Hier ein strace des commands
von KBDCALLS- SNIPPET_TEXT:
-
- execve("/usr/sbin/groupadd", ["groupadd", "-g", "123", "ntp"], [/* 18 vars */]) = 0
- brk(0) = 0x7ff4b51f0000
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c1b000
- access("/etc/ld.so.preload", R_OK) = 0
- open("/etc/ld.so.preload", O_RDONLY|O_CLOEXEC) = 3
- fstat(3, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
- close(3) = 0
- open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
- fstat(3, {st_mode=S_IFREG|0644, st_size=85361, ...}) = 0
- mmap(NULL, 85361, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ff4b4c06000
- close(3) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libaudit.so.1", O_RDONLY|O_CLOEXEC) = 3
- read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20*\0\0\0\0\0\0"..., 832) = 832
- fstat(3, {st_mode=S_IFREG|0644, st_size=113024, ...}) = 0
- mmap(NULL, 2249344, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff4b45c8000
- mprotect(0x7ff4b45e2000, 2093056, PROT_NONE) = 0
- mmap(0x7ff4b47e1000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19000) = 0x7ff4b47e1000
- mmap(0x7ff4b47e4000, 37504, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ff4b47e4000
- close(3) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libselinux.so.1", O_RDONLY|O_CLOEXEC) = 3
- read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20c\0\0\0\0\0\0"..., 832) = 832
- fstat(3, {st_mode=S_IFREG|0644, st_size=142728, ...}) = 0
- mmap(NULL, 2246896, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff4b43a3000
- mprotect(0x7ff4b43c4000, 2097152, PROT_NONE) = 0
- mmap(0x7ff4b45c4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x21000) = 0x7ff4b45c4000
- mmap(0x7ff4b45c6000, 6384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ff4b45c6000
- close(3) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
- read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\34\2\0\0\0\0\0"..., 832) = 832
- fstat(3, {st_mode=S_IFREG|0755, st_size=1738176, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c05000
- mmap(NULL, 3844640, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff4b3ff8000
- mprotect(0x7ff4b4199000, 2097152, PROT_NONE) = 0
- mmap(0x7ff4b4399000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a1000) = 0x7ff4b4399000
- mmap(0x7ff4b439f000, 14880, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ff4b439f000
- close(3) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libpcre.so.3", O_RDONLY|O_CLOEXEC) = 3
- read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\27\0\0\0\0\0\0"..., 832) = 832
- fstat(3, {st_mode=S_IFREG|0644, st_size=448440, ...}) = 0
- mmap(NULL, 2543976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff4b3d8a000
- mprotect(0x7ff4b3df6000, 2097152, PROT_NONE) = 0
- mmap(0x7ff4b3ff6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6c000) = 0x7ff4b3ff6000
- close(3) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
- read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\16\0\0\0\0\0\0"..., 832) = 832
- fstat(3, {st_mode=S_IFREG|0644, st_size=14664, ...}) = 0
- mmap(NULL, 2109712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff4b3b86000
- mprotect(0x7ff4b3b89000, 2093056, PROT_NONE) = 0
- mmap(0x7ff4b3d88000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7ff4b3d88000
- close(3) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
- read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320n\0\0\0\0\0\0"..., 832) = 832
- fstat(3, {st_mode=S_IFREG|0755, st_size=137384, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c04000
