strace of the file command (no sandbox, as root)

strace-file-as-root.log (text/plain), 13.37 KB, created by Maxim Mikityanskiy on 2021-12-10 23:12:44 UTC

execve("/usr/bin/file", ["file", "-L", "/usr/lib/../lib64//libXpm.so.4.1"...], 0x7ffc727cf8e0 /* 45 vars */) = 0
brk(NULL)                               = 0x55d3f2342000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=151232, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 151232, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa4c466d000
close(3)                                = 0
openat(AT_FDCWD, "/usr/lib64/libmagic.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`G\0\0\0\0\0\0"..., 832) = 832
pread64(3, "\4\0\0\0 \0\0\0\5\0\0\0GNU\0\1\0\1\300\4\0\0\0\31\0\0\0\0\0\0\0"..., 48, 175600) = 48
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=182400, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa4c466b000
mmap(NULL, 185408, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa4c463d000
mmap(0x7fa4c4641000, 126976, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fa4c4641000
mmap(0x7fa4c4660000, 32768, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x23000) = 0x7fa4c4660000
mmap(0x7fa4c4668000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2a000) = 0x7fa4c4668000
close(3)                                = 0
openat(AT_FDCWD, "/usr/lib64/libseccomp.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360!\0\0\0\0\0\0"..., 832) = 832
pread64(3, "\4\0\0\0 \0\0\0\5\0\0\0GNU\0\1\0\1\300\4\0\0\0\31\0\0\0\0\0\0\0"..., 48, 129416) = 48
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=137080, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 139392, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa4c461a000
mprotect(0x7fa4c461c000, 126976, PROT_NONE) = 0
mmap(0x7fa4c461c000, 65536, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa4c461c000
mmap(0x7fa4c462c000, 57344, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12000) = 0x7fa4c462c000
mmap(0x7fa4c463b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7fa4c463b000
close(3)                                = 0
openat(AT_FDCWD, "/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\225\2\0\0\0\0\0"..., 832) = 832
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784
pread64(3, "\4\0\0\0 \0\0\0\5\0\0\0GNU\0\1\0\1\300\4\0\0\0;\10\0\0\0\0\0\0"..., 48, 848) = 48
pread64(3, "\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\3\0\0\0\2\0\0\0\0\0\0\0", 32, 896) = 32
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=2023656, ...}, AT_EMPTY_PATH) = 0
pread64(3, "\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0"..., 784, 64) = 784
mmap(NULL, 2054736, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa4c4424000
mprotect(0x7fa4c444c000, 1835008, PROT_NONE) = 0
mmap(0x7fa4c444c000, 1490944, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28000) = 0x7fa4c444c000
mmap(0x7fa4c45b8000, 339968, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x194000) = 0x7fa4c45b8000
mmap(0x7fa4c460c000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e7000) = 0x7fa4c460c000
mmap(0x7fa4c4612000, 31312, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa4c4612000
close(3)                                = 0
