Attachment 213671 Details for Bug 315561 – strace of auditd when I exec'd ls with a huge arg list

strace of auditd when I exec'd ls with a huge arg list

auditd.strace (text/plain), 3.05 KB, created by Eric Paris on 2007-10-02 16:35:55 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Eric Paris

Created: 2007-10-02 16:35:55 UTC

Size: 3.05 KB

patch

obsolete

>select(4, [3], NULL, NULL, {28, 592000}) = 1 (in [3], left {12, 928000})
>recvfrom(3, "\35\1\0\0\24\5\0\0\0\0\0\0\0\0\0\0audit(1191367521.650:18): arch=c000003e syscall=59 success=yes exit=0 a0=703b10 "..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 301
>writev(7, [{"\0\0\0\0\20\0\0\0\24\5\0\0\35\1\0\0", 16}, {"audit(1191367521.650:18): arch=c000003e syscall=59 success=yes exit=0 a0=703b10 a1=714a30 a2=702"..., 285}], 2) = 301
>futex(0x2aaaaacc4534, FUTEX_WAKE_OP_PRIVATE, 1, 1, 0x2aaaaacc4530, {0x5 /* FUTEX_OP_??? */, 3757, FUTEX_OP_OPARG_SHIFT|FUTEX_OP_CMP_GT, 3004}) = 1
>futex(0x2aaaaacc4508, FUTEX_WAKE_PRIVATE, 1) = 1
>select(4, [3], NULL, NULL, {30, 0})     = 1 (in [3], left {29, 996000})
>recvfrom(3, "\0308\0\0\35\5\0\0\0\0\0\0\0\0\0\0audit(1191367521.650:18): a0=\"ls\"\na1=\"--color=tty\"\na2=\"dir1/file1\"\na3=\"dir1/file"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 8988
>select(4, [3], NULL, NULL, {30, 0})     = 1 (in [3], left {30, 0})
>recvfrom(3, "+\0\0\0\33\5\0\0\0\0\0\0\0\0\0\0audit(1191367521.650:18):  cwd=\"/tmp/files\"", 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 59
>writev(7, [{"\0\0\0\0\20\0\0\0\33\5\0\0+\0\0\0", 16}, {"audit(1191367521.650:18):  cwd=\"/tmp/files\"", 43}], 2) = 59
>futex(0x2aaaaacc4534, FUTEX_WAKE_OP_PRIVATE, 1, 1, 0x2aaaaacc4530, {0x5 /* FUTEX_OP_??? */, 3757, FUTEX_OP_OPARG_SHIFT|FUTEX_OP_CMP_GT, 3004}) = 1
>futex(0x2aaaaacc4508, FUTEX_WAKE_PRIVATE, 1) = 1
>select(4, [3], NULL, NULL, {30, 0})     = 1 (in [3], left {30, 0})
>recvfrom(3, "\213\0\0\0\26\5\0\0\0\0\0\0\0\0\0\0audit(1191367521.650:18): item=0 name=\"/bin/ls\" inode=359898 dev=fd:00 mode=0100"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 155
>writev(7, [{"\0\0\0\0\20\0\0\0\26\5\0\0\213\0\0\0", 16}, {"audit(1191367521.650:18): item=0 name=\"/bin/ls\" inode=359898 dev=fd:00 mode=0100755 ouid=0 ogid="..., 139}], 2) = 155
>futex(0x2aaaaacc4534, FUTEX_WAKE_OP_PRIVATE, 1, 1, 0x2aaaaacc4530, {0x5 /* FUTEX_OP_??? */, 3757, FUTEX_OP_OPARG_SHIFT|FUTEX_OP_CMP_GT, 3004}) = 1
>futex(0x2aaaaacc4508, FUTEX_WAKE_PRIVATE, 1) = 1
>select(4, [3], NULL, NULL, {30, 0})     = 1 (in [3], left {30, 0})
>recvfrom(3, "\213\0\0\0\26\5\0\0\0\0\0\0\0\0\0\0audit(1191367521.650:18): item=1 name=(null) inode=1436230 dev=fd:00 mode=010075"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 155
>writev(7, [{"\0\0\0\0\20\0\0\0\26\5\0\0\213\0\0\0", 16}, {"audit(1191367521.650:18): item=1 name=(null) inode=1436230 dev=fd:00 mode=0100755 ouid=0 ogid=0 "..., 139}], 2) = 155
>futex(0x2aaaaacc4534, FUTEX_WAKE_OP_PRIVATE, 1, 1, 0x2aaaaacc4530, {0x5 /* FUTEX_OP_??? */, 3757, FUTEX_OP_OPARG_SHIFT|FUTEX_OP_CMP_GT, 3004}) = 1
>futex(0x2aaaaacc4508, FUTEX_WAKE_PRIVATE, 1) = 1
>select(4, [3], NULL, NULL, {30, 0})     = 0 (Timeout)
>select(4, [3], NULL, NULL, {30, 0})     = 0 (Timeout)
>select(4, [3], NULL, NULL, {30, 0})     = 0 (Timeout)
>select(4, [3], NULL, NULL, {30, 0})     = 0 (Timeout)
>select(4, [3], NULL, NULL, {30, 0})     = 0 (Timeout)
>select(4, [3], NULL, NULL, {30, 0}

Actions: View

Attachments on bug 315561: 213671