[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: /bin/bash: Permission denied



elie.de.brauwer@pandora.be schrieb am 02.06.03 15:08:46:  
>  
> -----BEGIN PGP SIGNED MESSAGE-----  
> Hash: SHA1  
>  
> On Monday 02 June 2003 14:01, gabriel meier wrote:  
> > Hi,  
> >  
> > I have some strange Problems with my user login here:  
> > Any time I log in with any user but root I get the following message:  
> >  
> > Cannot execute /bin/bash: Permission denied  
> >  
> > So login is possible at the moment only for root.  
> > I checked all the user rights of / /bin /bin/bash and its dependend libs  
> > and they were OK. etc/passwd is OK, too.  
> > This error occures with any shell I have, so it can't be a problem with  
> > bash itself.  
> >  
> > I would be greatful for every idea you have.  
> >  
> > Gabriel  
>  
> Log in as root than type:  
> strace login  
>  
> now follow the output of the system call on your screen, when you see the  
> program is waiting for something, (after a read system call), it's time to  
> enter the username and the same for the password. Strace reviels which files  
> are opened and when you are returned to you shell check the last output and  
> go back until you see something like permission denied.  
  
ok, i tried, but i didn't find anything new. anyway, i added the output below.  
  
> hth  
> Elie De Brauwer  
> - --  
> Homepage: http://www.de-brauwer.be  
> BSD is for Unix lover  
> Linux is for windows haters,  
> I run Linux  
> -----BEGIN PGP SIGNATURE-----  
> Version: GnuPG v1.2.2 (GNU/Linux)  
>  
> iD8DBQE+20xapSQix3Sc+ZgRAtIMAKDH6c10jYA/h20E7IhzHk44QzWbUgCdGYDm  
> EpZjS7wzB+BSLQMZRhPWg+4=  
> =E5Y5  
> -----END PGP SIGNATURE-----  
  
debian:~# strace login  
execve("/bin/login", ["login"], [/* 21 vars */]) = 0  
uname({sys="Linux", node="debian", ...}) = 0  
brk(0) = 0x805dde0  
open("/etc/ld.so.preload", O_RDONLY) = -1 ENOENT (No such file or dir  
ectory)  
open("/etc/ld.so.cache", O_RDONLY) = 3  
fstat64(3, {st_mode=S_IFREG|0644, st_size=32086, ...}) = 0  
old_mmap(NULL, 32086, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40012000  
close(3) = 0  
open("/lib/libcrypt.so.1", O_RDONLY) = 3  
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\t\0\000"..., 1  
024) = 1024  
fstat64(3, {st_mode=S_IFREG|0644, st_size=18120, ...}) = 0  
old_mmap(NULL, 180928, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4001a  
000  
mprotect(0x4001f000, 160448, PROT_NONE) = 0  
old_mmap(0x4001f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
3, 0x4000) = 0x4001f000  
old_mmap(0x40020000, 156352, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED  
|MAP_ANONYMOUS, -1, 0) = 0x40020000  
close(3) = 0  
open("/lib/libpam.so.0", O_RDONLY) = 3  
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\24"..., 102  
4) = 1024  
fstat64(3, {st_mode=S_IFREG|0644, st_size=29420, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40047000  
old_mmap(NULL, 32428, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x400480  
00  
mprotect(0x4004f000, 3756, PROT_NONE) = 0  
old_mmap(0x4004f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
3, 0x6000) = 0x4004f000  
close(3) = 0  
open("/lib/libpam_misc.so.0", O_RDONLY) = 3  
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\f\0"..., 10  
24) = 1024  
fstat64(3, {st_mode=S_IFREG|0644, st_size=7500, ...}) = 0  
old_mmap(NULL, 10508, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x400500  
00  
mprotect(0x40052000, 2316, PROT_NONE) = 0  
old_mmap(0x40052000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
3, 0x1000) = 0x40052000  
close(3) = 0  
open("/lib/libdl.so.2", O_RDONLY) = 3  
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0S\27\0\000"...,  