openat(AT_FDCWD, "/lib64/libbz2.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\"\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=103152, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 105512, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa4c440a000
mmap(0x7fa4c440c000, 81920, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa4c440c000
mmap(0x7fa4c4420000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x16000) = 0x7fa4c4420000
mmap(0x7fa4c4422000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7fa4c4422000
close(3)                                = 0
openat(AT_FDCWD, "/lib64/libz.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0203\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=116512, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 118800, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa4c43ec000
mprotect(0x7fa4c43ef000, 102400, PROT_NONE) = 0
mmap(0x7fa4c43ef000, 73728, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7fa4c43ef000
mmap(0x7fa4c4401000, 24576, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15000) = 0x7fa4c4401000
mmap(0x7fa4c4408000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1b000) = 0x7fa4c4408000
close(3)                                = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa4c43ea000
arch_prctl(ARCH_SET_FS, 0x7fa4c43eb240) = 0
set_tid_address(0x7fa4c43eb510)         = 90694
set_robust_list(0x7fa4c43eb520, 24)     = 0
mprotect(0x7fa4c460c000, 16384, PROT_READ) = 0
mprotect(0x7fa4c4408000, 4096, PROT_READ) = 0
mprotect(0x7fa4c4422000, 4096, PROT_READ) = 0
mprotect(0x7fa4c463b000, 4096, PROT_READ) = 0
mprotect(0x7fa4c4668000, 8192, PROT_READ) = 0
mprotect(0x55d3f09f3000, 4096, PROT_READ) = 0
mprotect(0x7fa4c46c2000, 8192, PROT_READ) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
munmap(0x7fa4c466d000, 151232)          = 0
getrandom("\x0e\xae\x50\x4f\xa0\xd1\xe5\x78", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55d3f2342000
brk(0x55d3f2363000)                     = 0x55d3f2363000
openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=4566400, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 4566400, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa4c3f8f000
close(3)                                = 0
prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)  = 0
prctl(PR_SET_DUMPABLE, SUID_DUMP_DISABLE) = 0
seccomp(SECCOMP_SET_MODE_STRICT, 0x1, NULL) = -1 EINVAL (Invalid argument)
seccomp(SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_TSYNC, NULL) = -1 EFAULT (Bad address)
seccomp(SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_LOG, NULL) = -1 EFAULT (Bad address)
seccomp(SECCOMP_GET_ACTION_AVAIL, 0, [SECCOMP_RET_LOG]) = 0
seccomp(SECCOMP_GET_ACTION_AVAIL, 0, [SECCOMP_RET_KILL_PROCESS]) = 0
seccomp(SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_SPEC_ALLOW, NULL) = -1 EFAULT (Bad address)
seccomp(SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_NEW_LISTENER, NULL) = -1 EFAULT (Bad address)
seccomp(SECCOMP_GET_NOTIF_SIZES, 0, {seccomp_notif=80, seccomp_notif_resp=24, seccomp_data=64}) = 0
seccomp(SECCOMP_SET_MODE_FILTER, SECCOMP_FILTER_FLAG_TSYNC_ESRCH, NULL) = -1 EFAULT (Bad address)
prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0)  = 0
seccomp(SECCOMP_SET_MODE_FILTER, 0, {len=53, filter=0x55d3f234faf0}) = 0
