|
|||||||||||
|
Unable to su on firewall
From: Daniel Bergman <d-b(at)home.se>
Date: Wed Apr 16 2003 - 12:55:45 EDT
# truss -f su - daniel
739: execve("/usr/bin/su", 0x08047DD0, 0x08047DE0) argc = 3
739: xstat(2, "/usr/bin/su", 0x08047B64) = 0
739: open("/var/ld/ld.config", O_RDONLY) Err#2 ENOENT
739: sysconfig(_CONFIG_PAGESIZE) = 4096
739: open("/usr/lib/libcrypt_i.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0x00000000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFBB0000
739: mmap(0x00000000, 77824, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFB90000
|
739: time() = 1050509282
739: getpid() = 739 [738]
739: putmsg(3, 0x08046154, 0x08046148, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x080460E4) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x080460CC) = 0
739: close(4) = 0
739: setuid(3333) = 0
739: chdir("/tmp") Err#13 EACCES <-- Really strange, see below for /tmp listing.
No directory!
739: write(2, " N o d i r e c t o r y".., 14) = 14
739: mmap(0x00000000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xDFA50000
739: munmap(0xDFA50000, 4096) = 0
739: llseek(0, 0, SEEK_CUR) = 36065
739: _exit(1)
I'm unable to dig further down into Solaris so I need your help. Why would chdir("/tmp"); fail? Please let me know if you have the slightest clue about what's causing this. Also, let me know if I can give you more information about the "error".
Regards,
* * ATTACHED OUTPUT FROM SEVERAL USEFUL CMDS * ========================================== # uname -a SunOS screen 5.8 Generic_108529-05 i86pc i386 i86pc
# ls -lda /tmp
# ls -la /etc/passwd /etc/shadow /etc/group
-rw-r--r-- 1 root root 146 Apr 16 18:07 /etc/group -r--r--r-- 1 sys sys 274 Apr 15 22:16 /etc/passwd -r-------- 1 root root 191 Apr 15 21:37 /etc/shadow # egrep daniel /etc/passwd /etc/shadow /etc/group
/etc/passwd:daniel:x:3333:3333:Daniel B:/tmp:/bin/sh /etc/shadow:daniel:c2ADsIEyEPqYw:12157:::::: /etc/group:daniel::3333:
# eeprom
auto-boot?=true auto-boot-cfg-num=-1 auto-boot-timeout=5 boottimeout=0 bshfirst=false output-device=screen input-device=keyboard boot-file=kernel/unix kbd-type=Swedish target-driver-for-scsi=sd target-driver-for-direct=cmdk target-driver-for-csa=cmdk target-driver-for-dsa=cmdk target-driver-for-smartii=cmdk pciide=true net-config-strategy=rarp prealloc-chunk-size=0x2000 ata-dma-enabled=0 kbd-wkeys=true probed-arch-name=i86pc probed-compatible=i86pc bootpath=/isa/ata@1,1f0/cmdk@0,0:a
# env && set
PS1='# ' PS2='> ' PS3='#? ' PS4='+ ' PWD=/root RANDOM=21052 SECONDS=310 SHELL=/sbin/sh SSH_CLIENT='been removed' SSH_CONNECTION='been removed' SSH_TTY=/dev/pts/1 TERM=xterm TMOUT=0 TZ=MET USER=root _=eeprom
# truss -f su - daniel
739: execve("/usr/bin/su", 0x08047DD0, 0x08047DE0) argc = 3
739: xstat(2, "/usr/bin/su", 0x08047B64) = 0
739: open("/var/ld/ld.config", O_RDONLY) Err#2 ENOENT
739: sysconfig(_CONFIG_PAGESIZE) = 4096
739: open("/usr/lib/libcrypt_i.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0x00000000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFBB0000
739: mmap(0x00000000, 77824, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFB90000
739: mmap(0xDFBA2000, 1296, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 8192) = 0xDFBA2000
739: munmap(0xDFB92000, 65536) = 0
