OK I've found a case where the automounter/mount exhibit weirdness and
seem to incorrectly preserve options. I should start by stating that
the filer I'm communicating with is a NetApp 6070 running a 7.2 OnTap
version. I have *not* tried to reproduce this behavior communicating
with a Linux filer, and therefore will consider "it must be a NetApp
bug" as a valid response.
* Start by automounting /tool/sysadmin_tmp:
[EMAIL PROTECTED] mnt]# cd /tool/sysadmin_tmp
[EMAIL PROTECTED] sysadmin_tmp]# df .
Filesystem 1K-blocks Used Available Use% Mounted on
eng:/vol/vol18/sysadmin_tmp
20971520 11810688 9160832 57% /tool/sysadmin_tmp
[EMAIL PROTECTED] sysadmin_tmp]# grep sysadmin_tmp /proc/mounts
eng:/vol/vol18/sysadmin_tmp /tool/sysadmin_tmp nfs
rw,vers=3,rsize=65536,wsize=6
5536,hard,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng 0 0
[EMAIL PROTECTED] sysadmin_tmp]# cd ..
* Notice that it's mounted with a 64K rsize/wsize. We now unmount it
and remount it with a 1K rsize/wsize to /mnt/local:
[EMAIL PROTECTED] tool]# umount sysadmin_tmp
[EMAIL PROTECTED] tool]# grep sysadmin_tmp /proc/mounts
[EMAIL PROTECTED] tool]# cd /mnt
[EMAIL PROTECTED] mnt]# mount -o rsize=1024,wsize=1024
eng:/vol/vol18/sysadmin_tmp
local
* Now look at the mount entry:
[EMAIL PROTECTED] mnt]# grep sysadmin_tmp /proc/mounts
eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,vers=3,rsize=65536,wsize=65536,har
d,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng 0 0
* WTF? that's not right! I *explicitly* gave that mount different
options, and the kernel magically used options from something else.
* I want to see what's going on, so I took a strace:
[EMAIL PROTECTED] mnt]# umount local
[EMAIL PROTECTED] mnt]# strace -f -tt -T -o /tmp/mount.strace.out -s 1024
mount -o
rsize=1024,wsize=1024 eng:/vol/vol18/sysadmin_tmp local
[EMAIL PROTECTED] mnt]# grep sysadmin_tmp /proc/mounts
eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,vers=3,rsize=65536,wsize=65536,har
d,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng 0 0
* The strace is attached.
* Upon further thought I considered that perhaps it's the kernel
associating rsize/wsize options with an IP, and not with a mountpoint,
so let's see what else is mounting eng:
[EMAIL PROTECTED] mnt]# grep eng /proc/mounts
pain:/vol/vol303/gridengine /tool/gridengine nfs
rw,vers=3,rsize=65536,wsize=655
36,hard,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=pain 0 0
eng:/vol/vol12/sysadmin /tool/sysadmin nfs
rw,vers=3,rsize=65536,wsize=65536,har
d,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng 0 0
eng:/vol/vol18/site-config /tool/site-config nfs
rw,vers=3,rsize=65536,wsize=655
36,hard,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng 0 0
eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,vers=3,rsize=65536,wsize=65536,har
d,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng 0 0
eng:/vol/vol15/admin-home4/skaven /home/skaven nfs
rw,vers=3,rsize=65536,wsize=6
5536,hard,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng 0 0
eng:/vol/vol12/admin_home/admin /home/admin nfs
rw,vers=3,rsize=65536,wsize=6553
6,hard,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng 0 0
* Lots of stuff, all with 64K rsize/wsize. So let's restart autofs to
clear those mounts out:
[EMAIL PROTECTED] mnt]# service autofs restart
Stopping automount: [ OK ]
Starting automount: [ OK ]
[EMAIL PROTECTED] mnt]# grep eng /proc/mounts
eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=tcp,time
[EMAIL PROTECTED] mnt]# umount local
[EMAIL PROTECTED] mnt]# grep eng /proc/mounts
* OK so no more mounts to eng. We now try to mount sysadmin_tmp
manually with the 1K rsize/wsize options:
[EMAIL PROTECTED] mnt]# mount -o rsize=1024,wsize=1024
eng:/vol/vol18/sysadmin_tmp local
[EMAIL PROTECTED] mnt]# grep eng /proc/mounts
eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,vers=3,rsize=1024,wsize=1024,hard,proto=tcp,timeo=600,r
* Hey! It worked! So far my theory is holding up. If this is correct,
then I should be able to auto-mount something against eng and it will
take on the 1K rsize/wsize...so I opened a second console and logged in
as myself (my homedir is on eng):
[EMAIL PROTECTED] mnt]# grep eng /proc/mounts
eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,vers=3,rsize=1024,wsize=1024,hard,proto=tcp,timeo=600,r
eng:/vol/vol15/admin-home4/skaven /home/skaven nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=
0
eng:/vol/vol12/sysadmin /tool/sysadmin nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=tcp,time
eng:/vol/vol12/admin_home/admin /home/admin nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=tcp
* Wait, what?! So we *can* mount things to the same filer with
different options?
