0.000025> 872 03:05:05.230100 mmap(0x7ffaf20f5000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7ffaf20f5000 <0.000045> 872 03:05:05.230211 mmap(0x7ffaf2109000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7ffaf2109000 <0.000025> 872 03:05:05.230273 mmap(0x7ffaf2110000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7ffaf2110000 <0.000027> 872 03:05:05.231010 close(3) = 0 <0.000034> 872 03:05:05.231101 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000036> 872 03:05:05.231181 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:05:05.231250 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000022> 872 03:05:05.231318 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000021> 872 03:05:05.231379 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000022> 872 03:05:05.231440 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000021> 872 03:05:05.231499 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffaf1f0d000 <0.000031> 872 03:05:05.231563 mmap(0x7ffaf1f33000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7ffaf1f33000 <0.000049> 872 03:05:05.231683 mmap(0x7ffaf2089000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7ffaf2089000 <0.000036> 872 03:05:05.231760 mmap(0x7ffaf20dc000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7ffaf20dc000 <0.000040> 872 03:05:05.231856 mmap(0x7ffaf20e2000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffaf20e2000 <0.000026> 872 03:05:05.231943 close(3) = 0 <0.000021> 872 03:05:05.232020 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 872 03:05:05.232111 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000023> 872 03:05:05.232181 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:05:05.232255 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffaf1f05000 <0.000026> 872 03:05:05.232323 mmap(0x7ffaf1f07000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7ffaf1f07000 <0.000035> 872 03:05:05.232402 mmap(0x7ffaf1f0a000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7ffaf1f0a000 <0.000027> 872 03:05:05.232472 mmap(0x7ffaf1f0b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7ffaf1f0b000 <0.000025> 872 03:05:05.232553 close(3) = 0 <0.000021> 872 03:05:05.232618 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 872 03:05:05.232707 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000023> 872 03:05:05.232780 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:05:05.232856 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffaf1f03000 <0.000023> 872 03:05:05.232922 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ffaf1e69000 <0.000024> 872 03:05:05.232988 mmap(0x7ffaf1e6b000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7ffaf1e6b000 <0.000031> 872 03:05:05.233064 mmap(0x7ffaf1ed6000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7ffaf1ed6000 <0.000032> 872 03:05:05.233143 mmap(0x7ffaf1f01000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7ffaf1f01000 <0.000027> 872 03:05:05.233239 close(3) = 0 <0.000018> 872 03:05:05.234186 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffaf1e66000 <0.000042> 872 03:05:05.234276 arch_prctl(ARCH_SET_FS, 0x7ffaf1e66840) = 0 <0.000017> 872 03:05:05.234322 set_tid_address(0x7ffaf1e66b10) = 872 <0.000017> 872 03:05:05.234366 set_robust_list(0x7ffaf1e66b20, 24) = 0 <0.000017> 872 03:05:05.234412 rseq(0x7ffaf1e67160, 0x20, 0, 0x53053053) = 0 <0.000018> 872 03:05:05.234620 mprotect(0x7ffaf20dc000, 16384, PROT_READ) = 0 <0.000038> 872 03:05:05.234765 mprotect(0x7ffaf1f01000, 4096, PROT_READ) = 0 <0.000043> 872 03:05:05.234877 mprotect(0x7ffaf1f0b000, 4096, PROT_READ) = 0 <0.000029> 872 03:05:05.235072 mprotect(0x7ffaf2110000, 4096, PROT_READ) = 0 <0.000036> 872 03:05:05.235258 mprotect(0x7ffaf213c000, 4096, PROT_READ) = 0 <0.000033> 872 03:05:05.235370 mprotect(0x7ffaf215f000, 4096, PROT_READ) = 0 <0.000031> 872 03:05:05.235713 mprotect(0x55e84aead000, 8192, PROT_READ) = 0 <0.000043> 872 03:05:05.235813 mprotect(0x7ffaf21a8000, 8192, PROT_READ) = 0 <0.000058> 872 03:05:05.235951 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000024> 872 03:05:05.236051 munmap(0x7ffaf2171000, 14575) = 0 <0.000043> 872 03:05:05.236161 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000043> 872 03:05:05.236260 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000025> 872 03:05:05.236334 read(3, "40\n", 7) = 3 <0.000033> 872 03:05:05.236418 close(3) = 0 <0.000026> 872 03:05:05.236480 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000024> 872 03:05:05.236540 prctl(PR_GET_SECUREBITS) = 0 <0.000024> 872 03:05:05.236597 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000023> 872 03:05:05.236670 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000023> 872 03:05:05.236753 statfs("/sys/fs/selinux", 0x7fffe47446e0) = -1 ENOENT (No such file or directory) <0.000033> 872 03:05:05.236830 statfs("/selinux", 0x7fffe47446e0) = -1 ENOENT (No such file or directory) <0.000024> 872 03:05:05.236897 getrandom("\x4f\xb8\x05\x35\xbe\x25\x1b\x19", 8, GRND_NONBLOCK) = 8 <0.000027> 