11:03:01.440746 execve("/usr/bin/su", ["su", "-", "myuser_ad"], [/* 24 vars */]) = 0
11:03:01.441128 brk(NULL)               = 0x55eb52403000
11:03:01.441229 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca963000
11:03:01.441309 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
11:03:01.441440 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
11:03:01.441510 fstat(3, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.441578 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f18ca959000
11:03:01.441637 close(3)                = 0
11:03:01.441696 open("/lib64/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
11:03:01.441763 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p&\0\0\0\0\0\0"..., 832) = 832
11:03:01.441822 fstat(3, {st_mode=S_IFREG|0755, st_size=61672, ...}) = 0
11:03:01.441880 mmap(NULL, 2155088, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f18ca534000
11:03:01.441941 mprotect(0x7f18ca541000, 2097152, PROT_NONE) = 0
11:03:01.442005 mmap(0x7f18ca741000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f18ca741000
11:03:01.442086 close(3)                = 0
11:03:01.442152 open("/lib64/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 3
11:03:01.442217 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\21\0\0\0\0\0\0"..., 832) = 832
11:03:01.442277 fstat(3, {st_mode=S_IFREG|0755, st_size=15632, ...}) = 0
11:03:01.442332 mmap(NULL, 2109752, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f18ca330000
11:03:01.442396 mprotect(0x7f18ca333000, 2093056, PROT_NONE) = 0
11:03:01.442564 mmap(0x7f18ca532000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f18ca532000
11:03:01.442629 close(3)                = 0
11:03:01.442680 open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
11:03:01.442735 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20&\2\0\0\0\0\0"..., 832) = 832
11:03:01.442784 fstat(3, {st_mode=S_IFREG|0755, st_size=2156160, ...}) = 0
11:03:01.442832 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca958000
11:03:01.442883 mmap(NULL, 3985888, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f18c9f62000
11:03:01.442930 mprotect(0x7f18ca125000, 2097152, PROT_NONE) = 0
11:03:01.442980 mmap(0x7f18ca325000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c3000) = 0x7f18ca325000
11:03:01.443043 mmap(0x7f18ca32b000, 16864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18ca32b000
11:03:01.443107 close(3)                = 0
11:03:01.443185 open("/lib64/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3
11:03:01.443252 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@2\0\0\0\0\0\0"..., 832) = 832
11:03:01.443312 fstat(3, {st_mode=S_IFREG|0755, st_size=127184, ...}) = 0
11:03:01.443371 mmap(NULL, 2261896, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f18c9d39000
11:03:01.443458 mprotect(0x7f18c9d57000, 2093056, PROT_NONE) = 0
11:03:01.443518 mmap(0x7f18c9f56000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1d000) = 0x7f18c9f56000
11:03:01.443589 mmap(0x7f18c9f58000, 37768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18c9f58000
11:03:01.443657 close(3)                = 0
11:03:01.443723 open("/lib64/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
11:03:01.443787 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\r\0\0\0\0\0\0"..., 832) = 832
11:03:01.443846 fstat(3, {st_mode=S_IFREG|0755, st_size=19288, ...}) = 0
11:03:01.443904 mmap(NULL, 2109712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f18c9b35000
11:03:01.443954 mprotect(0x7f18c9b37000, 2097152, PROT_NONE) = 0
11:03:01.444012 mmap(0x7f18c9d37000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f18c9d37000
11:03:01.444075 close(3)                = 0
11:03:01.444127 open("/lib64/libcap-ng.so.0", O_RDONLY|O_CLOEXEC) = 3
11:03:01.444179 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\25\0\0\0\0\0\0"..., 832) = 832
11:03:01.444235 fstat(3, {st_mode=S_IFREG|0755, st_size=23968, ...}) = 0
11:03:01.444286 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca957000
11:03:01.444337 mmap(NULL, 2118016, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f18c992f000
11:03:01.444392 mprotect(0x7f18c9933000, 2097152, PROT_NONE) = 0
11:03:01.444446 mmap(0x7f18c9b33000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7f18c9b33000
11:03:01.444511 close(3)                = 0
11:03:01.444585 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca956000
11:03:01.444645 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca954000
11:03:01.444708 arch_prctl(ARCH_SET_FS, 0x7f18ca954780) = 0
11:03:01.444839 mprotect(0x7f18ca325000, 16384, PROT_READ) = 0
11:03:01.444913 mprotect(0x7f18c9b33000, 4096, PROT_READ) = 0
11:03:01.444977 mprotect(0x7f18c9d37000, 4096, PROT_READ) = 0
11:03:01.445033 mprotect(0x7f18c9f56000, 4096, PROT_READ) = 0
11:03:01.445087 mprotect(0x7f18ca741000, 4096, PROT_READ) = 0
11:03:01.445149 mprotect(0x7f18ca532000, 4096, PROT_READ) = 0
11:03:01.445228 mprotect(0x55eb5066f000, 4096, PROT_READ) = 0
11:03:01.445277 mprotect(0x7f18ca964000, 4096, PROT_READ) = 0
11:03:01.445324 munmap(0x7f18ca959000, 38458) = 0
11:03:01.445454 brk(NULL)               = 0x55eb52403000
11:03:01.445505 brk(0x55eb52424000)     = 0x55eb52424000
11:03:01.445550 brk(NULL)               = 0x55eb52424000
11:03:01.445600 open("/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
11:03:01.445654 fstat(3, {st_mode=S_IFREG|0644, st_size=106075056, ...}) = 0
11:03:01.445702 mmap(NULL, 106075056, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f18c3405000
11:03:01.445756 close(3)                = 0
11:03:01.445835 getuid()                = 0
11:03:01.445879 geteuid()               = 0
11:03:01.445928 socket(AF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
11:03:01.445986 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
11:03:01.446060 close(3)                = 0
11:03:01.446124 socket(AF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
11:03:01.446172 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
11:03:01.446224 close(3)                = 0
11:03:01.446283 open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3
11:03:01.446337 fstat(3, {st_mode=S_IFREG|0644, st_size=1991, ...}) = 0
11:03:01.446424 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.446474 read(3, "# WARNING: This file is managed "..., 4096) = 1991
11:03:01.446539 read(3, "", 4096)       = 0
11:03:01.446585 close(3)                = 0
11:03:01.446631 munmap(0x7f18ca962000, 4096) = 0
11:03:01.446691 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
11:03:01.446742 fstat(3, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.446794 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f18ca959000
11:03:01.446843 close(3)                = 0
11:03:01.446896 open("/lib64/libnss_files.so.2", O_RDONLY|O_CLOEXEC) = 3
11:03:01.446964 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000!\0\0\0\0\0\0"..., 832) = 832
11:03:01.447021 fstat(3, {st_mode=S_IFREG|0755, st_size=61624, ...}) = 0
11:03:01.447079 mmap(NULL, 2173016, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f18c31f2000
11:03:01.447137 mprotect(0x7f18c31fe000, 2093056, PROT_NONE) = 0
11:03:01.447186 mmap(0x7f18c33fd000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f18c33fd000
11:03:01.447243 mmap(0x7f18c33ff000, 22616, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18c33ff000
11:03:01.447298 close(3)                = 0
11:03:01.447357 mprotect(0x7f18c33fd000, 4096, PROT_READ) = 0
11:03:01.447420 munmap(0x7f18ca959000, 38458) = 0
11:03:01.447480 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
11:03:01.447534 fstat(3, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:01.447581 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.447634 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:01.447696 read(3, "", 4096)       = 0
11:03:01.447741 close(3)                = 0
11:03:01.447786 munmap(0x7f18ca962000, 4096) = 0
11:03:01.447838 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
11:03:01.447887 fstat(3, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.447939 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f18ca959000
11:03:01.447998 close(3)                = 0
11:03:01.448060 open("/lib64/libnss_sss.so.2", O_RDONLY|O_CLOEXEC) = 3
11:03:01.448123 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\25\0\0\0\0\0\0"..., 832) = 832
11:03:01.448184 fstat(3, {st_mode=S_IFREG|0755, st_size=37168, ...}) = 0
11:03:01.448242 mmap(NULL, 2131088, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f18c2fe9000
11:03:01.448301 mprotect(0x7f18c2ff1000, 2093056, PROT_NONE) = 0
11:03:01.448359 mmap(0x7f18c31f0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7f18c31f0000
11:03:01.448452 close(3)                = 0
11:03:01.448527 mprotect(0x7f18c31f0000, 4096, PROT_READ) = 0
11:03:01.448577 munmap(0x7f18ca959000, 38458) = 0
11:03:01.448644 open("/var/lib/sss/mc/passwd", O_RDONLY|O_CLOEXEC) = 3
11:03:01.448698 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:01.448747 mmap(NULL, 8406312, PROT_READ, MAP_SHARED, 3, 0) = 0x7f18c27e4000
11:03:01.448801 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:01.448863 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:01.448949 getpid()                = 30818
11:03:01.449012 fstat(-1, 0x7fff56e02fb0) = -1 EBADF (Bad file descriptor)
11:03:01.449068 socket(AF_LOCAL, SOCK_STREAM, 0) = 4
11:03:01.449120 fcntl(4, F_GETFL)       = 0x2 (flags O_RDWR)
11:03:01.449166 fcntl(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0
11:03:01.449210 fcntl(4, F_GETFD)       = 0
11:03:01.449252 fcntl(4, F_SETFD, FD_CLOEXEC) = 0
11:03:01.449295 connect(4, {sa_family=AF_LOCAL, sun_path="/var/lib/sss/pipes/nss"}, 110) = 0
11:03:01.449424 fstat(4, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
11:03:01.449479 poll([{fd=4, events=POLLOUT}], 1, 300000) = 1 ([{fd=4, revents=POLLOUT}])
11:03:01.449532 sendto(4, "\24\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0", 16, MSG_NOSIGNAL, NULL, 0) = 16
11:03:01.449626 poll([{fd=4, events=POLLOUT}], 1, 300000) = 1 ([{fd=4, revents=POLLOUT}])
11:03:01.449682 sendto(4, "\1\0\0\0", 4, MSG_NOSIGNAL, NULL, 0) = 4
11:03:01.449755 poll([{fd=4, events=POLLIN}], 1, 300000) = 1 ([{fd=4, revents=POLLIN}])
11:03:01.449808 read(4, "\24\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
11:03:01.449866 poll([{fd=4, events=POLLIN}], 1, 300000) = 1 ([{fd=4, revents=POLLIN}])
11:03:01.449928 read(4, "\1\0\0\0", 4)  = 4
11:03:01.449995 poll([{fd=4, events=POLLOUT}], 1, 300000) = 1 ([{fd=4, revents=POLLOUT}])
11:03:01.450052 sendto(4, "\33\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0", 16, MSG_NOSIGNAL, NULL, 0) = 16
11:03:01.450121 poll([{fd=4, events=POLLOUT}], 1, 300000) = 1 ([{fd=4, revents=POLLOUT}])
11:03:01.450177 sendto(4, "myuser_ad\0", 11, MSG_NOSIGNAL, NULL, 0) = 11
11:03:01.450564 poll([{fd=4, events=POLLIN}], 1, 300000) = 1 ([{fd=4, revents=POLLIN}])
11:03:01.450629 read(4, "U\0\0\0\21\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
11:03:01.450690 poll([{fd=4, events=POLLIN}], 1, 300000) = 1 ([{fd=4, revents=POLLIN}])
11:03:01.450738 read(4, "\1\0\0\0\0\0\0\0\331\265\0\0d\0\0\0myuser_ad\0*\0svc"..., 69) = 69
11:03:01.450813 stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
11:03:01.450897 open("/etc/pam.d/su-l", O_RDONLY) = 5
11:03:01.450950 fstat(5, {st_mode=S_IFREG|0644, st_size=137, ...}) = 0
11:03:01.451002 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.451051 read(5, "#%PAM-1.0\nauth\t\tinclude\t\tsu\nacco"..., 4096) = 137
11:03:01.451106 open("/etc/pam.d/su", O_RDONLY) = 6
11:03:01.451155 fstat(6, {st_mode=S_IFREG|0644, st_size=540, ...}) = 0
11:03:01.451200 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca961000
11:03:01.451253 read(6, "#%PAM-1.0\nauth\t\tsufficient\tpam_r"..., 4096) = 540
11:03:01.451309 open("/usr/lib64/security/pam_rootok.so", O_RDONLY|O_CLOEXEC) = 7
11:03:01.451357 read(7, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\v\0\0\0\0\0\0"..., 832) = 832
11:03:01.451421 fstat(7, {st_mode=S_IFREG|0755, st_size=11232, ...}) = 0
11:03:01.451469 mmap(NULL, 2105520, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0x7f18c25e1000
11:03:01.451514 mprotect(0x7f18c25e3000, 2093056, PROT_NONE) = 0