* So let's unmount that and try again:
[EMAIL PROTECTED] mnt]# umount local
[EMAIL PROTECTED] mnt]# grep eng /proc/mounts
eng:/vol/vol15/admin-home4/skaven /home/skaven nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=
0
eng:/vol/vol12/sysadmin /tool/sysadmin nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=tcp,time
eng:/vol/vol12/admin_home/admin /home/admin nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=tcp
[EMAIL PROTECTED] mnt]# mount -o rsize=1024,wsize=1024
eng:/vol/vol18/sysadmin_tmp local
[EMAIL PROTECTED] mnt]# grep eng /proc/mounts
eng:/vol/vol15/admin-home4/skaven /home/skaven nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=
0
eng:/vol/vol12/sysadmin /tool/sysadmin nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=tcp,time
eng:/vol/vol12/admin_home/admin /home/admin nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=tcp
eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,vers=3,rsize=1024,wsize=1024,hard,proto=tcp,timeo=600,r
* And it worked again! ::sigh:: this is very frustrating.
* OK so let's try a different tack. Here are the various automount
points that mount to eng:/vol/vol18, which is a single entry in eng's
exports file:
[EMAIL PROTECTED] /tool/eng-vol0/etc]$ ypcat -k auto.tool | grep eng.*vol18
arc_syslog -intr eng:/vol/vol18/&
site-lib -intr eng:/vol/vol18/site-config/provision/site-lib
site-config -intr eng:/vol/vol18/&
eng-vol18 -intr eng:/vol/vol18
sysadmin_tmp -intr eng:/vol/vol18/&
linux -intr eng:/vol/vol18/&
[EMAIL PROTECTED] /tool/eng-vol0/etc]$ grep vol18 exports
/vol/vol18 -sec=sys,[EMAIL PROTECTED],[EMAIL PROTECTED],anon=4058
* So perhaps the problem is that things using the same *export* inherit
the same options?
* First mount sysadmin_tmp as the first (and only) mount to eng:/vol/vol18:
[EMAIL PROTECTED] mnt]# grep eng.*vol18 /proc/mounts
[EMAIL PROTECTED] mnt]# mount -t nfs -o rsize=1024,wsize=1024
eng:/vol/vol18/sysadmin_tmp local
[EMAIL PROTECTED] mnt]# grep eng.*vol18 /proc/mounts
eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,vers=3,rsize=1024,wsize=1024,hard,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng
0 0
* Now let's mount something else with "default" options:
[EMAIL PROTECTED] mnt]# mount -t nfs eng:/vol/vol18/arc_syslog local2
[EMAIL PROTECTED] mnt]# grep eng.*vol18 /proc/mounts
eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,vers=3,rsize=1024,wsize=1024,hard,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng
0 0
eng:/vol/vol18/arc_syslog /mnt/local2 nfs
rw,vers=3,rsize=1024,wsize=1024,hard,proto=tcp,timeo=600,retrans=2,sec=sys,addr=eng
0 0
Ah ha! That seems to be it!!!
My "mental model" of how mount/automount should work does *not* think
this is correct. While multiple mounts may occur on a single export
from a filer, the options from the client side for each individual mount
(especially for separate subdirs) should be customizable. Inheriting
the options from the previous mount to that export is asinine and simply
unsupportable in our environment. I did some further testing and found
that this "inheritance" model even happens for ro/rw attributes, causing
HUGE security implications. For example, what if something like this
happened:
1. mount an innocuous directory like /tool/sysadmin_tmp read-write
2. mount an important directory like /tool/finance_data from the same
filer:/vol/volume, but with -o ro
3. My experimentation shows that the "finance_data" mount will be
read-write due to inheritance!!!
The obvious implications of usage of automount and such, I believe this
to be very *bad* behavior. I could see how a sysadmin could set up
something like this expecting it to be secure. For example, a filer
could be set up with one exported dir, depending on its clients (with,
say, static /etc/fstab mounts) setting up whether the NFS mount is
read-only or read-write. But with the way RHEL5 appears to act, a
clever user could carefully "cd" to a read-write dir first, then to the
read-only one, and they'd get read-write privileges where they were not
supposed to!
Comments?