newfstatat(AT_FDCWD, "/root/.magic.mgc", 0x7ffdee8f2670, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/root/.magic", 0x7ffdee8f2670, 0) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/misc/magic.mgc", O_RDONLY) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=7254168, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 7254168, PROT_READ|PROT_WRITE, MAP_PRIVATE, 3, 0) = 0x7fa4c38a3000
close(3)                                = 0
mprotect(0x7fa4c38a3000, 7254168, PROT_READ) = 0
openat(AT_FDCWD, "/usr/lib64/gconv/gconv-modules.cache", O_RDONLY) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=26988, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 26988, PROT_READ, MAP_SHARED, 3, 0) = 0x7fa4c468b000
close(3)                                = 0
futex(0x7fa4c461188c, FUTEX_WAKE_PRIVATE, 2147483647) = 0
newfstatat(1, "", {st_mode=S_IFIFO|0600, st_size=0, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 1052672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa4c37a2000
newfstatat(AT_FDCWD, "/usr/lib/../lib64//libXpm.so.4.11.0", {st_mode=S_IFREG|0755, st_size=88008, ...}, 0) = 0
openat(AT_FDCWD, "/usr/lib/../lib64//libXpm.so.4.11.0", O_RDONLY|O_NONBLOCK|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0755, st_size=88008, ...}, AT_EMPTY_PATH) = 0
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0207\0\0\0\0\0\0"..., 1048576) = 88008
mmap(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa4c3721000
munmap(0x7fa4c3721000, 528384)          = 0
lseek(3, 0, SEEK_SET)                   = 0
pread64(3, "\1\0\0\0\4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 56, 64) = 56
pread64(3, "\1\0\0\0\5\0\0\0\0000\0\0\0\0\0\0\0000\0\0\0\0\0\0\0000\0\0\0\0\0\0"..., 56, 120) = 56
pread64(3, "\1\0\0\0\4\0\0\0\0 \1\0\0\0\0\0\0 \1\0\0\0\0\0\0 \1\0\0\0\0\0"..., 56, 176) = 56
pread64(3, "\1\0\0\0\6\0\0\0000J\1\0\0\0\0\0000Z\1\0\0\0\0\0000Z\1\0\0\0\0\0"..., 56, 232) = 56
pread64(3, "\2\0\0\0\6\0\0\0@J\1\0\0\0\0\0@Z\1\0\0\0\0\0@Z\1\0\0\0\0\0"..., 56, 288) = 56
pread64(3, "\1\0\0\0\0\0\0\0\256\7\0\0\0\0\0\0\1\0\0\0\0\0\0\0\272\7\0\0\0\0\0\0"..., 512, 84544) = 512
pread64(3, "P\345td\4\0\0\0\10&\1\0\0\0\0\0\10&\1\0\0\0\0\0\10&\1\0\0\0\0\0"..., 56, 344) = 56
pread64(3, "Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 56, 400) = 56
pread64(3, "R\345td\4\0\0\0000J\1\0\0\0\0\0000Z\1\0\0\0\0\0000Z\1\0\0\0\0\0"..., 56, 456) = 56
pread64(3, "\1\0\0\0\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0HQ\1\0\0\0\0\0"..., 64, 87944) = 64
pread64(3, ".shstrtab\0.gnu.hash\0.dynsym\0.dyn"..., 49, 86345) = 49
pread64(3, "\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 64, 86536) = 64
pread64(3, "\0.shstrtab\0.gnu.hash\0.dynsym\0.dy"..., 49, 86344) = 49
pread64(3, "\v\0\0\0\366\377\377o\2\0\0\0\0\0\0\0\0\2\0\0\0\0\0\0\0\2\0\0\0\0\0\0"..., 64, 86600) = 64
pread64(3, ".gnu.hash\0.dynsym\0.dynstr\0.gnu.v"..., 49, 86355) = 49
pread64(3, "\25\0\0\0\v\0\0\0\2\0\0\0\0\0\0\0h\5\0\0\0\0\0\0h\5\0\0\0\0\0\0"..., 64, 86664) = 64
pread64(3, ".dynsym\0.dynstr\0.gnu.version\0.gn"..., 49, 86365) = 49
pread64(3, "\35\0\0\0\3\0\0\0\2\0\0\0\0\0\0\0(\22\0\0\0\0\0\0(\22\0\0\0\0\0\0"..., 64, 86728) = 64
pread64(3, ".dynstr\0.gnu.version\0.gnu.versio"..., 49, 86373) = 49
pread64(3, "%\0\0\0\377\377\377o\2\0\0\0\0\0\0\0:\32\0\0\0\0\0\0:\32\0\0\0\0\0\0"..., 64, 86792) = 64
pread64(3, ".gnu.version\0.gnu.version_r\0.rel"..., 49, 86381) = 49
pread64(3, "2\0\0\0\376\377\377o\2\0\0\0\0\0\0\0P\33\0\0\0\0\0\0P\33\0\0\0\0\0\0"..., 64, 86856) = 64
