885 03:05:04.190572 execve("/usr/bin/sudo", ["sudo", "-n", "true"], 0x7fffe5b02180 /* 18 vars */) = 0 <0.001809> 885 03:05:04.192579 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000122> 885 03:05:04.193822 brk(NULL) = 0x56098111d000 <0.000039> 885 03:05:04.194045 fcntl(0, F_GETFD) = 0 <0.000043> 885 03:05:04.194333 fcntl(1, F_GETFD) = 0 <0.000039> 885 03:05:04.194463 fcntl(2, F_GETFD) = 0 <0.000045> 885 03:05:04.194585 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) <0.000033> 885 03:05:04.194717 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4aaf40000 <0.000038> 885 03:05:04.194823 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) <0.000031> 885 03:05:04.194921 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000926> 885 03:05:04.196044 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v4", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000082> 885 03:05:04.197149 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000038> 885 03:05:04.197263 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v3", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000040> 885 03:05:04.197384 openat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 885 03:05:04.197476 newfstatat(AT_FDCWD, "/usr/libexec/sudo/glibc-hwcaps/x86-64-v2", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000030> 885 03:05:04.197569 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000034> 885 03:05:04.197664 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/x86_64", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000028> 885 03:05:04.197752 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000029> 885 03:05:04.197842 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/avx512_1", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000029> 885 03:05:04.197932 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 885 03:05:04.198022 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/x86_64", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000031> 885 03:05:04.198115 openat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 885 03:05:04.198208 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/haswell", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000031> 885 03:05:04.198376 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 885 03:05:04.198474 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/x86_64", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000030> 885 03:05:04.198568 openat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 885 03:05:04.198660 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/avx512_1", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000029> 885 03:05:04.198749 openat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 885 03:05:04.198860 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls/x86_64", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000028> 885 03:05:04.198953 openat(AT_FDCWD, "/usr/libexec/sudo/tls/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000031> 885 03:05:04.199045 newfstatat(AT_FDCWD, "/usr/libexec/sudo/tls", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000027> 885 03:05:04.199134 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000035> 885 03:05:04.199229 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/x86_64", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000046> 885 03:05:04.199339 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 885 03:05:04.199431 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/avx512_1", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000027> 885 03:05:04.199522 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 885 03:05:04.199616 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell/x86_64", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000027> 885 03:05:04.199703 openat(AT_FDCWD, "/usr/libexec/sudo/haswell/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000030> 885 03:05:04.199795 newfstatat(AT_FDCWD, "/usr/libexec/sudo/haswell", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000028> 885 03:05:04.199885 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 885 03:05:04.200014 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/x86_64", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000023> 885 03:05:04.200122 openat(AT_FDCWD, "/usr/libexec/sudo/avx512_1/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 885 03:05:04.200210 newfstatat(AT_FDCWD, "/usr/libexec/sudo/avx512_1", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000027> 885 03:05:04.200347 openat(AT_FDCWD, "/usr/libexec/sudo/x86_64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000029> 885 03:05:04.200460 newfstatat(AT_FDCWD, "/usr/libexec/sudo/x86_64", 0x7ffd44435100, 0) = -1 ENOENT (No such file or directory) <0.000030> 885 03:05:04.200579 openat(AT_FDCWD, "/usr/libexec/sudo/libaudit.