896 08:30:11.991635 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffe629de020 /* 18 vars */) = 0 <0.001598> 896 08:30:11.993493 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000071> 896 08:30:11.994227 brk(NULL) = 0x55a955cb9000 <0.000032> 896 08:30:11.994404 fcntl(0, F_GETFD) = 0 <0.000037> 896 08:30:11.994617 fcntl(1, F_GETFD) = 0 <0.000029> 896 08:30:11.994709 fcntl(2, F_GETFD) = 0 <0.000030> 896 08:30:11.994819 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000028> 896 08:30:11.994923 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc377519000 <0.000031> 896 08:30:11.995016 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000027> 896 08:30:11.995100 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000953> 896 08:30:11.996237 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000048> 896 08:30:11.997357 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 896 08:30:11.997499 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000037> 896 08:30:11.997610 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:11.997700 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000049> 896 08:30:11.997817 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 896 08:30:11.997918 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:11.998019 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:11.998116 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:11.998214 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:11.998313 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000033> 896 08:30:11.998412 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:11.998510 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000033> 896 08:30:11.998610 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:11.998707 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000151> 896 08:30:11.998952 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000046> 896 08:30:11.999076 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000036> 896 08:30:11.999185 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 896 08:30:11.999316 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000037> 896 08:30:11.999429 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 896 08:30:11.999539 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000037> 896 08:30:11.999650 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000101> 896 08:30:11.999826 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000037> 896 08:30:11.999939 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000039> 896 08:30:12.000051 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000037> 896 08:30:12.000162 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000039> 896 08:30:12.000274 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000038> 896 08:30:12.000384 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000039> 896 08:30:12.000495 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000037> 896 08:30:12.000604 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000066> 896 08:30:12.000801 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000037> 896 08:30:12.000913 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 896 08:30:12.001024 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000036> 896 08:30:12.001143 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000042> 896 08:30:12.001260 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7ffd11ab1e00, 0) = -1 ENOENT (No such file or directory) <0.000037> 896 08:30:12.001370 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000044> 896 08:30:12.001486 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000040> 896 08:30:12.001622 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000065> 896 08:30:12.001806 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000038> 896 08:30:12.001927 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc377515000 <0.000053> 896 08:30:12.002053 close(3) = 0 <0.000035> 896 08:30:12.002167 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000046> 896 08:30:12.002293 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000040> 896 08:30:12.002408 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000036> 896 08:30:12.002524 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc3774e4000 <0.000043> 896 08:30:12.002649 mmap(0x7fc3774e7000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fc3774e7000 <0.000092> 896 08:30:12.002893 mmap(0x7fc3774ee000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7fc3774ee000 <0.000053> 896 08:30:12.003043 mmap(0x7fc377503000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7fc377503000 <0.000053> 896 08:30:12.003175 mmap(0x7fc377505000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc377505000 <0.000042> 896 08:30:12.003297 close(3) = 0 <0.000033> 896 08:30:12.003396 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000044> 896 08:30:12.003518 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 896 08:30:12.003633 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000035> 896 08:30:12.003758 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000040> 896 08:30:12.003879 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc3774b6000 <0.000049> 896 08:30:12.003992 mmap(0x7fc3774bd000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7fc3774bd000 <0.000057> 896 08:30:12.004113 mmap(0x7fc3774d8000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7fc3774d8000 <0.000048> 896 08:30:12.004225 mmap(0x7fc3774e0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7fc3774e0000 <0.000050> 896 08:30:12.004347 mmap(0x7fc3774e2000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc3774e2000 <0.000040> 896 08:30:12.004461 close(3) = 0 <0.000034> 896 08:30:12.004559 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000129> 896 08:30:12.004784 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000866> 896 08:30:12.005760 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000063> 896 08:30:12.005938 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc377493000 <0.000054> 896 08:30:12.006059 mmap(0x7fc377499000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fc377499000 <0.000086> 896 08:30:12.006209 mmap(0x7fc3774ad000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7fc3774ad000 <0.000047> 896 08:30:12.006320 mmap(0x7fc3774b4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7fc3774b4000 <0.000049> 896 08:30:12.007486 close(3) = 0 <0.000077> 896 08:30:12.007682 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000069> 896 08:30:12.007839 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000041> 896 08:30:12.007959 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000049> 896 08:30:12.008093 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000034> 896 08:30:12.008198 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000037> 896 08:30:12.008310 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000034> 896 08:30:12.008411 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc3772b1000 <0.000044> 896 