1024) = 1024  
fstat64(3, {st_mode=S_IFREG|0644, st_size=7992, ...}) = 0  
old_mmap(NULL, 10924, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x400530  
00  
mprotect(0x40055000, 2732, PROT_NONE) = 0  
old_mmap(0x40055000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
3, 0x1000) = 0x40055000  
close(3) = 0  
open("/lib/libc.so.6", O_RDONLY) = 3  
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\275Z\1"..., 102  
4) = 1024  
fstat64(3, {st_mode=S_IFREG|0755, st_size=1104040, ...}) = 0  
old_mmap(NULL, 1113796, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4005  
6000  
mprotect(0x4015e000, 32452, PROT_NONE) = 0  
old_mmap(0x4015e000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
 3, 0x107000) = 0x4015e000  
old_mmap(0x40164000, 7876, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|M  
AP_ANONYMOUS, -1, 0) = 0x40164000  
close(3) = 0  
munmap(0x40012000, 32086) = 0  
brk(0) = 0x805dde0  
brk(0x805ede0) = 0x805ede0  
brk(0) = 0x805ede0  
brk(0x805f000) = 0x805f000  
getuid32() = 0  
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
ioctl(1, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
ioctl(2, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
getpid() = 542  
access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or dir  
ectory)  
open("/var/run/utmp", O_RDWR) = 3  
fcntl64(3, F_GETFD) = 0  
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0  
_llseek(3, 0, [0], SEEK_SET) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\10\0\0\0\t\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\2\0\0\0\0\0\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\1\0\0\0002N\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\10\0\0\0\310\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\6\0\0\0\2\1\0\0tty1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\6\0\0\0\3\1\0\0tty2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\6\0\0\0\4\1\0\0tty3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\6\0\0\0\5\1\0\0tty4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\6\0\0\0\6\1\0\0tty5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\6\0\0\0\7\1\0\0tty6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\7\0\2\0\t\1\0\0:0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {SIG_DFL}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "", 384) = 0  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0  
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
readlink("/proc/self/fd/0", "/dev/pts/0", 4095) = 10  
time([1054652671]) = 1054652671  
brk(0) = 0x805f000  
brk(0x8060000) = 0x8060000  
open("/etc/login.defs", O_RDONLY) = 4  
fstat64(4, {st_mode=S_IFREG|0644, st_size=9812, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
read(4, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096  
read(4, " add the rest in the shell start"..., 4096) = 4096  
read(4, "ontrol-U and beep continue to wo"..., 4096) = 1620  
read(4, "", 4096) = 0  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
ioctl(0, SNDCTL_TMR_START, {B38400 opost isig icanon echo ...}) = 0  
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
umask(022) = 022  
rt_sigaction(SIGALRM, {0x804a398, [ALRM], SA_RESTART|0x4000000}, {SIG_DF  
L}, 8) = 0  
alarm(60) = 0  
stat64("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=528, ...}) = 0  
open("/etc/pam.d/login", O_RDONLY) = 4  
fstat64(4, {st_mode=S_IFREG|0644, st_size=4017, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
read(4, "#\n# The PAM configuration file f"..., 4096) = 4017  
open("/lib/security/pam_securetty.so", O_RDONLY) = 5  
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\10"..., 102  
4) = 1024  
