Page MenuHomePhorge
Paste P13

apparmor hang strace
ActivePublic
Actions

Authored by keithzg on Jul 27 2023, 12:14 AM.
Tags
  • Restricted Project
Referenced Files
F95304: apparmor hang strace
Jul 27 2023, 12:14 AM
Subscribers
None
execve("/usr/sbin/apparmor_parser", ["apparmor_parser", "--replace", "/etc/apparmor.d"], 0x7ffd5ed81bf0 /* 27 vars */) = 0
brk(NULL) = 0x563c2e62e000
arch_prctl(0x3001 /* ARCH_??? */, 0x7ffca32d1780) = -1 EINVAL (Invalid argument)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f336e725000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=201717, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 201717, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f336e6f3000
close(3) = 0
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P<\2\0\0\0\0\0"..., 832) = 832
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2072888, ...}, AT_EMPTY_PATH) = 0
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784
mmap(NULL, 2117488, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f336e400000
mmap(0x7f336e422000, 1540096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7f336e422000
mmap(0x7f336e59a000, 360448, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19a000) = 0x7f336e59a000
mmap(0x7f336e5f2000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1f1000) = 0x7f336e5f2000
mmap(0x7f336e5f8000, 53104, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f336e5f8000
close(3) = 0
mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f336e6f0000
arch_prctl(ARCH_SET_FS, 0x7f336e6f0740) = 0
set_tid_address(0x7f336e6f0a10) = 125833
set_robust_list(0x7f336e6f0a20, 24) = 0
rseq(0x7f336e6f1060, 0x20, 0, 0x53053053) = 0
mprotect(0x7f336e5f2000, 16384, PROT_READ) = 0
mprotect(0x563c2ddcc000, 45056, PROT_READ) = 0
mprotect(0x7f336e75a000, 8192, PROT_READ) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
munmap(0x7f336e6f3000, 201717) = 0
futex(0x563c2ddddcdc, FUTEX_WAKE_PRIVATE, 2147483647) = 0
getrandom("\x39\x0f\x14\xd7\x94\x48\x8c\xee", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x563c2e62e000
brk(0x563c2e64f000) = 0x563c2e64f000
newfstatat(AT_FDCWD, "/etc/apparmor.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
openat(AT_FDCWD, "/etc/apparmor/parser.conf", O_RDONLY) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=2267, ...}, AT_EMPTY_PATH) = 0
read(3, "# parser.conf is a global AppArm"..., 4096) = 2267
newfstatat(AT_FDCWD, "/etc/apparmor.d/abi/kernel-5.4-outoftree-network", {st_mode=S_IFREG|0644, st_size=1633, ...}, 0) = 0
openat(AT_FDCWD, "/etc/apparmor.d/abi/kernel-5.4-outoftree-network", O_RDONLY) = 4
read(4, "query {label {multi_transaction "..., 8191) = 1633
read(4, "", 6558) = 0
close(4) = 0
read(3, "", 4096) = 0
close(3) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 3
read(3, "0-7\n", 1024) = 4
close(3) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/possible", O_RDONLY|O_CLOEXEC) = 3
read(3, "0-7\n", 1024) = 4
close(3) = 0
openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=5716304, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 5716304, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f336de00000
close(3) = 0
getuid() = 0
geteuid() = 0
newfstatat(-1, "/sys/kernel/security/apparmor/features", {st_mode=S_IFDIR|0755, st_size=0, ...}, 0) = 0
openat(-1, "/sys/kernel/security/apparmor/features", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 3
dup(3) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(4, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(4, F_SETFD, FD_CLOEXEC) = 0
getdents64(4, 0x563c2e645d30 /* 17 entries */, 32768) = 496
getdents64(4, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(4, 0, SEEK_SET) = 0
getdents64(4, 0x563c2e645d30 /* 17 entries */, 32768) = 496
close(4) = 0
newfstatat(3, "capability", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "capability", O_RDONLY) = 4
read(4, "0xffffff\n", 8179) = 9
read(4, "", 8170) = 0
close(4) = 0
newfstatat(3, "caps", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "caps", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
close(5) = 0
newfstatat(4, "mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "mask", O_RDONLY) = 5
read(5, "chown dac_override dac_read_sear"..., 8156) = 421
read(5, "", 7735) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "dbus", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "dbus", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
close(5) = 0
newfstatat(4, "mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "mask", O_RDONLY) = 5
read(5, "acquire send receive\n", 7719) = 21
read(5, "", 7698) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "domain", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "domain", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 12 entries */, 32768) = 424