11:03:01.451562 mmap(0x7f18c27e2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0x1000) = 0x7f18c27e2000
11:03:01.451653 close(7)                = 0
11:03:01.451718 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 7
11:03:01.451791 fstat(7, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.451842 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 7, 0) = 0x7f18ca94a000
11:03:01.451893 close(7)                = 0
11:03:01.451950 open("/lib64/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 7
11:03:01.452013 read(7, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320i\0\0\0\0\0\0"..., 832) = 832
11:03:01.452070 fstat(7, {st_mode=S_IFREG|0755, st_size=155784, ...}) = 0
11:03:01.452129 mmap(NULL, 2255184, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0x7f18c23ba000
11:03:01.452190 mprotect(0x7f18c23de000, 2093056, PROT_NONE) = 0
11:03:01.452247 mmap(0x7f18c25dd000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0x23000) = 0x7f18c25dd000
11:03:01.452316 mmap(0x7f18c25df000, 6480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18c25df000
11:03:01.452395 close(7)                = 0
11:03:01.452469 open("/lib64/libpcre.so.1", O_RDONLY|O_CLOEXEC) = 7
11:03:01.452532 read(7, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\25\0\0\0\0\0\0"..., 832) = 832
11:03:01.452589 fstat(7, {st_mode=S_IFREG|0755, st_size=402384, ...}) = 0
11:03:01.452654 mmap(NULL, 2494984, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0x7f18c2158000
11:03:01.452716 mprotect(0x7f18c21b8000, 2097152, PROT_NONE) = 0
11:03:01.452775 mmap(0x7f18c23b8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0x60000) = 0x7f18c23b8000
11:03:01.452848 close(7)                = 0
11:03:01.452906 open("/lib64/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 7
11:03:01.452959 read(7, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@m\0\0\0\0\0\0"..., 832) = 832
11:03:01.453016 fstat(7, {st_mode=S_IFREG|0755, st_size=142232, ...}) = 0
11:03:01.453063 mmap(NULL, 2208904, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0x7f18c1f3c000
11:03:01.453110 mprotect(0x7f18c1f53000, 2093056, PROT_NONE) = 0
11:03:01.453155 mmap(0x7f18c2152000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0x16000) = 0x7f18c2152000
11:03:01.453208 mmap(0x7f18c2154000, 13448, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18c2154000
11:03:01.453262 close(7)                = 0
11:03:01.453350 mprotect(0x7f18c2152000, 4096, PROT_READ) = 0
11:03:01.453420 mprotect(0x7f18c23b8000, 4096, PROT_READ) = 0
11:03:01.453522 stat("/etc/sysconfig/64bit_strstr_via_64bit_strstr_sse2_unaligned", 0x7fff56e01f20) = -1 ENOENT (No such file or directory)
11:03:01.453575 mprotect(0x7f18c25dd000, 4096, PROT_READ) = 0
11:03:01.453628 mprotect(0x7f18c27e2000, 4096, PROT_READ) = 0
11:03:01.453673 set_tid_address(0x7f18ca954a50) = 30818
11:03:01.453714 set_robust_list(0x7f18ca954a60, 24) = 0
11:03:01.453895 rt_sigaction(SIGRTMIN, {0x7f18c1f42820, [], SA_RESTORER|SA_SIGINFO, 0x7f18c1f4b5f0}, NULL, 8) = 0
11:03:01.453948 rt_sigaction(SIGRT_1, {0x7f18c1f428b0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7f18c1f4b5f0}, NULL, 8) = 0
11:03:01.453999 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
11:03:01.454051 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.454118 statfs("/sys/fs/selinux", 0x7fff56e01fa0) = -1 ENOENT (No such file or directory)
11:03:01.454198 statfs("/selinux", 0x7fff56e01fa0) = -1 ENOENT (No such file or directory)
11:03:01.454261 open("/proc/filesystems", O_RDONLY) = 7
11:03:01.454325 fstat(7, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
11:03:01.454378 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca960000
11:03:01.454445 read(7, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbd"..., 1024) = 352
11:03:01.454532 read(7, "", 1024)       = 0
11:03:01.454586 close(7)                = 0
11:03:01.454638 munmap(0x7f18ca960000, 4096) = 0
11:03:01.454702 access("/etc/selinux/config", F_OK) = 0
11:03:01.454766 munmap(0x7f18ca94a000, 38458) = 0
11:03:01.454853 open("/etc/pam.d/system-auth", O_RDONLY) = 7
11:03:01.454930 fstat(7, {st_mode=S_IFREG|0644, st_size=1443, ...}) = 0
11:03:01.454986 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca960000
11:03:01.455032 read(7, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 1443
11:03:01.455099 open("/usr/lib64/security/pam_env.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.455149 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\r\0\0\0\0\0\0"..., 832) = 832
11:03:01.455197 fstat(8, {st_mode=S_IFREG|0755, st_size=15552, ...}) = 0
11:03:01.455245 mmap(NULL, 2109664, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c1d38000
11:03:01.455292 mprotect(0x7f18c1d3b000, 2093056, PROT_NONE) = 0
11:03:01.455339 mmap(0x7f18c1f3a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x2000) = 0x7f18c1f3a000
11:03:01.455410 close(8)                = 0
11:03:01.455483 mprotect(0x7f18c1f3a000, 4096, PROT_READ) = 0
11:03:01.455541 open("/usr/lib64/security/pam_faildelay.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.455591 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\n\0\0\0\0\0\0"..., 832) = 832
11:03:01.455660 fstat(8, {st_mode=S_IFREG|0755, st_size=11168, ...}) = 0
11:03:01.455729 mmap(NULL, 2105520, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c1b35000
11:03:01.455788 mprotect(0x7f18c1b37000, 2093056, PROT_NONE) = 0
11:03:01.455842 mmap(0x7f18c1d36000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x1000) = 0x7f18c1d36000
11:03:01.455913 close(8)                = 0
11:03:01.455985 mprotect(0x7f18c1d36000, 4096, PROT_READ) = 0
11:03:01.456061 open("/usr/lib64/security/pam_succeed_if.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.456125 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\f\0\0\0\0\0\0"..., 832) = 832
11:03:01.456180 fstat(8, {st_mode=S_IFREG|0755, st_size=15408, ...}) = 0
11:03:01.456238 mmap(NULL, 2109648, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c1931000
11:03:01.456295 mprotect(0x7f18c1934000, 2093056, PROT_NONE) = 0
11:03:01.456363 mmap(0x7f18c1b33000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x2000) = 0x7f18c1b33000
11:03:01.456477 close(8)                = 0
11:03:01.456567 stat("/etc/sysconfig/64bit_strstr_via_64bit_strstr_sse2_unaligned", 0x7fff56e019e0) = -1 ENOENT (No such file or directory)
11:03:01.456634 mprotect(0x7f18c1b33000, 4096, PROT_READ) = 0
11:03:01.456721 open("/usr/lib64/security/pam_localuser.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.456789 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\t\0\0\0\0\0\0"..., 832) = 832
11:03:01.456848 fstat(8, {st_mode=S_IFREG|0755, st_size=11144, ...}) = 0
11:03:01.457066 mmap(NULL, 2105464, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c172e000
11:03:01.457121 mprotect(0x7f18c172f000, 2097152, PROT_NONE) = 0
11:03:01.457171 mmap(0x7f18c192f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x1000) = 0x7f18c192f000
11:03:01.457236 close(8)                = 0
11:03:01.457309 mprotect(0x7f18c192f000, 4096, PROT_READ) = 0
11:03:01.457386 open("/usr/lib64/security/pam_unix.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.457445 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360(\0\0\0\0\0\0"..., 832) = 832
11:03:01.457495 fstat(8, {st_mode=S_IFREG|0755, st_size=57728, ...}) = 0
11:03:01.457545 mmap(NULL, 2200544, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c1514000
11:03:01.457594 mprotect(0x7f18c1521000, 2093056, PROT_NONE) = 0
11:03:01.457658 mmap(0x7f18c1720000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0xc000) = 0x7f18c1720000
11:03:01.457727 mmap(0x7f18c1722000, 46048, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18c1722000
11:03:01.457785 close(8)                = 0
11:03:01.457839 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 8
11:03:01.457892 fstat(8, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.457937 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 8, 0) = 0x7f18ca94a000
11:03:01.457989 close(8)                = 0
11:03:01.458048 open("/lib64/libcrypt.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.458104 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\r\0\0\0\0\0\0"..., 832) = 832
11:03:01.458161 fstat(8, {st_mode=S_IFREG|0755, st_size=40664, ...}) = 0
11:03:01.458222 mmap(NULL, 2318880, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c12dd000
11:03:01.458284 mprotect(0x7f18c12e5000, 2093056, PROT_NONE) = 0
11:03:01.458347 mmap(0x7f18c14e4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x7000) = 0x7f18c14e4000
11:03:01.458421 mmap(0x7f18c14e6000, 184864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18c14e6000
11:03:01.458482 close(8)                = 0
11:03:01.458543 open("/lib64/libnsl.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.458603 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200?\0\0\0\0\0\0"..., 832) = 832
11:03:01.458660 fstat(8, {st_mode=S_IFREG|0755, st_size=115848, ...}) = 0
11:03:01.458716 mmap(NULL, 2202232, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c10c3000
11:03:01.458774 mprotect(0x7f18c10d9000, 2097152, PROT_NONE) = 0
11:03:01.458834 mmap(0x7f18c12d9000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x16000) = 0x7f18c12d9000
11:03:01.458910 mmap(0x7f18c12db000, 6776, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18c12db000
11:03:01.458982 close(8)                = 0
11:03:01.459062 open("/lib64/libfreebl3.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.459126 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\v\0\0\0\0\0\0"..., 832) = 832
11:03:01.459175 fstat(8, {st_mode=S_IFREG|0755, st_size=11392, ...}) = 0
11:03:01.459227 mmap(NULL, 2105536, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c0ec0000
11:03:01.459274 mprotect(0x7f18c0ec2000, 2093056, PROT_NONE) = 0
11:03:01.459320 mmap(0x7f18c10c1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x1000) = 0x7f18c10c1000
11:03:01.459397 close(8)                = 0
11:03:01.459478 mprotect(0x7f18c10c1000, 4096, PROT_READ) = 0
11:03:01.459563 stat("/etc/sysconfig/64bit_strstr_via_64bit_strstr_sse2_unaligned", 0x7fff56e019c0) = -1 ENOENT (No such file or directory)
11:03:01.459617 mprotect(0x7f18c12d9000, 4096, PROT_READ) = 0
11:03:01.459677 mprotect(0x7f18c14e4000, 4096, PROT_READ) = 0
11:03:01.459757 mprotect(0x7f18c1720000, 4096, PROT_READ) = 0
11:03:01.459807 munmap(0x7f18ca94a000, 38458) = 0
11:03:01.459876 open("/usr/lib64/security/pam_sss.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.459929 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300$\0\0\0\0\0\0"..., 832) = 832
11:03:01.459986 fstat(8, {st_mode=S_IFREG|0755, st_size=49256, ...}) = 0
11:03:01.460040 mmap(NULL, 2143344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c0cb4000
11:03:01.460090 mprotect(0x7f18c0cbf000, 2093056, PROT_NONE) = 0
11:03:01.460146 mmap(0x7f18c0ebe000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0xa000) = 0x7f18c0ebe000
11:03:01.460224 close(8)                = 0
11:03:01.460330 mprotect(0x7f18c0ebe000, 4096, PROT_READ) = 0
11:03:01.460415 open("/usr/lib64/security/pam_deny.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.460482 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\6\0\0\0\0\0\0"..., 832) = 832
11:03:01.460606 fstat(8, {st_mode=S_IFREG|0755, st_size=6872, ...}) = 0
11:03:01.460688 mmap(NULL, 2101296, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c0ab2000
11:03:01.460759 mprotect(0x7f18c0ab3000, 2093056, PROT_NONE) = 0
11:03:01.460821 mmap(0x7f18c0cb2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0) = 0x7f18c0cb2000
11:03:01.460910 close(8)                = 0
11:03:01.460992 mprotect(0x7f18c0cb2000, 4096, PROT_READ) = 0
11:03:01.461087 read(7, "", 4096)       = 0
11:03:01.461154 close(7)                = 0
11:03:01.461208 munmap(0x7f18ca960000, 4096) = 0
11:03:01.461278 open("/etc/pam.d/postlogin", O_RDONLY) = 7
11:03:01.461347 fstat(7, {st_mode=S_IFREG|0644, st_size=330, ...}) = 0
11:03:01.461410 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca960000
11:03:01.461480 read(7, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 330
11:03:01.461548 read(7, "", 4096)       = 0
11:03:01.461612 close(7)                = 0