fstat64(5, {st_mode=S_IFREG|0644, st_size=5436, ...}) = 0  
old_mmap(NULL, 8444, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x4001300  
0  
mprotect(0x40014000, 4348, PROT_NONE) = 0  
old_mmap(0x40014000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
5, 0) = 0x40014000  
close(5) = 0  
open("/lib/security/pam_nologin.so", O_RDONLY) = 5  
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\7\0"..., 10  
24) = 1024  
fstat64(5, {st_mode=S_IFREG|0644, st_size=4248, ...}) = 0  
old_mmap(NULL, 7256, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x4001600  
0  
mprotect(0x40017000, 3160, PROT_NONE) = 0  
old_mmap(0x40017000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
5, 0) = 0x40017000  
close(5) = 0  
open("/lib/security/pam_env.so", O_RDONLY) = 5  
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\v\0\000"..., 1  
024) = 1024  
fstat64(5, {st_mode=S_IFREG|0644, st_size=10148, ...}) = 0  
brk(0) = 0x8060000  
brk(0x8061000) = 0x8061000  
old_mmap(NULL, 13156, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x401660  
00  
mprotect(0x40169000, 868, PROT_NONE) = 0  
old_mmap(0x40169000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
5, 0x2000) = 0x40169000  
close(5) = 0  
open("/lib/security/pam_unix.so", O_RDONLY) = 5  
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 $\0\000"..., 10  
24) = 1024  
fstat64(5, {st_mode=S_IFREG|0644, st_size=41432, ...}) = 0  
old_mmap(NULL, 94176, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x4016a0  
00  
mprotect(0x40174000, 53216, PROT_NONE) = 0  
old_mmap(0x40174000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
5, 0x9000) = 0x40174000  
old_mmap(0x40175000, 49120, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|  
MAP_ANONYMOUS, -1, 0) = 0x40175000  
close(5) = 0  
open("/etc/ld.so.cache", O_RDONLY) = 5  
fstat64(5, {st_mode=S_IFREG|0644, st_size=32086, ...}) = 0  
old_mmap(NULL, 32086, PROT_READ, MAP_PRIVATE, 5, 0) = 0x40181000  
close(5) = 0  
open("/lib/libnsl.so.1", O_RDONLY) = 5  
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0d;\0\000"..., 10  
24) = 1024  
fstat64(5, {st_mode=S_IFREG|0644, st_size=69132, ...}) = 0  
old_mmap(NULL, 76448, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x401890  
00  
mprotect(0x40199000, 10912, PROT_NONE) = 0  
old_mmap(0x40199000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
5, 0x10000) = 0x40199000  
old_mmap(0x4019a000, 6816, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|M  
AP_ANONYMOUS, -1, 0) = 0x4019a000  
close(5) = 0  
munmap(0x40181000, 32086) = 0  
open("/lib/security/pam_lastlog.so", O_RDONLY) = 5  
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`\n\0\000"..., 1  
024) = 1024  
fstat64(5, {st_mode=S_IFREG|0644, st_size=7580, ...}) = 0  
old_mmap(NULL, 10588, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x401810  
00  
mprotect(0x40183000, 2396, PROT_NONE) = 0  
old_mmap(0x40183000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
5, 0x1000) = 0x40183000  
close(5) = 0  
brk(0) = 0x8061000  
brk(0x8062000) = 0x8062000  
open("/lib/security/pam_motd.so", O_RDONLY) = 5  
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\10\0"..., 10  
24) = 1024  
fstat64(5, {st_mode=S_IFREG|0644, st_size=4364, ...}) = 0  
old_mmap(NULL, 7372, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x4001800  
0  
mprotect(0x40019000, 3276, PROT_NONE) = 0  
old_mmap(0x40019000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
5, 0) = 0x40019000  
close(5) = 0  
open("/lib/security/pam_mail.so", O_RDONLY) = 5  
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`\n\0\000"..., 1  
024) = 1024  
fstat64(5, {st_mode=S_IFREG|0644, st_size=8472, ...}) = 0  