pread64(3, ".gnu.version_r\0.rela.dyn\0.rela.p"..., 49, 86394) = 49
pread64(3, "A\0\0\0\4\0\0\0\2\0\0\0\0\0\0\0\300\33\0\0\0\0\0\0\300\33\0\0\0\0\0\0"..., 64, 86920) = 64
pread64(3, ".rela.dyn\0.rela.plt\0.init\0.plt.g"..., 49, 86409) = 49
pread64(3, "K\0\0\0\4\0\0\0B\0\0\0\0\0\0\08\37\0\0\0\0\0\08\37\0\0\0\0\0\0"..., 64, 86984) = 64
pread64(3, ".rela.plt\0.init\0.plt.got\0.text\0."..., 49, 86419) = 49
pread64(3, "U\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0000\0\0\0\0\0\0\0000\0\0\0\0\0\0"..., 64, 87048) = 64
pread64(3, ".init\0.plt.got\0.text\0.fini\0.roda"..., 49, 86429) = 49
pread64(3, "P\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0 0\0\0\0\0\0\0 0\0\0\0\0\0\0"..., 64, 87112) = 64
pread64(3, ".plt\0.init\0.plt.got\0.text\0.fini\0"..., 49, 86424) = 49
pread64(3, "[\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0007\0\0\0\0\0\0\0007\0\0\0\0\0\0"..., 64, 87176) = 64
pread64(3, ".plt.got\0.text\0.fini\0.rodata\0.eh"..., 49, 86435) = 49
pread64(3, "d\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\0207\0\0\0\0\0\0\0207\0\0\0\0\0\0"..., 64, 87240) = 64
pread64(3, ".text\0.fini\0.rodata\0.eh_frame_hd"..., 49, 86444) = 49
pread64(3, "j\0\0\0\1\0\0\0\6\0\0\0\0\0\0\0\204\27\1\0\0\0\0\0\204\27\1\0\0\0\0\0"..., 64, 87304) = 64
pread64(3, ".fini\0.rodata\0.eh_frame_hdr\0.eh_"..., 49, 86450) = 49
pread64(3, "p\0\0\0\1\0\0\0\2\0\0\0\0\0\0\0\0 \1\0\0\0\0\0\0 \1\0\0\0\0\0"..., 64, 87368) = 64
pread64(3, ".rodata\0.eh_frame_hdr\0.eh_frame\0"..., 49, 86456) = 49
pread64(3, "x\0\0\0\1\0\0\0\2\0\0\0\0\0\0\0\10&\1\0\0\0\0\0\10&\1\0\0\0\0\0"..., 64, 87432) = 64
pread64(3, ".eh_frame_hdr\0.eh_frame\0.init_ar"..., 49, 86464) = 49
pread64(3, "\206\0\0\0\1\0\0\0\2\0\0\0\0\0\0\0\340(\1\0\0\0\0\0\340(\1\0\0\0\0\0"..., 64, 87496) = 64
pread64(3, ".eh_frame\0.init_array\0.fini_arra"..., 49, 86478) = 49
pread64(3, "\220\0\0\0\16\0\0\0\3\0\0\0\0\0\0\0000Z\1\0\0\0\0\0000J\1\0\0\0\0\0"..., 64, 87560) = 64
pread64(3, ".init_array\0.fini_array\0.dynamic"..., 49, 86488) = 49
pread64(3, "\234\0\0\0\17\0\0\0\3\0\0\0\0\0\0\08Z\1\0\0\0\0\08J\1\0\0\0\0\0"..., 64, 87624) = 64
pread64(3, ".fini_array\0.dynamic\0.data\0.bss\0"..., 49, 86500) = 49
pread64(3, "\250\0\0\0\6\0\0\0\3\0\0\0\0\0\0\0@Z\1\0\0\0\0\0@J\1\0\0\0\0\0"..., 64, 87688) = 64
pread64(3, ".dynamic\0.data\0.bss\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 49, 86512) = 49
pread64(3, "_\0\0\0\1\0\0\0\3\0\0\0\0\0\0\0@\\\1\0\0\0\0\0@L\1\0\0\0\0\0"..., 64, 87752) = 64
pread64(3, ".got\0.text\0.fini\0.rodata\0.eh_fra"..., 49, 86439) = 49
pread64(3, "\261\0\0\0\1\0\0\0\3\0\0\0\0\0\0\0\0`\1\0\0\0\0\0\0P\1\0\0\0\0\0"..., 64, 87816) = 64
pread64(3, ".data\0.bss\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 49, 86521) = 49
pread64(3, "\267\0\0\0\10\0\0\0\3\0\0\0\0\0\0\0Ha\1\0\0\0\0\0HQ\1\0\0\0\0\0"..., 64, 87880) = 64
pread64(3, ".bss\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 49, 86527) = 49
pread64(3, "\1\0\0\0\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0HQ\1\0\0\0\0\0"..., 64, 87944) = 64
munmap(0x7fa4c37a2000, 1052672)         = 0
close(3)                                = 0
munmap(0x7fa4c38a3000, 7254168)         = 0
write(1, "/usr/lib/../lib64//libXpm.so.4.1"..., 122) = 122
exit_group(0)                           = ?
+++ exited with 0 +++