11:03:01.461672 munmap(0x7f18ca960000, 4096) = 0
11:03:01.461743 read(6, "", 4096)       = 0
11:03:01.461825 close(6)                = 0
11:03:01.461899 munmap(0x7f18ca961000, 4096) = 0
11:03:01.461975 open("/etc/pam.d/su", O_RDONLY) = 6
11:03:01.462047 fstat(6, {st_mode=S_IFREG|0644, st_size=540, ...}) = 0
11:03:01.462122 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca961000
11:03:01.462184 read(6, "#%PAM-1.0\nauth\t\tsufficient\tpam_r"..., 4096) = 540
11:03:01.462265 open("/etc/pam.d/system-auth", O_RDONLY) = 7
11:03:01.462332 fstat(7, {st_mode=S_IFREG|0644, st_size=1443, ...}) = 0
11:03:01.462399 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca960000
11:03:01.462495 read(7, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 1443
11:03:01.462598 open("/usr/lib64/security/pam_permit.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.462664 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\7\0\0\0\0\0\0"..., 832) = 832
11:03:01.462720 fstat(8, {st_mode=S_IFREG|0755, st_size=6984, ...}) = 0
11:03:01.462777 mmap(NULL, 2101320, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c08b0000
11:03:01.462834 mprotect(0x7f18c08b1000, 2093056, PROT_NONE) = 0
11:03:01.462899 mmap(0x7f18c0ab0000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0) = 0x7f18c0ab0000
11:03:01.462974 close(8)                = 0
11:03:01.463041 mprotect(0x7f18c0ab0000, 4096, PROT_READ) = 0
11:03:01.463097 read(7, "", 4096)       = 0
11:03:01.463143 close(7)                = 0
11:03:01.463187 munmap(0x7f18ca960000, 4096) = 0
11:03:01.463239 read(6, "", 4096)       = 0
11:03:01.463283 close(6)                = 0
11:03:01.463327 munmap(0x7f18ca961000, 4096) = 0
11:03:01.463375 open("/etc/pam.d/su", O_RDONLY) = 6
11:03:01.463435 fstat(6, {st_mode=S_IFREG|0644, st_size=540, ...}) = 0
11:03:01.463481 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca961000
11:03:01.463526 read(6, "#%PAM-1.0\nauth\t\tsufficient\tpam_r"..., 4096) = 540
11:03:01.463579 open("/etc/pam.d/system-auth", O_RDONLY) = 7
11:03:01.463627 fstat(7, {st_mode=S_IFREG|0644, st_size=1443, ...}) = 0
11:03:01.463672 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca960000
11:03:01.463723 read(7, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 1443
11:03:01.463784 open("/usr/lib64/security/pam_pwquality.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.463832 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0"..., 832) = 832
11:03:01.463878 fstat(8, {st_mode=S_IFREG|0755, st_size=11232, ...}) = 0
11:03:01.463938 mmap(NULL, 2105576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c06ad000
11:03:01.463994 mprotect(0x7f18c06af000, 2093056, PROT_NONE) = 0
11:03:01.464057 mmap(0x7f18c08ae000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x1000) = 0x7f18c08ae000
11:03:01.464132 close(8)                = 0
11:03:01.464198 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 8
11:03:01.464259 fstat(8, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.464315 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 8, 0) = 0x7f18ca94a000
11:03:01.464372 close(8)                = 0
11:03:01.464466 open("/lib64/libpwquality.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.464533 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\22\0\0\0\0\0\0"..., 832) = 832
11:03:01.464596 fstat(8, {st_mode=S_IFREG|0755, st_size=23832, ...}) = 0
11:03:01.464658 mmap(NULL, 2118240, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c04a7000
11:03:01.464721 mprotect(0x7f18c04ac000, 2093056, PROT_NONE) = 0
11:03:01.464783 mmap(0x7f18c06ab000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x4000) = 0x7f18c06ab000
11:03:01.464855 close(8)                = 0
11:03:01.464902 open("/lib64/libcrack.so.2", O_RDONLY|O_CLOEXEC) = 8
11:03:01.464959 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240;\0\0\0\0\0\0"..., 832) = 832
11:03:01.465016 fstat(8, {st_mode=S_IFREG|0755, st_size=44600, ...}) = 0
11:03:01.465067 mmap(NULL, 2138640, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c029c000
11:03:01.465116 mprotect(0x7f18c02a5000, 2097152, PROT_NONE) = 0
11:03:01.465165 mmap(0x7f18c04a5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x9000) = 0x7f18c04a5000
11:03:01.465227 close(8)                = 0
11:03:01.465283 open("/lib64/libz.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.465337 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20!\0\0\0\0\0\0"..., 832) = 832
11:03:01.465390 fstat(8, {st_mode=S_IFREG|0755, st_size=90248, ...}) = 0
11:03:01.465443 mmap(NULL, 2183272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18c0086000
11:03:01.465492 mprotect(0x7f18c009b000, 2093056, PROT_NONE) = 0
11:03:01.465542 mmap(0x7f18c029a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x14000) = 0x7f18c029a000
11:03:01.465604 close(8)                = 0
11:03:01.465684 mprotect(0x7f18c029a000, 4096, PROT_READ) = 0
11:03:01.465777 mprotect(0x7f18c04a5000, 4096, PROT_READ) = 0
11:03:01.465853 stat("/etc/sysconfig/64bit_strstr_via_64bit_strstr_sse2_unaligned", 0x7fff56e019c0) = -1 ENOENT (No such file or directory)
11:03:01.465933 mprotect(0x7f18c06ab000, 4096, PROT_READ) = 0
11:03:01.466012 mprotect(0x7f18c08ae000, 4096, PROT_READ) = 0
11:03:01.466075 munmap(0x7f18ca94a000, 38458) = 0
11:03:01.466168 read(7, "", 4096)       = 0
11:03:01.466221 close(7)                = 0
11:03:01.466270 munmap(0x7f18ca960000, 4096) = 0
11:03:01.466329 read(6, "", 4096)       = 0
11:03:01.466387 close(6)                = 0
11:03:01.466437 munmap(0x7f18ca961000, 4096) = 0
11:03:01.466497 open("/usr/lib64/security/pam_keyinit.so", O_RDONLY|O_CLOEXEC) = 6
11:03:01.466552 read(6, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\t\0\0\0\0\0\0"..., 832) = 832
11:03:01.466603 fstat(6, {st_mode=S_IFREG|0755, st_size=11152, ...}) = 0
11:03:01.466654 mmap(NULL, 2105520, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0x7f18bfe83000
11:03:01.466704 mprotect(0x7f18bfe85000, 2093056, PROT_NONE) = 0
11:03:01.466753 mmap(0x7f18c0084000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x1000) = 0x7f18c0084000
11:03:01.466815 close(6)                = 0
11:03:01.466873 mprotect(0x7f18c0084000, 4096, PROT_READ) = 0
11:03:01.466933 open("/etc/pam.d/su", O_RDONLY) = 6
11:03:01.466993 fstat(6, {st_mode=S_IFREG|0644, st_size=540, ...}) = 0
11:03:01.467045 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca961000
11:03:01.467094 read(6, "#%PAM-1.0\nauth\t\tsufficient\tpam_r"..., 4096) = 540
11:03:01.467152 open("/etc/pam.d/system-auth", O_RDONLY) = 7
11:03:01.467348 fstat(7, {st_mode=S_IFREG|0644, st_size=1443, ...}) = 0
11:03:01.467401 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca960000
11:03:01.467450 read(7, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 1443
11:03:01.467518 open("/usr/lib64/security/pam_limits.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.467566 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\23\0\0\0\0\0\0"..., 832) = 832
11:03:01.467612 fstat(8, {st_mode=S_IFREG|0755, st_size=19600, ...}) = 0
11:03:01.467658 mmap(NULL, 2113880, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bfc7e000
11:03:01.467710 mprotect(0x7f18bfc82000, 2093056, PROT_NONE) = 0
11:03:01.467755 mmap(0x7f18bfe81000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x3000) = 0x7f18bfe81000
11:03:01.467814 close(8)                = 0
11:03:01.467880 mprotect(0x7f18bfe81000, 4096, PROT_READ) = 0
11:03:01.467938 open("/usr/lib64/security/pam_systemd.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.467994 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0pQ\0\0\0\0\0\0"..., 832) = 832
11:03:01.468053 fstat(8, {st_mode=S_IFREG|0755, st_size=309168, ...}) = 0
11:03:01.468107 mmap(NULL, 2399728, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bfa34000
11:03:01.468157 mprotect(0x7f18bfa7b000, 2093056, PROT_NONE) = 0
11:03:01.468210 mmap(0x7f18bfc7a000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x46000) = 0x7f18bfc7a000
11:03:01.468270 close(8)                = 0
11:03:01.468321 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 8
11:03:01.468369 fstat(8, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.468417 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 8, 0) = 0x7f18ca94a000
11:03:01.468463 close(8)                = 0
11:03:01.468510 open("/lib64/librt.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.468560 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340!\0\0\0\0\0\0"..., 832) = 832
11:03:01.468608 fstat(8, {st_mode=S_IFREG|0755, st_size=43776, ...}) = 0
11:03:01.468655 mmap(NULL, 2128920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bf82c000
11:03:01.468703 mprotect(0x7f18bf833000, 2093056, PROT_NONE) = 0
11:03:01.468752 mmap(0x7f18bfa32000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x6000) = 0x7f18bfa32000
11:03:01.468811 close(8)                = 0
11:03:01.468867 open("/lib64/libcap.so.2", O_RDONLY|O_CLOEXEC) = 8
11:03:01.468945 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\26\0\0\0\0\0\0"..., 832) = 832
11:03:01.469001 fstat(8, {st_mode=S_IFREG|0755, st_size=20048, ...}) = 0
11:03:01.469053 mmap(NULL, 2114112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bf627000
11:03:01.469118 mprotect(0x7f18bf62b000, 2093056, PROT_NONE) = 0
11:03:01.469168 mmap(0x7f18bf82a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x3000) = 0x7f18bf82a000
11:03:01.469232 close(8)                = 0
11:03:01.469287 open("/lib64/libm.so.6", O_RDONLY|O_CLOEXEC) = 8
11:03:01.469341 read(8, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20S\0\0\0\0\0\0"..., 832) = 832
11:03:01.469401 fstat(8, {st_mode=S_IFREG|0755, st_size=1137024, ...}) = 0
11:03:01.469458 mmap(NULL, 3150120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bf325000
11:03:01.469510 mprotect(0x7f18bf426000, 2093056, PROT_NONE) = 0
11:03:01.469560 mmap(0x7f18bf625000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x100000) = 0x7f18bf625000
11:03:01.469622 close(8)                = 0
11:03:01.469678 open("/lib64/libdw.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.469732 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\236\0\0\0\0\0\0"..., 832) = 832
11:03:01.469782 fstat(8, {st_mode=S_IFREG|0755, st_size=338704, ...}) = 0
11:03:01.469836 mmap(NULL, 2427152, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bf0d4000
11:03:01.469901 mprotect(0x7f18bf122000, 2097152, PROT_NONE) = 0
11:03:01.469965 mmap(0x7f18bf322000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x4e000) = 0x7f18bf322000
11:03:01.470032 close(8)                = 0
11:03:01.470088 open("/lib64/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.470145 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220*\0\0\0\0\0\0"..., 832) = 832
11:03:01.470205 fstat(8, {st_mode=S_IFREG|0755, st_size=88776, ...}) = 0
11:03:01.470256 mmap(NULL, 2184192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18beebe000
11:03:01.470306 mprotect(0x7f18beed3000, 2093056, PROT_NONE) = 0
11:03:01.470355 mmap(0x7f18bf0d2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x14000) = 0x7f18bf0d2000
11:03:01.470427 close(8)                = 0
11:03:01.470486 open("/lib64/libattr.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.470538 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\23\0\0\0\0\0\0"..., 832) = 832
11:03:01.470584 fstat(8, {st_mode=S_IFREG|0755, st_size=19896, ...}) = 0
11:03:01.470647 mmap(NULL, 2113904, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18becb9000
11:03:01.470694 mprotect(0x7f18becbd000, 2093056, PROT_NONE) = 0
11:03:01.470740 mmap(0x7f18beebc000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x3000) = 0x7f18beebc000
11:03:01.471114 close(8)                = 0
11:03:01.471194 open("/usr/lib64/elfutils/tls/x86_64/libelf.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
11:03:01.471261 stat("/usr/lib64/elfutils/tls/x86_64", 0x7fff56e00f80) = -1 ENOENT (No such file or directory)
11:03:01.471317 open("/usr/lib64/elfutils/tls/libelf.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
11:03:01.471376 stat("/usr/lib64/elfutils/tls", 0x7fff56e00f80) = -1 ENOENT (No such file or directory)
11:03:01.471456 open("/usr/lib64/elfutils/x86_64/libelf.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
