872 03:15:03.976448 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffc5489b970 /* 18 vars */) = 0 <0.002317> 872 03:15:03.979051 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000107> 872 03:15:03.979932 brk(NULL) = 0x556de5694000 <0.000046> 872 03:15:03.980193 fcntl(0, F_GETFD) = 0 <0.000050> 872 03:15:03.980453 fcntl(1, F_GETFD) = 0 <0.000063> 872 03:15:03.980588 fcntl(2, F_GETFD) = 0 <0.000042> 872 03:15:03.980711 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000038> 872 03:15:03.980893 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f178f702000 <0.000134> 872 03:15:03.981238 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000043> 872 03:15:03.981381 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000860> 872 03:15:03.982398 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000100> 872 03:15:03.983585 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000093> 872 03:15:03.983795 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000040> 872 03:15:03.983915 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000043> 872 03:15:03.984035 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000036> 872 03:15:03.984141 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000046> 872 03:15:03.984259 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000036> 872 03:15:03.984367 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 872 03:15:03.984476 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000036> 872 03:15:03.984583 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000051> 872 03:15:03.984707 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000036> 872 03:15:03.984815 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 872 03:15:03.984932 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000042> 872 03:15:03.985050 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 872 03:15:03.985160 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000040> 872 03:15:03.985276 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000045> 872 03:15:03.985392 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000042> 872 03:15:03.985510 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 872 03:15:03.985671 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000117> 872 03:15:03.985926 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 872 03:15:03.986101 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000038> 872 03:15:03.986218 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000046> 872 03:15:03.986338 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000037> 872 03:15:03.986517 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 872 03:15:03.986696 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000038> 872 03:15:03.986813 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 872 03:15:03.986929 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000042> 872 03:15:03.987050 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000044> 872 03:15:03.987170 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000042> 872 03:15:03.987288 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000053> 872 03:15:03.987414 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000035> 872 03:15:03.987521 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000039> 872 03:15:03.987653 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000037> 872 03:15:03.987773 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000052> 872 03:15:03.987902 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7ffd3ba778e0, 0) = -1 ENOENT (No such file or directory) <0.000035> 872 03:15:03.988009 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000041> 872 03:15:03.988133 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000046> 872 03:15:03.988265 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000050> 872 03:15:03.988417 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000038> 872 03:15:03.988537 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f6fe000 <0.000052> 872 03:15:03.988675 close(3) = 0 <0.000040> 872 03:15:03.988795 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000045> 872 03:15:03.988923 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000038> 872 03:15:03.989035 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000035> 872 03:15:03.989151 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f178f6cd000 <0.000045> 872 03:15:03.989284 mmap(0x7f178f6d0000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f178f6d0000 <0.000070> 872 03:15:03.989428 mmap(0x7f178f6d7000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7f178f6d7000 <0.000056> 872 03:15:03.989557 mmap(0x7f178f6ec000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7f178f6ec000 <0.000104> 872 03:15:03.989756 mmap(0x7f178f6ee000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f178f6ee000 <0.000055> 872 03:15:03.989895 close(3) = 0 <0.000035> 872 03:15:03.990002 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000055> 872 03:15:03.990142 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000045> 872 03:15:03.990267 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000044> 872 03:15:03.990386 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000066> 872 03:15:03.990540 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f178f69f000 <0.000052> 872 03:15:03.990717 mmap(0x7f178f6a6000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f178f6a6000 <0.000063> 872 03:15:03.990850 mmap(0x7f178f6c1000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f178f6c1000 <0.000047> 872 03:15:03.990963 mmap(0x7f178f6c9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7f178f6c9000 <0.000047> 872 03:15:03.991081 mmap(0x7f178f6cb000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f178f6cb000 <0.000037> 872 03:15:03.991187 close(3) = 0 <0.000031> 872 03:15:03.991281 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000077> 872 03:15:03.991432 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000890> 872 03:15:03.992422 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000041> 872 03:15:03.992576 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f178f67c000 <0.000082> 872 03:15:03.992723 mmap(0x7f178f682000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f178f682000 <0.000050> 872 03:15:03.992834 mmap(0x7f178f696000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7f178f696000 <0.000042> 872 03:15:03.992935 mmap(0x7f178f69d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7f178f69d000 <0.000038> 872 03:15:03.993734 close(3) = 0 <0.000056> 872 03:15:03.993886 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000051> 872 03:15:03.994014 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 872 03:15:03.994124 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000044> 872 03:15:03.994252 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000038> 872 03:15:03.994360 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000034> 872 03:15:03.994511 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000036> 872 03:15:03.994614 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f178f49a000 <0.000115> 872 03:15:03.994817 mmap(0x7f178f4c0000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7f178f4c0000 <0.000047> 872 03:15:03.994925 mmap(0x7f178f616000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7f178f616000 <0.000034> 872 03:15:03.995015 mmap(0x7f178f669000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7f178f669000 <0.000037> 872 03:15:03.995119 mmap(0x7f178f66f000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f178f66f000 <0.000029> 872 03:15:03.995213 close(3) = 0 <0.000029> 872 03:15:03.995307 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 872 03:15:03.995416 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000030> 872 03:15:03.995506 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000029> 872 03:15:03.995602 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f178f492000 <0.000044> 872 03:15:03.995703 mmap(0x7f178f494000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f178f494000 <0.000038> 872 03:15:03.995799 mmap(0x7f178f497000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f178f497000 <0.000035> 872 03:15:03.995891 mmap(0x7f178f498000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f178f498000 <0.000036> 872 03:15:03.995994 close(3) = 0 <0.000029> 872 03:15:03.996081 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 872 03:15:03.996186 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000029> 872 03:15:03.996274 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000029> 872 03:15:03.996367 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f178f490000 <0.000030> 872 03:15:03.996450 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f178f3f6000 <0.000031> 872 03:15:03.996538 mmap(0x7f178f3f8000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f178f3f8000 <0.000042> 872 03:15:03.996651 mmap(0x7f178f463000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7f178f463000 <0.000034> 872 03:15:03.996744 mmap(0x7f178f48e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7f178f48e000 <0.000034> 872 03:15:03.996854 close(3) = 0 <0.000029> 872 03:15:03.997686 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f178f3f3000 <0.000048> 872 03:15:03.997794 arch_prctl(ARCH_SET_FS, 0x7f178f3f3840) = 0 <0.000030> 872 03:15:03.997868 set_tid_address(0x7f178f3f3b10) = 872 <0.000023> 872 03:15:03.997933 set_robust_list(0x7f178f3f3b20, 24) = 0 <0.000024> 872 03:15:03.997999 rseq(0x7f178f3f4160, 0x20, 0, 0x53053053) = 0 <0.000024> 872 03:15:03.998222 mprotect(0x7f178f669000, 16384, PROT_READ) = 0 <0.000036> 872 03:15:03.998304 mprotect(0x7f178f48e000, 4096, PROT_READ) = 0 <0.000029> 872 03:15:03.998399 mprotect(0x7f178f498000, 4096, PROT_READ) = 0 <0.000058> 872 03:15:03.998580 mprotect(0x7f178f69d000, 4096, PROT_READ) = 0 <0.000029> 872 03:15:03.998749 mprotect(0x7f178f6c9000, 4096, PROT_READ) = 0 <0.000029> 872 03:15:03.998841 mprotect(0x7f178f6ec000, 4096, PROT_READ) = 0 <0.000028> 872 03:15:03.999190 mprotect(0x556dc6b6a000, 8192, PROT_READ) = 0 <0.000099> 872 03:15:03.999390 mprotect(0x7f178f735000, 8192, PROT_READ) = 0 <0.000035> 872 03:15:03.999515 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 872 03:15:03.999688 munmap(0x7f178f6fe000, 14575) = 0 <0.000048> 872 03:15:03.999806 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000041> 872 03:15:03.999941 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000030> 872 03:15:04.000048 read(3, "40\n", 7) = 3 <0.000032> 872 03:15:04.000150 close(3) = 0 <0.000029> 872 03:15:04.000235 