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000040> 885 03:05:04.200697 newfstatat(AT_FDCWD, "/usr/libexec/sudo", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0 <0.000034> 885 03:05:04.200836 openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3 <0.000043> 885 03:05:04.200986 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14575, ...}, AT_EMPTY_PATH) = 0 <0.000031> 885 03:05:04.201086 mmap(NULL, 14575, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aaf3c000 <0.000136> 885 03:05:04.201369 close(3) = 0 <0.000038> 885 03:05:04.201594 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000051> 885 03:05:04.201763 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000027> 885 03:05:04.201850 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=128952, ...}, AT_EMPTY_PATH) = 0 <0.000028> 885 03:05:04.201942 mmap(NULL, 196816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fe4aaf0b000 <0.000033> 885 03:05:04.202039 mmap(0x7fe4aaf0e000, 28672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fe4aaf0e000 <0.000045> 885 03:05:04.202135 mmap(0x7fe4aaf15000, 86016, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7fe4aaf15000 <0.000038> 885 03:05:04.202223 mmap(0x7fe4aaf2a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7fe4aaf2a000 <0.000038> 885 03:05:04.202348 mmap(0x7fe4aaf2c000, 61648, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fe4aaf2c000 <0.000039> 885 03:05:04.202459 close(3) = 0 <0.000027> 885 03:05:04.202553 openat(AT_FDCWD, "/usr/libexec/sudo/libselinux.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000032> 885 03:05:04.202647 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3 <0.000028> 885 03:05:04.202734 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000026> 885 03:05:04.202815 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=174312, ...}, AT_EMPTY_PATH) = 0 <0.000026> 885 03:05:04.202897 mmap(NULL, 186064, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fe4aaedd000 <0.000033> 885 03:05:04.202979 mmap(0x7fe4aaee4000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7fe4aaee4000 <0.000038> 885 03:05:04.203065 mmap(0x7fe4aaeff000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7fe4aaeff000 <0.000031> 885 03:05:04.203144 mmap(0x7fe4aaf07000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x29000) = 0x7fe4aaf07000 <0.000033> 885 03:05:04.203229 mmap(0x7fe4aaf09000, 5840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fe4aaf09000 <0.000034> 885 03:05:04.203384 close(3) = 0 <0.000027> 885 03:05:04.203474 openat(AT_FDCWD, "/usr/libexec/sudo/libsudo_util.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000057> 885 03:05:04.203590 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000690> 885 03:05:04.204379 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=138104, ...}, AT_EMPTY_PATH) = 0 <0.000033> 885 03:05:04.204531 mmap(NULL, 142576, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fe4aaeba000 <0.000039> 885 03:05:04.204633 mmap(0x7fe4aaec0000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fe4aaec0000 <0.000066> 885 03:05:04.204756 mmap(0x7fe4aaed4000, 28672, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7fe4aaed4000 <0.000041> 885 03:05:04.204853 mmap(0x7fe4aaedb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7fe4aaedb000 <0.000041> 885 03:05:04.205780 close(3) = 0 <0.000050> 885 03:05:04.205895 openat(AT_FDCWD, "/usr/libexec/sudo/libc.so.6", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000214> 885 03:05:04.206328 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3 <0.000123> 885 03:05:04.206677 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20t\2\0\0\0\0\0"..., 832) = 832 <0.000073> 885 03:05:04.206886 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000044> 885 03:05:04.207015 newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=1926232, ...