11:03:01.471520 stat("/usr/lib64/elfutils/x86_64", 0x7fff56e00f80) = -1 ENOENT (No such file or directory)
11:03:01.471568 open("/usr/lib64/elfutils/libelf.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
11:03:01.471614 stat("/usr/lib64/elfutils", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
11:03:01.471666 open("/lib64/libelf.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.471714 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0000\0\0\0\0\0\0"..., 832) = 832
11:03:01.471760 fstat(8, {st_mode=S_IFREG|0755, st_size=100024, ...}) = 0
11:03:01.471807 mmap(NULL, 2191808, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18beaa1000
11:03:01.471855 mprotect(0x7f18beab8000, 2093056, PROT_NONE) = 0
11:03:01.471920 mmap(0x7f18becb7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x16000) = 0x7f18becb7000
11:03:01.471995 close(8)                = 0
11:03:01.472060 open("/usr/lib64/elfutils/liblzma.so.5", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
11:03:01.472112 open("/lib64/liblzma.so.5", O_RDONLY|O_CLOEXEC) = 8
11:03:01.472162 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\2000\0\0\0\0\0\0"..., 832) = 832
11:03:01.472210 fstat(8, {st_mode=S_IFREG|0755, st_size=157424, ...}) = 0
11:03:01.472259 mmap(NULL, 2249352, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18be87b000
11:03:01.472306 mprotect(0x7f18be8a0000, 2093056, PROT_NONE) = 0
11:03:01.472352 mmap(0x7f18bea9f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x24000) = 0x7f18bea9f000
11:03:01.472425 close(8)                = 0
11:03:01.472477 open("/usr/lib64/elfutils/libbz2.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
11:03:01.472530 open("/lib64/libbz2.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.472607 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\27\0\0\0\0\0\0"..., 832) = 832
11:03:01.472671 fstat(8, {st_mode=S_IFREG|0755, st_size=68192, ...}) = 0
11:03:01.472741 mmap(NULL, 2162024, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18be66b000
11:03:01.472809 mprotect(0x7f18be67a000, 2093056, PROT_NONE) = 0
11:03:01.472856 mmap(0x7f18be879000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0xe000) = 0x7f18be879000
11:03:01.472930 close(8)                = 0
11:03:01.473041 mprotect(0x7f18be879000, 4096, PROT_READ) = 0
11:03:01.473125 mprotect(0x7f18bea9f000, 4096, PROT_READ) = 0
11:03:01.473214 mprotect(0x7f18becb7000, 4096, PROT_READ) = 0
11:03:01.473304 mprotect(0x7f18beebc000, 4096, PROT_READ) = 0
11:03:01.473403 mprotect(0x7f18bf0d2000, 4096, PROT_READ) = 0
11:03:01.473586 stat("/etc/sysconfig/64bit_strstr_via_64bit_strstr_sse2_unaligned", 0x7fff56e01990) = -1 ENOENT (No such file or directory)
11:03:01.473651 mprotect(0x7f18bf322000, 8192, PROT_READ) = 0
11:03:01.473738 mprotect(0x7f18bf625000, 4096, PROT_READ) = 0
11:03:01.473803 mprotect(0x7f18bf82a000, 4096, PROT_READ) = 0
11:03:01.473872 mprotect(0x7f18bfa32000, 4096, PROT_READ) = 0
11:03:01.473966 mprotect(0x7f18bfc7a000, 12288, PROT_READ) = 0
11:03:01.474048 munmap(0x7f18ca94a000, 38458) = 0
11:03:01.474127 open("/usr/lib64/security/pam_oddjob_mkhomedir.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.474184 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20$\0\0\0\0\0\0"..., 832) = 832
11:03:01.474237 fstat(8, {st_mode=S_IFREG|0755, st_size=36344, ...}) = 0
11:03:01.474291 mmap(NULL, 2129952, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18be462000
11:03:01.474344 mprotect(0x7f18be46a000, 2093056, PROT_NONE) = 0
11:03:01.474408 mmap(0x7f18be669000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x7000) = 0x7f18be669000
11:03:01.474465 mmap(0x7f18be66a000, 32, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18be66a000
11:03:01.474526 close(8)                = 0
11:03:01.474584 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 8
11:03:01.474638 fstat(8, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.474686 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 8, 0) = 0x7f18ca94a000
11:03:01.474737 close(8)                = 0
11:03:01.474789 open("/lib64/libdbus-1.so.3", O_RDONLY|O_CLOEXEC) = 8
11:03:01.474843 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\342\0\0\0\0\0\0"..., 832) = 832
11:03:01.474895 fstat(8, {st_mode=S_IFREG|0755, st_size=333384, ...}) = 0
11:03:01.474948 mmap(NULL, 2420952, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18be212000
11:03:01.475002 mprotect(0x7f18be260000, 2093056, PROT_NONE) = 0
11:03:01.475054 mmap(0x7f18be45f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x4d000) = 0x7f18be45f000
11:03:01.475114 mmap(0x7f18be461000, 216, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18be461000
11:03:01.475173 close(8)                = 0
11:03:01.475236 open("/lib64/libsystemd.so.0", O_RDONLY|O_CLOEXEC) = 8
11:03:01.475302 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@O\0\0\0\0\0\0"..., 832) = 832
11:03:01.475353 fstat(8, {st_mode=S_IFREG|0755, st_size=203688, ...}) = 0
11:03:01.475419 mmap(NULL, 2296544, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bdfe1000
11:03:01.475473 mprotect(0x7f18be010000, 2097152, PROT_NONE) = 0
11:03:01.475526 mmap(0x7f18be210000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x2f000) = 0x7f18be210000
11:03:01.475592 close(8)                = 0
11:03:01.475661 open("/lib64/liblz4.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.475717 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0%\0\0\0\0\0\0"..., 832) = 832
11:03:01.475767 fstat(8, {st_mode=S_IFREG|0755, st_size=85968, ...}) = 0
11:03:01.475818 mmap(NULL, 2179400, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bddcc000
11:03:01.475869 mprotect(0x7f18bdde0000, 2093056, PROT_NONE) = 0
11:03:01.475920 mmap(0x7f18bdfdf000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x13000) = 0x7f18bdfdf000
11:03:01.475995 close(8)                = 0
11:03:01.476057 open("/lib64/libgcrypt.so.11", O_RDONLY|O_CLOEXEC) = 8
11:03:01.476114 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0u\0\0\0\0\0\0"..., 832) = 832
11:03:01.476167 fstat(8, {st_mode=S_IFREG|0755, st_size=535064, ...}) = 0
11:03:01.476220 mmap(NULL, 2621648, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bdb4b000
11:03:01.476272 mprotect(0x7f18bdbc8000, 2093056, PROT_NONE) = 0
11:03:01.476326 mmap(0x7f18bddc7000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x7c000) = 0x7f18bddc7000
11:03:01.476397 mmap(0x7f18bddcb000, 208, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18bddcb000
11:03:01.476463 close(8)                = 0
11:03:01.476525 open("/lib64/libgpg-error.so.0", O_RDONLY|O_CLOEXEC) = 8
11:03:01.476581 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\n\0\0\0\0\0\0"..., 832) = 832
11:03:01.476642 fstat(8, {st_mode=S_IFREG|0755, st_size=19384, ...}) = 0
11:03:01.476699 mmap(NULL, 2113656, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bd946000
11:03:01.476750 mprotect(0x7f18bd94a000, 2093056, PROT_NONE) = 0
11:03:01.476801 mmap(0x7f18bdb49000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x3000) = 0x7f18bdb49000
11:03:01.476865 close(8)                = 0
11:03:01.476935 open("/lib64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 8
11:03:01.476996 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3608\0\0\0\0\0\0"..., 832) = 832
11:03:01.477049 fstat(8, {st_mode=S_IFREG|0755, st_size=105824, ...}) = 0
11:03:01.477102 mmap(NULL, 2198016, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bd72d000
11:03:01.477155 mprotect(0x7f18bd743000, 2093056, PROT_NONE) = 0
11:03:01.477208 mmap(0x7f18bd942000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x15000) = 0x7f18bd942000
11:03:01.477268 mmap(0x7f18bd944000, 6656, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f18bd944000
11:03:01.477329 close(8)                = 0
11:03:01.477477 mprotect(0x7f18bd942000, 4096, PROT_READ) = 0
11:03:01.477550 mprotect(0x7f18bdb49000, 4096, PROT_READ) = 0
11:03:01.477665 mprotect(0x7f18bddc7000, 4096, PROT_READ) = 0
11:03:01.477749 mprotect(0x7f18bdfdf000, 4096, PROT_READ) = 0
11:03:01.477879 mprotect(0x7f18be210000, 4096, PROT_READ) = 0
11:03:01.478113 mprotect(0x7f18be45f000, 4096, PROT_READ) = 0
11:03:01.478210 mprotect(0x7f18be669000, 4096, PROT_READ) = 0
11:03:01.478270 access("/etc/system-fips", F_OK) = -1 ENOENT (No such file or directory)
11:03:01.478340 munmap(0x7f18ca94a000, 38458) = 0
11:03:01.478429 read(7, "", 4096)       = 0
11:03:01.478481 close(7)                = 0
11:03:01.478528 munmap(0x7f18ca960000, 4096) = 0
11:03:01.478587 open("/etc/pam.d/postlogin", O_RDONLY) = 7
11:03:01.478643 fstat(7, {st_mode=S_IFREG|0644, st_size=330, ...}) = 0
11:03:01.478691 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca960000
11:03:01.478740 read(7, "#%PAM-1.0\n# This file is auto-ge"..., 4096) = 330
11:03:01.478818 open("/usr/lib64/security/pam_lastlog.so", O_RDONLY|O_CLOEXEC) = 8
11:03:01.478872 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 \17\0\0\0\0\0\0"..., 832) = 832
11:03:01.478948 fstat(8, {st_mode=S_IFREG|0755, st_size=15480, ...}) = 0
11:03:01.479004 mmap(NULL, 2109712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bd529000
11:03:01.479057 mprotect(0x7f18bd52c000, 2093056, PROT_NONE) = 0
11:03:01.479110 mmap(0x7f18bd72b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x2000) = 0x7f18bd72b000
11:03:01.479177 close(8)                = 0
11:03:01.479237 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 8
11:03:01.479293 fstat(8, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.479342 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 8, 0) = 0x7f18ca94a000
11:03:01.479399 close(8)                = 0
11:03:01.479454 open("/lib64/libutil.so.1", O_RDONLY|O_CLOEXEC) = 8
11:03:01.479509 read(8, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\16\0\0\0\0\0\0"..., 832) = 832
11:03:01.479559 fstat(8, {st_mode=S_IFREG|0755, st_size=14496, ...}) = 0
11:03:01.479612 mmap(NULL, 2105600, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0x7f18bd326000
11:03:01.479662 mprotect(0x7f18bd328000, 2093056, PROT_NONE) = 0
11:03:01.479713 mmap(0x7f18bd527000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x1000) = 0x7f18bd527000
11:03:01.479777 close(8)                = 0
11:03:01.479856 mprotect(0x7f18bd527000, 4096, PROT_READ) = 0
11:03:01.479937 mprotect(0x7f18bd72b000, 4096, PROT_READ) = 0
11:03:01.479993 munmap(0x7f18ca94a000, 38458) = 0
11:03:01.480063 read(7, "", 4096)       = 0
11:03:01.480115 close(7)                = 0
11:03:01.480164 munmap(0x7f18ca960000, 4096) = 0
11:03:01.480228 open("/usr/lib64/security/pam_xauth.so", O_RDONLY|O_CLOEXEC) = 7
11:03:01.480282 read(7, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p\30\0\0\0\0\0\0"..., 832) = 832
11:03:01.480339 fstat(7, {st_mode=S_IFREG|0755, st_size=19752, ...}) = 0
11:03:01.480399 mmap(NULL, 2114064, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0x7f18bd121000
11:03:01.480458 mprotect(0x7f18bd125000, 2093056, PROT_NONE) = 0
11:03:01.480512 mmap(0x7f18bd324000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0x3000) = 0x7f18bd324000
11:03:01.480578 close(7)                = 0
11:03:01.480688 mprotect(0x7f18bd324000, 4096, PROT_READ) = 0
11:03:01.480747 read(6, "", 4096)       = 0
11:03:01.480799 close(6)                = 0
11:03:01.480851 munmap(0x7f18ca961000, 4096) = 0
11:03:01.480925 read(5, "", 4096)       = 0
11:03:01.480980 close(5)                = 0
11:03:01.481031 munmap(0x7f18ca962000, 4096) = 0
11:03:01.481088 open("/etc/pam.d/other", O_RDONLY) = 5
11:03:01.481146 fstat(5, {st_mode=S_IFREG|0644, st_size=154, ...}) = 0
11:03:01.481198 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.481250 read(5, "#%PAM-1.0\nauth     required     "..., 4096) = 154
11:03:01.481325 read(5, "", 4096)       = 0
11:03:01.481377 close(5)                = 0
11:03:01.481433 munmap(0x7f18ca962000, 4096) = 0
11:03:01.481488 ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0
11:03:01.481548 ioctl(0, TCGETS, {B38400 opost isig icanon echo ...}) = 0
11:03:01.481605 fstat(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 1), ...}) = 0
11:03:01.481719 readlink("/proc/self/fd/0", "/dev/pts/1", 4095) = 10
11:03:01.481852 stat("/dev/pts/1", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 1), ...}) = 0