old_mmap(NULL, 11744, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x401840  
00  
mprotect(0x40186000, 3552, PROT_NONE) = 0  
old_mmap(0x40186000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
5, 0x1000) = 0x40186000  
close(5) = 0  
read(4, "", 4096) = 0  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
open("/etc/pam.d/other", O_RDONLY) = 4  
fstat64(4, {st_mode=S_IFREG|0644, st_size=345, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
read(4, "#\n# /etc/pam.d/other - specify t"..., 4096) = 345  
read(4, "", 4096) = 0  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
uname({sys="Linux", node="debian", ...}) = 0  
time(NULL) = 1054652671  
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
time([1054652671]) = 1054652671  
write(2, "debian login: ", 14debian login: ) = 14  
ioctl(0, SNDCTL_TMR_CONTINUE, {B38400 opost isig icanon echo ...}) = 0  
read(0, gmeier  
"gmeier\n", 511) = 7  
ioctl(0, SNDCTL_TMR_STOP, {B38400 opost isig icanon echo ...}) = 0  
brk(0) = 0x8062000  
brk(0x8063000) = 0x8063000  
socket(PF_UNIX, SOCK_STREAM, 0) = 4  
connect(4, {sin_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = -1  
 ENOENT (No such file or directory)  
close(4) = 0  
open("/etc/nsswitch.conf", O_RDONLY) = 4  
fstat64(4, {st_mode=S_IFREG|0644, st_size=465, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
read(4, "# /etc/nsswitch.conf\n#\n# Example"..., 4096) = 465  
read(4, "", 4096) = 0  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
open("/etc/ld.so.cache", O_RDONLY) = 4  
fstat64(4, {st_mode=S_IFREG|0644, st_size=32086, ...}) = 0  
old_mmap(NULL, 32086, PROT_READ, MAP_PRIVATE, 4, 0) = 0x4019c000  
close(4) = 0  
open("/lib/libnss_compat.so.2", O_RDONLY) = 4  
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\214\25"..., 102  
4) = 1024  
fstat64(4, {st_mode=S_IFREG|0644, st_size=38892, ...}) = 0  
old_mmap(NULL, 37836, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x401a40  
00  
mprotect(0x401ad000, 972, PROT_NONE) = 0  
old_mmap(0x401ad000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,  
4, 0x9000) = 0x401ad000  
close(4) = 0  
munmap(0x4019c000, 32086) = 0  
uname({sys="Linux", node="debian", ...}) = 0  
open("/etc/passwd", O_RDONLY) = 4  
fcntl64(4, F_GETFD) = 0  
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0  
fstat64(4, {st_mode=S_IFREG|0644, st_size=987, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(4, 0, [0], SEEK_CUR) = 0  
read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 987  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
open("/etc/nologin", O_RDONLY) = -1 ENOENT (No such file or dir  
ectory)  
getuid32() = 0  
open("/etc/passwd", O_RDONLY) = 4  
fcntl64(4, F_GETFD) = 0  
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0  
fstat64(4, {st_mode=S_IFREG|0644, st_size=987, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(4, 0, [0], SEEK_CUR) = 0  
read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 987  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
open("/etc/shadow", O_RDONLY) = 4  
fcntl64(4, F_GETFD) = 0  
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0  
fstat64(4, {st_mode=S_IFREG|0640, st_size=708, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(4, 0, [0], SEEK_CUR) = 0  
read(4, "root:$1$oRU0Hvr7$yca4lKVqiJ15jZZ"..., 4096) = 708  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
time([1054652676]) = 1054652676  
write(2, "Password: ", 10Password: ) = 10  
ioctl(0, SNDCTL_TMR_CONTINUE, {B38400 opost isig icanon -echo ...}) = 0  
read(0, "S1730\n", 511) = 6  
ioctl(0, SNDCTL_TMR_STOP, {B38400 opost isig icanon echo ...}) = 0  
write(2, "\n", 1  
) = 1  
open("/etc/passwd", O_RDONLY) = 4  
fcntl64(4, F_GETFD) = 0  