08:30:12.008521 mmap(0x7fc3772d7000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7fc3772d7000 <0.000134> 896 08:30:12.008746 mmap(0x7fc37742d000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7fc37742d000 <0.000049> 896 08:30:12.008862 mmap(0x7fc377480000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7fc377480000 <0.000049> 896 08:30:12.008983 mmap(0x7fc377486000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fc377486000 <0.000042> 896 08:30:12.009104 close(3) = 0 <0.000034> 896 08:30:12.009207 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000043> 896 08:30:12.009324 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000036> 896 08:30:12.009427 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000036> 896 08:30:12.009536 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc3772a9000 <0.000041> 896 08:30:12.009640 mmap(0x7fc3772ab000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fc3772ab000 <0.000057> 896 08:30:12.009768 mmap(0x7fc3772ae000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fc3772ae000 <0.000047> 896 08:30:12.009879 mmap(0x7fc3772af000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fc3772af000 <0.000047> 896 08:30:12.010009 close(3) = 0 <0.000032> 896 08:30:12.010110 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000041> 896 08:30:12.010223 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000035> 896 08:30:12.010324 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000035> 896 08:30:12.010429 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc3772a7000 <0.000038> 896 08:30:12.010530 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fc37720d000 <0.000039> 896 08:30:12.010631 mmap(0x7fc37720f000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fc37720f000 <0.000055> 896 08:30:12.010768 mmap(0x7fc37727a000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7fc37727a000 <0.000114> 896 08:30:12.011023 mmap(0x7fc3772a5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7fc3772a5000 <0.000055> 896 08:30:12.011214 close(3) = 0 <0.000033> 896 08:30:12.012258 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc37720a000 <0.000063> 896 08:30:12.012406 arch_prctl(ARCH_SET_FS, 0x7fc37720a840) = 0 <0.000038> 896 08:30:12.012506 set_tid_address(0x7fc37720ab10) = 896 <0.000032> 896 08:30:12.012610 set_robust_list(0x7fc37720ab20, 24) = 0 <0.000034> 896 08:30:12.012756 rseq(0x7fc37720b160, 0x20, 0, 0x53053053) = 0 <0.000021> 896 08:30:12.012997 mprotect(0x7fc377480000, 16384, PROT_READ) = 0 <0.000040> 896 08:30:12.013098 mprotect(0x7fc3772a5000, 4096, PROT_READ) = 0 <0.000034> 896 08:30:12.013201 mprotect(0x7fc3772af000, 4096, PROT_READ) = 0 <0.000035> 896 08:30:12.013373 mprotect(0x7fc3774b4000, 4096, PROT_READ) = 0 <0.000037> 896 08:30:12.013529 mprotect(0x7fc3774e0000, 4096, PROT_READ) = 0 <0.000041> 896 08:30:12.013649 mprotect(0x7fc377503000, 4096, PROT_READ) = 0 <0.000040> 896 08:30:12.013889 mprotect(0x55a9290c4000, 8192, PROT_READ) = 0 <0.000035> 896 08:30:12.013985 mprotect(0x7fc37754c000, 8192, PROT_READ) = 0 <0.000037> 896 08:30:12.014093 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 896 08:30:12.014219 munmap(0x7fc377515000, 14575) = 0 <0.000041> 896 08:30:12.014342 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000044> 896 08:30:12.014468 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000033> 896 08:30:12.014582 read(3, "40\n", 7) = 3 <0.000034> 896 08:30:12.014691 close(3) = 0 <0.000048> 896 08:30:12.014800 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000031> 896 08:30:12.014888 prctl(PR_GET_SECUREBITS) = 0 <0.000031> 896 08:30:12.014973 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000030> 896 08:30:12.015057 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000030> 896 08:30:12.015158 statfs("/sys/fs/selinux", 0x7ffd11ab2b90) = -1 ENOENT (No such file or directory) <0.000038> 896 08:30:12.015268 statfs("/selinux", 0x7ffd11ab2b90) = -1 ENOENT (No such file or directory) <0.000030> 896 08:30:12.015364 getrandom("\xe4\x01\x90\x57\x5c\xc3\xf9\xbb", 8, GRND_NONBLOCK) = 8 <0.000029> 896 08:30:12.015456 brk(NULL) = 0x55a955cb9000 <0.000031> 896 08:30:12.015540 brk(0x55a955cda000) = 0x55a955cda000 <0.000032> 896 08:30:12.015635 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000036> 896 08:30:12.015774 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000035> 896 08:30:12.015890 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbd"..., 1024) = 347 <0.000095> 896 08:30:12.016078 read(3, "", 1024) = 0 <0.000020> 896 08:30:12.016172 close(3) = 0 <0.000030> 896 08:30:12.016260 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000033> 896 08:30:12.016378 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 896 08:30:12.016466 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 896 08:30:12.016550 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 896 08:30:12.016649 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000031> 896 08:30:12.016748 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000029> 896 08:30:12.016830 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 896 08:30:12.016927 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000028> 896 08:30:12.017008 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 896 08:30:12.017094 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000028> 896 08:30:12.017175 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000028> 896 08:30:12.017256 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000028> 896 08:30:12.017336 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000028> 896 08:30:12.017419 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000029> 896 08:30:12.017501 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 896 08:30:12.017581 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000028> 896 08:30:12.017661 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 896 08:30:12.017755 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000029> 896 08:30:12.017848 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000028> 896 08:30:12.017932 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000028> 896 08:30:12.018022 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 896 08:30:12.018123 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000029> 896 08:30:12.018218 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc376e00000 <0.000034> 896 08:30:12.018315 close(3) = 0 <0.000027> 896 08:30:12.018399 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 896 08:30:12.018497 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000029> 896 08:30:12.018593 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000029> 896 08:30:12.018697 read(3, "", 4096) = 0 <0.000035> 896 08:30:12.018846 close(3) = 0 <0.000037> 896 08:30:12.018975 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 896 08:30:12.019080 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 896 08:30:12.019192 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000035> 896 08:30:12.019296 