11:03:01.481931 getuid()                = 0
11:03:01.481993 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 5
11:03:01.482055 fstat(5, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:01.482109 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.482164 read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:01.482227 close(5)                = 0
11:03:01.482279 munmap(0x7f18ca962000, 4096) = 0
11:03:01.482346 getuid()                = 0
11:03:01.482409 socket(AF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 5
11:03:01.482477 fcntl(5, F_SETFD, FD_CLOEXEC) = 0
11:03:01.482544 readlink("/proc/self/exe", "/usr/bin/su", 4096) = 11
11:03:01.482631 uname({sysname="Linux", nodename="mydockerhost", ...}) = 0
11:03:01.482711 sendto(5, "\230\0\0\0L\4\5\0\1\0\0\0\0\0\0\0op=PAM:authentic"..., 152, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 152
11:03:01.482854 poll([{fd=5, events=POLLIN}], 1, 500) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.482930 recvfrom(5, "$\0\0\0\2\0\0\1\1\0\0\0bx\0\0\0\0\0\0\230\0\0\0L\4\5\0\1\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:01.482993 recvfrom(5, "$\0\0\0\2\0\0\1\1\0\0\0bx\0\0\0\0\0\0\230\0\0\0L\4\5\0\1\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:01.483057 close(5)                = 0
11:03:01.483123 getuid()                = 0
11:03:01.483216 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 5
11:03:01.483284 fstat(5, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:01.483340 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.483416 read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:01.483479 close(5)                = 0
11:03:01.483568 munmap(0x7f18ca962000, 4096) = 0
11:03:01.483637 socket(AF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 5
11:03:01.483711 fcntl(5, F_SETFD, FD_CLOEXEC) = 0
11:03:01.483760 sendto(5, "\230\0\0\0M\4\5\0\2\0\0\0\0\0\0\0op=PAM:accountin"..., 152, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 152
11:03:01.483833 poll([{fd=5, events=POLLIN}], 1, 500) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.483897 recvfrom(5, "$\0\0\0\2\0\0\1\2\0\0\0bx\0\0\0\0\0\0\230\0\0\0M\4\5\0\2\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:01.483954 recvfrom(5, "$\0\0\0\2\0\0\1\2\0\0\0bx\0\0\0\0\0\0\230\0\0\0M\4\5\0\2\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:01.484010 close(5)                = 0
11:03:01.484057 open("/proc/self/loginuid", O_RDONLY) = 5
11:03:01.484114 read(5, "0", 12)        = 1
11:03:01.484166 close(5)                = 0
11:03:01.484212 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 5
11:03:01.484259 fstat(5, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:01.484307 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.484362 read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:01.484448 close(5)                = 0
11:03:01.484499 munmap(0x7f18ca962000, 4096) = 0
11:03:01.484554 ioctl(2, TCGETS, {B38400 opost isig icanon echo ...}) = 0
11:03:01.484604 fstat(2, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 1), ...}) = 0
11:03:01.484651 readlink("/proc/self/fd/2", "/dev/pts/1", 4095) = 10
11:03:01.484712 stat("/dev/pts/1", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 1), ...}) = 0
11:03:01.484780 open("/etc/localtime", O_RDONLY|O_CLOEXEC) = 5
11:03:01.484840 fstat(5, {st_mode=S_IFREG|0644, st_size=2945, ...}) = 0
11:03:01.484904 fstat(5, {st_mode=S_IFREG|0644, st_size=2945, ...}) = 0
11:03:01.484954 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.485005 read(5, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\0\0\0\f\0\0\0\0"..., 4096) = 2945
11:03:01.485072 lseek(5, -1863, SEEK_CUR) = 1082
11:03:01.485120 read(5, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\r\0\0\0\r\0\0\0\0"..., 4096) = 1863
11:03:01.485173 close(5)                = 0
11:03:01.485222 munmap(0x7f18ca962000, 4096) = 0
11:03:01.485286 socket(AF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
11:03:01.485339 connect(5, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
11:03:01.485403 sendto(5, "<37>Nov 21 11:03:01 su: (to svc_"..., 53, MSG_NOSIGNAL, NULL, 0) = 53
11:03:01.486405 close(5)                = 0
11:03:01.486482 open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 5
11:03:01.486553 read(5, "65536\n", 31)  = 6
11:03:01.486611 close(5)                = 0
11:03:01.486662 socket(AF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
11:03:01.486714 connect(5, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
11:03:01.486774 close(5)                = 0
11:03:01.486821 socket(AF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
11:03:01.486872 connect(5, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
11:03:01.486918 close(5)                = 0
11:03:01.486974 open("/etc/group", O_RDONLY|O_CLOEXEC) = 5
11:03:01.487034 lseek(5, 0, SEEK_CUR)   = 0
11:03:01.487083 fstat(5, {st_mode=S_IFREG|0644, st_size=755, ...}) = 0
11:03:01.487131 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.487182 read(5, "root:x:0:\nbin:x:1:\ndaemon:x:2:\ns"..., 4096) = 755
11:03:01.487241 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487289 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487330 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487375 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487434 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487477 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487518 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487562 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487618 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487668 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487714 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487755 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487797 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487839 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487894 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487939 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.487983 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488026 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488068 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488109 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488155 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488205 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488248 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488290 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488331 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488387 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488433 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488475 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488528 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488572 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488614 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488654 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488695 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488736 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488776 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488816 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488856 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488939 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.488986 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489029 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489071 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489114 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489155 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489196 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489238 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489280 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489321 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489362 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489420 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489463 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489513 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489553 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489611 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489653 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489700 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489738 lseek(5, 0, SEEK_CUR)   = 755
11:03:01.489786 read(5, "", 4096)       = 0
11:03:01.489836 close(5)                = 0
11:03:01.489899 munmap(0x7f18ca962000, 4096) = 0
11:03:01.489971 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 5
11:03:01.490029 fstat(5, {st_mode=S_IFREG|0644, st_size=38458, ...}) = 0
11:03:01.490080 mmap(NULL, 38458, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7f18ca959000
11:03:01.490131 close(5)                = 0
11:03:01.490183 open("/lib64/libnss_nis.so.2", O_RDONLY|O_CLOEXEC) = 5
11:03:01.490236 read(5, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P \0\0\0\0\0\0"..., 832) = 832
11:03:01.490288 fstat(5, {st_mode=S_IFREG|0755, st_size=56656, ...}) = 0
11:03:01.490339 mmap(NULL, 2143720, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x7f18bcf15000
11:03:01.490401 mprotect(0x7f18bcf20000, 2093056, PROT_NONE) = 0
11:03:01.490458 mmap(0x7f18bd11f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0xa000) = 0x7f18bd11f000
11:03:01.490523 close(5)                = 0
11:03:01.490590 mprotect(0x7f18bd11f000, 4096, PROT_READ) = 0
11:03:01.490643 munmap(0x7f18ca959000, 38458) = 0
11:03:01.490716 uname({sysname="Linux", nodename="mydockerhost", ...}) = 0
11:03:01.490781 open("/etc/default/nss", O_RDONLY|O_CLOEXEC) = 5
11:03:01.490836 fstat(5, {st_mode=S_IFREG|0644, st_size=1756, ...}) = 0
11:03:01.490898 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.490949 read(5, "# /etc/default/nss\n# This file c"..., 4096) = 1756
11:03:01.491009 read(5, "", 4096)       = 0
11:03:01.491058 close(5)                = 0
11:03:01.491106 munmap(0x7f18ca962000, 4096) = 0
11:03:01.491160 futex(0x7f18c12dca60, FUTEX_WAKE_PRIVATE, 2147483647) = 0
11:03:01.491222 open("/var/yp/binding/company.2", O_RDONLY) = 5
11:03:01.491277 pread64(5, "\1\0\0\0\nQC\205\2\315\0\0", 12, 2) = 12
11:03:01.491330 brk(NULL)               = 0x55eb52424000
11:03:01.491376 brk(0x55eb52445000)     = 0x55eb52445000
11:03:01.491456 socket(AF_INET, SOCK_DGRAM|SOCK_CLOEXEC|SOCK_NONBLOCK, IPPROTO_UDP) = 6
11:03:01.491511 bind(6, {sa_family=AF_INET, sin_port=htons(890), sin_addr=inet_addr("0.0.0.0")}, 16) = 0
11:03:01.491574 setsockopt(6, SOL_IP, IP_RECVERR, [1], 4) = 0
11:03:01.491627 futex(0x7f18ca32e640, FUTEX_WAKE_PRIVATE, 2147483647) = 0
11:03:01.491674 close(5)                = 0
11:03:01.491724 close(6)                = 0
11:03:01.491782 brk(NULL)               = 0x55eb52445000
11:03:01.491822 brk(NULL)               = 0x55eb52445000
11:03:01.491863 brk(0x55eb52441000)     = 0x55eb52441000
11:03:01.491924 brk(NULL)               = 0x55eb52441000
11:03:01.491972 socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 5
11:03:01.492030 bind(5, {sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("0.0.0.0")}, 16) = 0
11:03:01.492084 connect(5, {sa_family=AF_INET, sin_port=htons(111), sin_addr=inet_addr("10.81.67.133")}, 16) = 0
11:03:01.492401 futex(0x7f18ca32e7e0, FUTEX_WAKE_PRIVATE, 2147483647) = 0
11:03:01.492453 write(5, "\200\0\0008z\301\215\260\0\0\0\0\0\0\0\2\0\1\206\240\0\0\0\2\0\0\0\3\0\0\0\0"..., 60) = 60
11:03:01.492543 poll([{fd=5, events=POLLIN}], 1, 60000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.492814 read(5, "\200\0\0\34z\301\215\260\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2\320", 400) = 32
11:03:01.492866 close(5)                = 0
11:03:01.492943 socket(AF_INET, SOCK_STREAM, IPPROTO_TCP) = 5
11:03:01.492992 bind(5, {sa_family=AF_INET, sin_port=htons(891), sin_addr=inet_addr("0.0.0.0")}, 16) = 0
11:03:01.493040 connect(5, {sa_family=AF_INET, sin_port=htons(720), sin_addr=inet_addr("10.81.67.133")}, 16) = 0
11:03:01.493315 write(5, "\200\0\0Dw\360\202\4\0\0\0\0\0\0\0\2\0\1\206\244\0\0\0\2\0\0\0\10\0\0\0\0"..., 72) = 72
11:03:01.493399 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.497344 read(5, "\0\0\17\234w\360\202\4\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1"..., 4000) = 4000