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 12 entries */, 32768) = 424
brk(0x563c2e670000) = 0x563c2e670000
close(5) = 0
newfstatat(4, "attach_conditions", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "attach_conditions", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 5
dup(5) = 6
newfstatat(6, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(6, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(6, F_SETFD, FD_CLOEXEC) = 0
getdents64(6, 0x563c2e645d30 /* 3 entries */, 32768) = 80
getdents64(6, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(6, 0, SEEK_SET) = 0
getdents64(6, 0x563c2e645d30 /* 3 entries */, 32768) = 80
close(6) = 0
newfstatat(5, "xattr", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(5, "xattr", O_RDONLY) = 6
read(6, "yes\n", 7660) = 4
read(6, "", 7656) = 0
close(6) = 0
close(5) = 0
newfstatat(4, "change_hat", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "change_hat", O_RDONLY) = 5
read(5, "yes\n", 7640) = 4
read(5, "", 7636) = 0
close(5) = 0
newfstatat(4, "change_hatv", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "change_hatv", O_RDONLY) = 5
read(5, "yes\n", 7621) = 4
read(5, "", 7617) = 0
close(5) = 0
newfstatat(4, "change_onexec", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "change_onexec", O_RDONLY) = 5
read(5, "yes\n", 7600) = 4
read(5, "", 7596) = 0
close(5) = 0
newfstatat(4, "change_profile", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "change_profile", O_RDONLY) = 5
read(5, "yes\n", 7578) = 4
read(5, "", 7574) = 0
close(5) = 0
newfstatat(4, "computed_longest_left", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "computed_longest_left", O_RDONLY) = 5
read(5, "yes\n", 7549) = 4
read(5, "", 7545) = 0
close(5) = 0
newfstatat(4, "fix_binfmt_elf_mmap", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "fix_binfmt_elf_mmap", O_RDONLY) = 5
read(5, "yes\n", 7522) = 4
read(5, "", 7518) = 0
close(5) = 0
newfstatat(4, "post_nnp_subset", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "post_nnp_subset", O_RDONLY) = 5
read(5, "yes\n", 7499) = 4
read(5, "", 7495) = 0
close(5) = 0
newfstatat(4, "stack", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "stack", O_RDONLY) = 5
read(5, "yes\n", 7486) = 4
read(5, "", 7482) = 0
close(5) = 0
newfstatat(4, "version", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "version", O_RDONLY) = 5
read(5, "1.2\n", 7471) = 4
read(5, "", 7467) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "file", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "file", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
close(5) = 0
newfstatat(4, "mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "mask", O_RDONLY) = 5
read(5, "create read write exec append mm"..., 7451) = 50
read(5, "", 7401) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "ipc", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "ipc", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 80
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 80
close(5) = 0
newfstatat(4, "posix_mqueue", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "posix_mqueue", O_RDONLY) = 5
read(5, "create read write open delete se"..., 7378) = 46
read(5, "", 7332) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "mount", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "mount", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
close(5) = 0
newfstatat(4, "mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "mask", O_RDONLY) = 5
read(5, "mount umount pivot_root\n", 7315) = 24
read(5, "", 7291) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "namespaces", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "namespaces", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 5 entries */, 32768) = 136
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 5 entries */, 32768) = 136
close(5) = 0
newfstatat(4, "mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "mask", O_RDONLY) = 5
read(5, "userns_create\n", 7269) = 14
read(5, "", 7255) = 0
close(5) = 0
newfstatat(4, "pivot_root", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "pivot_root", O_RDONLY) = 5
read(5, "no\n", 7241) = 3
read(5, "", 7238) = 0
close(5) = 0
newfstatat(4, "profile", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "profile", O_RDONLY) = 5
read(5, "yes\n", 7227) = 4
read(5, "", 7223) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "network", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "network", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 4 entries */, 32768) = 112
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 4 entries */, 32768) = 112
close(5) = 0
newfstatat(4, "af_mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "af_mask", O_RDONLY) = 5
read(5, "unspec unix inet ax25 ipx applet"..., 7201) = 262
read(5, "", 6939) = 0
close(5) = 0