- mmap(NULL, 2213008, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7ff4b3969000
- mprotect(0x7ff4b3981000, 2093056, PROT_NONE) = 0
- mmap(0x7ff4b3b80000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7ff4b3b80000
- mmap(0x7ff4b3b82000, 13456, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ff4b3b82000
- close(3) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c03000
- mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c01000
- arch_prctl(ARCH_SET_FS, 0x7ff4b4c01800) = 0
- mprotect(0x7ff4b4399000, 16384, PROT_READ) = 0
- mprotect(0x7ff4b3b80000, 4096, PROT_READ) = 0
- mprotect(0x7ff4b3d88000, 4096, PROT_READ) = 0
- mprotect(0x7ff4b3ff6000, 4096, PROT_READ) = 0
- mprotect(0x7ff4b45c4000, 4096, PROT_READ) = 0
- mprotect(0x7ff4b47e1000, 8192, PROT_READ) = 0
- mprotect(0x7ff4b4c1d000, 4096, PROT_READ) = 0
- mprotect(0x7ff4b4a0e000, 4096, PROT_READ) = 0
- munmap(0x7ff4b4c06000, 85361) = 0
- set_tid_address(0x7ff4b4c01ad0) = 18968
- set_robust_list(0x7ff4b4c01ae0, 24) = 0
- rt_sigaction(SIGRTMIN, {0x7ff4b396f9b0, [], SA_RESTORER|SA_SIGINFO, 0x7ff4b3978890}, NULL, 8) = 0
- rt_sigaction(SIGRT_1, {0x7ff4b396fa40, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7ff4b3978890}, NULL, 8) = 0
- rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
- getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
- statfs("/sys/fs/selinux", 0x7ffd0befbc10) = -1 ENOENT (No such file or directory)
- statfs("/selinux", 0x7ffd0befbc10) = -1 ENOENT (No such file or directory)
- brk(0) = 0x7ff4b51f0000
- brk(0x7ff4b5211000) = 0x7ff4b5211000
- open("/proc/filesystems", O_RDONLY) = 3
- fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c1a000
- read(3, "nodev\tsysfs\nnodev\trootfs\nnodev\tr"..., 1024) = 328
- read(3, "", 1024) = 0
- close(3) = 0
- munmap(0x7ff4b4c1a000, 4096) = 0
- open("/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
- fstat(3, {st_mode=S_IFREG|0644, st_size=1607776, ...}) = 0
- mmap(NULL, 1607776, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7ff4b4a78000
- close(3) = 0
- socket(PF_NETLINK, SOCK_RAW, NETLINK_AUDIT) = 3
- fcntl(3, F_SETFD, FD_CLOEXEC) = 0
- socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
- connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
- close(4) = 0
- socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
- connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
- close(4) = 0
- open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 4
- fstat(4, {st_mode=S_IFREG|0644, st_size=529, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c1a000
- read(4, "# /etc/nsswitch.conf\n#\n# Example"..., 4096) = 529
- read(4, "", 4096) = 0
- close(4) = 0
- munmap(0x7ff4b4c1a000, 4096) = 0
- open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 4
- fstat(4, {st_mode=S_IFREG|0644, st_size=85361, ...}) = 0
- mmap(NULL, 85361, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7ff4b4c06000
- close(4) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = 4
- read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\23\0\0\0\0\0\0"..., 832) = 832
- fstat(4, {st_mode=S_IFREG|0644, st_size=31632, ...}) = 0
- mmap(NULL, 2126976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7ff4b3761000
- mprotect(0x7ff4b3768000, 2093056, PROT_NONE) = 0
- mmap(0x7ff4b3967000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x6000) = 0x7ff4b3967000
- close(4) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libnsl.so.1", O_RDONLY|O_CLOEXEC) = 4
- read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`A\0\0\0\0\0\0"..., 832) = 832