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0  
fstat64(4, {st_mode=S_IFREG|0644, st_size=987, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(4, 0, [0], SEEK_CUR) = 0  
read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 987  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
open("/etc/shadow", O_RDONLY) = 4  
fcntl64(4, F_GETFD) = 0  
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0  
fstat64(4, {st_mode=S_IFREG|0640, st_size=708, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(4, 0, [0], SEEK_CUR) = 0  
read(4, "root:$1$oRU0Hvr7$yca4lKVqiJ15jZZ"..., 4096) = 708  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
brk(0) = 0x8063000  
brk(0x8064000) = 0x8064000  
open("/etc/passwd", O_RDONLY) = 4  
fcntl64(4, F_GETFD) = 0  
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0  
fstat64(4, {st_mode=S_IFREG|0644, st_size=987, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(4, 0, [0], SEEK_CUR) = 0  
read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 987  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
open("/var/log/faillog", O_RDWR) = 4  
lseek(4, 24000, SEEK_SET) = 24000  
read(4, "\0\0\0\0pts/1\0\0\0\0\0\0\0\20^\331>\0\0\0\0", 24) = 24  
lseek(4, 24000, SEEK_SET) = 24000  
write(4, "\0\0\0\0pts/1\0\0\0\0\0\0\0\20^\331>\0\0\0\0", 24) = 24  
close(4) = 0  
alarm(0) = 49  
getuid32() = 0  
open("/etc/passwd", O_RDONLY) = 4  
fcntl64(4, F_GETFD) = 0  
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0  
fstat64(4, {st_mode=S_IFREG|0644, st_size=987, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(4, 0, [0], SEEK_CUR) = 0  
read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 987  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
open("/etc/shadow", O_RDONLY) = 4  
fcntl64(4, F_GETFD) = 0  
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0  
fstat64(4, {st_mode=S_IFREG|0640, st_size=708, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(4, 0, [0], SEEK_CUR) = 0  
read(4, "root:$1$oRU0Hvr7$yca4lKVqiJ15jZZ"..., 4096) = 708  
close(4) = 0  
munmap(0x40012000, 4096) = 0  
time(NULL) = 1054652683  
open("/etc/passwd", O_RDONLY) = 4  
fcntl64(4, F_GETFD) = 0  
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0  
open("/etc/passwd", O_RDONLY) = 5  
fcntl64(5, F_GETFD) = 0  
fcntl64(5, F_SETFD, FD_CLOEXEC) = 0  
fstat64(5, {st_mode=S_IFREG|0644, st_size=987, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(5, 0, [0], SEEK_CUR) = 0  
read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 987  
close(5) = 0  
munmap(0x40012000, 4096) = 0  
setgid32(0x3e8) = 0  
open("/etc/group", O_RDONLY) = 5  
fcntl64(5, F_GETFD) = 0  
fcntl64(5, F_SETFD, FD_CLOEXEC) = 0  
fstat64(5, {st_mode=S_IFREG|0644, st_size=712, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(5, 0, [0], SEEK_CUR) = 0  
read(5, "root:x:0:gmeier\ndaemon:x:1:gmeie"..., 4096) = 712  
close(5) = 0  
munmap(0x40012000, 4096) = 0  
setgroups32(0x20, 0x8063018) = 0  
open("/etc/security/pam_env.conf", O_RDONLY) = 5  
fstat64(5, {st_mode=S_IFREG|0644, st_size=3101, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
read(5, "# $Date: 1998/07/12 05:17:16 $\n#"..., 4096) = 3101  
read(5, "", 4096) = 0  
close(5) = 0  
munmap(0x40012000, 4096) = 0  
open("/etc/environment", O_RDONLY) = -1 ENOENT (No such file or dir  
ectory)  
getuid32() = 0  
access("/home/gmeier/.hushlogin", F_OK) = -1 ENOENT (No such file or dir  
ectory)  
getuid32() = 0  
getuid32() = 0  
ioctl(0, SNDCTL_TMR_TIMEBASE, {B38400 opost isig icanon echo ...}) = 0  
readlink("/proc/self/fd/0", "/dev/pts/0", 4095) = 10  
_llseek(3, 0, [0], SEEK_SET) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {0x804a398, [ALRM], S  