739: memcntl(0xDFB90000, 3276, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libcmd.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFBB0000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFBB0000
739: mmap(0x00000000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFB70000
739: mmap(0xDFB83000, 613, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 12288) = 0xDFB83000
739: munmap(0xDFB73000, 65536) = 0
739: memcntl(0xDFB70000, 3428, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libbsm.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFBB0000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFBB0000
739: mmap(0x00000000, 77824, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFB50000
739: mmap(0xDFB60000, 6079, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 65536) = 0xDFB60000
739: mmap(0xDFB62000, 2060, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xDFB62000
739: mmap(0x00000000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xDFB40000
739: memcntl(0xDFB50000, 16212, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libmp.so.2", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFBB0000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFBB0000
739: mmap(0x00000000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFB20000
739: mmap(0xDFB33000, 604, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 12288) = 0xDFB33000
739: munmap(0xDFB23000, 65536) = 0
739: memcntl(0xDFB20000, 2644, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libsocket.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFBB0000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFBB0000
739: mmap(0x00000000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFB00000
739: mmap(0xDFB1A000, 2908, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 40960) = 0xDFB1A000
739: munmap(0xDFB0A000, 65536) = 0
739: memcntl(0xDFB00000, 11980, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libnsl.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFBB0000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFBB0000
739: mmap(0x00000000, 589824, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFA60000
739: mmap(0xDFAE3000, 20812, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 471040) = 0xDFAE3000
739: mmap(0xDFAE9000, 27060, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xDFAE9000
739: munmap(0xDFAD3000, 65536) = 0
739: memcntl(0xDFA60000, 51684, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libdl.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFBB0000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFBB0000
739: close(3) = 0
739: open("/usr/lib/libproject.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0x00000000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFA50000
739: mmap(0x00000000, 77824, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFA30000
739: mmap(0xDFA42000, 451, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 8192) = 0xDFA42000
739: munmap(0xDFA32000, 65536) = 0
739: mmap(0x00000000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xDFA20000
739: memcntl(0xDFA30000, 2824, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libpam.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFA50000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFA50000