--
Paul Krizak 5900 E. Ben White Blvd. MS 625
Advanced Micro Devices Austin, TX 78741
Linux/Unix Systems Engineering Phone: (512) 602-8775
Silicon Design Division Cell: (512) 791-0686
4150 15:45:42.766727 execve("/bin/mount", ["mount", "-o",
"rsize=1024,wsize=1024", "eng:/vol/vol18/sysadmin_tmp", "local"], [/* 31 vars
*/]) = 0 <0.000189>
4150 15:45:42.767144 brk(0) = 0x197e0000 <0.000006>
4150 15:45:42.767203 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaaab000 <0.000008>
4150 15:45:42.767264 uname({sys="Linux", node="adcgar05", ...}) = 0 <0.000007>
4150 15:45:42.767347 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such
file or directory) <0.000008>
4150 15:45:42.767414 open("/etc/ld.so.cache", O_RDONLY) = 3 <0.000010>
4150 15:45:42.767455 fstat(3, {st_mode=S_IFREG|0644, st_size=268855, ...}) = 0
<0.000006>
4150 15:45:42.767513 mmap(NULL, 268855, PROT_READ, MAP_PRIVATE, 3, 0) =
0x2aaaaaaac000 <0.000007>
4150 15:45:42.767549 close(3) = 0 <0.000006>
4150 15:45:42.767598 open("/lib64/libblkid.so.1", O_RDONLY) = 3 <0.000013>
4150 15:45:42.767642 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>[EMAIL
PROTECTED]@[EMAIL PROTECTED] \0\0\0\0\0\1\0\0\0\6\0\0\0 \200\0\0\0\0\0\0
\200\200\3070\0\0\0
\200\200\3070\0\0\0\200\20\0\0\0\0\0\0\200\21\0\0\0\0\0\0\0\0
\0\0\0\0\0\2\0\0\0\6\0\0\0h\200\0\0\0\0\0\0h\200\200\3070\0\0\0h\200\200\3070\0\0\0\260\1\0\0\0\0\0\0\260\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\334t\0\0\0\0\0\0\334t`\3070\0\0\0\334t`\3070\0\0\0D\2\0\0\0\0\0\0D\2\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0%\0\0\0A\0\0\0\4\0\0\0\10\0\0\0\2\22\202\210\200\24\1\20\374\2\4\204.$\"[EMAIL
PROTECTED](\376\250\314A\204\331\37\f\"\313\247\f\310\360\311\250hz_e\226\305\352\323\357\16\36\227\2\355\331\21\340wI-\351Gp\342[\330\227X\372|\3037\tDb\352{\31\302\232l5\241\nx\331}\341\200\314\21I\223\221E\6\377]\312\365\301\256\177GH\330\247\257\275\212<p\223Z\33|\20\17*l\275\212\330qX\34\327\340\372\266\273\343\222|\272qt\264\232\306`Km\3659\307CE\325\354\210,\330\365\345C\241\v\255G\246\277\340?\340\321\211\357\313\240Z\4xj&\1^\36\271\215\361\16R\37\346\20IB!\177\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\10\0\310/`\3070\0\0\0\0\0\0\0\0\0\0\0}\0\0\0\22\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0\224\2\0\0\22\0\0\0\0\0\0\0\0\0\0\0l\0\0\0\0\0\0\0007\3\0\0\22\0\0\0\0\0\0\0\0\0\0\0%\0\0\0\0\0\0\0",
832) = 832 <0.000010>
4150 15:45:42.767884 fstat(3, {st_mode=S_IFREG|0755, st_size=41376, ...}) = 0
<0.000006>
4150 15:45:42.767935 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaaee000 <0.000007>
4150 15:45:42.767980 mmap(0x30c7600000, 2134432, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x30c7600000 <0.000007>
4150 15:45:42.768017 mprotect(0x30c7609000, 2093056, PROT_NONE) = 0 <0.000010>
4150 15:45:42.768057 mmap(0x30c7808000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x30c7808000 <0.000009>
4150 15:45:42.768106 close(3) = 0 <0.000006>
4150 15:45:42.768156 open("/lib64/libuuid.so.1", O_RDONLY) = 3 <0.000012>
4150 15:45:42.768199 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>[EMAIL
PROTECTED]@[EMAIL PROTECTED] \0\0\0\0\0\1\0\0\0\6\0\0\0\0 \0\0\0\0\0\0\0
\0\3070\0\0\0\0 \0\3070\0\0\0\334\2\0\0\0\0\0\0 \3\0\0\0\0\0\0\0\0
\0\0\0\0\0\2\0\0\0\6\0\0\0@ \0\0\0\0\0\0@ \0\3070\0\0\0@
\0\3070\0\0\0\220\1\0\0\0\0\0\0\220\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\210\33\0\0\0\0\0\0\210\33\340\3060\0\0\0\210\33\340\3060\0\0\0\244\0\0\0\0\0\0\0\244\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0\21\0\0\0\32\0\0\0\2\0\0\0\7\0\0\0\324\10\313\f\4\n\0\vM\f\20\'\212\4Q\2\32\0\0\0\33\0\0\0\35\0\0\0\36\0\0\0\37\0\0\0
\0\0\0\"\0\0\0#\0\0\0&\0\0\0\0\0\0\0\'\0\0\0(\0\0\0)\0\0\0*\0\0\0+\0\0\0,\0\0\0-\0\0\0\207k\345[\352\323\357\16\21\210t&\271\215\361\16\331qX\34\273\343\222|p\201\201\346\33q\357\253]\n\362\253`\0\246\207\242e\370(CE\325\354\205KI\210\353\305\361\253\271\t\262\267\365\334tp\227\325\335)[EMAIL
PROTECTED],,[EMAIL PROTECTED] \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0+\0\0\0