A_RESTART|0x4000000}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\10\0\0\0\t\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
read(3, "\2\0\0\0\0\0\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
read(3, "\1\0\0\0002N\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
read(3, "\10\0\0\0\310\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
read(3, "\6\0\0\0\2\1\0\0tty1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\3\1\0\0tty2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\4\1\0\0tty3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\5\1\0\0tty4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\6\1\0\0tty5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\7\1\0\0tty6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\7\0\2\0\t\1\0\0:0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "", 384) = 0  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {0x804a398, [ALRM], SA_RESTART|0x4000000}, NULL, 8  
) = 0  
close(3) = 0  
brk(0) = 0x8064000  
brk(0x8066000) = 0x8066000  
time([1054652683]) = 1054652683  
open("/etc/localtime", O_RDONLY) = 3  
fstat64(3, {st_mode=S_IFREG|0644, st_size=837, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
read(3, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10"..., 409  
6) = 837  
close(3) = 0  
munmap(0x40012000, 4096) = 0  
getpid() = 542  
rt_sigaction(SIGPIPE, {0x4011640e, [], 0x4000000}, {SIG_DFL}, 8) = 0  
socket(PF_UNIX, SOCK_DGRAM, 0) = 3  
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0  
connect(3, {sin_family=AF_UNIX, path="/dev/log"}, 16) = 0  
send(3, "<38>Jun 3 17:04:43 PAM_unix[542"..., 84, 0) = 84  
rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0  
close(3) = 0  
open("/etc/passwd", O_RDONLY) = 3  
fcntl64(3, F_GETFD) = 0  
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0  
fstat64(3, {st_mode=S_IFREG|0644, st_size=987, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
_llseek(3, 0, [0], SEEK_CUR) = 0  
read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 987  
close(3) = 0  
munmap(0x40012000, 4096) = 0  
open("/var/log/lastlog", O_RDWR) = 3  
lseek(3, 292000, SEEK_SET) = 292000  
fcntl64(3, F_SETLK, {type=F_RDLCK, whence=SEEK_SET, start=292000, len=29  
2}) = 0  
read(3, "\223v\333>pts/0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 29  
2) = 292  
fcntl64(3, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=292000, len=29  
2}) = 0  
lseek(3, 292000, SEEK_SET) = 292000  
fstat64(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40012000  
write(1, "Last login: Mon Jun 2 18:08:51 "..., 46Last login: Mon Jun 2  
 18:08:51 2003 on pts/0  
) = 46  
time([1054652683]) = 1054652683  
fcntl64(3, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=292000, len=29  
2}) = 0  
write(3, "\v\271\334>pts/0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 29  
2) = 292  
fcntl64(3, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=292000, len=29  
2}) = 0  
close(3) = 0  
open("/etc/motd", O_RDONLY) = 3  
fstat64(3, {st_mode=S_IFREG|0644, st_size=358, ...}) = 0  
read(3, "Linux debian 2.4.18-bf2.4 #1 Son"..., 358) = 358  
close(3) = 0  
write(1, "Linux debian 2.4.18-bf2.4 #1 Son"..., 329Linux debian 2.4.18-b  
f2.4 #1 Son Apr 14 09:53:28 CEST 2002 i686 unknown  
  
The programs included with the Debian GNU/Linux system are free software  
;  
the exact distribution terms for each program are described in the  
individual files in /usr/share/doc/*/copyright.  
  
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent  
) = 329  
write(1, "permitted by applicable law.\n", 29permitted by applicable law  
.  
) = 29  
stat64("/var/mail/gmeier", {st_mode=S_IFREG|0660, st_size=696, ...}) = 0  
write(1, "You have mail.\n", 15You have mail.  