newfstatat(4, "af_unix", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "af_unix", O_RDONLY) = 5
read(5, "yes\n", 6928) = 4
read(5, "", 6924) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "network_v8", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "network_v8", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 80
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 80
close(5) = 0
newfstatat(4, "af_mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "af_mask", O_RDONLY) = 5
read(5, "unspec unix inet ax25 ipx applet"..., 6899) = 262
read(5, "", 6637) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "policy", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "policy", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 7 entries */, 32768) = 216
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 7 entries */, 32768) = 216
close(5) = 0
newfstatat(4, "outofband", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "outofband", O_RDONLY) = 5
read(5, "0x000001\n", 6614) = 9
read(5, "", 6605) = 0
close(5) = 0
newfstatat(4, "permstable32", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "permstable32", O_RDONLY) = 5
read(5, "allow deny subtree cond kill com"..., 6589) = 79
read(5, "", 6510) = 0
close(5) = 0
newfstatat(4, "permstable32_version", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "permstable32_version", O_RDONLY) = 5
read(5, "0x000002\n", 6486) = 9
read(5, "", 6477) = 0
close(5) = 0
newfstatat(4, "set_load", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "set_load", O_RDONLY) = 5
read(5, "yes\n", 6465) = 4
read(5, "", 6461) = 0
close(5) = 0
newfstatat(4, "versions", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "versions", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 5
dup(5) = 6
newfstatat(6, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(6, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(6, F_SETFD, FD_CLOEXEC) = 0
getdents64(6, 0x563c2e645d30 /* 7 entries */, 32768) = 168
getdents64(6, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(6, 0, SEEK_SET) = 0
getdents64(6, 0x563c2e645d30 /* 7 entries */, 32768) = 168
close(6) = 0
newfstatat(5, "v5", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(5, "v5", O_RDONLY) = 6
read(6, "yes\n", 6445) = 4
read(6, "", 6441) = 0
close(6) = 0
newfstatat(5, "v6", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(5, "v6", O_RDONLY) = 6
read(6, "yes\n", 6435) = 4
read(6, "", 6431) = 0
close(6) = 0
newfstatat(5, "v7", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(5, "v7", O_RDONLY) = 6
read(6, "yes\n", 6425) = 4
read(6, "", 6421) = 0
close(6) = 0
newfstatat(5, "v8", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(5, "v8", O_RDONLY) = 6
read(6, "yes\n", 6415) = 4
read(6, "", 6411) = 0
close(6) = 0
newfstatat(5, "v9", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(5, "v9", O_RDONLY) = 6
read(6, "yes\n", 6405) = 4
read(6, "", 6401) = 0
close(6) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "ptrace", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "ptrace", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
close(5) = 0
newfstatat(4, "mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "mask", O_RDONLY) = 5
read(5, "read trace\n", 6381) = 11
read(5, "", 6370) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "query", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "query", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 80
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 80
close(5) = 0
newfstatat(4, "label", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "label", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 5
dup(5) = 6
newfstatat(6, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(6, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(6, F_SETFD, FD_CLOEXEC) = 0
getdents64(6, 0x563c2e645d30 /* 5 entries */, 32768) = 144
getdents64(6, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(6, 0, SEEK_SET) = 0
getdents64(6, 0x563c2e645d30 /* 5 entries */, 32768) = 144
close(6) = 0
newfstatat(5, "data", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(5, "data", O_RDONLY) = 6
read(6, "yes\n", 6346) = 4
read(6, "", 6342) = 0
close(6) = 0
newfstatat(5, "multi_transaction", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(5, "multi_transaction", O_RDONLY) = 6
read(6, "yes\n", 6321) = 4
read(6, "", 6317) = 0
close(6) = 0
newfstatat(5, "perms", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(5, "perms", O_RDONLY) = 6
read(6, "allow deny audit quiet\n", 6308) = 23
read(6, "", 6285) = 0
close(6) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "rlimit", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "rlimit", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
close(5) = 0
newfstatat(4, "mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "mask", O_RDONLY) = 5
read(5, "cpu fsize data stack core rss np"..., 6265) = 99