739: mmap(0x00000000, 94208, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDFA00000
739: mmap(0xDFA16000, 1934, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 24576) = 0xDFA16000
739: munmap(0xDFA06000, 65536) = 0
739: memcntl(0xDFA00000, 4752, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libc.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFA50000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFA50000
739: mmap(0x00000000, 638976, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDF960000
739: mmap(0xDF9F4000, 22656, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 540672) = 0xDF9F4000
739: mmap(0xDF9FA000, 4808, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xDF9FA000
739: munmap(0xDF9E4000, 65536) = 0
739: memcntl(0xDF960000, 93712, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libgen.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFA50000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFA50000
739: mmap(0x00000000, 94208, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDF940000
739: mmap(0xDF956000, 1696, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 24576) = 0xDF956000
739: munmap(0xDF946000, 65536) = 0
739: memcntl(0xDF940000, 6392, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: open("/usr/lib/libsecdb.so.1", O_RDONLY) = 3
739: fxstat(2, 3, 0x0804757C) = 0
739: mmap(0xDFA50000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xDFA50000
739: mmap(0x00000000, 86016, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xDF920000
739: mmap(0xDF934000, 834, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 16384) = 0xDF934000
739: munmap(0xDF924000, 65536) = 0
739: mmap(0x00000000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xDF910000
739: memcntl(0xDF920000, 5292, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(3) = 0
739: munmap(0xDFA50000, 4096) = 0
739: sysi86(SI86FPHW, 0xDF9FB260, 0x08047D8C, 0xDFBED214) = 0x00000000
739: brk(0x08064E80) = 0
739: brk(0x08066E80) = 0
739: open("/etc/default/su", O_RDONLY) = 3
739: llseek(3, 0, SEEK_CUR) = 0
739: llseek(3, 0, SEEK_SET) = 0
739: fstat64(3, 0x08046C68) = 0
739: brk(0x08066E80) = 0
739: brk(0x08068E80) = 0
739: ioctl(3, TCGETA, 0x08046C3C) Err#25 ENOTTY
739: read(3, " # i d e n t\t " @ ( # )".., 8192) = 702
739: llseek(3, 0xFFFFFFFFFFFFFDD8, SEEK_CUR) = 150
739: llseek(3, 0, SEEK_SET) = 0
739: read(3, " # i d e n t\t " @ ( # )".., 8192) = 702
739: llseek(3, 0xFFFFFFFFFFFFFE4B, SEEK_CUR) = 265
739: llseek(3, 0, SEEK_SET) = 0
739: read(3, " # i d e n t\t " @ ( # )".., 8192) = 702
739: read(3, 0x080661AC, 8192) = 0
739: llseek(3, 0, SEEK_CUR) = 702
739: llseek(3, 0, SEEK_SET) = 0
739: read(3, " # i d e n t\t " @ ( # )".., 8192) = 702
739: read(3, 0x080661AC, 8192) = 0
739: llseek(3, 0, SEEK_CUR) = 702
739: llseek(3, 0, SEEK_SET) = 0
739: read(3, " # i d e n t\t " @ ( # )".., 8192) = 702
739: sysconfig(_CONFIG_PAGESIZE) = 4096
739: llseek(3, 0, SEEK_CUR) = 702
739: close(3) = 0
739: fstat64(0, 0x08046C90) = 0
739: ioctl(0, TCGETA, 0x08046BD4) = 0
739: stat64("/dev/tty", 0x08046C00) = 0
739: stat64("/dev/console", 0x08046C00) = 0
739: stat64("/dev/conslog", 0x08046C00) = 0
739: stat64("/dev/syscon", 0x08046C00) = 0
739: stat64("/dev/systty", 0x08046C00) = 0
739: stat64("/dev/wscons", 0x08046C00) = 0
739: open("/etc/ttysrch", O_RDONLY) = 3