- fstat(4, {st_mode=S_IFREG|0644, st_size=89104, ...}) = 0
- mmap(NULL, 2194072, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7ff4b3549000
- mprotect(0x7ff4b355e000, 2093056, PROT_NONE) = 0
- mmap(0x7ff4b375d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x14000) = 0x7ff4b375d000
- mmap(0x7ff4b375f000, 6808, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ff4b375f000
- close(4) = 0
- mprotect(0x7ff4b375d000, 4096, PROT_READ) = 0
- mprotect(0x7ff4b3967000, 4096, PROT_READ) = 0
- munmap(0x7ff4b4c06000, 85361) = 0
- open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 4
- fstat(4, {st_mode=S_IFREG|0644, st_size=85361, ...}) = 0
- mmap(NULL, 85361, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7ff4b4c06000
- close(4) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libnss_nis.so.2", O_RDONLY|O_CLOEXEC) = 4
- read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240!\0\0\0\0\0\0"..., 832) = 832
- fstat(4, {st_mode=S_IFREG|0644, st_size=43592, ...}) = 0
- mmap(NULL, 2139560, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7ff4b333e000
- mprotect(0x7ff4b3348000, 2093056, PROT_NONE) = 0
- mmap(0x7ff4b3547000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x9000) = 0x7ff4b3547000
- close(4) = 0
- access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
- open("/lib/x86_64-linux-gnu/libnss_files.so.2", O_RDONLY|O_CLOEXEC) = 4
- read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\"\0\0\0\0\0\0"..., 832) = 832
- fstat(4, {st_mode=S_IFREG|0644, st_size=47712, ...}) = 0
- mmap(NULL, 2144392, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7ff4b3132000
- mprotect(0x7ff4b313d000, 2093056, PROT_NONE) = 0
- mmap(0x7ff4b333c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0xa000) = 0x7ff4b333c000
- close(4) = 0
- mprotect(0x7ff4b333c000, 4096, PROT_READ) = 0
- mprotect(0x7ff4b3547000, 4096, PROT_READ) = 0
- munmap(0x7ff4b4c06000, 85361) = 0
- open("/etc/group", O_RDONLY|O_CLOEXEC) = 4
- lseek(4, 0, SEEK_CUR) = 0
- fstat(4, {st_mode=S_IFREG|0644, st_size=887, ...}) = 0
- mmap(NULL, 887, PROT_READ, MAP_SHARED, 4, 0) = 0x7ff4b4c1a000
- lseek(4, 887, SEEK_SET) = 887
- fstat(4, {st_mode=S_IFREG|0644, st_size=887, ...}) = 0
- munmap(0x7ff4b4c1a000, 887) = 0
- close(4) = 0
- open("/etc/group", O_RDONLY|O_CLOEXEC) = 4
- lseek(4, 0, SEEK_CUR) = 0
- fstat(4, {st_mode=S_IFREG|0644, st_size=887, ...}) = 0
- mmap(NULL, 887, PROT_READ, MAP_SHARED, 4, 0) = 0x7ff4b4c1a000
- lseek(4, 887, SEEK_SET) = 887
- fstat(4, {st_mode=S_IFREG|0644, st_size=887, ...}) = 0
- munmap(0x7ff4b4c1a000, 887) = 0
- close(4) = 0
- access("/etc/gshadow", F_OK) = 0
- open("/etc/.pwd.lock", O_WRONLY|O_CREAT|O_CLOEXEC, 0600) = 4
- rt_sigaction(SIGALRM, {0x7ff4b40e5b50, ~[], SA_RESTORER, 0x7ff4b402d0e0}, {SIG_DFL, [], 0}, 8) = 0
- rt_sigprocmask(SIG_UNBLOCK, [ALRM], [], 8) = 0
- alarm(15) = 0
- fcntl(4, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=0}) = 0
- alarm(0) = 15
- rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
- rt_sigaction(SIGALRM, {SIG_DFL, [], SA_RESTORER, 0x7ff4b402d0e0}, NULL, 8) = 0
- open("/etc/group.18968", O_WRONLY|O_CREAT|O_EXCL, 0600) = 5
- write(5, "18968\0", 6) = 6
- close(5) = 0
- link("/etc/group.18968", "/etc/group.lock") = 0
- stat("/etc/group.18968", {st_mode=S_IFREG|0600, st_size=6, ...}) = 0
- unlink("/etc/group.18968") = 0
- open("/etc/gshadow.18968", O_WRONLY|O_CREAT|O_EXCL, 0600) = 5
- write(5, "18968\0", 6) = 6
- close(5) = 0
- link("/etc/gshadow.18968", "/etc/gshadow.lock") = 0
- stat("/etc/gshadow.18968", {st_mode=S_IFREG|0600, st_size=6, ...}) = 0