}, AT_EMPTY_PATH) = 0 <0.000051> 885 03:05:04.207164 pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784 <0.000045> 885 03:05:04.207314 mmap(NULL, 1974096, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fe4aacd8000 <0.000078> 885 03:05:04.207480 mmap(0x7fe4aacfe000, 1400832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x26000) = 0x7fe4aacfe000 <0.000218> 885 03:05:04.207895 mmap(0x7fe4aae54000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17c000) = 0x7fe4aae54000 <0.000155> 885 03:05:04.208147 mmap(0x7fe4aaea7000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1cf000) = 0x7fe4aaea7000 <0.000058> 885 03:05:04.208276 mmap(0x7fe4aaead000, 53072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fe4aaead000 <0.000039> 885 03:05:04.208411 close(3) = 0 <0.000038> 885 03:05:04.208517 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000046> 885 03:05:04.208631 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000032> 885 03:05:04.208718 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30704, ...}, AT_EMPTY_PATH) = 0 <0.000034> 885 03:05:04.208814 mmap(NULL, 28736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fe4aacd0000 <0.000039> 885 03:05:04.208905 mmap(0x7fe4aacd2000, 12288, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fe4aacd2000 <0.000057> 885 03:05:04.209011 mmap(0x7fe4aacd5000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7fe4aacd5000 <0.000044> 885 03:05:04.209106 mmap(0x7fe4aacd6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7fe4aacd6000 <0.000044> 885 03:05:04.209222 close(3) = 0 <0.000028> 885 03:05:04.209338 openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libpcre2-8.so.0", O_RDONLY|O_CLOEXEC) = 3 <0.000038> 885 03:05:04.209437 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832 <0.000031> 885 03:05:04.209523 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=629384, ...}, AT_EMPTY_PATH) = 0 <0.000031> 885 03:05:04.209613 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4aacce000 <0.000035> 885 03:05:04.209701 mmap(NULL, 627592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fe4aac34000 <0.000036> 885 03:05:04.209787 mmap(0x7fe4aac36000, 438272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fe4aac36000 <0.000050> 885 03:05:04.209888 mmap(0x7fe4aaca1000, 176128, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6d000) = 0x7fe4aaca1000 <0.000048> 885 03:05:04.209986 mmap(0x7fe4aaccc000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x98000) = 0x7fe4aaccc000 <0.000043> 885 03:05:04.210115 close(3) = 0 <0.000029> 885 03:05:04.211030 mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe4aac31000 <0.000054> 885 03:05:04.211159 arch_prctl(ARCH_SET_FS, 0x7fe4aac31840) = 0 <0.000033> 885 03:05:04.211238 set_tid_address(0x7fe4aac31b10) = 885 <0.000026> 885 03:05:04.211431 set_robust_list(0x7fe4aac31b20, 24) = 0 <0.000051> 885 03:05:04.211573 rseq(0x7fe4aac32160, 0x20, 0, 0x53053053) = 0 <0.000034> 885 03:05:04.211888 mprotect(0x7fe4aaea7000, 16384, PROT_READ) = 0 <0.000110> 885 03:05:04.212071 mprotect(0x7fe4aaccc000, 4096, PROT_READ) = 0 <0.000041> 885 03:05:04.212224 mprotect(0x7fe4aacd6000, 4096, PROT_READ) = 0 <0.000070> 885 03:05:04.212490 mprotect(0x7fe4aaedb000, 4096, PROT_READ) = 0 <0.000058> 885 03:05:04.212746 mprotect(0x7fe4aaf07000, 4096, PROT_READ) = 0 <0.000043> 885 03:05:04.212888 mprotect(0x7fe4aaf2a000, 4096, PROT_READ) = 0 <0.000042> 885 03:05:04.213169 mprotect(0x56094df93000, 8192, PROT_READ) = 0 <0.000042> 885 03:05:04.213306 mprotect(0x7fe4aaf73000, 8192, PROT_READ) = 0 <0.000046> 885 03:05:04.213442 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000040> 885 03:05:04.213619 munmap(0x7fe4aaf3c000, 14575) = 0 <0.000059> 885 03:05:04.213788 openat(AT_FDCWD, "/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3 <0.000050> 885 03:05:04.213948 fstatfs(3, {f_type=PROC_SUPER_MAGIC, f_bsize=4096, f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={val=[0, 0]}, f_namelen=255, f_frsize=4096, f_flags=ST_VALID|ST_NOSUID|ST_NODEV|ST_NOEXEC|ST_RELATIME}) = 0 <0.000035> 885 03:05:04.214070 read(3, "40\n", 7) = 3 <0.000040> 885 03:05:04.214202 close(3) = 0 <0.000043> 885 03:05:04.214376 prctl(PR_CAPBSET_READ, CAP_CHOWN) = 1 <0.000046> 885 03:05:04.214490 prctl(PR_GET_SECUREBITS) = 0 <0.000046> 