read(5, "", 6166) = 0
close(5) = 0
close(4) = 0
newfstatat(3, "signal", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(3, "signal", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
dup(4) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=0, ...}, AT_EMPTY_PATH) = 0
fcntl(5, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(5, F_SETFD, FD_CLOEXEC) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
getdents64(5, 0x563c2e645d30 /* 0 entries */, 32768) = 0
lseek(5, 0, SEEK_SET) = 0
getdents64(5, 0x563c2e645d30 /* 3 entries */, 32768) = 72
close(5) = 0
newfstatat(4, "mask", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(4, "mask", O_RDONLY) = 5
read(5, "hup int quit ill trap abrt bus f"..., 6148) = 158
read(5, "", 5990) = 0
close(5) = 0
close(4) = 0
close(3) = 0
openat(AT_FDCWD, "/proc/mounts", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0
read(3, "sysfs /sys sysfs rw,nosuid,nodev"..., 1024) = 1024
newfstatat(AT_FDCWD, "/sys/kernel/security/apparmor", {st_mode=S_IFDIR|0755, st_size=0, ...}, 0) = 0
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/security/apparmor", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(AT_FDCWD, "/var/cache/apparmor/30d07b40.0/.features", {st_mode=S_IFREG|0644, st_size=2205, ...}, 0) = 0
openat(AT_FDCWD, "/var/cache/apparmor/30d07b40.0/.features", O_RDONLY) = 4
read(4, "capability {0xffffff\n}\ncaps {mas"..., 8191) = 2205
read(4, "", 5986) = 0
close(4) = 0
openat(AT_FDCWD, "/var/cache/apparmor/30d07b40.0", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "./.features", {st_mode=S_IFREG|0644, st_size=2205, ...}, 0) = 0
openat(4, "./.features", O_RDONLY) = 5
read(5, "capability {0xffffff\n}\ncaps {mas"..., 8191) = 2205
read(5, "", 5986) = 0
close(5) = 0
newfstatat(AT_FDCWD, "/etc/apparmor.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}, 0) = 0
openat(AT_FDCWD, "/etc/apparmor.d", O_RDONLY|O_CLOEXEC|O_DIRECTORY) = 5
dup(5) = 6
newfstatat(6, "", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_EMPTY_PATH) = 0
fcntl(6, F_GETFL) = 0x18000 (flags O_RDONLY|O_LARGEFILE|O_DIRECTORY)
fcntl(6, F_SETFD, FD_CLOEXEC) = 0
getdents64(6, 0x563c2e64f890 /* 37 entries */, 32768) = 1520
getdents64(6, 0x563c2e64f890 /* 0 entries */, 32768) = 0
lseek(6, 0, SEEK_SET) = 0
getdents64(6, 0x563c2e64f890 /* 37 entries */, 32768) = 1520
close(6) = 0
newfstatat(5, "abi", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(5, "abstractions", {st_mode=S_IFDIR|0755, st_size=12288, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(5, "disable", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(5, "force-complain", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(5, "local", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(5, "lsb_release", {st_mode=S_IFREG|0644, st_size=1339, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f336e6f0a10) = 125834
newfstatat(5, "mariadbd_akonadi", {st_mode=S_IFREG|0644, st_size=1061, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f336e6f0a10) = 125835
newfstatat(5, "mysqld_akonadi", {st_mode=S_IFREG|0644, st_size=1049, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f336e6f0a10) = 125836
newfstatat(5, "nvidia_modprobe", {st_mode=S_IFREG|0644, st_size=1189, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f336e6f0a10) = 125837
newfstatat(5, "samba", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(5, "sbin.dhclient", {st_mode=S_IFREG|0644, st_size=3461, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f336e6f0a10) = 125838
newfstatat(5, "snap.core.4917.usr.lib.snapd.snap-confine", {st_mode=S_IFREG|0644, st_size=21845, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f336e6f0a10) = 125839
newfstatat(5, "tunables", {st_mode=S_IFDIR|0755, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
newfstatat(5, "usr.bin.firefox", {st_mode=S_IFREG|0644, st_size=9186, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f336e6f0a10) = 125840
newfstatat(5, "usr.bin.freshclam", Skipping profile in /etc/apparmor.d/disable: usr.bin.firefox
{st_mode=S_IFREG|0644, st_size=1091, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f336e6f0a10) = 125841
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=125840, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
newfstatat(5, "usr.bin.man", {st_mode=S_IFREG|0644, st_size=3448, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 125840
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f336e6f0a10) = 125842
newfstatat(5, "usr.bin.tcpdump", {st_mode=S_IFREG|0644, st_size=1611, ...}, AT_SYMLINK_NOFOLLOW) = 0
openat(AT_FDCWD, "/sys/devices/system/cpu/online", O_RDONLY|O_CLOEXEC) = 6
read(6, "0-7\n", 1024) = 4
close(6) = 0
wait4(-1,

Event Timeline

keithzg created this paste.Jul 27 2023, 12:14 AM
keithzg created this object with visibility "Public (No Login Required)".