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000027> 872 03:15:04.000311 prctl(PR_GET_SECUREBITS) = 0 <0.000028> 872 03:15:04.000387 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000020> 872 03:15:04.000455 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000029> 872 03:15:04.000553 statfs("/sys/fs/selinux", 0x7ffd3ba78670) = -1 ENOENT (No such file or directory) <0.000033> 872 03:15:04.000657 statfs("/selinux", 0x7ffd3ba78670) = -1 ENOENT (No such file or directory) <0.000029> 872 03:15:04.000747 getrandom("\xf2\xf8\xcc\xd2\x9f\xb8\x1c\xc1", 8, GRND_NONBLOCK) = 8 <0.000028> 872 03:15:04.000831 brk(NULL) = 0x556de5694000 <0.000028> 872 03:15:04.000907 brk(0x556de56b5000) = 0x556de56b5000 <0.000029> 872 03:15:04.000993 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 872 03:15:04.001102 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000030> 872 03:15:04.001202 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbd"..., 1024) = 347 <0.000038> 872 03:15:04.001308 read(3, "", 1024) = 0 <0.000029> 872 03:15:04.001393 close(3) = 0 <0.000029> 872 03:15:04.001477 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000032> 872 03:15:04.001585 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000070> 872 03:15:04.001723 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 872 03:15:04.001816 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 872 03:15:04.001896 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000020> 872 03:15:04.001968 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000029> 872 03:15:04.002048 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 872 03:15:04.002146 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000030> 872 03:15:04.002228 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000029> 872 03:15:04.002315 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000029> 872 03:15:04.002398 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000074> 872 03:15:04.002531 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000029> 872 03:15:04.002615 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000045> 872 03:15:04.002750 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000016> 872 03:15:04.002830 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 872 03:15:04.002914 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000029> 872 03:15:04.002995 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 872 03:15:04.003074 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000029> 872 03:15:04.003167 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000029> 872 03:15:04.003252 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000029> 872 03:15:04.003442 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000105> 872 03:15:04.003713 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000032> 872 03:15:04.003830 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f000000 <0.000033> 872 03:15:04.003927 close(3) = 0 <0.000025> 872 03:15:04.004001 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 872 03:15:04.004092 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000026> 872 03:15:04.004176 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000026> 872 03:15:04.004275 read(3, "", 4096) = 0 <0.000024> 872 03:15:04.004346 close(3) = 0 <0.000023> 872 03:15:04.004428 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000026> 872 03:15:04.004507 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 872 03:15:04.004592 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000060> 872 03:15:04.004708 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f701000 <0.000026> 872 03:15:04.004781 close(3) = 0 <0.000021> 872 03:15:04.004848 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000025> 872 03:15:04.004923 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:15:04.004994 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7f178f3ec000 <0.000026> 872 03:15:04.005065 close(3) = 0 <0.000021> 872 03:15:04.005131 futex(0x7f178f66ea4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000023> 872 03:15:04.005197 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000023> 872 03:15:04.005277 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000024> 872 03:15:04.005353 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:15:04.005425 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f700000 <0.000025> 872 03:15:04.005493 close(3) = 0 <0.000022> 872 03:15:04.005561 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000023> 872 03:15:04.005645 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 872 03:15:04.005734 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:15:04.005806 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f6ff000 <0.000026> 872 03:15:04.005875 close(3) = 0 <0.000022> 872 03:15:04.005944 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000024> 872 03:15:04.006015 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000025> 872 03:15:04.006090 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:15:04.006161 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f6fe000 <0.000025> 872 03:15:04.006229 close(3) = 0 <0.000022> 872 03:15:04.006297 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000023> 872 03:15:04.006367 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000025> 