11:03:01.497464 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.497516 read(5, "\0\0\17\234be,dmo,fks,jbi1,jbi2,jbi3,aj"..., 4000) = 4000
11:03:01.497582 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.497630 read(5, "\0\0\17\234st203::622:\0\0\0\0\5st203\0\0\0\0\0\0\1"..., 4000) = 4000
11:03:01.497714 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.497783 read(5, "\0\0\17\234,nr8,nre1,nrh1,nro2,nrs1,nrw"..., 4000) = 4000
11:03:01.497846 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.497905 read(5, "\0\0\17\234nceplay,svc_fabsrel,svc_fmit"..., 4000) = 4000
11:03:01.497971 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.498043 read(5, "\0\0\17\234\0\0\0\1\0\0\0\1\0\0\0\rPSAG21::1079:\0\0\0"..., 4000) = 4000
11:03:01.498126 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.498177 read(5, "\0\0\17\2344,q61,q6a,q8m,qaw,qay,qbd1,q"..., 4000) = 4000
11:03:01.498272 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.498323 read(5, "\0\0\17\234\0\0\0\6fr7cr3\0\0\0\0\0\1\0\0\0\1\0\0\0%vali"..., 4000) = 4000
11:03:01.498399 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.498458 read(5, "\0\0\17\234e2,flr,fls,fls1,fls3,flu1,fl"..., 4000) = 4000
11:03:01.498549 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.498625 read(5, "\0\0\17\234\0\0\0\1\0\0\0\fosirix::541:\0\0\0\6osir"..., 4000) = 4000
11:03:01.498689 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.498754 read(5, "\0\0\17\234f4b,f4e,f4l,f4x,f4y,f4z,f5p,"..., 4000) = 4000
11:03:01.498821 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.498874 read(5, "\0\0\17\234,rwc,rwn,rwo,rx8,rxf,rxp,ry9"..., 4000) = 4000
11:03:01.498950 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.499003 read(5, "\0\0\17\234:frh,sob,boc,bjm,cqk\0\0\0\7cket"..., 4000) = 4000
11:03:01.499067 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.499120 read(5, "\0\0\17\234u,gh4,gh7,gha,ghs3,gib,gid,g"..., 4000) = 4000
11:03:01.499186 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.499238 read(5, "\0\0\17\234\0\0\0\16DEMOGFMD::715:\0\0\0\0\0\10DEMO"..., 4000) = 4000
11:03:01.499299 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.499349 read(5, "\0\0\17\234xo6\0\0\0\0\1\0\0\0\1\0\0\0\rmmlfhu::1033"..., 4000) = 4000
11:03:01.499429 poll([{fd=5, events=POLLIN}], 1, 25000) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.499481 read(5, "\200\0\10T\0\0\0\3rdg\0\0\0\0\1\0\0\0\1\0\0\0\rmdmf23::"..., 4000) = 2136
11:03:01.499551 close(5)                = 0
11:03:01.499862 setgroups(5, [100, 1680, 1999, 2000, 932]) = 0
11:03:01.500483 socket(AF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 5
11:03:01.500538 fcntl(5, F_SETFD, FD_CLOEXEC) = 0
11:03:01.500593 sendto(5, "\220\0\0\0O\4\5\0\3\0\0\0\0\0\0\0op=PAM:setcred g"..., 144, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 144
11:03:01.500659 poll([{fd=5, events=POLLIN}], 1, 500) = 1 ([{fd=5, revents=POLLIN}])
11:03:01.500721 recvfrom(5, "$\0\0\0\2\0\0\1\3\0\0\0bx\0\0\0\0\0\0\220\0\0\0O\4\5\0\3\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:01.500773 recvfrom(5, "$\0\0\0\2\0\0\1\3\0\0\0bx\0\0\0\0\0\0\220\0\0\0O\4\5\0\3\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:01.500823 close(5)                = 0
11:03:01.500881 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 5
11:03:01.500934 fstat(5, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:01.500985 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.501048 read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:01.501157 read(5, "", 4096)       = 0
11:03:01.501204 close(5)                = 0
11:03:01.502052 munmap(0x7f18ca962000, 4096) = 0
11:03:01.502160 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:01.502215 getuid()                = 0
11:03:01.502258 getgid()                = 0
11:03:01.502300 setregid(100, -1)       = 0
11:03:01.502344 setreuid(46553, -1)     = 0
11:03:01.502392 keyctl(KEYCTL_JOIN_SESSION_KEYRING, NULL) = 912347064
11:03:01.502447 keyctl(KEYCTL_LINK, KEY_SPEC_USER_KEYRING, KEY_SPEC_SESSION_KEYRING) = 0
11:03:01.502496 setreuid(0, -1)         = 0
11:03:01.502541 setregid(0, -1)         = 0
11:03:01.502587 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 5
11:03:01.502637 fstat(5, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:01.502682 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.502780 read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:01.502843 read(5, "", 4096)       = 0
11:03:01.502898 close(5)                = 0
11:03:01.502944 munmap(0x7f18ca962000, 4096) = 0
11:03:01.502998 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:01.503048 getrlimit(RLIMIT_CPU, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.503093 getrlimit(RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.503136 getrlimit(RLIMIT_DATA, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.503179 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.503234 getrlimit(RLIMIT_CORE, {rlim_cur=0, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.503316 getrlimit(RLIMIT_RSS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.503361 getrlimit(RLIMIT_NPROC, {rlim_cur=63974, rlim_max=63974}) = 0
11:03:01.503422 getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=4*1024}) = 0
11:03:01.503467 getrlimit(RLIMIT_MEMLOCK, {rlim_cur=64*1024, rlim_max=64*1024}) = 0
11:03:01.503511 getrlimit(RLIMIT_AS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.503554 getrlimit(RLIMIT_LOCKS, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.503598 getrlimit(RLIMIT_SIGPENDING, {rlim_cur=63974, rlim_max=63974}) = 0
11:03:01.503642 getrlimit(RLIMIT_MSGQUEUE, {rlim_cur=800*1024, rlim_max=800*1024}) = 0
11:03:01.503685 getrlimit(RLIMIT_NICE, {rlim_cur=0, rlim_max=0}) = 0
11:03:01.503729 getrlimit(RLIMIT_RTPRIO, {rlim_cur=0, rlim_max=0}) = 0
11:03:01.503773 getrlimit(RLIMIT_RTTIME, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
11:03:01.503817 getpriority(PRIO_PROCESS, 0) = 20
11:03:01.503873 open("/etc/security/limits.conf", O_RDONLY) = 5
11:03:01.503969 fstat(5, {st_mode=S_IFREG|0644, st_size=2422, ...}) = 0
11:03:01.504017 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca962000
11:03:01.504064 read(5, "# /etc/security/limits.conf\n#\n#T"..., 4096) = 2422
11:03:01.504126 read(5, "", 4096)       = 0
11:03:01.504172 close(5)                = 0
11:03:01.504217 munmap(0x7f18ca962000, 4096) = 0
11:03:01.504272 openat(AT_FDCWD, "/etc/security/limits.d", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 5
11:03:01.504325 getdents(5, /* 3 entries */, 32768) = 88
11:03:01.504388 open("/usr/lib64/gconv/gconv-modules.cache", O_RDONLY) = 6
11:03:01.504440 fstat(6, {st_mode=S_IFREG|0644, st_size=26254, ...}) = 0
11:03:01.504487 mmap(NULL, 26254, PROT_READ, MAP_SHARED, 6, 0) = 0x7f18ca95c000
11:03:01.504533 close(6)                = 0
11:03:01.504578 futex(0x7f18ca32aa80, FUTEX_WAKE_PRIVATE, 2147483647) = 0
11:03:01.504629 getdents(5, /* 0 entries */, 32768) = 0
11:03:01.504674 close(5)                = 0
11:03:01.504719 open("/etc/security/limits.d/20-nproc.conf", O_RDONLY) = 5
11:03:01.504774 fstat(5, {st_mode=S_IFREG|0644, st_size=191, ...}) = 0
11:03:01.504821 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:01.504867 read(5, "# Default limit for number of us"..., 4096) = 191
11:03:01.504938 read(5, "", 4096)       = 0
11:03:01.504982 close(5)                = 0
11:03:01.505026 munmap(0x7f18ca95b000, 4096) = 0
11:03:01.505075 setrlimit(RLIMIT_NPROC, {rlim_cur=4*1024, rlim_max=63974}) = 0
11:03:01.505121 setpriority(PRIO_PROCESS, 0, 0) = 0
11:03:01.505165 access("/run/systemd/seats/", F_OK) = 0
11:03:01.505224 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 5
11:03:01.505273 fstat(5, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:01.505319 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:01.505373 read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:01.505455 read(5, "", 4096)       = 0
11:03:01.505501 close(5)                = 0
11:03:01.505544 munmap(0x7f18ca95b000, 4096) = 0
11:03:01.505593 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:01.505675 socket(AF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 5
11:03:01.505725 setsockopt(5, SOL_SOCKET, SO_PASSCRED, [0], 4) = 0
11:03:01.505771 setsockopt(5, SOL_SOCKET, SO_PASSSEC, [0], 4) = 0
11:03:01.505815 getsockopt(5, SOL_SOCKET, SO_RCVBUF, [212992], [4]) = 0
11:03:01.505861 setsockopt(5, SOL_SOCKET, SO_RCVBUFFORCE, [8388608], 4) = 0
11:03:01.505915 getsockopt(5, SOL_SOCKET, SO_SNDBUF, [212992], [4]) = 0
11:03:01.505960 setsockopt(5, SOL_SOCKET, SO_SNDBUFFORCE, [8388608], 4) = 0
11:03:01.506005 connect(5, {sa_family=AF_LOCAL, sun_path="/var/run/dbus/system_bus_socket"}, 33) = 0
11:03:01.506196 getsockopt(5, SOL_SOCKET, SO_PEERCRED, {pid=1, uid=0, gid=0}, [12]) = 0
11:03:01.506247 getsockopt(5, SOL_SOCKET, SO_PEERSEC, 0x55eb5241fa10, 0x7fff56e02d24) = -1 ENOPROTOOPT (Protocol not available)
11:03:01.506294 fstat(5, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
11:03:01.506340 getsockopt(5, SOL_SOCKET, SO_ACCEPTCONN, [0], [4]) = 0
11:03:01.506398 getsockname(5, {sa_family=AF_LOCAL, NULL}, [2]) = 0
11:03:01.506720 geteuid()               = 0
11:03:01.506770 sendmsg(5, {msg_name(0)=NULL, msg_iov(3)=[{"\0AUTH EXTERNAL ", 15}, {"30", 2}, {"\r\nNEGOTIATE_UNIX_FD\r\nBEGIN\r\n", 28}], msg_controllen=0, msg_flags=0}, MSG_DONTWAIT|MSG_NOSIGNAL) = 45
11:03:01.506916 getrandom("\252U\356\r\314nZ\6*\343\322mM\35\335p", 16, GRND_NONBLOCK) = 16
11:03:01.506985 recvmsg(5, {msg_name(0)=NULL, msg_iov(1)=[{"OK 7003263dcf28deb1292d6db25dd23"..., 256}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_CMSG_CLOEXEC) = 52
11:03:01.507044 sendmsg(5, {msg_name(0)=NULL, msg_iov(1)=[{"l\1\0\1\0\0\0\0\1\0\0\0m\0\0\0\1\1o\0\25\0\0\0/org/fre"..., 128}], msg_controllen=0, msg_flags=0}, MSG_DONTWAIT|MSG_NOSIGNAL) = 128
11:03:01.507171 recvmsg(5, {msg_name(0)=NULL, msg_iov(1)=[{"l\3\1\1H\0\0\0\1\0\0\0}\0\0\0\6\1s\0\17\0\0\0", 24}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_CMSG_CLOEXEC) = 24
11:03:01.507223 recvmsg(5, {msg_name(0)=NULL, msg_iov(1)=[{":not.active.yet\0\4\1s\0)\0\0\0org.free"..., 192}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_CMSG_CLOEXEC) = 192
11:03:01.507548 recvmsg(5, 0x7fff56e01bc0, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_CMSG_CLOEXEC) = -1 EAGAIN (Resource temporarily unavailable)
11:03:01.507599 ppoll([{fd=5, events=POLLIN}], 1, NULL, NULL, 8) = 1 ([{fd=5, revents=POLLIN|POLLHUP}])
11:03:31.519276 recvmsg(5, {msg_name(0)=NULL, msg_iov(1)=[{"", 24}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_DONTWAIT|MSG_NOSIGNAL|MSG_CMSG_CLOEXEC) = 0
11:03:31.519374 close(5)                = 0
11:03:31.519485 open("/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 5
11:03:31.519626 fstat(5, {st_mode=S_IFREG|0644, st_size=2502, ...}) = 0
11:03:31.519680 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.519733 read(5, "# Locale name alias data base.\n#"..., 4096) = 2502
11:03:31.519834 read(5, "", 4096)       = 0
11:03:31.519886 close(5)                = 0
11:03:31.519935 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.520002 open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.520058 open("/usr/share/locale/en_US.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.520107 open("/usr/share/locale/en_US/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.520157 open("/usr/share/locale/en.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.520205 open("/usr/share/locale/en.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.520254 open("/usr/share/locale/en/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.520329 socket(AF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
11:03:31.520403 connect(5, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
11:03:31.520461 sendto(5, "<83>Nov 21 11:03:31 su: pam_syst"..., 101, MSG_NOSIGNAL, NULL, 0) = 101
11:03:31.520531 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.520588 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.520653 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.520728 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.520858 close(6)                = 0