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0~\0\0\0\22\0\0\0\0\0\0\0\0\0\0\0.\0\0\0\0\0\0\0\264\0\0\0\22\0\0\0\0\0\0\0\0\0\0\0\200\0\0\0\0\0\0\0\244\0\0\0\22\0\0\0\0\0\0\0\0\0\0\0l\0\0\0\0\0\0\0\226\0\0\0\22\0\0\0\0\0\0\0\0\0\0\0003\0\0\0\0\0\0\0X\1\0\0\22\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0C\1\0\0\22\0\0\0\0\0\0\0\0\0\0\0",
832) = 832 <0.000010>
4150 15:45:42.768469 fstat(3, {st_mode=S_IFREG|0755, st_size=13096, ...}) = 0
<0.000006>
4150 15:45:42.768520 mmap(0x30c6e00000, 2106144, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x30c6e00000 <0.000007>
4150 15:45:42.768557 mprotect(0x30c6e02000, 2097152, PROT_NONE) = 0 <0.000009>
4150 15:45:42.768594 mmap(0x30c7002000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x30c7002000 <0.000009>
4150 15:45:42.768639 close(3) = 0 <0.000006>
4150 15:45:42.768679 open("/lib64/libselinux.so.1", O_RDONLY) = 3 <0.000008>
4150 15:45:42.768719 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@\3210\0\0\0\234M\1\0\0\0\0\0\234M\1\0\0\0\0\0\0\0
\0\0\0\0\0\1\0\0\0\6\0\0\0\220]\1\0\0\0\0\0\220]a\3210\0\0\0\220]a\3210\0\0\0\340\5\0\0\0\0\0\0
\30\0\0\0\0\0\0\0\0
\0\0\0\0\0\2\0\0\0\6\0\0\0\340]\1\0\0\0\0\0\340]a\3210\0\0\0\340]a\3210\0\0\0\300\1\0\0\0\0\0\0\300\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\7\0\0\0\4\0\0\0\220]\1\0\0\0\0\0\220]a\3210\0\0\0\220]a\3210\0\0\0\0\0\0\0\0\0\0\0([EMAIL
PROTECTED](\201\t\f\r\4\201%H\305\2723\216\240\24\231o [EMAIL
PROTECTED]@\325\210\30\0\1\20\300\20\31<\241\7E\3\10\25\5d [EMAIL PROTECTED]
@[EMAIL
PROTECTED]@\10\1\10\4\21\0\201\352\245\231\2\t8\2\217\20\300\2c\0\4\22xi\0\0\0\0\0\0\0j\0\0\0l\0\0\0\0\0\0\0n\0\0\0o\0\0\0p\0\0\0\0\0\0\0q\0\0\0\0\0\0\0\0\0\0\0r\0\0\0\0\0\0\0s\0\0\0t\0\0\0u\0\0\0v\0\0\0w\0\0\0z\0\0\0~\0\0\0\0\0\0\0\201\0\0\0\202\0\0\0\203\0\0\0\0\0\0\0\204\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\206\0\0\0\210\0\0\0\0\0\0\0\211\0\0\0\0\0\0\0\0\0\0\0\213\0\0\0\214\0\0\0\0\0\0\0\215\0\0\0\216\0\0\0\0\0\0\0\221\0\0\0\0\0\0\0\222\0\0\0\223\0\0\0\224\0\0\0\225\0\0\0\226\0\0\0\231\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\235\0\0\0\0\0\0\0\236\0\0\0\237\0\0\0\0\0\0\0",
832) = 832 <0.000012>
4150 15:45:42.768976 fstat(3, {st_mode=S_IFREG|0755, st_size=95480, ...}) = 0
<0.000005>
4150 15:45:42.769028 mmap(0x30d1400000, 2192816, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x30d1400000 <0.000007>
4150 15:45:42.769065 mprotect(0x30d1415000, 2097152, PROT_NONE) = 0 <0.000009>
4150 15:45:42.769102 mmap(0x30d1615000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15000) = 0x30d1615000 <0.000010>
4150 15:45:42.769152 mmap(0x30d1617000, 1456, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x30d1617000 <0.000008>
4150 15:45:42.769205 close(3) = 0 <0.000006>
4150 15:45:42.769245 open("/lib64/libc.so.6", O_RDONLY) = 3 <0.000010>
4150 15:45:42.769285 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@\0\240\3070\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\300\257\21\0\0\0\0\0\300\257\261\3070\0\0\0\300\257\261\3070\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\240\3070\0\0\0\0\0\240\3070\0\0\0\220:\24\0\0\0\0\0\220:\24\0\0\0\0\0\0\0
\0\0\0\0\0\1\0\0\0\6\0\0\0\220G\24\0\0\0\0\0\220G\324\3070\0\0\0\220G\324\3070\0\0\0\350E\0\0\0\0\0\0\10\211\0\0\0\0\0\0\0\0
\0\0\0\0\0\2\0\0\0\6\0\0\0`{\24\0\0\0\0\0`{\324\3070\0\0\0`{\324\3070\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0p\2\0\0\0\0\0\0p\2\240\3070\0\0\0p\2\240\3070\0\0\0
\0\0\0\0\0\0\0 [EMAIL PROTECTED]"[EMAIL PROTECTED],
\16\"H&\204\300\214\4\10\0\2\2\16\241\254\32\4f\300\0\3002\0\300\0P\1
\201\10\204\v ($\0\4 P\0\20X\200\312DB(\0\6\200\20\30B\0 @[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]"\0 \32\20\2\31\4F&\0\1\240\252",
832) = 832 <0.000007>
4150 15:45:42.769540 fstat(3, {st_mode=S_IFREG|0755, st_size=1678480, ...}) =
0 <0.000006>
4150 15:45:42.769590 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaaef000 <0.000007>
4150 15:45:42.769631 mmap(0x30c7a00000, 3461272, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x30c7a00000 <0.000008>
4150 15:45:42.769668 mprotect(0x30c7b44000, 2097152, PROT_NONE) = 0 <0.000009>