872 03:15:04.006461 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000024> 872 03:15:04.006537 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f3eb000 <0.000026> 872 03:15:04.006606 close(3) = 0 <0.000034> 872 03:15:04.006686 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000023> 872 03:15:04.006757 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000025> 872 03:15:04.006832 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:15:04.006902 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f3ea000 <0.000027> 872 03:15:04.006971 close(3) = 0 <0.000022> 872 03:15:04.007039 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000024> 872 03:15:04.007109 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 872 03:15:04.007190 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000025> 872 03:15:04.007264 close(3) = 0 <0.000023> 872 03:15:04.007328 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000024> 872 03:15:04.007403 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:15:04.007482 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f3e9000 <0.000026> 872 03:15:04.007551 close(3) = 0 <0.000022> 872 03:15:04.007621 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000106> 872 03:15:04.007801 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 872 03:15:04.007891 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000027> 872 03:15:04.007971 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f3e8000 <0.000039> 872 03:15:04.008054 close(3) = 0 <0.000024> 872 03:15:04.008148 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000026> 872 03:15:04.008221 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 872 03:15:04.008300 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000025> 872 03:15:04.008375 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f3e7000 <0.000030> 872 03:15:04.008448 close(3) = 0 <0.000024> 872 03:15:04.008530 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000027> 872 03:15:04.008606 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000059> 872 03:15:04.008717 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000026> 872 03:15:04.008793 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f3e6000 <0.000029> 872 03:15:04.008867 close(3) = 0 <0.000024> 872 03:15:04.008941 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000026> 872 03:15:04.009015 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 872 03:15:04.009094 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000029> 872 03:15:04.009186 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f3e5000 <0.000032> 872 03:15:04.009271 close(3) = 0 <0.000024> 872 03:15:04.009346 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 872 03:15:04.009428 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000035> 872 03:15:04.009518 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000030> 872 03:15:04.009602 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f178f38e000 <0.000051> 872 03:15:04.009703 close(3) = 0 <0.000028> 872 03:15:04.009809 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 872 03:15:04.009904 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000033> 872 03:15:04.009992 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000031> 872 03:15:04.010095 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000032> 872 03:15:04.010182 lseek(3, -60, SEEK_CUR) = 54 <0.000030> 872 03:15:04.010263 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000030> 872 03:15:04.010347 close(3) = 0 <0.000027> 872 03:15:04.010457 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000032> 872 03:15:04.010544 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000026> 872 03:15:04.010620 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000084> 872 03:15:04.010761 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000023> 872 03:15:04.010840 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000021> 872 03:15:04.010905 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000025> 872 03:15:04.010981 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.001055> 872 03:15:04.012123 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000079> 872 03:15:04.012268 read(3, "", 4096) = 0 <0.000026> 872 03:15:04.012340 close(3) = 0 <0.000024> 872 03:15:04.012435 geteuid() = 1000 <0.000021> 872 03:15:04.012491 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000023> 872 03:15:04.012563 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000031> 872 03:15:04.012701 access("/usr/bin/sudo", X_OK) = 0 <0.000041> 872 03:15:04.012782 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000025> 872 03:15:04.012860 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000027> 872 03:15:04.012932 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000025> 872 03:15:04.013000 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000024> 872 03:15:04.013072 write(2, "sudo", 4) = 4 <0.000058> 872 03:15:04.013175 write(2, ": ", 2) = 2 <0.000026> 872 03:15:04.013251 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000026> 872 03:15:04.013322 ioctl(2, TCGETS, 0x7ffd3ba76d90) = -1 ENOTTY (Inappropriate ioctl for device) <0.000026> 872 03:15:04.013394 write(2, "\n", 1) = 1 <0.000025> 872 03:15:04.013501 exit_group(1) = ? 872 03:15:04.013824 +++ exited with 1 +++