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc377518000 <0.000047> 896 08:30:12.019404 close(3) = 0 <0.000031> 896 08:30:12.019506 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000037> 896 08:30:12.019615 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000034> 896 08:30:12.019716 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7fc377203000 <0.000121> 896 08:30:12.019951 close(3) = 0 <0.000033> 896 08:30:12.020069 futex(0x7fc377485a4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000021> 896 08:30:12.020159 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000035> 896 08:30:12.020287 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 896 08:30:12.020399 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000032> 896 08:30:12.020506 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc377517000 <0.000034> 896 08:30:12.020606 close(3) = 0 <0.000033> 896 08:30:12.020762 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 896 08:30:12.020866 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 896 08:30:12.020970 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000032> 896 08:30:12.021073 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc377516000 <0.000032> 896 08:30:12.021159 close(3) = 0 <0.000031> 896 08:30:12.021253 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 896 08:30:12.021350 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 896 08:30:12.021442 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000031> 896 08:30:12.021543 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc377515000 <0.000032> 896 08:30:12.021638 close(3) = 0 <0.000021> 896 08:30:12.021723 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:12.021838 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 896 08:30:12.021943 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000032> 896 08:30:12.022045 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc377202000 <0.000035> 896 08:30:12.022142 close(3) = 0 <0.000031> 896 08:30:12.022236 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 896 08:30:12.022333 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 896 08:30:12.022435 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000032> 896 08:30:12.022537 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc377201000 <0.000033> 896 08:30:12.022631 close(3) = 0 <0.000031> 896 08:30:12.022728 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000042> 896 08:30:12.022855 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 896 08:30:12.022950 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000031> 896 08:30:12.023052 close(3) = 0 <0.000031> 896 08:30:12.023142 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 896 08:30:12.023246 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000032> 896 08:30:12.023359 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc377200000 <0.000033> 896 08:30:12.023455 close(3) = 0 <0.000032> 896 08:30:12.023551 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 896 08:30:12.023649 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 896 08:30:12.023765 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000032> 896 08:30:12.023869 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc3771ff000 <0.000034> 896 08:30:12.023963 close(3) = 0 <0.000031> 896 08:30:12.024059 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:12.024157 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 896 08:30:12.024259 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000031> 896 08:30:12.024360 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc3771fe000 <0.000033> 896 08:30:12.024456 close(3) = 0 <0.000032> 896 08:30:12.024554 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 896 08:30:12.024685 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000041> 896 08:30:12.024811 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000031> 896 08:30:12.024912 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc3771fd000 <0.000032> 896 08:30:12.025007 close(3) = 0 <0.000031> 896 08:30:12.025102 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:12.025199 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 896 08:30:12.025292 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000032> 896 08:30:12.025393 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc3771fc000 <0.000032> 896 08:30:12.025478 close(3) = 0 <0.000021> 896 08:30:12.025561 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:12.025658 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 896 08:30:12.025786 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000033> 896 08:30:12.025891 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fc3771a5000 <0.000032> 896 08:30:12.025986 close(3) = 0 <0.000032> 896 08:30:12.026149 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000036> 896 08:30:12.026282 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000028> 896 08:30:12.026380 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000030> 896 08:30:12.026489 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000028> 896 08:30:12.026578 lseek(3, -60, SEEK_CUR) = 54 <0.000028> 896 08:30:12.026661 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000029> 896 08:30:12.026763 close(3) = 0 <0.000037> 896 08:30:12.026863 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000031> 896 08:30:12.026962 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000028> 896 08:30:12.027053 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000020> 896 08:30:12.027127 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000020> 896 08:30:12.027205 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000019> 896 08:30:12.027279 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000029> 896 08:30:12.027374 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.000785> 896 08:30:12.028272 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000034> 896 08:30:12.028379 read(3, "", 4096) = 0 <0.000029> 896 08:30:12.028467 close(3) = 0 <0.000029> 896 08:30:12.028577 geteuid() = 1000 <0.000053> 896 08:30:12.028683 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000026> 896 08:30:12.028782 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000032> 896 08:30:12.028871 access("/usr/bin/sudo", X_OK) = 0 <0.000028> 896 08:30:12.028950 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000030> 896 08:30:12.029049 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000027> 896 08:30:12.029137 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000028> 896 08:30:12.029223 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000029> 896 08:30:12.029311 write(2, "sudo", 4) = 4 <0.000042> 896 08:30:12.029415 write(2, ": ", 2) = 2 <0.000030> 896 08:30:12.029511 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000030> 896 08:30:12.029601 ioctl(2, TCGETS, 0x7ffd11ab12b0) = -1 ENOTTY (Inappropriate ioctl for device) <0.000028> 896 08:30:12.029689 write(2, "\n", 1) = 1 <0.000036> 896 08:30:12.029838 exit_group(1) = ? 896 08:30:12.030078 +++ exited with 1 +++