4150 15:45:42.769706 mmap(0x30c7d44000, 20480, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x144000) = 0x30c7d44000 <0.000009>
4150 15:45:42.769754 mmap(0x30c7d49000, 16536, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x30c7d49000 <0.000009>
4150 15:45:42.769794 close(3) = 0 <0.000005>
4150 15:45:42.769842 open("/lib64/libdevmapper.so.1.02", O_RDONLY) = 3
<0.000008>
4150 15:45:42.769882 read(3,
"\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3005 [EMAIL PROTECTED]@[EMAIL
PROTECTED] \3070\0\0\0\0\0
\3070\0\0\0\324\344\0\0\0\0\0\0\324\344\0\0\0\0\0\0\0\0 [EMAIL
PROTECTED]@\3070\0\0\0000\30\0\0\0\0\0\0\220\30\0\0\0\0\0\0\0\0 [EMAIL
PROTECTED]@\3070\0\0\0\320\1\0\0\0\0\0\0\320\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\244\316\0\0\0\0\0\0\244\316
\3070\0\0\0\244\316
\3070\0\0\0\304\4\0\0\0\0\0\0\304\4\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0a\0\0\0007\0\0\0\20\0\0\0\n\0\0\0\10\340\201(\0
[EMAIL PROTECTED]@[EMAIL PROTECTED])\302\222\4\202\0\2\214\310\n\"\16E
\24\10\3047\0\0\0008\0\0\0009\0\0\0\0\0\0\0\0\0\0\0;\0\0\0=\0\0\0>[EMAIL
PROTECTED]|\0\0\0~\0\0\0\202\0\0\0\205\0\0\0\206\0\0\0\210\0\0\0\0\0\0\0\211\0\0\0\213\0\0\0\217\0\0\0\221\0\0\0\222\0\0\0\0\0\0\0\223\0\0\0\224\0\0\0\226\0\0\0\230\0\0\0\231\0\0\0\0\0\0\0",
832) = 832 <0.000009>
4150 15:45:42.770154 fstat(3, {st_mode=S_IFREG|0555, st_size=69200, ...}) = 0
<0.000005>
4150 15:45:42.770205 mmap(0x30c7200000, 2162024, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x30c7200000 <0.000008>
4150 15:45:42.770242 mprotect(0x30c720f000, 2093056, PROT_NONE) = 0 <0.000008>
4150 15:45:42.770278 mmap(0x30c740e000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x30c740e000 <0.000008>
4150 15:45:42.770323 close(3) = 0 <0.000006>
4150 15:45:42.770367 open("/lib64/libdl.so.2", O_RDONLY) = 3 <0.000012>
4150 15:45:42.770410 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0
\16 [EMAIL PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED] [EMAIL PROTECTED]
\3100\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\240\32\0\0\0\0\0\0\240\32
\3100\0\0\0\240\32
\3100\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0
\3100\0\0\0\0\0 \3100\0\0\0t\37\0\0\0\0\0\0t\37\0\0\0\0\0\0\0\0 [EMAIL
PROTECTED]@\3100\0\0\0(\3\0\0\0\0\0\0\300\3\0\0\0\0\0\0\0\0 [EMAIL
PROTECTED]@\3100\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0008\2\0\0\0\0\0\0008\2
\3100\0\0\0008\2 \3100\0\0\0 \0\0\0\0\0\0\0
\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\274\32\0\0\0\0\0\0\274\32
\3100\0\0\0\274\32 [EMAIL PROTECTED]@[EMAIL
PROTECTED](\10\236\32\0\0\0\0\0\0\0\33\0\0\0\0\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\35\0\0\0\0\0\0\0\36\0\0\0\0\0\0\0\37\0\0\0\0\0\0\0
\0\0\0\"\0\0\0#\0\0\0%\0\0\0&\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\'\0\0\0\0\0\0\0\0\0\0\0\353\26\251\30a\257\0\371\301S\200\30\273\25sB\257\304M\17\221!\374\370\3723\373\17\7\2\4\371\371\31sB\372\31sB\225\263_\31\177\236\320\30a\242\222\6\5\350\7\371\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\n\0",
832) = 832 <0.000010>
4150 15:45:42.770667 fstat(3, {st_mode=S_IFREG|0755, st_size=23520, ...}) = 0
<0.000006>
4150 15:45:42.770717 mmap(0x30c8200000, 2109728, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x30c8200000 <0.000009>
4150 15:45:42.770756 mprotect(0x30c8202000, 2097152, PROT_NONE) = 0 <0.000009>
4150 15:45:42.770794 mmap(0x30c8402000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x30c8402000 <0.000008>
4150 15:45:42.770840 close(3) = 0 <0.000006>
4150 15:45:42.770879 open("/lib64/libsepol.so.1", O_RDONLY) = 3 <0.000008>
4150 15:45:42.770919 read(3,
"\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340<[EMAIL PROTECTED]@[EMAIL
PROTECTED] [EMAIL PROTECTED] \0\0\0\0\0\2\0\0\0\6\0\0\0 \262\3\0\0\0\0\0
\262\243\3210\0\0\0
\262\243\3210\0\0\0\220\1\0\0\0\0\0\0\220\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0pP\3\0\0\0\0\0pP\203\3210\0\0\0pP\203\3210\0\0\0\224\20\0\0\0\0\0\0\224\20\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0\203\0\0\0/\0\0\0\20\0\0\0\n\0\0\0\330\3
Q#\226 `\0\1\v2\2([EMAIL PROTECTED]@\202b
\0`\24\1`!H\222\25I\210\310q-\206\24\200Z`\304\0\212\20\t\4\201\340\206\2\367!