) = 15  
open("/etc/passwd", O_RDONLY) = 3  
fcntl64(3, F_GETFD) = 0  
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0  
fstat64(3, {st_mode=S_IFREG|0644, st_size=987, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40187000  
_llseek(3, 0, [0], SEEK_CUR) = 0  
read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 987  
close(3) = 0  
munmap(0x40187000, 4096) = 0  
alarm(0) = 0  
time([1054652683]) = 1054652683  
access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or dir  
ectory)  
open("/var/run/utmp", O_RDWR) = 3  
fcntl64(3, F_GETFD) = 0  
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0  
_llseek(3, 0, [0], SEEK_SET) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {0x804a398, [ALRM], S  
A_RESTART|0x4000000}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
read(3, "\10\0\0\0\t\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
read(3, "\2\0\0\0\0\0\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
read(3, "\1\0\0\0002N\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
read(3, "\10\0\0\0\310\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
read(3, "\6\0\0\0\2\1\0\0tty1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\3\1\0\0tty2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\4\1\0\0tty3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\5\1\0\0tty4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\6\1\0\0tty5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\6\0\0\0\7\1\0\0tty6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "\7\0\2\0\t\1\0\0:0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384  
) = 384  
read(3, "", 384) = 0  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {0x804a398, [ALRM], SA_RESTART|0x4000000}, NULL, 8  
) = 0  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {0x804a398, [ALRM], S  
A_RESTART|0x4000000}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
_llseek(3, 0, [4224], SEEK_END) = 0  
write(3, "\7\0\0\0\36\2\0\0pts/0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {0x804a398, [ALRM], SA_RESTART|0x4000000}, NULL, 8  
) = 0  
close(3) = 0  
access("/var/log/wtmpx", F_OK) = -1 ENOENT (No such file or dir  
ectory)  
open("/var/log/wtmp", O_WRONLY) = 3  
alarm(0) = 0  
rt_sigaction(SIGALRM, {0x4013e0f7, [], 0x4000000}, {0x804a398, [ALRM], S  
A_RESTART|0x4000000}, 8) = 0  
alarm(1) = 0  
fcntl64(3, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
_llseek(3, 0, [710016], SEEK_END) = 0  
write(3, "\7\0\0\0\36\2\0\0pts/0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 38  
4) = 384  
fcntl64(3, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) =  
0  
alarm(0) = 1  
rt_sigaction(SIGALRM, {0x804a398, [ALRM], SA_RESTART|0x4000000}, NULL, 8  
) = 0  
close(3) = 0  
socket(PF_UNIX, SOCK_STREAM, 0) = 3  
connect(3, {sin_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = -1  
 ENOENT (No such file or directory)  
close(3) = 0  
open("/etc/group", O_RDONLY) = 3  
fcntl64(3, F_GETFD) = 0  
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0  
fstat64(3, {st_mode=S_IFREG|0644, st_size=712, ...}) = 0  
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1  
, 0) = 0x40187000  
_llseek(3, 0, [0], SEEK_CUR) = 0  
read(3, "root:x:0:gmeier\ndaemon:x:1:gmeie"..., 4096) = 712  
close(3) = 0  
munmap(0x40187000, 4096) = 0  
stat64("/dev/pts/0", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...  
}) = 0  
fstat64(0, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0  
chown32(0xbfffd588, 0x3e8, 0x5) = 0  
chmod("/dev/pts/0", 0600) = 0  
setuid32(0x3e8) = 0  
chdir("/home/gmeier") = 0  
access("/home/gmeier/.hushlogin", F_OK) = -1 ENOENT (No such file or dir  
ectory)  
rt_sigaction(SIGQUIT, {SIG_DFL}, {SIG_DFL}, 8) = 0  
rt_sigaction(SIGTERM, {SIG_DFL}, {SIG_DFL}, 8) = 0  
rt_sigaction(SIGALRM, {SIG_DFL}, {0x804a398, [ALRM], SA_RESTART|0x400000  
0}, 8) = 0  
rt_sigaction(SIGHUP, {SIG_DFL}, {SIG_DFL}, 8) = 0  
rt_sigaction(SIGINT, {SIG_DFL}, {SIG_DFL}, 8) = 0  
close(4) = 0  
execve("/bin/bash", ["-bash"], [/* 9 vars */]) = -1 EACCES (Permission d enied)  
write(2, "Cannot execute /bin/bash: Permis"..., 44Cannot execute /bin/ba sh:  
Permission denied  
) = 44  
munmap(0x40012000, 4096) = 0  
semget(1, 4096, IPC_EXCL|IPC_NOWAIT|0x4015f0e0|0240) = -1 ENOSYS (Functi  
on not implemented)  
_exit(1) = ?  
debian:~#  
  
  
________________________________________________________________
Mit der Grupppen-SMS von WEB.DE FreeMail können Sie eine SMS an alle 
Freunde gleichzeitig schicken: http://freemail.web.de/features/?mc=021179




Reply to: