/* the command */ ~ # strace mail redacted@mta.com /* the output */ execve("/bin/mail", ["mail", "redacted@mta.com"], [/* 45 vars */]) = 0 brk(0) = 0x9110000 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb775f000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=48453, ...}) = 0 mmap2(NULL, 48453, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7753000 close(3) = 0 open("/lib/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20m\1\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1323292, ...}) = 0 mmap2(NULL, 1333544, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb760d000 mprotect(0xb774c000, 4096, PROT_NONE) = 0 mmap2(0xb774d000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13f) = 0xb774d000 mmap2(0xb7750000, 10536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7750000 close(3) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb760c000 set_thread_area({entry_number:-1 -> 6, base_addr:0xb760c6c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 mprotect(0xb774d000, 8192, PROT_READ) = 0 mprotect(0x807c000, 4096, PROT_READ) = 0 mprotect(0xb777d000, 4096, PROT_READ) = 0 munmap(0xb7753000, 48453) = 0 getegid32() = 0 getgid32() = 0 setgid32(0) = 0 rt_sigaction(SIGCHLD, {0x806b3b3, [], SA_RESTART}, {SIG_DFL, [], 0}, 8) = 0 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 brk(0) = 0x9110000 brk(0x9131000) = 0x9131000 rt_sigaction(SIGPIPE, {SIG_IGN, [], SA_RESTART}, {SIG_DFL, [], 0}, 8) = 0 open("/usr/lib/locale/locale-archive", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=1772320, ...}) = 0 mmap2(NULL, 1772320, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb745b000 close(3) = 0 open("/usr/lib/gconv/gconv-modules.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=26048, ...}) = 0 mmap2(NULL, 26048, PROT_READ, MAP_SHARED, 3, 0) = 0xb7758000 close(3) = 0 ioctl(1, TIOCGWINSZ, {ws_row=62, ws_col=238, ws_xpixel=1907, ws_ypixel=1058}) = 0 ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 rt_sigaction(SIGWINCH, {SIG_IGN, [], SA_RESTART}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGWINCH, {0x8065a61, [], SA_RESTART}, {SIG_IGN, [], SA_RESTART}, 8) = 0 open("/etc/nail.rc", O_RDONLY) = 3 fcntl64(3, F_GETFL) = 0 (flags O_RDONLY) fstat64(3, {st_mode=S_IFREG|0644, st_size=1991, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7757000 _llseek(3, 0, [0], SEEK_CUR) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 rt_sigaction(SIGPIPE, {SIG_IGN, [], SA_RESTART}, {SIG_IGN, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGPIPE, {SIG_IGN, [], SA_RESTART}, {SIG_IGN, [], SA_RESTART}, 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 read(3, "# This is the configuration file"..., 4096) = 1991 read(3, "", 4096) = 0 close(3) = 0 munmap(0xb7757000, 4096) = 0 open("/root/.mailrc", O_RDONLY) = -1 ENOENT (No such file or directory) rt_sigprocmask(SIG_BLOCK, [HUP INT], [], 8) = 0 rt_sigaction(SIGINT, {SIG_IGN, [], SA_RESTART}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGINT, {0x8053a50, [], SA_RESTART}, {SIG_IGN, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGHUP, {SIG_IGN, [], SA_RESTART}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGHUP, {0x8053119, [], SA_RESTART}, {SIG_IGN, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTSTP, {0x805398e, [], SA_RESTART}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGTTOU, {0x805398e, [], SA_RESTART}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGTTIN, {0x805398e, [], SA_RESTART}, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [HUP INT], 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [HUP INT], 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 gettimeofday({1281554010, 175992}, NULL) = 0 getpid() = 21556 open("/tmp/.private/root/RskONhlS", O_RDWR|O_CREAT|O_EXCL, 0600) = 3 fchmod(3, 0600) = 0 fcntl64(3, F_GETFL) = 0x2 (flags O_RDWR) fstat64(3, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7757000 _llseek(3, 0, [0], SEEK_CUR) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 unlink("/tmp/.private/root/RskONhlS") = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigaction(SIGTSTP, {SIG_DFL, [], SA_RESTART}, {0x805398e, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTOU, {SIG_DFL, [], SA_RESTART}, {0x805398e, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTIN, {SIG_DFL, [], SA_RESTART}, {0x805398e, [], SA_RESTART}, 