\n\30\5\225\0 \341\343t)[EMAIL
PROTECTED]/\0\0\0000\0\0\0001\0\0\0\0\0\0\0003\0\0\0006\0\0\0\0\0\0\0009\0\0\0<\0\0\0=\0\0\0\0\0\0\0\0\0\0\0A\0\0\0E\0\0\0\0\0\0\0G\0\0\0H\0\0\0I\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0J\0\0\0K\0\0\0\0\0\0\0M\0\0\0O\0\0\0P\0\0\0\0\0\0\0Q\0\0\0T\0\0\0\0\0\0\0W\0\0\0X\0\0\0\0\0\0\0Z\0\0\0]\0\0\0^\0\0\0_\0\0\0a\0\0\0\0\0\0\0b\0\0\0e\0\0\0h\0\0\0i\0\0\0j\0\0\0k\0\0\0l\0\0\0n\0\0\0o\0\0\0p\0\0\0q\0\0\0s\0\0\0t\0\0\0u\0\0\0v\0\0\0x\0\0\0z\0\0\0|\0\0\0}\0\0\0\177\0\0\0\201\0\0\0\0\0\0\0\0\0\0\0\202\0\0\0\203\0\0\0\205\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\207\0\0\0\210\0\0\0\211\0\0\0\0\0\0\0\213\0\0\0\214\0\0\0\0\0\0\0\215\0\0\0\217\0\0\0\0\0\0\0\222\0\0\0\223\0\0\0\226\0\0\0\227\0\0\0\232\0\0\0\0\0\0\0\0\0\0\0",
832) = 832 <0.000010>
4150 15:45:42.771171 fstat(3, {st_mode=S_IFREG|0755, st_size=247528, ...}) = 0
<0.000006>
4150 15:45:42.771221 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaaf0000 <0.000007>
4150 15:45:42.771262 mmap(0x30d1800000, 2383168, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x30d1800000 <0.000008>
4150 15:45:42.771299 mprotect(0x30d183b000, 2097152, PROT_NONE) = 0 <0.000008>
4150 15:45:42.771336 mmap(0x30d1a3b000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3b000) = 0x30d1a3b000 <0.000009>
4150 15:45:42.771384 mmap(0x30d1a3c000, 40256, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x30d1a3c000 <0.000008>
4150 15:45:42.771421 close(3) = 0 <0.000006>
4150 15:45:42.771485 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaaf1000 <0.000006>
4150 15:45:42.771527 arch_prctl(ARCH_SET_FS, 0x2aaaaaaf14b0) = 0 <0.000007>
4150 15:45:42.771586 mprotect(0x30c7d44000, 16384, PROT_READ) = 0 <0.000008>
4150 15:45:42.771623 mprotect(0x30c8402000, 4096, PROT_READ) = 0 <0.000008>
4150 15:45:42.771659 mprotect(0x30c6c19000, 4096, PROT_READ) = 0 <0.000008>
4150 15:45:42.771697 munmap(0x2aaaaaaac000, 268855) = 0 <0.000015>
4150 15:45:42.771766 access("/etc/selinux/", F_OK) = 0 <0.000008>
4150 15:45:42.771891 brk(0) = 0x197e0000 <0.000005>
4150 15:45:42.771924 brk(0x19801000) = 0x19801000 <0.000006>
4150 15:45:42.771971 open("/etc/selinux/config", O_RDONLY) = 3 <0.000009>
4150 15:45:42.772019 fstat(3, {st_mode=S_IFREG|0644, st_size=447, ...}) = 0
<0.000005>
4150 15:45:42.772070 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaaac000 <0.000007>
4150 15:45:42.772106 read(3, "# This file controls the state of SELinux on the
system.\n# SELINUX= can take one of these three values:\n#\tenforcing - SELinux
security policy is enforced.\n#\tpermissive - SELinux prints warnings instead
of enforcing.\n#\tdisabled - SELinux is fully disabled.\nSELINUX=disabled\n#
SELINUXTYPE= type of policy in use. Possible values are:\n#\ttargeted - Only
targeted network daemons are protected.\n#\tstrict - Full SELinux
protection.\nSELINUXTYPE=targeted\n", 4096) = 447 <0.000014>
4150 15:45:42.772202 read(3, "", 4096) = 0 <0.000006>
4150 15:45:42.772238 close(3) = 0 <0.000006>
4150 15:45:42.772271 munmap(0x2aaaaaaac000, 4096) = 0 <0.000010>
4150 15:45:42.772335 open("/proc/mounts", O_RDONLY) = 3 <0.000035>
4150 15:45:42.772408 fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
<0.000006>
4150 15:45:42.772458 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaaac000 <0.000006>
4150 15:45:42.772493 read(3, "rootfs / rootfs rw 0 0\n/dev/root / ext3
