872 03:08:56.590989 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7ffd6d32c510 /* 18 vars */) = 0 <0.001664> 872 03:08:56.592873 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000078> 872 03:08:56.593507 brk(NULL) = 0x557849449000 <0.000072> 872 03:08:56.593760 fcntl(0, F_GETFD) = 0 <0.000040> 872 03:08:56.593950 fcntl(1, F_GETFD) = 0 <0.000025> 872 03:08:56.594030 fcntl(2, F_GETFD) = 0 <0.000024> 872 03:08:56.594119 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000029> 872 03:08:56.594241 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f35a34c7000 <0.000036> 872 03:08:56.594337 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000027> 872 03:08:56.594500 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000880> 872 03:08:56.595486 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000063> 872 03:08:56.596348 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 872 03:08:56.596436 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000019> 872 03:08:56.596495 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000022> 872 03:08:56.596570 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000023> 872 03:08:56.596636 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 872 03:08:56.596715 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.596773 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000022> 872 03:08:56.596832 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000020> 872 03:08:56.596890 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000022> 872 03:08:56.596949 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000020> 872 03:08:56.597006 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000020> 872 03:08:56.597064 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.597123 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.597182 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.597241 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.597300 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.597359 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000022> 872 03:08:56.597449 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000027> 872 03:08:56.597515 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000051> 872 03:08:56.597606 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.597667 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000025> 872 03:08:56.597731 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.597790 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000022> 872 03:08:56.597850 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.597909 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000022> 872 03:08:56.597970 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.598029 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.598088 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000022> 872 03:08:56.598149 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000024> 872 03:08:56.598212 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.598272 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.598332 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000020> 872 03:08:56.598416 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000024> 872 03:08:56.598482 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7ffe95ba5450, 0) = -1 ENOENT (No such file or directory) <0.000020> 872 03:08:56.598540 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000024> 872 03:08:56.598613 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000024> 872 03:08:56.598692 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000026> 872 03:08:56.598771 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000021> 872 03:08:56.598834 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a34c3000 <0.000034> 872 03:08:56.598906 close(3) = 0 <0.000021> 872 03:08:56.598973 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:08:56.599044 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000024> 872 03:08:56.599109 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000021> 872 03:08:56.599173 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f35a3492000 <0.000028> 872 03:08:56.599247 mmap(0x7f35a3495000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7f35a3495000 <0.000077> 872 03:08:56.599362 mmap(0x7f35a349c000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7f35a349c000 <0.000027> 872 03:08:56.599427 mmap(0x7f35a34b1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7f35a34b1000 <0.000028> 872 03:08:56.599503 mmap(0x7f35a34b3000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f35a34b3000 <0.000023> 872 03:08:56.599608 close(3) = 0 <0.000020> 872 03:08:56.599671 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000029> 872 03:08:56.599743 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000024> 872 03:08:56.599813 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000022> 872 03:08:56.599874 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:08:56.599939 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f35a3464000 <0.000028> 872 03:08:56.600004 mmap(0x7f35a346b000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f35a346b000 <0.000032> 872 03:08:56.600072 mmap(0x7f35a3486000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f35a3486000 <0.000029> 872 03:08:56.600149 mmap(0x7f35a348e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7f35a348e000 <0.000032> 872 03:08:56.600242 mmap(0x7f35a3490000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f35a3490000 <0.000025> 872 03:08:56.600319 close(3) = 0 <0.000020> 872 03:08:56.600386 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000081> 872 03:08:56.600514 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.002156> 872 03:08:56.602762 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000038> 872 03:08:56.602895 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f35a3441000 <0.000030> 872 03:08:56.602980 mmap(0x7f35a3447000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f35a3447000 <0.000053> 872 03:08:56.603088 mmap(0x7f35a345b000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7f35a345b000 <0.000031> 872 03:08:56.603169 mmap(0x7f35a3462000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7f35a3462000 <0.000031> 872 03:08:56.609366 close(3) = 0 <0.000159> 872 03:08:56.609706 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000069> 872 03:08:56.609906 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000035> 872 03:08:56.610006 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000026> 872 03:08:56.610107 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000026> 872 03:08:56.610187 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000029> 872 03:08:56.610280 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000027> 872 03:08:56.610361 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f35a325f000 <0.000063> 872 03:08:56.610475 mmap(0x7f35a3285000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7f35a3285000 <0.000299> 