885 03:05:04.214616 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000049> 885 03:05:04.214835 prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_IS_SET, CAP_CHOWN, 0, 0) = 0 <0.000067> 885 03:05:04.215006 statfs("/sys/fs/selinux", 0x7ffd44435e90) = -1 ENOENT (No such file or directory) <0.000036> 885 03:05:04.215109 statfs("/selinux", 0x7ffd44435e90) = -1 ENOENT (No such file or directory) <0.000027> 885 03:05:04.215196 getrandom("\xca\x9c\x6b\x8b\x84\xb9\x83\x3b", 8, GRND_NONBLOCK) = 8 <0.000028> 885 03:05:04.215275 brk(NULL) = 0x56098111d000 <0.000026> 885 03:05:04.215362 brk(0x56098113e000) = 0x56098113e000 <0.000031> 885 03:05:04.215455 openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 885 03:05:04.215568 newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0 <0.000030> 885 03:05:04.215662 read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tpr"..., 1024) = 336 <0.000048> 885 03:05:04.215781 read(3, "", 1024) = 0 <0.000033> 885 03:05:04.215873 close(3) = 0 <0.000030> 885 03:05:04.215952 access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory) <0.000065> 885 03:05:04.216098 prlimit64(0, RLIMIT_AS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 885 03:05:04.216186 prlimit64(0, RLIMIT_CORE, NULL, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0 <0.000022> 885 03:05:04.216269 prlimit64(0, RLIMIT_CPU, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000032> 885 03:05:04.216386 prlimit64(0, RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000031> 885 03:05:04.216479 prlimit64(0, RLIMIT_DATA, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000030> 885 03:05:04.216574 prlimit64(0, RLIMIT_FSIZE, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 885 03:05:04.216686 prlimit64(0, RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000030> 885 03:05:04.216777 prlimit64(0, RLIMIT_LOCKS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000031> 885 03:05:04.216878 prlimit64(0, RLIMIT_MEMLOCK, NULL, {rlim_cur=500888*1024, rlim_max=500888*1024}) = 0 <0.000025> 885 03:05:04.216954 prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=1024*1024}) = 0 <0.000025> 885 03:05:04.217025 prlimit64(0, RLIMIT_NPROC, NULL, {rlim_cur=15480, rlim_max=15480}) = 0 <0.000025> 885 03:05:04.217097 prlimit64(0, RLIMIT_NPROC, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = -1 EPERM (Operation not permitted) <0.000025> 885 03:05:04.217172 prlimit64(0, RLIMIT_NPROC, {rlim_cur=15480, rlim_max=15480}, NULL) = 0 <0.000025> 885 03:05:04.217245 prlimit64(0, RLIMIT_RSS, NULL, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 <0.000069> 885 03:05:04.217465 prlimit64(0, RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}, NULL) = 0 <0.000039> 885 03:05:04.217594 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 <0.000028> 885 03:05:04.217682 fcntl(0, F_GETFL) = 0 (flags O_RDONLY) <0.000031> 885 03:05:04.217800 fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY) <0.000035> 885 03:05:04.217940 fcntl(2, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) <0.000034> 885 03:05:04.218080 openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 885 03:05:04.218215 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3048928, ...}, AT_EMPTY_PATH) = 0 <0.000035> 885 03:05:04.218384 mmap(NULL, 3048928, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aa800000 <0.000048> 885 03:05:04.218534 close(3) = 0 <0.000023> 885 03:05:04.218656 openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 3 <0.000037> 885 03:05:04.218776 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0 <0.000033> 885 03:05:04.218888 read(3, "# Locale name alias data base.\n#"..., 4096) = 2996 <0.000034> 885 03:05:04.219015 read(3, "", 4096) = 0 <0.000033> 885 03:05:04.219110 close(3) = 0 <0.000033> 885 03:05:04.219217 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000035> 885 03:05:04.219382 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_IDENTIFICATION", O_RDONLY|O_CLOEXEC) = 3 <0.000036> 885 03:05:04.219499 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=258, ...}, AT_EMPTY_PATH) = 0 <0.000044> 885 03:05:04.219637 mmap(NULL, 258, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aaf3f000 <0.000047> 885 03:05:04.219779 close(3) = 0 <0.000034> 885 03:05:04.219894 openat(AT_FDCWD, "/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 3 <0.000037> 885 03:05:04.220053 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=27028, ...