rw,data=ordered 0 0\n/dev /dev tmpfs rw 0 0\n/proc /proc proc rw 0 0\n/sys /sys
sysfs rw 0 0\n/proc/bus/usb /proc/bus/usb usbfs rw 0 0\ndevpts /dev/pts devpts
rw 0 0\n/dev/sda1 /boot ext3 rw,data=ordered 0 0\ntmpfs /dev/shm tmpfs rw 0
0\n/dev/sda5 /tmp ext3 rw,data=ordered 0 0\nnone /proc/sys/fs/binfmt_misc
binfmt_misc rw 0 0\nsunrpc /var/lib/nfs/rpc_pipefs rpc_pipefs rw 0
0\n/etc/auto.misc /misc autofs
rw,fd=5,pgrp=2435,timeout=1800,minproto=5,maxproto=5,indirect 0 0\n-hosts /net
autofs rw,fd=10,pgrp=2435,timeout=1800,minproto=5,maxproto=5,indirect 0
0\nauto.proj /project autofs
rw,fd=15,pgrp=2435,timeout=1800,minproto=5,maxproto=5,indirect 0 0\nauto.home
/user autofs rw,fd=20,pgrp=2435,timeout=1800,minproto=5,maxproto=5,indirect 0
0\nauto.tool /tool autofs
rw,fd=25,pgrp=2435,timeout=1800,minproto=5,maxproto=5,indirect 0 0\nauto.proj
/proj autofs rw,fd=30,pgrp=2435,timeout=1800,minproto=5,maxproto=5,indirect 0
0\nauto.home /home autofs
rw,fd=35,pgrp=2435,timeout=1800,minproto=5,maxprot"..., 4096) = 4033 <0.000137>
4150 15:45:42.772784 read(3, "siam:/vol/vol4/cad /u/cad nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=siam
0 0\npain:/vol/vol7/k7archive2/k7_a /u/k7_a nfs
rw,vers=3,rsize=65536,wsize=65536,hard,intr,proto=tcp,timeo=600,retrans=2,sec=sys,addr=pain
0 0\n", 4096) = 265 <0.000014>
4150 15:45:42.772855 read(3, "", 4096) = 0 <0.000007>
4150 15:45:42.772889 close(3) = 0 <0.000008>
4150 15:45:42.772923 munmap(0x2aaaaaaac000, 4096) = 0 <0.000009>
4150 15:45:42.773017 umask(022) = 022 <0.000005>
4150 15:45:42.773054 open("/dev/null", O_RDWR) = 3 <0.000012>
4150 15:45:42.773096 close(3) = 0 <0.000007>
4150 15:45:42.773131 getuid() = 0 <0.000005>
4150 15:45:42.773162 geteuid() = 0 <0.000005>
4150 15:45:42.773194 getgid() = 0 <0.000005>
4150 15:45:42.773224 getegid() = 0 <0.000005>
4150 15:45:42.773257 prctl(0x3, 0, 0, 0, 0) = 1 <0.000006>
4150 15:45:42.773295 open("/etc/blkid/blkid.tab", O_RDONLY) = 3 <0.000009>
4150 15:45:42.773334 fstat(3, {st_mode=S_IFREG|0644, st_size=523, ...}) = 0
<0.000006>
4150 15:45:42.773383 fcntl(3, F_GETFL) = 0x8000 (flags O_RDONLY|O_LARGEFILE)
<0.000005>
4150 15:45:42.773420 fstat(3, {st_mode=S_IFREG|0644, st_size=523, ...}) = 0
<0.000005>
4150 15:45:42.773469 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaaac000 <0.000006>
4150 15:45:42.773505 lseek(3, 0, SEEK_CUR) = 0 <0.000005>
4150 15:45:42.773540 read(3, "<device DEVNO=\"0x0805\" TIME=\"1178223899\"
LABEL=\"/tmp\" UUID=\"d59775fb-cf17-46dd-b945-842a26902811\" SEC_TYPE=\"ext2\"
TYPE=\"ext3\">/dev/sda5</device>\n<device DEVNO=\"0x0803\" TIME=\"1178223891\"
TYPE=\"swap\" LABEL=\"SWAP-sda3\">/dev/sda3</device>\n<device DEVNO=\"0x0802\"
TIME=\"1178223891\" LABEL=\"/\" UUID=\"8b4892f4-f055-4270-a3d9-0def14631ccb\"
SEC_TYPE=\"ext2\" TYPE=\"ext3\">/dev/sda2</device>\n<device DEVNO=\"0x0801\"
TIME=\"1178223899\" LABEL=\"/boot\"
UUID=\"435d977b-d79d-4273-9426-262a8ee98e24\" SEC_TYPE=\"ext2\"
TYPE=\"ext3\">/dev/sda1</device>\n", 4096) = 523 <0.000014>
4150 15:45:42.773661 read(3, "", 4096) = 0 <0.000006>
4150 15:45:42.773695 close(3) = 0 <0.000006>
4150 15:45:42.773728 munmap(0x2aaaaaaac000, 4096) = 0 <0.000008>
4150 15:45:42.773779 getuid() = 0 <0.000005>
4150 15:45:42.773811 geteuid() = 0 <0.000005>
4150 15:45:42.773845 lstat("/etc/mtab", {st_mode=S_IFREG|0644, st_size=2097,
...}) = 0 <0.000008>
4150 15:45:42.773899 stat("eng:/vol/vol18/sysadmin_tmp", 0x7fff5cda1300) = -1