872 03:05:05.236964 brk(NULL) = 0x55e880abb000 <0.000022> 872 03:05:05.237019 brk(0x55e880adc000) = 0x55e880adc000 <0.000027> 872 03:05:05.237105 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 872 03:05:05.237185 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000028> 872 03:05:05.237257 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tpr"..., 1024) = 336 <0.000045> 872 03:05:05.237347 read(3, "", 1024) = 0 <0.000023> 872 03:05:05.237408 close(3) = 0 <0.000027> 872 03:05:05.237472 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000032> 872 03:05:05.237576 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000022> 872 03:05:05.237634 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000103> 872 03:05:05.237773 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000017> 872 03:05:05.237819 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000019> 872 03:05:05.237867 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000017> 872 03:05:05.237913 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000018> 872 03:05:05.237967 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000018> 872 03:05:05.238014 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000017> 872 03:05:05.238063 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000017> 872 03:05:05.238110 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000017> 872 03:05:05.238156 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000018> 872 03:05:05.238236 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000017> 872 03:05:05.238283 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000017> 872 03:05:05.238328 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000016> 872 03:05:05.238372 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000016> 872 03:05:05.238415 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000016> 872 03:05:05.238461 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000018> 872 03:05:05.238515 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000017> 872 03:05:05.238563 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000016> 872 03:05:05.238619 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000042> 872 03:05:05.238697 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000019> 872 03:05:05.238751 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf1a00000 <0.000027> 872 03:05:05.238819 close(3) = 0 <0.000018> 872 03:05:05.238868 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000023> 872 03:05:05.238928 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000018> 872 03:05:05.238985 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000020> 872 03:05:05.239053 read(3, "", 4096) = 0 <0.000017> 872 03:05:05.239100 close(3) = 0 <0.000019> 872 03:05:05.239158 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000020> 872 03:05:05.239210 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000021> 872 03:05:05.239267 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000018> 872 03:05:05.239318 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf2174000 <0.000021> 872 03:05:05.239369 close(3) = 0 <0.000017> 872 03:05:05.239420 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000022> 872 03:05:05.239478 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000019> 872 03:05:05.239531 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7ffaf1e5f000 <0.000022> 872 03:05:05.239583 close(3) = 0 <0.000018> 872 03:05:05.239635 futex(0x7ffaf20e1a4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000078> 872 03:05:05.239783 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000029> 872 03:05:05.239857 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 872 03:05:05.239928 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000026> 872 03:05:05.239994 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf2173000 <0.000039> 872 03:05:05.240069 close(3) = 0 <0.000023> 872 03:05:05.240141 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000026> 872 03:05:05.240206 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:05:05.240274 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000024> 872 03:05:05.240338 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf2172000 <0.000028> 872 03:05:05.240402 close(3) = 0 <0.000023> 872 03:05:05.240470 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000025> 872 03:05:05.240534 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 872 03:05:05.240602 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000024> 872 03:05:05.240783 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf2171000 <0.000071> 872 03:05:05.241105 close(3) = 0 <0.000040> 872 03:05:05.241223 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 872 03:05:05.241321 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 872 03:05:05.241403 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000027> 872 03:05:05.241483 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf1e5e000 <0.000037> 872 03:05:05.241567 close(3) = 0 <0.000024> 872 03:05:05.241667 