- unlink("/etc/gshadow.18968") = 0
- open("/etc/group", O_RDWR|O_NOCTTY|O_NONBLOCK|O_NOFOLLOW) = 5
- fcntl(5, F_GETFL) = 0x28802 (flags O_RDWR|O_NONBLOCK|O_LARGEFILE|O_NOFOLLOW)
- fstat(5, {st_mode=S_IFREG|0644, st_size=887, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c1a000
- lseek(5, 0, SEEK_CUR) = 0
- fcntl(5, F_SETFD, FD_CLOEXEC) = 0
- read(5, "root:x:0:\ndaemon:x:1:\nbin:x:2:\ns"..., 4096) = 887
- read(5, "", 4096) = 0
- open("/etc/login.defs", O_RDONLY) = 6
- fstat(6, {st_mode=S_IFREG|0644, st_size=10478, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c19000
- read(6, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
- read(6, " issuing \n# the \"mesg y\" command"..., 4096) = 4096
- read(6, "It supports passwords of unlimit"..., 4096) = 2286
- read(6, "", 4096) = 0
- close(6) = 0
- munmap(0x7ff4b4c19000, 4096) = 0
- open("/etc/gshadow", O_RDWR|O_NOCTTY|O_NONBLOCK|O_NOFOLLOW) = 6
- fcntl(6, F_GETFL) = 0x28802 (flags O_RDWR|O_NONBLOCK|O_LARGEFILE|O_NOFOLLOW)
- fstat(6, {st_mode=S_IFREG|0640, st_size=745, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c19000
- lseek(6, 0, SEEK_CUR) = 0
- fcntl(6, F_SETFD, FD_CLOEXEC) = 0
- read(6, "root:*::\ndaemon:*::\nbin:*::\nsys:"..., 4096) = 745
- read(6, "", 4096) = 0
- fstat(5, {st_mode=S_IFREG|0644, st_size=887, ...}) = 0
- fstat(5, {st_mode=S_IFREG|0644, st_size=887, ...}) = 0
- umask(077) = 022
- open("/etc/group-", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 7
- umask(022) = 077
- lseek(5, 0, SEEK_SET) = 0
- read(5, "root:x:0:\ndaemon:x:1:\nbin:x:2:\ns"..., 4096) = 887
- fstat(7, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c18000
- read(5, "", 4096) = 0
- write(7, "root:x:0:\ndaemon:x:1:\nbin:x:2:\ns"..., 887) = 887
- fsync(7) = 0
- close(7) = 0
- munmap(0x7ff4b4c18000, 4096) = 0
- utime("/etc/group-", [2017/05/03-08:26:04, 2017/05/03-08:26:04]) = 0
- close(5) = 0
- munmap(0x7ff4b4c1a000, 4096) = 0
- umask(0777) = 022
- open("/etc/group+", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 5
- umask(022) = 0777
- fchown(5, 0, 0) = 0
- fchmod(5, 0644) = 0
- fstat(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c1a000
- write(5, "root:x:0:\ndaemon:x:1:\nbin:x:2:\ns"..., 898) = 898
- fsync(5) = 0
- close(5) = 0
- munmap(0x7ff4b4c1a000, 4096) = 0
- lstat("/etc/group", {st_mode=S_IFREG|0644, st_size=887, ...}) = 0
- rename("/etc/group+", "/etc/group") = -1 EBUSY (Device or resource busy)
- open("/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 5
- fstat(5, {st_mode=S_IFREG|0644, st_size=2492, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c1a000
- read(5, "# Locale name alias data base.\n#"..., 4096) = 2492
- read(5, "", 4096) = 0
- close(5) = 0
- munmap(0x7ff4b4c1a000, 4096) = 0
- open("/usr/share/locale/de_AT/LC_MESSAGES/shadow.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
- open("/usr/share/locale/de/LC_MESSAGES/shadow.mo", O_RDONLY) = 5
- fstat(5, {st_mode=S_IFREG|0644, st_size=70203, ...}) = 0
- mmap(NULL, 70203, PROT_READ, MAP_PRIVATE, 5, 0) = 0x7ff4b4c07000
- close(5) = 0
- open("/usr/lib/x86_64-linux-gnu/gconv/gconv-modules.cache", O_RDONLY) = 5
- fstat(5, {st_mode=S_IFREG|0644, st_size=26258, ...}) = 0
- mmap(NULL, 26258, PROT_READ, MAP_SHARED, 5, 0) = 0x7ff4b4a71000
- close(5) = 0
- futex(0x7ff4b439e8f8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
- write(2, "groupadd: Fehler beim Schreiben "..., 64groupadd: Fehler beim Schreiben der Änderungen nach /etc/group
- ) = 64
- open("/etc/localtime", O_RDONLY|O_CLOEXEC) = 5
- fstat(5, {st_mode=S_IFREG|0644, st_size=2211, ...}) = 0