739: stat64("/etc/ttysrch", 0x08046B54) = 0
739: read(3, " # i d e n t\t " @ ( # )".., 1408) = 1408
739: close(3) = 0
739: stat64("/dev/pts/1", 0x08046B54) = 0
739: fstat64(0, 0x08046618) = 0
739: ioctl(0, TCGETA, 0x0804655C) = 0
739: stat64("/dev/tty", 0x08046588) = 0
739: stat64("/dev/console", 0x08046588) = 0
739: stat64("/dev/conslog", 0x08046588) = 0
739: stat64("/dev/syscon", 0x08046588) = 0
739: stat64("/dev/systty", 0x08046588) = 0
739: stat64("/dev/wscons", 0x08046588) = 0
739: open("/etc/ttysrch", O_RDONLY) = 3
739: stat64("/etc/ttysrch", 0x080464DC) = 0
739: read(3, " # i d e n t\t " @ ( # )".., 1408) = 1408
739: close(3) = 0
739: stat64("/dev/pts/1", 0x080464DC) = 0
739: open("/var/adm/utmpx", O_RDONLY) = 3
739: fstat64(3, 0x080465E4) = 0
739: ioctl(3, TCGETA, 0x080465B8) Err#25 ENOTTY
739: read(3, "\0\0\0\0\0\0\0\0\0\0\0\0".., 8192) = 2976
739: llseek(3, 0, SEEK_CUR) = 2976
739: close(3) = 0
739: open64("/var/adm/utmpx", O_RDONLY) = 3
739: llseek(3, 2604, SEEK_SET) = 2604
739: read(3, " r o o t\0\0\0\0\0\0\0\0".., 372) = 372
739: close(3) = 0
739: open("/var/adm/sulog", O_WRONLY|O_APPEND|O_CREAT, 0600) = 3
739: close(3) = 0
739: chown("/var/adm/sulog", 0, 0) = 0
739: stat64("/etc/pam_debug", 0x08046CBC) = 0
739: fxstat(2, -1, 0x08046BC4) Err#9 EBADF
739: open("/dev/conslog", O_WRONLY) = 3
739: fcntl(3, F_SETFD, 0x00000001) = 0
739: fxstat(2, 3, 0x08046BC4) = 0
739: open("/etc/pam_debug", O_RDONLY) = 4
739: read(4, 0x08046C6C, 80) = 0
739: close(4) = 0
739: fxstat(2, 3, 0x08046A18) = 0
739: time() = 1050509277
739: open("/usr/share/lib/zoneinfo/MET", O_RDONLY) = 4
739: read(4, " T Z i f\0\0\0\0\0\0\0\0".., 8192) = 755
739: close(4) = 0
739: putmsg(3, 0x080460D0, 0x080460C4, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x08046060) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x08046048) = 0
739: close(4) = 0
739: fxstat(2, 3, 0x08046A00) = 0
739: time() = 1050509277
739: putmsg(3, 0x080460B8, 0x080460AC, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x08046048) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x08046030) = 0
739: close(4) = 0
739: fxstat(2, 3, 0x08046A00) = 0
739: time() = 1050509278
739: putmsg(3, 0x080460B8, 0x080460AC, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x08046048) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x08046030) = 0
739: close(4) = 0
739: fxstat(2, 3, 0x08046A00) = 0
739: time() = 1050509278
739: putmsg(3, 0x080460B8, 0x080460AC, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x08046048) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x08046030) = 0
739: close(4) = 0
739: stat64("/etc/pam.conf", 0x08046B84) = 0
739: open("/etc/pam.conf", O_RDONLY) = 4
739: mmap(0x00000000, 2080, PROT_READ, MAP_PRIVATE, 4, 0) = 0xDFA50000
739: munmap(0xDFA50000, 2080) = 0
739: close(4) = 0
739: fxstat(2, 3, 0x08046B04) = 0
739: time() = 1050509278
739: putmsg(3, 0x080461BC, 0x080461B0, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x0804614C) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x08046134) = 0
739: close(4) = 0
739: uname(0x08063F60) = 1
739: fxstat(2, 3, 0x08046B04) = 0
739: time() = 1050509278
739: putmsg(3, 0x080461BC, 0x080461B0, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x0804614C) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x08046134) = 0