872 03:08:56.610959 mmap(0x7f35a33db000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7f35a33db000 <0.000081> 872 03:08:56.611571 mmap(0x7f35a342e000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7f35a342e000 <0.000103> 872 03:08:56.611802 mmap(0x7f35a3434000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f35a3434000 <0.000063> 872 03:08:56.611972 close(3) = 0 <0.000039> 872 03:08:56.612106 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000055> 872 03:08:56.612284 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000043> 872 03:08:56.612411 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000044> 872 03:08:56.612579 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f35a3257000 <0.000052> 872 03:08:56.612705 mmap(0x7f35a3259000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f35a3259000 <0.000117> 872 03:08:56.612903 mmap(0x7f35a325c000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7f35a325c000 <0.000058> 872 03:08:56.613070 mmap(0x7f35a325d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7f35a325d000 <0.000082> 872 03:08:56.613283 close(3) = 0 <0.000041> 872 03:08:56.613406 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000052> 872 03:08:56.613541 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000065> 872 03:08:56.613717 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000042> 872 03:08:56.613843 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f35a3255000 <0.000051> 872 03:08:56.613968 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f35a31bb000 <0.000050> 872 03:08:56.614095 mmap(0x7f35a31bd000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f35a31bd000 <0.000074> 872 03:08:56.614261 mmap(0x7f35a3228000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7f35a3228000 <0.000050> 872 03:08:56.614382 mmap(0x7f35a3253000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7f35a3253000 <0.000051> 872 03:08:56.614625 close(3) = 0 <0.000041> 872 03:08:56.616062 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f35a31b8000 <0.000110> 872 03:08:56.616375 arch_prctl(ARCH_SET_FS, 0x7f35a31b8840) = 0 <0.000185> 872 03:08:56.616674 set_tid_address(0x7f35a31b8b10) = 872 <0.000055> 872 03:08:56.616810 set_robust_list(0x7f35a31b8b20, 24) = 0 <0.000030> 872 03:08:56.616918 rseq(0x7f35a31b9160, 0x20, 0, 0x53053053) = 0 <0.000049> 872 03:08:56.617386 mprotect(0x7f35a342e000, 16384, PROT_READ) = 0 <0.000105> 872 03:08:56.617632 mprotect(0x7f35a3253000, 4096, PROT_READ) = 0 <0.000050> 872 03:08:56.617813 mprotect(0x7f35a325d000, 4096, PROT_READ) = 0 <0.000048> 872 03:08:56.618052 mprotect(0x7f35a3462000, 4096, PROT_READ) = 0 <0.000072> 872 03:08:56.618376 mprotect(0x7f35a348e000, 4096, PROT_READ) = 0 <0.000077> 872 03:08:56.618830 mprotect(0x7f35a34b1000, 4096, PROT_READ) = 0 <0.000042> 872 03:08:56.619093 mprotect(0x55780a317000, 8192, PROT_READ) = 0 <0.000027> 872 03:08:56.619157 mprotect(0x7f35a34fa000, 8192, PROT_READ) = 0 <0.000030> 872 03:08:56.619245 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000021> 872 03:08:56.619342 munmap(0x7f35a34c3000, 14575) = 0 <0.000032> 872 03:08:56.619432 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000035> 872 03:08:56.619541 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000022> 872 03:08:56.619628 read(3, "40\n", 7) = 3 <0.000027> 872 03:08:56.619699 close(3) = 0 <0.000019> 872 03:08:56.619747 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000026> 872 03:08:56.619801 prctl(PR_GET_SECUREBITS) = 0 <0.000017> 872 03:08:56.619844 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000018> 872 03:08:56.619889 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000017> 872 03:08:56.619952 statfs("/sys/fs/selinux", 0x7ffe95ba61e0) = -1 ENOENT (No such file or directory) <0.000026> 872 03:08:56.620022 statfs("/selinux", 0x7ffe95ba61e0) = -1 ENOENT (No such file or directory) <0.000018> 872 03:08:56.620075 getrandom("\x24\x52\xe0\x53\x01\x32\xa6\xfa", 8, GRND_NONBLOCK) = 8 <0.000019> 872 03:08:56.620128 brk(NULL) = 0x557849449000 <0.000018> 872 03:08:56.620173 brk(0x55784946a000) = 0x55784946a000 <0.000020> 872 03:08:56.620235 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 872 03:08:56.620303 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000022> 872 03:08:56.620373 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tpr"..., 1024) = 336 <0.000034> 872 03:08:56.620444 read(3, "", 1024) = 0 <0.000016> 872 03:08:56.620492 close(3) = 0 <0.000019> 872 03:08:56.620540 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000024> 872 03:08:56.620642 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000016> 872 03:08:56.620687 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000017> 872 03:08:56.620733 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000017> 872 03:08:56.620778 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000018> 872 03:08:56.620825 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000017> 872 03:08:56.620869 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000017> 872 03:08:56.620928 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000017> 872 03:08:56.620973 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000018> 872 03:08:56.621022 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000018> 872 03:08:56.621077 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000027> 872 03:08:56.621148 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000026> 872 03:08:56.621215 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000027> 872 03:08:56.621284 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000031> 872 03:08:56.621358 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000027> 872 03:08:56.621430 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000027> 872 03:08:56.621500 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000027> 872 03:08:56.621656 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000077> 872 03:08:56.621842 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000029> 872 03:08:56.621924 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000028> 872 03:08:56.622002 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 872 03:08:56.622088 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000021> 872 03:08:56.622152 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a2e00000 <0.000032> 872 03:08:56.622231 close(3) = 0 <0.000019> 872 03:08:56.622287 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000024> 872 03:08:56.622354 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000019> 872 03:08:56.622465 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000022> 872 03:08:56.622576 read(3, "", 4096) = 0 <0.000018> 872 03:08:56.622629 close(3) = 0 <0.000019> 872 03:08:56.622691 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.622756 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000021> 872 03:08:56.622815 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000019> 872 03:08:56.622873 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a34c6000 <0.000025> 872 03:08:56.622933 close(3) = 0 <0.000019> 872 03:08:56.622996 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000023> 872 03:08:56.623060 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000019> 872 03:08:56.623118 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7f35a31b1000 <0.000023> 872 03:08:56.623175 close(3) = 0 <0.000019> 872 03:08:56.623231 futex(0x7f35a3433a4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000020> 872 03:08:56.623288 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000020> 872 03:08:56.623359 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000020> 872 03:08:56.623419 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000019> 872 03:08:56.623474 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a34c5000 <0.000021> 872 03:08:56.623530 close(3) = 0 <0.000040> 872 03:08:56.623608 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000020> 872 03:08:56.623667 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000021> 872 03:08:56.623728 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000020> 872 03:08:56.623786 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a34c4000 <0.000021> 872 03:08:56.623841 close(3) = 0 <0.000018> 872 03:08:56.623895 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000020> 872 03:08:56.623950 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000022> 872 03:08:56.624010 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000019> 872 03:08:56.624068 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a34c3000 <0.000022> 872 03:08:56.624123 close(3) = 0 <0.000019> 872 03:08:56.624180 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000020> 872 03:08:56.624237 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000021> 872 03:08:56.624297 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000021> 872 03:08:56.624361 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a31b0000 <0.000029> 872 03:08:56.624426 close(3) = 0 <0.000018> 872 03:08:56.624484 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.624555 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000095> 872 03:08:56.624707 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:08:56.624781 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a31af000 <0.000038> 872 03:08:56.624863 close(3) = 0 <0.000021> 872 03:08:56.624948 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000024> 872 03:08:56.625023 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:08:56.625102 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:08:56.625174 close(3) = 0 <0.000023> 872 03:08:56.625239 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000026> 872 03:08:56.625317 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:08:56.625399 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a31ae000 <0.000028> 872 03:08:56.625471 close(3) = 0 <0.000021> 872 03:08:56.625589 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 872 03:08:56.625672 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 872 03:08:56.625754 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000024> 872 03:08:56.625829 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a31ad000 <0.000030> 872 03:08:56.625904 close(3) = 0 <0.000021> 872 03:08:56.625980 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000024> 872 03:08:56.626052 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000026> 872 03:08:56.626130 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:08:56.626201 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a31ac000 <0.000030> 872 03:08:56.626275 close(3) = 0 <0.000021> 872 03:08:56.626354 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000044> 872 03:08:56.626443 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:08:56.626522 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000034> 872 03:08:56.626607 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a31ab000 <0.000029> 872 03:08:56.626680 close(3) = 0 <0.000021> 872 03:08:56.626755 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000024> 872 03:08:56.626826 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:08:56.626903 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000023> 872 03:08:56.626972 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a31aa000 <0.000027> 872 03:08:56.627042 close(3) = 0 <0.000021> 872 03:08:56.627113 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000025> 872 03:08:56.627183 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:08:56.627261 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000022> 872 03:08:56.627331 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f35a3153000 <0.000027> 872 03:08:56.627401 close(3) = 0 <0.000020> 872 03:08:56.627491 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000027> 872 03:08:56.627691 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000040> 872 03:08:56.627779 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000022> 872 03:08:56.627860 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000024> 872 03:08:56.627922 lseek(3, -60, SEEK_CUR) = 54 <0.000019> 872 03:08:56.627975 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000019> 872 03:08:56.628033 close(3) = 0 <0.000022> 872 03:08:56.628113 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000041> 872 03:08:56.628195 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000020> 872 03:08:56.628253 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000019> 872 03:08:56.628306 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000020> 872 03:08:56.628367 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000021> 872 03:08:56.628422 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000022> 872 03:08:56.628489 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.001117> 872 03:08:56.629687 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000027> 872 03:08:56.629759 read(3, "", 4096) = 0 <0.000022> 872 03:08:56.629816 close(3) = 0 <0.000021> 872 03:08:56.629917 geteuid() = 1000 <0.000020> 872 03:08:56.629968 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000022> 872 03:08:56.630048 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000039> 872 03:08:56.630126 access("/usr/bin/sudo", X_OK) = 0 <0.000022> 872 03:08:56.630179 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000021> 872 03:08:56.630246 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000024> 872 03:08:56.630305 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000021> 872 03:08:56.630362 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000047> 872 03:08:56.630460 write(2, "sudo", 4) = 4 <0.000051> 872 03:08:56.630571 write(2, ": ", 2) = 2 <0.000101> 872 03:08:56.630730 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000024> 872 03:08:56.630804 ioctl(2, TCGETS, 0x7ffe95ba4900) = -1 ENOTTY (Inappropriate ioctl for device) <0.000024> 872 03:08:56.630877 write(2, "\n", 1) = 1 <0.000023> 872 03:08:56.630995 exit_group(1) = ? 872 03:08:56.631341 +++ exited with 1 +++