11:03:31.520923 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.520978 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.521031 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.521080 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.521128 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.521184 close(6)                = 0
11:03:31.521229 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.521309 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.521370 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.521442 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.521490 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.521543 close(6)                = 0
11:03:31.521588 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.521636 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.521686 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.521733 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.521809 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.521864 close(6)                = 0
11:03:31.521911 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.521960 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.522011 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.522061 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.522109 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.522160 close(6)                = 0
11:03:31.522206 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.522255 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.522306 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.522355 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.522417 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.522472 close(6)                = 0
11:03:31.522518 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.522570 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.522627 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.522677 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.522726 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.522778 close(6)                = 0
11:03:31.522825 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.522875 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.522923 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.522972 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.523020 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.523071 close(6)                = 0
11:03:31.523116 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.523165 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.523215 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.523265 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.523315 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.523370 close(6)                = 0
11:03:31.523433 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.523486 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.523535 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.523581 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.523626 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.523677 close(6)                = 0
11:03:31.523720 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.523766 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.523814 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.523859 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.523926 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.523978 close(6)                = 0
11:03:31.524022 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.524115 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.524168 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.524219 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.524267 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.524322 close(6)                = 0
11:03:31.524368 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.524456 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.524520 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.524571 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.524619 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.524673 close(6)                = 0
11:03:31.524719 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.524768 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.524818 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.524867 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.524914 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.524967 close(6)                = 0
11:03:31.525013 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.525062 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.525111 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.525159 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.525206 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.525282 close(6)                = 0
11:03:31.525332 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.525388 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.525444 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.525494 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.525547 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.525602 close(6)                = 0
11:03:31.525657 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.525728 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.525785 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.525835 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.525883 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.525938 close(6)                = 0
11:03:31.525984 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.526033 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.526083 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.526134 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.526182 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.526238 close(6)                = 0
11:03:31.526285 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.526336 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.526390 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.526443 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.526491 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.526545 close(6)                = 0
11:03:31.526591 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.526644 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.526695 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.526743 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.526792 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.526846 close(6)                = 0
11:03:31.526893 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.526943 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.526993 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.527042 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.527089 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.527142 close(6)                = 0
11:03:31.527187 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.527237 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.527288 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.527336 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.527385 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.527440 close(6)                = 0
11:03:31.527486 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.527538 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.527589 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.527636 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.527684 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.527738 close(6)                = 0
11:03:31.527784 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.527836 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.527887 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.527935 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.527985 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.528052 close(6)                = 0
11:03:31.528104 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.528159 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.528211 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.528259 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.528308 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.528364 close(6)                = 0
11:03:31.528417 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.528469 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.528519 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.528567 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.528620 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.528677 read(6, "", 4096)       = 0
11:03:31.528724 close(6)                = 0
11:03:31.528770 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.528821 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:31.528872 stat("/u/users/myuser_ad", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
11:03:31.528937 getuid()                = 0
11:03:31.528984 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
11:03:31.529033 fstat(6, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.529081 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.529128 read(6, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.529179 close(6)                = 0
11:03:31.529224 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.529334 getuid()                = 0
11:03:31.529390 open("/etc/login.defs", O_RDONLY) = 6
11:03:31.529484 fstat(6, {st_mode=S_IFREG|0644, st_size=2043, ...}) = 0
11:03:31.529564 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.529633 read(6, "#\n# Please note that the paramet"..., 4096) = 2043
11:03:31.529733 close(6)                = 0
11:03:31.529799 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.529883 access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or directory)
11:03:31.529966 open("/var/run/utmp", O_RDONLY|O_CLOEXEC) = 6
11:03:31.530039 lseek(6, 0, SEEK_SET)   = 0
11:03:31.530108 alarm(0)                = 0
11:03:31.530173 rt_sigaction(SIGALRM, {0x7f18ca09d400, [], SA_RESTORER, 0x7f18c9f983b0}, {SIG_DFL, [], 0}, 8) = 0
11:03:31.530242 alarm(10)               = 0
11:03:31.530306 fcntl(6, F_SETLKW, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
11:03:31.530360 read(6, "\2\0\0\0\0\0\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
11:03:31.530419 read(6, "\1\0\0\0005\0\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
11:03:31.530469 read(6, "\6\0\0\0^\t\0\0tty1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
11:03:31.530520 read(6, "\7\0\0\0RC\0\0pts/0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
11:03:31.530570 read(6, "\7\0\0\0\346i\0\0pts/1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
11:03:31.530617 fcntl(6, F_SETLKW, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=0, l_len=0}) = 0
11:03:31.530665 alarm(0)                = 10
11:03:31.530711 rt_sigaction(SIGALRM, {SIG_DFL, [], SA_RESTORER, 0x7f18c9f983b0}, NULL, 8) = 0
11:03:31.530761 close(6)                = 0
11:03:31.530807 getuid()                = 0
11:03:31.530864 sendto(5, "<86>Nov 21 11:03:31 su: pam_unix"..., 97, MSG_NOSIGNAL, NULL, 0) = 97
11:03:31.530933 getuid()                = 0
11:03:31.530983 getgid()                = 0
11:03:31.531031 stat("/var/lib/sss/pipes/private/pam", {st_mode=S_IFSOCK|0600, st_size=0, ...}) = 0
11:03:31.531089 fstat(-1, 0x7fff56e02bf0) = -1 EBADF (Bad file descriptor)
11:03:31.531134 socket(AF_LOCAL, SOCK_STREAM, 0) = 6
11:03:31.531274 fcntl(6, F_GETFL)       = 0x2 (flags O_RDWR)
11:03:31.531322 fcntl(6, F_SETFL, O_RDWR|O_NONBLOCK) = 0
11:03:31.531370 fcntl(6, F_GETFD)       = 0
11:03:31.531431 fcntl(6, F_SETFD, FD_CLOEXEC) = 0
11:03:31.531476 connect(6, {sa_family=AF_LOCAL, sun_path="/var/lib/sss/pipes/private/pam"}, 110) = 0
11:03:31.531569 fstat(6, {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
11:03:31.531622 poll([{fd=6, events=POLLOUT}], 1, 300000) = 1 ([{fd=6, revents=POLLOUT}])
11:03:31.531677 sendto(6, "\24\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0", 16, MSG_NOSIGNAL, NULL, 0) = 16
11:03:31.531728 poll([{fd=6, events=POLLOUT}], 1, 300000) = 1 ([{fd=6, revents=POLLOUT}])