739: close(4) = 0
739: auditsys(BSM_AUDITCTL, 0x00000014, 0x08046D3C, 0x00000004) = 0
739: open("/etc/nsswitch.conf", O_RDONLY) = 4
739: fstat64(4, 0x08046B40) = 0
739: brk(0x08068E80) = 0
739: brk(0x0806AE80) = 0
739: ioctl(4, TCGETA, 0x08046B14) Err#25 ENOTTY
739: read(4, " #\n # / e t c / n s s".., 8192) = 784
739: read(4, 0x08067B34, 8192) = 0
739: llseek(4, 0, SEEK_CUR) = 784
739: close(4) = 0
739: open("/usr/lib/nss_files.so.1", O_RDONLY) = 4
739: fxstat(2, 4, 0x08046608) = 0
739: mmap(0x00000000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0xDFA50000
739: mmap(0x00000000, 90112, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0xDF8F0000
739: mmap(0xDF905000, 1204, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 20480) = 0xDF905000
739: munmap(0xDF8F5000, 65536) = 0
739: memcntl(0xDF8F0000, 5664, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(4) = 0
739: munmap(0xDFA50000, 4096) = 0
739: open("/etc/shadow", O_RDONLY) = 4
739: fstat64(4, 0x08046B70) = 0
739: brk(0x0806AE80) = 0
739: brk(0x0806CE80) = 0
739: ioctl(4, TCGETA, 0x08046B44) Err#25 ENOTTY
739: read(4, " r o o t : z 6 / w G K S".., 8192) = 191
739: llseek(4, 0xFFFFFFFFFFFFFFEF, SEEK_CUR) = 174
739: close(4) = 0
739: auditsys(35, 0xDFB626D8, 0x00000028, 0xDFB60000) = 0
739: auditsys(35, 0x08046D1C, 0x00000028, 0xDFB60000) = 0
739: getuid() = 0 [0]
739: getgid() = 0 [0]
739: getuid() = 0 [0]
739: getgid() = 0 [0]
739: getpid() = 739 [738]
739: fxstat(2, 3, 0x08046CC8) = 0
739: sigaction(SIGQUIT, 0x08046CB8, 0x08046D14) = 0
739: sigaction(SIGINT, 0x08046CB8, 0x08046D14) = 0
739: open64("/etc/.name_service_door", O_RDONLY) = 4
739: fcntl(4, F_SETFD, 0x00000001) = 0
739: door_info(4, 0xDF9FA1B8) Err#9 EBADF
739: close(4) = 0
739: open("/etc/passwd", O_RDONLY) = 4
739: fstat64(4, 0x08046638) = 0
739: ioctl(4, TCGETA, 0x0804660C) Err#25 ENOTTY
739: read(4, " r o o t : x : 0 : 0 : S".., 8192) = 274
739: llseek(4, 0xFFFFFFFFFFFFFFCE, SEEK_CUR) = 224
739: close(4) = 0
739: getuid() = 0 [0]
739: open("/etc/security/audit_control", O_RDONLY) = 4
739: llseek(4, 0, SEEK_CUR) = 0
739: llseek(4, 0, SEEK_SET) = 0
739: fstat64(4, 0x080468C4) = 0
739: ioctl(4, TCGETA, 0x08046898) Err#25 ENOTTY
739: read(4, " #\n # C o p y r i g h".., 8192) = 156
739: open("/etc/security/audit_class", O_RDONLY) = 5
739: fstat64(5, 0x080468B8) = 0
739: brk(0x0806CE80) = 0
739: brk(0x0806EE80) = 0
739: ioctl(5, TCGETA, 0x0804688C) Err#25 ENOTTY
739: read(5, " #\n # C o p y r i g h".., 8192) = 728
739: read(5, 0x0806BF5C, 8192) = 0
739: llseek(5, 0, SEEK_CUR) = 728
739: close(5) = 0
739: open("/etc/security/audit_class", O_RDONLY) = 5
739: fstat64(5, 0x08046780) = 0
739: ioctl(5, TCGETA, 0x08046754) Err#25 ENOTTY
739: read(5, " #\n # C o p y r i g h".., 8192) = 728
739: read(5, 0x0806C054, 8192) = 0
739: llseek(5, 0, SEEK_CUR) = 728
739: close(5) = 0
739: llseek(4, 0xFFFFFFFFFFFFFFEA, SEEK_CUR) = 134
739: close(4) = 0
739: open("/etc/security/audit_user", O_RDONLY) = 4
739: open("/etc/security/audit_user", O_RDONLY) = 5
739: fstat64(5, 0x08046538) = 0
739: ioctl(5, TCGETA, 0x0804650C) Err#25 ENOTTY
739: read(5, " #\n # C o p y r i g h".., 8192) = 188
739: read(5, 0x08069F4C, 8192) = 0
739: llseek(5, 0, SEEK_CUR) = 188
739: close(5) = 0