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 872 03:05:05.241742 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 872 03:05:05.241833 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000028> 872 03:05:05.241916 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf1e5d000 <0.000031> 872 03:05:05.241985 close(3) = 0 <0.000024> 872 03:05:05.242056 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000027> 872 03:05:05.242124 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000044> 872 03:05:05.242241 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000024> 872 03:05:05.242307 close(3) = 0 <0.000025> 872 03:05:05.242368 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:05:05.242437 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000024> 872 03:05:05.242510 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf1e5c000 <0.000030> 872 03:05:05.242576 close(3) = 0 <0.000023> 872 03:05:05.242658 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000027> 872 03:05:05.242725 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:05:05.242794 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000024> 872 03:05:05.242858 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf1e5b000 <0.000030> 872 03:05:05.242925 close(3) = 0 <0.000023> 872 03:05:05.242992 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000026> 872 03:05:05.243057 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:05:05.243125 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000024> 872 03:05:05.243189 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf1e5a000 <0.000029> 872 03:05:05.243254 close(3) = 0 <0.000023> 872 03:05:05.243326 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 872 03:05:05.243400 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 872 03:05:05.243491 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000027> 872 03:05:05.243575 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf1e59000 <0.000032> 872 03:05:05.243669 close(3) = 0 <0.000100> 872 03:05:05.243880 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 872 03:05:05.243966 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 872 03:05:05.244045 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000029> 872 03:05:05.244128 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf1e58000 <0.000034> 872 03:05:05.244209 close(3) = 0 <0.000022> 872 03:05:05.244276 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000025> 872 03:05:05.244342 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000026> 872 03:05:05.244408 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:05:05.244471 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ffaf1e01000 <0.000028> 872 03:05:05.244535 close(3) = 0 <0.000022> 872 03:05:05.244616 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000050> 872 03:05:05.244709 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000027> 872 03:05:05.244781 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000029> 872 03:05:05.244882 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000025> 872 03:05:05.244952 lseek(3, -60, SEEK_CUR) = 54 <0.000022> 872 03:05:05.245011 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000022> 872 03:05:05.245073 close(3) = 0 <0.000023> 872 03:05:05.245144 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000029> 872 03:05:05.245214 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:05:05.245277 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000023> 872 03:05:05.245336 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000022> 872 03:05:05.245399 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000023> 872 03:05:05.245464 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000024> 872 03:05:05.245539 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.001070> 872 03:05:05.246742 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000048> 872 03:05:05.246891 read(3, "", 4096) = 0 <0.000024> 872 03:05:05.246962 close(3) = 0 <0.000025> 872 03:05:05.247066 geteuid() = 1000 <0.000024> 872 03:05:05.247133 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000025> 872 03:05:05.247213 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000034> 872 03:05:05.247296 access("/usr/bin/sudo", X_OK) = 0 <0.000029> 872 03:05:05.247366 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000026> 872 03:05:05.247449 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000029> 872 03:05:05.247525 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000027> 872 03:05:05.247598 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000027> 872 03:05:05.247692 write(2, "sudo", 4) = 4 <0.000057> 872 03:05:05.247800 write(2, ": ", 2) = 2 <0.000026> 872 03:05:05.247876 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000027> 872 03:05:05.247947 ioctl(2, TCGETS, 0x7fffe4742e00) = -1 ENOTTY (Inappropriate ioctl for device) <0.000026> 872 03:05:05.248015 write(2, "\n", 1) = 1 <0.000024> 872 03:05:05.248124 exit_group(1) = ? 872 03:05:05.248469 +++ exited with 1 +++