}, AT_EMPTY_PATH) = 0 <0.000034> 885 03:05:04.220166 mmap(NULL, 27028, PROT_READ, MAP_SHARED, 3, 0) = 0x7fe4aac2a000 <0.000037> 885 03:05:04.220271 close(3) = 0 <0.000034> 885 03:05:04.220400 futex(0x7fe4aaeaca4c, FUTEX_WAKE_PRIVATE, 2147483647) = 0 <0.000033> 885 03:05:04.220500 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000036> 885 03:05:04.220624 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MEASUREMENT", O_RDONLY|O_CLOEXEC) = 3 <0.000034> 885 03:05:04.220758 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=23, ...}, AT_EMPTY_PATH) = 0 <0.000046> 885 03:05:04.220922 mmap(NULL, 23, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aaf3e000 <0.000060> 885 03:05:04.221077 close(3) = 0 <0.000034> 885 03:05:04.221191 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 885 03:05:04.221363 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TELEPHONE", O_RDONLY|O_CLOEXEC) = 3 <0.000051> 885 03:05:04.221516 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=47, ...}, AT_EMPTY_PATH) = 0 <0.000034> 885 03:05:04.221629 mmap(NULL, 47, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aaf3d000 <0.000047> 885 03:05:04.221743 close(3) = 0 <0.000034> 885 03:05:04.221855 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000037> 885 03:05:04.221964 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_ADDRESS", O_RDONLY|O_CLOEXEC) = 3 <0.000050> 885 03:05:04.222115 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=127, ...}, AT_EMPTY_PATH) = 0 <0.000044> 885 03:05:04.222269 mmap(NULL, 127, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aaf3c000 <0.000055> 885 03:05:04.222451 close(3) = 0 <0.000037> 885 03:05:04.222708 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NAME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000049> 885 03:05:04.222890 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NAME", O_RDONLY|O_CLOEXEC) = 3 <0.000039> 885 03:05:04.223012 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=62, ...}, AT_EMPTY_PATH) = 0 <0.000029> 885 03:05:04.223112 mmap(NULL, 62, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aac29000 <0.000037> 885 03:05:04.223204 close(3) = 0 <0.000027> 885 03:05:04.223322 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_PAPER", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000042> 885 03:05:04.223426 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_PAPER", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 885 03:05:04.223521 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=34, ...}, AT_EMPTY_PATH) = 0 <0.000030> 885 03:05:04.223614 mmap(NULL, 34, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aac28000 <0.000033> 885 03:05:04.223702 close(3) = 0 <0.000028> 885 03:05:04.223790 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000029> 885 03:05:04.223875 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000030> 885 03:05:04.223968 newfstatat(3, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0 <0.000028> 885 03:05:04.224092 close(3) = 0 <0.000028> 885 03:05:04.224174 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MESSAGES/SYS_LC_MESSAGES", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 885 03:05:04.224267 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=48, ...}, AT_EMPTY_PATH) = 0 <0.000038> 885 03:05:04.224403 mmap(NULL, 48, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aac27000 <0.000030> 885 03:05:04.224497 close(3) = 0 <0.000028> 885 03:05:04.224585 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 885 03:05:04.224670 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_MONETARY", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 885 03:05:04.224761 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=270, ...}, AT_EMPTY_PATH) = 0 <0.000028> 885 03:05:04.224850 mmap(NULL, 270, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aac26000 <0.000030> 885 03:05:04.224937 close(3) = 0 <0.000028> 885 03:05:04.225022 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000029> 885 03:05:04.225108 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_COLLATE", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 885 03:05:04.225199 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=1406, ...