8) = 0 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 rt_sigaction(SIGINT, {SIG_IGN, [], SA_RESTART}, {0x8053a50, [], SA_RESTART}, 8) = 0 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigaction(SIGINT, {0x807539f, [], SA_RESTART}, {SIG_IGN, [], SA_RESTART}, 8) = 0 fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7756000 write(1, "Subject: ", 9Subject: ) = 9 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0 rt_sigaction(SIGTSTP, {0x8075305, [], SA_RESTART}, {SIG_DFL, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTOU, {0x8075305, [], SA_RESTART}, {SIG_DFL, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTIN, {0x8075305, [], SA_RESTART}, {SIG_DFL, [], SA_RESTART}, 8) = 0 /* the MUA has prompted me for a subject and is not reading it */ read(0, test 7 "t", 1) = 1 read(0, "e", 1) = 1 read(0, "s", 1) = 1 read(0, "t", 1) = 1 read(0, " ", 1) = 1 read(0, "7", 1) = 1 read(0, "\n", 1) = 1 rt_sigaction(SIGTSTP, {SIG_DFL, [], SA_RESTART}, {0x8075305, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTOU, {SIG_DFL, [], SA_RESTART}, {0x8075305, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTIN, {SIG_DFL, [], SA_RESTART}, {0x8075305, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTSTP, {0x805398e, [], SA_RESTART}, {SIG_DFL, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTOU, {0x805398e, [], SA_RESTART}, {SIG_DFL, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTIN, {0x805398e, [], SA_RESTART}, {SIG_DFL, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGINT, {0x8053a50, [], SA_RESTART}, {0x807539f, [], SA_RESTART}, 8) = 0 /* this has prompted me for the message body and is now reading it (it is terminated with a '.' */ read(0, test "test\n", 2560) = 5 read(0, . ".\n", 2560) = 2 write(3, "test\n", 5) = 5 _llseek(3, 0, [0], SEEK_SET) = 0 rt_sigprocmask(SIG_BLOCK, [HUP INT], NULL, 8) = 0 rt_sigaction(SIGINT, {SIG_DFL, [], SA_RESTART}, {0x8053a50, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGHUP, {SIG_DFL, [], SA_RESTART}, {0x8053119, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTSTP, {SIG_DFL, [], SA_RESTART}, {0x805398e, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTOU, {SIG_DFL, [], SA_RESTART}, {0x805398e, [], SA_RESTART}, 8) = 0 rt_sigaction(SIGTTIN, {SIG_DFL, [], SA_RESTART}, {0x805398e, [], SA_RESTART}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 write(1, "EOT\n", 4EOT ) = 4 fstat64(3, {st_mode=S_IFREG|0600, st_size=5, ...}) = 0 open("/tmp/.private/root/RsQABcTB", O_RDWR|O_CREAT|O_EXCL, 0600) = 4 fchmod(4, 0600) = 0 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fstat64(4, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7755000 _llseek(4, 0, [0], SEEK_CUR) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 open("/tmp/.private/root/RsQABcTB", O_RDONLY) = 5 fcntl64(5, F_GETFL) = 0 (flags O_RDONLY) fstat64(5, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7754000 _llseek(5, 0, [0], SEEK_CUR) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 stat64("/tmp/.private/root/RsQABcTB", {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 unlink("/tmp/.private/root/RsQABcTB") = 0 read(3, "test\n", 4096) = 5 read(3, "", 4096) = 0 _llseek(3, 0, [0], SEEK_SET) = 0 time(NULL) = 1281554020 open("/etc/localtime", O_RDONLY) = 6 fstat64(6, {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0 fstat64(6, {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7753000 read(6, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\0"..., 4096) = 3519 _llseek(6, -24, [3495], SEEK_CUR) = 0 read(6, "\nEST5EDT,M3.2.0,M11.1.0\n", 4096) = 24 close(6) = 0 munmap(0xb7753000, 4096) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0 time(NULL) = 1281554020 read(3, "test\n", 4096) = 5 read(3, "", 4096) = 0 read(3, "", 4096) = 0 write(4, "Date: Wed, 11 Aug 2010 15:13:40 "..., 218) = 218 close(4) = 0 munmap(0xb7755000, 4096) = 0 close(3) = 0 munmap(0xb7757000, 4096) = 0 _llseek(5, 0, [0], SEEK_SET) = 0 time(NULL) = 1281554020 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=3519, ...}) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb760c728) = 21623 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 close(5) = 0 munmap(0xb7754000, 4096) = 0 exit_group(0) = ? /* this is the output */ ~ # Invalid peer certificate (error 20) 0 (null) redacted@mta.com: 0 (null)