11:03:31.531779 sendto(6, "\3\0\0\0", 4, MSG_NOSIGNAL, NULL, 0) = 4
11:03:31.531836 poll([{fd=6, events=POLLIN}], 1, 300000) = 1 ([{fd=6, revents=POLLIN}])
11:03:31.531888 read(6, "\24\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
11:03:31.531939 poll([{fd=6, events=POLLIN}], 1, 300000) = 1 ([{fd=6, revents=POLLIN}])
11:03:31.531989 read(6, "\3\0\0\0", 4)  = 4
11:03:31.532044 getsockopt(6, SOL_SOCKET, SO_PEERCRED, {pid=26912, uid=0, gid=0}, [12]) = 0
11:03:31.532095 poll([{fd=6, events=POLLOUT}], 1, 300000) = 1 ([{fd=6, revents=POLLOUT}])
11:03:31.532146 sendto(6, "_\0\0\0\364\0\0\0\0\0\0\0\0\0\0\0", 16, MSG_NOSIGNAL, NULL, 0) = 16
11:03:31.532200 poll([{fd=6, events=POLLOUT}], 1, 300000) = 1 ([{fd=6, revents=POLLOUT}])
11:03:31.532253 sendto(6, "IPAM\1\0\0\0\v\0\0\0myuser_ad\0\2\0\0\0\5\0\0\0s"..., 79, MSG_NOSIGNAL, NULL, 0) = 79
11:03:31.532474 poll([{fd=6, events=POLLIN}], 1, 300000) = 1 ([{fd=6, revents=POLLIN}])
11:03:31.536497 read(6, ".\0\0\0\364\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
11:03:31.536553 poll([{fd=6, events=POLLIN}], 1, 300000) = 1 ([{fd=6, revents=POLLIN}])
11:03:31.536602 read(6, "\0\0\0\0\1\0\0\0\2\0\0\0\16\0\0\0mydomain.com\0", 30) = 30
11:03:31.536658 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 7
11:03:31.536710 fstat(7, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.536757 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.536804 read(7, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.536863 read(7, "", 4096)       = 0
11:03:31.536907 close(7)                = 0
11:03:31.536950 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.537002 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:31.537064 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 7
11:03:31.537113 fstat(7, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:31.537157 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.537203 read(7, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:31.537285 read(7, "", 4096)       = 0
11:03:31.537335 close(7)                = 0
11:03:31.537386 munmap(0x7f18ca95b000, 4096) = 0
11:03:31.537441 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:31.537494 open("/var/log/lastlog", O_RDWR) = 7
11:03:31.537546 lseek(7, 13593476, SEEK_SET) = 13593476
11:03:31.537589 fcntl(7, F_SETLK, {l_type=F_RDLCK, l_whence=SEEK_SET, l_start=13593476, l_len=292}) = 0
11:03:31.537638 read(7, "7`\326]pts/1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 292) = 292
11:03:31.537691 fcntl(7, F_SETLK, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=13593476, l_len=292}) = 0
11:03:31.537748 open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.537798 open("/usr/share/locale/en_US.utf8/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.537845 open("/usr/share/locale/en_US/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.537891 open("/usr/share/locale/en.UTF-8/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.537936 open("/usr/share/locale/en.utf8/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.537981 open("/usr/share/locale/en/LC_MESSAGES/Linux-PAM.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
11:03:31.538048 fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 1), ...}) = 0
11:03:31.538095 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95b000
11:03:31.538146 write(1, "Last login: Thu Nov 21 11:00:23 "..., 50) = 50
11:03:31.538202 lseek(7, 13593476, SEEK_SET) = 13593476
11:03:31.538250 fcntl(7, F_SETLK, {l_type=F_WRLCK, l_whence=SEEK_SET, l_start=13593476, l_len=292}) = 0
11:03:31.538297 write(7, "\363`\326]pts/1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 292) = 292
11:03:31.538357 fcntl(7, F_SETLK, {l_type=F_UNLCK, l_whence=SEEK_SET, l_start=13593476, l_len=292}) = 0
11:03:31.538412 close(7)                = 0
11:03:31.538457 open("/var/log/btmp", O_RDONLY) = 7
11:03:31.538505 read(7, "\6\0\0\0\242L\0\0ssh:notty\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
11:03:31.538551 read(7, "\6\0\0\0\202a\0\0ssh:notty\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
11:03:31.538594 read(7, "\6\0\0\0\202a\0\0ssh:notty\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
11:03:31.538638 read(7, "", 384)        = 0
11:03:31.538685 close(7)                = 0
11:03:31.538729 access("/usr/X11R6/bin/xauth", X_OK) = -1 ENOENT (No such file or directory)
11:03:31.538778 access("/usr/bin/xauth", X_OK) = -1 ENOENT (No such file or directory)
11:03:31.538824 access("/usr/bin/X11/xauth", X_OK) = -1 ENOENT (No such file or directory)
11:03:31.538869 socket(AF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 7
11:03:31.538919 fcntl(7, F_SETFD, FD_CLOEXEC) = 0
11:03:31.538971 sendto(7, "\310\0\0\0Q\4\5\0\4\0\0\0\0\0\0\0op=PAM:session_o"..., 200, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 200
11:03:31.539037 poll([{fd=7, events=POLLIN}], 1, 500) = 1 ([{fd=7, revents=POLLIN}])
11:03:31.539085 recvfrom(7, "$\0\0\0\2\0\0\1\4\0\0\0bx\0\0\0\0\0\0\310\0\0\0Q\4\5\0\4\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:31.539143 recvfrom(7, "$\0\0\0\2\0\0\1\4\0\0\0bx\0\0\0\0\0\0\310\0\0\0Q\4\5\0\4\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:31.539197 close(7)                = 0
11:03:31.539246 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f18ca954a50) = 31150
11:03:31.539711 chdir("/")              = 0
11:03:31.539761 rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1], NULL, 8) = 0
11:03:31.539809 rt_sigaction(SIGTERM, {0x55eb5046b970, [], SA_RESTORER, 0x7f18c9f983b0}, NULL, 8) = 0
11:03:31.539855 rt_sigprocmask(SIG_UNBLOCK, [ALRM TERM], NULL, 8) = 0
11:03:31.539901 wait4(31150, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WSTOPPED, NULL) = 31150
11:03:36.521972 geteuid()               = 0
11:03:36.522050 getegid()               = 0
11:03:36.522100 setregid(-1, 100)       = 0
11:03:36.522151 setresuid(-1, 46553, 0) = 0
11:03:36.522201 keyctl(KEYCTL_REVOKE, 912347064) = 0
11:03:36.522253 setreuid(-1, 0)         = 0
11:03:36.522301 setregid(-1, 0)         = 0
11:03:36.522357 getuid()                = 0
11:03:36.522436 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 7
11:03:36.522508 fstat(7, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:36.522565 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95a000
11:03:36.522623 read(7, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:36.522751 close(7)                = 0
11:03:36.522804 munmap(0x7f18ca95a000, 4096) = 0
11:03:36.522878 getuid()                = 0
11:03:36.522923 open("/etc/login.defs", O_RDONLY) = 7
11:03:36.522980 fstat(7, {st_mode=S_IFREG|0644, st_size=2043, ...}) = 0
11:03:36.523031 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95a000
11:03:36.523081 read(7, "#\n# Please note that the paramet"..., 4096) = 2043
11:03:36.523141 close(7)                = 0
11:03:36.523188 munmap(0x7f18ca95a000, 4096) = 0
11:03:36.523258 sendto(5, "<86>Nov 21 11:03:36 su: pam_unix"..., 82, MSG_NOSIGNAL, NULL, 0) = 82
11:03:36.523341 getuid()                = 0
11:03:36.523516 getgid()                = 0
11:03:36.523564 stat("/var/lib/sss/pipes/private/pam", {st_mode=S_IFSOCK|0600, st_size=0, ...}) = 0
11:03:36.523624 poll([{fd=6, events=POLLIN|POLLOUT}], 1, 300000) = 1 ([{fd=6, revents=POLLOUT}])
11:03:36.523678 getsockopt(6, SOL_SOCKET, SO_PEERCRED, {pid=26912, uid=0, gid=0}, [12]) = 0
11:03:36.523728 poll([{fd=6, events=POLLOUT}], 1, 300000) = 1 ([{fd=6, revents=POLLOUT}])
11:03:36.523778 sendto(6, "_\0\0\0\365\0\0\0\0\0\0\0\0\0\0\0", 16, MSG_NOSIGNAL, NULL, 0) = 16
11:03:36.523858 poll([{fd=6, events=POLLOUT}], 1, 300000) = 1 ([{fd=6, revents=POLLOUT}])
11:03:36.523908 sendto(6, "IPAM\1\0\0\0\v\0\0\0myuser_ad\0\2\0\0\0\5\0\0\0s"..., 79, MSG_NOSIGNAL, NULL, 0) = 79
11:03:36.524314 poll([{fd=6, events=POLLIN}], 1, 300000) = 1 ([{fd=6, revents=POLLIN}])
11:03:36.524620 read(6, ".\0\0\0\365\0\0\0\0\0\0\0\0\0\0\0", 16) = 16
11:03:36.524670 poll([{fd=6, events=POLLIN}], 1, 300000) = 1 ([{fd=6, revents=POLLIN}])
11:03:36.524717 read(6, "\0\0\0\0\1\0\0\0\2\0\0\0\16\0\0\0mydomain.com\0", 30) = 30
11:03:36.524770 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 7
11:03:36.524821 fstat(7, {st_mode=S_IFREG|0644, st_size=1663, ...}) = 0
11:03:36.524876 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f18ca95a000
11:03:36.524924 read(7, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1663
11:03:36.524981 read(7, "", 4096)       = 0
11:03:36.525024 close(7)                = 0
11:03:36.525066 munmap(0x7f18ca95a000, 4096) = 0
11:03:36.525123 fstat(3, {st_mode=S_IFREG|0664, st_size=8406312, ...}) = 0
11:03:36.525186 socket(AF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 7
11:03:36.525237 fcntl(7, F_SETFD, FD_CLOEXEC) = 0
11:03:36.525295 sendto(7, "\310\0\0\0R\4\5\0\5\0\0\0\0\0\0\0op=PAM:session_c"..., 200, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 200
11:03:36.525370 poll([{fd=7, events=POLLIN}], 1, 500) = 1 ([{fd=7, revents=POLLIN}])
11:03:36.525451 recvfrom(7, "$\0\0\0\2\0\0\1\5\0\0\0bx\0\0\0\0\0\0\310\0\0\0R\4\5\0\5\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:36.525505 recvfrom(7, "$\0\0\0\2\0\0\1\5\0\0\0bx\0\0\0\0\0\0\310\0\0\0R\4\5\0\5\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:36.525553 close(7)                = 0
11:03:36.525613 socket(AF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 7
11:03:36.525657 fcntl(7, F_SETFD, FD_CLOEXEC) = 0
11:03:36.525706 sendto(7, "\220\0\0\0P\4\5\0\6\0\0\0\0\0\0\0op=PAM:setcred g"..., 144, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 144
11:03:36.525761 poll([{fd=7, events=POLLIN}], 1, 500) = 1 ([{fd=7, revents=POLLIN}])
11:03:36.525808 recvfrom(7, "$\0\0\0\2\0\0\1\6\0\0\0bx\0\0\0\0\0\0\220\0\0\0P\4\5\0\6\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:36.525855 recvfrom(7, "$\0\0\0\2\0\0\1\6\0\0\0bx\0\0\0\0\0\0\220\0\0\0P\4\5\0\6\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
11:03:36.525901 close(7)                = 0
11:03:36.525949 close(6)                = 0
11:03:36.526053 munmap(0x7f18c25e1000, 2105520) = 0
11:03:36.526121 munmap(0x7f18c1d38000, 2109664) = 0
11:03:36.526181 munmap(0x7f18c1b35000, 2105520) = 0
11:03:36.526238 munmap(0x7f18c1931000, 2109648) = 0
11:03:36.526295 munmap(0x7f18c172e000, 2105464) = 0
11:03:36.526369 munmap(0x7f18c1514000, 2200544) = 0
11:03:36.526441 munmap(0x7f18c12dd000, 2318880) = 0
11:03:36.526495 munmap(0x7f18c0ec0000, 2105536) = 0
11:03:36.526550 munmap(0x7f18c0cb4000, 2143344) = 0
11:03:36.526608 munmap(0x7f18c0ab2000, 2101296) = 0
11:03:36.526664 munmap(0x7f18c08b0000, 2101320) = 0
11:03:36.526808 munmap(0x7f18c06ad000, 2105576) = 0
11:03:36.526871 munmap(0x7f18c04a7000, 2118240) = 0
11:03:36.526922 munmap(0x7f18c029c000, 2138640) = 0
11:03:36.526975 munmap(0x7f18bfe83000, 2105520) = 0
11:03:36.527031 munmap(0x7f18bfc7e000, 2113880) = 0
11:03:36.527090 munmap(0x7f18bfa34000, 2399728) = 0
11:03:36.527250 munmap(0x7f18be462000, 2129952) = 0
11:03:36.527303 munmap(0x7f18be212000, 2420952) = 0
11:03:36.527354 munmap(0x7f18bdfe1000, 2296544) = 0
11:03:36.527437 munmap(0x7f18beebe000, 2184192) = 0
11:03:36.527493 munmap(0x7f18bf0d4000, 2427152) = 0
11:03:36.527547 munmap(0x7f18be66b000, 2162024) = 0
11:03:36.527598 munmap(0x7f18be87b000, 2249352) = 0
11:03:36.527650 munmap(0x7f18beaa1000, 2191808) = 0
11:03:36.527702 munmap(0x7f18c0086000, 2183272) = 0
11:03:36.527754 munmap(0x7f18bf325000, 3150120) = 0
11:03:36.527807 munmap(0x7f18bf627000, 2114112) = 0
11:03:36.527858 munmap(0x7f18becb9000, 2113904) = 0
11:03:36.527908 munmap(0x7f18bddcc000, 2179400) = 0
11:03:36.527959 munmap(0x7f18bdb4b000, 2621648) = 0
11:03:36.528012 munmap(0x7f18bd946000, 2113656) = 0
11:03:36.528072 munmap(0x7f18bd72d000, 2198016) = 0
11:03:36.528130 munmap(0x7f18bd529000, 2109712) = 0
11:03:36.528180 munmap(0x7f18bd326000, 2105600) = 0
11:03:36.528250 munmap(0x7f18bd121000, 2114064) = 0
11:03:36.528300 munmap(0x7f18c23ba000, 2255184) = 0
11:03:36.528356 munmap(0x7f18c2158000, 2494984) = 0
11:03:36.528447 close(1)                = 0
11:03:36.528492 munmap(0x7f18ca95b000, 4096) = 0
11:03:36.528539 close(2)                = 0
11:03:36.528599 close(4)                = 0
11:03:36.528712 exit_group(0)           = ?
11:03:36.528917 +++ exited with 0 +++