}, AT_EMPTY_PATH) = 0 <0.000028> 885 03:05:04.225302 mmap(NULL, 1406, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aac25000 <0.000033> 885 03:05:04.225390 close(3) = 0 <0.000028> 885 03:05:04.225479 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_TIME", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 885 03:05:04.225566 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_TIME", O_RDONLY|O_CLOEXEC) = 3 <0.000031> 885 03:05:04.225660 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=3360, ...}, AT_EMPTY_PATH) = 0 <0.000028> 885 03:05:04.225749 mmap(NULL, 3360, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aac24000 <0.000031> 885 03:05:04.225834 close(3) = 0 <0.000027> 885 03:05:04.225919 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000028> 885 03:05:04.226006 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_NUMERIC", O_RDONLY|O_CLOEXEC) = 3 <0.000029> 885 03:05:04.226097 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=50, ...}, AT_EMPTY_PATH) = 0 <0.000028> 885 03:05:04.226184 mmap(NULL, 50, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aac23000 <0.000030> 885 03:05:04.226270 close(3) = 0 <0.000149> 885 03:05:04.226563 openat(AT_FDCWD, "/usr/lib/locale/C.UTF-8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) <0.000033> 885 03:05:04.226702 openat(AT_FDCWD, "/usr/lib/locale/C.utf8/LC_CTYPE", O_RDONLY|O_CLOEXEC) = 3 <0.000032> 885 03:05:04.226812 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=353616, ...}, AT_EMPTY_PATH) = 0 <0.000033> 885 03:05:04.226924 mmap(NULL, 353616, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe4aabcc000 <0.000037> 885 03:05:04.227027 close(3) = 0 <0.000032> 885 03:05:04.227142 openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 3 <0.000033> 885 03:05:04.227249 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000058> 885 03:05:04.227400 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=114, ...}, AT_EMPTY_PATH) = 0 <0.000038> 885 03:05:04.227556 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 114 <0.000032> 885 03:05:04.227658 lseek(3, -60, SEEK_CUR) = 54 <0.000030> 885 03:05:04.227752 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 60 <0.000032> 885 03:05:04.227854 close(3) = 0 <0.000030> 885 03:05:04.227954 openat(AT_FDCWD, "/etc/sudo.conf", O_RDONLY|O_NONBLOCK) = 3 <0.000038> 885 03:05:04.228120 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000021> 885 03:05:04.228245 fcntl(3, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE) <0.000056> 885 03:05:04.228385 fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0 <0.000018> 885 03:05:04.228502 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE) <0.000034> 885 03:05:04.228629 newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4343, ...}, AT_EMPTY_PATH) = 0 <0.000037> 885 03:05:04.228782 read(3, "#\n# Default /etc/sudo.conf file\n"..., 4096) = 4096 <0.001510> 885 03:05:04.230453 read(3, "bsystems.\n# Priority may be crit"..., 4096) = 247 <0.000043> 885 03:05:04.230609 read(3, "", 4096) = 0 <0.000038> 885 03:05:04.230732 close(3) = 0 <0.000037> 885 03:05:04.230903 geteuid() = 1000 <0.000029> 885 03:05:04.231004 prctl(PR_GET_NO_NEW_PRIVS, 0, 0, 0, 0) = 0 <0.000030> 885 03:05:04.231115 access("/usr/local/bin/sudo", X_OK) = -1 ENOENT (No such file or directory) <0.000045> 885 03:05:04.231257 access("/usr/bin/sudo", X_OK) = 0 <0.000040> 885 03:05:04.231403 newfstatat(AT_FDCWD, "/usr/bin/sudo", {st_mode=S_IFREG|S_ISUID|0755, st_size=281624, ...}, 0) = 0 <0.000033> 885 03:05:04.231547 openat(AT_FDCWD, "/usr/share/locale/C.UTF-8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000044> 885 03:05:04.231688 openat(AT_FDCWD, "/usr/share/locale/C.utf8/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000034> 885 03:05:04.231814 openat(AT_FDCWD, "/usr/share/locale/C/LC_MESSAGES/sudo.mo", O_RDONLY) = -1 ENOENT (No such file or directory) <0.000043> 885 03:05:04.231957 write(2, "sudo", 4) = 4 <0.000100> 885 03:05:04.232185 write(2, ": ", 2) = 2 <0.000031> 885 03:05:04.232327 write(2, "effective uid is not 0, is /usr/"..., 133) = 133 <0.000034> 885 03:05:04.232429 ioctl(2, TCGETS, 0x7ffd444345b0) = -1 ENOTTY (Inappropriate ioctl for device) <0.000030> 885 03:05:04.232538 write(2, "\n", 1) = 1 <0.000044> 885 03:05:04.232701 exit_group(1) = ? 885 03:05:04.233046 +++ exited with 1 +++