739: llseek(4, 0, SEEK_CUR) = 0
739: close(4) = 0
739: auditsys(36, 0xDFB626D8, 0x00000028, 0xDFB60000) = 0
739: open64("/etc/.name_service_door", O_RDONLY) = 4
739: fcntl(4, F_SETFD, 0x00000001) = 0
739: door_info(4, 0xDF9FA1B8) Err#9 EBADF
739: close(4) = 0
739: open("/etc/passwd", O_RDONLY) = 4
739: fstat64(4, 0x0804647C) = 0
739: ioctl(4, TCGETA, 0x08046450) Err#25 ENOTTY
739: read(4, " r o o t : x : 0 : 0 : S".., 8192) = 274
739: llseek(4, 0xFFFFFFFFFFFFFF13, SEEK_CUR) = 37
739: close(4) = 0
739: auditsys(35, 0x08046BBC, 0x00000028, 0xDFB60000) = 0
739: open("/etc/security/audit_event", O_RDONLY) = 4
739: fstat64(4, 0x08046938) = 0
739: ioctl(4, TCGETA, 0x0804690C) Err#25 ENOTTY
739: read(4, " #\n # C o p y r i g h".., 8192) = 8192
739: read(4, " d c t l ( 2 ) - l o".., 8192) = 2659
739: read(4, 0x08069F4C, 8192) = 0
739: llseek(4, 0, SEEK_CUR) = 10851
739: close(4) = 0
739: open("/etc/security/audit_event", O_RDONLY) = 4
739: fstat64(4, 0x08046938) = 0
739: ioctl(4, TCGETA, 0x0804690C) Err#25 ENOTTY
739: read(4, " #\n # C o p y r i g h".., 8192) = 8192
739: read(4, " d c t l ( 2 ) - l o".., 8192) = 2659
739: read(4, 0x08069F4C, 8192) = 0
739: llseek(4, 0, SEEK_CUR) = 10851
739: close(4) = 0
739: gettimeofday(0x08046BC8) = 0
739: auditsys(BSM_AUDIT, 0x080671F0, 0x00000058, 0xDFB60000) = 0
739: getuid() = 0 [0]
739: fxstat(2, 3, 0x08046B1C) = 0
739: time() = 1050509280
739: putmsg(3, 0x080461D4, 0x080461C8, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x08046164) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x0804614C) = 0
739: close(4) = 0
739: fxstat(2, 3, 0x08046CD4) = 0
739: close(3) = 0
739: sigaction(SIGQUIT, 0x08046CB8, 0x08046D14) = 0
739: sigaction(SIGINT, 0x08046CB8, 0x08046D14) = 0
739: open64("/etc/.name_service_door", O_RDONLY) = 3
739: fcntl(3, F_SETFD, 0x00000001) = 0
739: door_info(3, 0xDF9FA1B8) Err#9 EBADF
739: close(3) = 0
739: open("/etc/user_attr", O_RDONLY) = 3
739: fstat64(3, 0x080462A0) = 0
739: ioctl(3, TCGETA, 0x08046274) Err#25 ENOTTY
739: read(3, " # C o p y r i g h t ".., 8192) = 271
739: read(3, 0x0806C054, 8192) = 0
739: llseek(3, 0, SEEK_CUR) = 271
739: close(3) = 0
739: open("/etc/project", O_RDONLY) = 3
739: fstat64(3, 0x080469E8) = 0
739: ioctl(3, TCGETA, 0x080469BC) Err#25 ENOTTY
739: read(3, " s y s t e m : 0 : : : :".., 8192) = 78
739: read(3, 0x0806C054, 8192) = 0
739: llseek(3, 0, SEEK_CUR) = 78
739: close(3) = 0
739: open64("/etc/.name_service_door", O_RDONLY) = 3
739: fcntl(3, F_SETFD, 0x00000001) = 0
739: door_info(3, 0xDF9FA1B8) Err#9 EBADF
739: close(3) = 0
739: open("/etc/passwd", O_RDONLY) = 3
739: fstat64(3, 0x0804656C) = 0
739: ioctl(3, TCGETA, 0x08046540) Err#25 ENOTTY
739: read(3, " r o o t : x : 0 : 0 : S".., 8192) = 274
739: llseek(3, 0xFFFFFFFFFFFFFFCE, SEEK_CUR) = 224
739: close(3) = 0
739: open64("/etc/.name_service_door", O_RDONLY) = 3
739: fcntl(3, F_SETFD, 0x00000001) = 0
739: door_info(3, 0xDF9FA1B8) Err#9 EBADF
739: close(3) = 0
739: open("/etc/group", O_RDONLY) = 3
739: fstat64(3, 0x0804496C) = 0
739: ioctl(3, TCGETA, 0x08044940) Err#25 ENOTTY
739: read(3, " r o o t : : 0 : r o o t".., 8192) = 146
739: llseek(3, 0, SEEK_CUR) = 146
739: close(3) = 0
739: open("/etc/project", O_RDONLY) = 3
739: fstat64(3, 0x080469E8) = 0
739: ioctl(3, TCGETA, 0x080469BC) Err#25 ENOTTY
739: read(3, " s y s t e m : 0 : : : :".., 8192) = 78
739: read(3, 0x0806C054, 8192) = 0
739: llseek(3, 0, SEEK_CUR) = 78
739: close(3) = 0
debug2: channel 0: window 32433 sent adjust 33103
739: open("/etc/project", O_RDONLY) = 3
739: fstat64(3, 0x080469E8) = 0
739: ioctl(3, TCGETA, 0x080469BC) Err#25 ENOTTY
739: read(3, " s y s t e m : 0 : : : :".., 8192) = 78
739: llseek(3, 0xFFFFFFFFFFFFFFED, SEEK_CUR) = 59
739: close(3) = 0
739: settaskid(3, 0x00000000) = 44
739: open("/var/adm/sulog", O_WRONLY|O_APPEND|O_CREAT, 0666) = 3
739: llseek(3, 0, SEEK_END) = 2236
739: time() = 1050509281
739: fstat64(3, 0x08046018) = 0
739: ioctl(3, TCGETA, 0x08045FEC) Err#25 ENOTTY
739: write(3, " S U 0 4 / 1 6 1 8 :".., 35) = 35
739: close(3) = 0
739: setgid(3333) = 0
739: sysconfig(_CONFIG_NGROUPS) = 16
739: open("/etc/group", O_RDONLY) = 3
739: fstat64(3, 0x08046BA8) = 0
739: ioctl(3, TCGETA, 0x08046B7C) Err#25 ENOTTY
739: read(3, " r o o t : : 0 : r o o t".., 8192) = 146
739: brk(0x0806EE80) = 0
739: brk(0x08070E80) = 0
739: read(3, 0x0806C09C, 8192) = 0
739: llseek(3, 0, SEEK_CUR) = 146
739: close(3) = 0
739: setgroups(1, 0x0806C050) = 0
739: getpid() = 739 [738]
739: open("/proc/739/psinfo", O_RDONLY) = 3
739: read(3, "C8 F\01801\0\0\0E302\0\0".., 336) = 336
739: close(3) = 0
739: fxstat(2, -1, 0x080460CC) Err#9 EBADF
739: open("/dev/conslog", O_WRONLY) = 3
739: fcntl(3, F_SETFD, 0x00000001) = 0
739: fxstat(2, 3, 0x080460CC) = 0
739: fxstat(2, 3, 0x08046AE8) = 0
739: time() = 1050509281
739: getpid() = 739 [738]
739: putmsg(3, 0x080461A0, 0x08046194, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x08046130) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x08046118) = 0
739: close(4) = 0
739: fxstat(2, 3, 0x08046AB8) = 0
739: time() = 1050509281
739: getpid() = 739 [738]
739: putmsg(3, 0x08046170, 0x08046164, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x08046100) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x080460E8) = 0
739: close(4) = 0
739: stat64("/usr/lib/security/pam_unix.so.1", 0x08046C58) = 0
739: open("/usr/lib/security/pam_unix.so.1", O_RDONLY) = 4
739: fxstat(2, 4, 0x08046648) = 0
739: mmap(0x00000000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0xDFA50000
739: mmap(0x00000000, 159744, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0xDF8C0000
739: mmap(0xDF8E3000, 14430, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 77824) = 0xDF8E3000
739: munmap(0xDF8D3000, 65536) = 0
739: memcntl(0xDF8C0000, 11704, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
739: close(4) = 0
739: munmap(0xDFA50000, 4096) = 0
739: fxstat(2, 3, 0x08046A9C) = 0
739: time() = 1050509282
739: getpid() = 739 [738]
739: putmsg(3, 0x08046154, 0x08046148, 0) = 0
739: open("/var/run/syslog_door", O_RDONLY) = 4
739: door_info(4, 0x080460E4) = 0
739: getpid() = 739 [738]
739: door_call(4, 0x080460CC) = 0
739: close(4) = 0
739: setuid(3333) = 0
739: chdir("/tmp") Err#13 EACCES
No directory!
739: write(2, " N o d i r e c t o r y".., 14) = 14
739: mmap(0x00000000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xDFA50000
739: munmap(0xDFA50000, 4096) = 0
739: llseek(0, 0, SEEK_CUR) = 36065
739: _exit(1)
Received on Mon Apr 21 11:55:24 2003This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:37 EDT |
||||||||||
|
|||||||||||