- fstat(5, {st_mode=S_IFREG|0644, st_size=2211, ...}) = 0
- mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff4b4c1a000
- read(5, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\6\0\0\0\6\0\0\0\0"..., 4096) = 2211
- lseek(5, -1410, SEEK_CUR) = 801
- read(5, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\7\0\0\0\7\0\0\0\0"..., 4096) = 1410
- close(5) = 0
- munmap(0x7ff4b4c1a000, 4096) = 0
- socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
- connect(5, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
- sendto(5, "<83>May 3 10:07:01 groupadd[189"..., 76, MSG_NOSIGNAL, NULL, 0) = 76
- readlink("/proc/self/exe", "/usr/sbin/groupadd", 4096) = 18
- ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
- fstat(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
- readlink("/proc/self/fd/0", "/dev/pts/2", 31) = 10
- stat("/dev/pts/2", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
- lstat("/dev/pts/2", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
- sendto(3, "\200\0\0\0\\\4\5\0\1\0\0\0\0\0\0\0op=adding group "..., 128, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 128
- poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
- recvfrom(3, "$\0\0\0\2\0\0\0\1\0\0\0\30J\0\0\0\0\0\0\200\0\0\0\\\4\5\0\1\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- recvfrom(3, "$\0\0\0\2\0\0\0\1\0\0\0\30J\0\0\0\0\0\0\200\0\0\0\\\4\5\0\1\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- sendto(5, "<83>May 3 10:07:01 groupadd[189"..., 74, MSG_NOSIGNAL, NULL, 0) = 74
- ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
- fstat(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
- readlink("/proc/self/fd/0", "/dev/pts/2", 31) = 10
- stat("/dev/pts/2", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
- lstat("/dev/pts/2", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
- sendto(3, "\200\0\0\0\\\4\5\0\2\0\0\0\0\0\0\0op=adding group "..., 128, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 128
- poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
- recvfrom(3, "$\0\0\0\2\0\0\0\2\0\0\0\30J\0\0\0\0\0\0\200\0\0\0\\\4\5\0\2\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- recvfrom(3, "$\0\0\0\2\0\0\0\2\0\0\0\30J\0\0\0\0\0\0\200\0\0\0\\\4\5\0\2\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- sendto(5, "<83>May 3 10:07:01 groupadd[189"..., 60, MSG_NOSIGNAL, NULL, 0) = 60
- ioctl(0, SNDCTL_TMR_TIMEBASE or SNDRV_TIMER_IOCTL_NEXT_DEVICE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
- fstat(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
- readlink("/proc/self/fd/0", "/dev/pts/2", 31) = 10
- stat("/dev/pts/2", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
- lstat("/dev/pts/2", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 2), ...}) = 0
- sendto(3, "d\0\0\0\\\4\5\0\3\0\0\0\0\0\0\0op= acct=\"ntp\" e"..., 100, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 100
- poll([{fd=3, events=POLLIN}], 1, 500) = 1 ([{fd=3, revents=POLLIN}])
- recvfrom(3, "$\0\0\0\2\0\0\0\3\0\0\0\30J\0\0\0\0\0\0d\0\0\0\\\4\5\0\3\0\0\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- recvfrom(3, "$\0\0\0\2\0\0\0\3\0\0\0\30J\0\0\0\0\0\0d\0\0\0\\\4\5\0\3\0\0\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
- close(6) = 0
- munmap(0x7ff4b4c19000, 4096) = 0
- unlink("/etc/gshadow.lock") = 0
- unlink("/etc/group.lock") = 0
- close(4) = 0
- exit_group(10) = ?
- +++ exited with 10 +++
Quellcode
Hier kannst du den Code kopieren und ihn in deinen bevorzugten Editor einfügen. PASTEBIN_DOWNLOAD_SNIPPET_EXPLAIN