ENOENT (No such file or directory) <0.000008>
4150 15:45:42.773949 stat("/sbin/mount.nfs", {st_mode=S_IFREG|S_ISUID|0755,
st_size=58888, ...}) = 0 <0.000009>
4150 15:45:42.774008 clone(child_stack=0,
flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD,
child_tidptr=0x2aaaaaaf1540) = 4151 <0.000125>
4150 15:45:42.774200 wait4(-1, <unfinished ...>
4151 15:45:42.774245 getuid() = 0 <0.000006>
4151 15:45:42.774280 setuid(0) = 0 <0.000007>
4151 15:45:42.774328 getgid() = 0 <0.000005>
4151 15:45:42.774360 setgid(0) = 0 <0.000006>
4151 15:45:42.774414 execve("/sbin/mount.nfs", ["/sbin/mount.nfs",
"eng:/vol/vol18/sysadmin_tmp", "local", "-o", "rw,rsize=1024,wsize=1024"], [/*
27 vars */]) = 0 <0.000190>
4151 15:45:42.774729 brk(0) = 0x5555583cf000 <0.000006>
4151 15:45:42.774790 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaac5000 <0.000007>
4151 15:45:42.774840 uname({sys="Linux", node="adcgar05", ...}) = 0 <0.000007>
4151 15:45:42.774922 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such
file or directory) <0.000008>
4151 15:45:42.774979 open("/etc/ld.so.cache", O_RDONLY) = 3 <0.000009>
4151 15:45:42.775020 fstat(3, {st_mode=S_IFREG|0644, st_size=268855, ...}) = 0
<0.000006>
4151 15:45:42.775074 mmap(NULL, 268855, PROT_READ, MAP_PRIVATE, 3, 0) =
0x2aaaaaac6000 <0.000008>
4151 15:45:42.775110 close(3) = 0 <0.000006>
4151 15:45:42.775160 open("/lib64/libc.so.6", O_RDONLY) = 3 <0.000010>
4151 15:45:42.775202 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL
PROTECTED]@\0\240\3070\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\300\257\21\0\0\0\0\0\300\257\261\3070\0\0\0\300\257\261\3070\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\240\3070\0\0\0\0\0\240\3070\0\0\0\220:\24\0\0\0\0\0\220:\24\0\0\0\0\0\0\0
\0\0\0\0\0\1\0\0\0\6\0\0\0\220G\24\0\0\0\0\0\220G\324\3070\0\0\0\220G\324\3070\0\0\0\350E\0\0\0\0\0\0\10\211\0\0\0\0\0\0\0\0
\0\0\0\0\0\2\0\0\0\6\0\0\0`{\24\0\0\0\0\0`{\324\3070\0\0\0`{\324\3070\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0p\2\0\0\0\0\0\0p\2\240\3070\0\0\0p\2\240\3070\0\0\0
\0\0\0\0\0\0\0 [EMAIL PROTECTED]"[EMAIL PROTECTED],
\16\"H&\204\300\214\4\10\0\2\2\16\241\254\32\4f\300\0\3002\0\300\0P\1
\201\10\204\v ($\0\4 P\0\20X\200\312DB(\0\6\200\20\30B\0 @[EMAIL
PROTECTED]@[EMAIL PROTECTED]@[EMAIL PROTECTED]"\0 \32\20\2\31\4F&\0\1\240\252",
832) = 832 <0.000008>
4151 15:45:42.775457 fstat(3, {st_mode=S_IFREG|0755, st_size=1678480, ...}) =
0 <0.000006>
4151 15:45:42.775508 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaab08000 <0.000007>
4151 15:45:42.775553 mmap(NULL, 3461272, PROT_READ|PROT_EXEC,
MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x2aaaaacc6000 <0.000007>
4151 15:45:42.775591 mprotect(0x2aaaaae0a000, 2097152, PROT_NONE) = 0
<0.000009>
4151 15:45:42.775630 mmap(0x2aaaab00a000, 20480, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x144000) = 0x2aaaab00a000 <0.000010>
4151 15:45:42.775680 mmap(0x2aaaab00f000, 16536, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2aaaab00f000 <0.000009>
4151 15:45:42.775728 close(3) = 0 <0.000006>
4151 15:45:42.775774 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaab014000 <0.000006>
4151 15:45:42.775815 arch_prctl(ARCH_SET_FS, 0x2aaaab0146f0) = 0 <0.000006>
4151 15:45:42.775941 mprotect(0x2aaaab00a000, 16384, PROT_READ) = 0 <0.000008>
4151 15:45:42.775995 mprotect(0x2aaaaacc4000, 4096, PROT_READ) = 0 <0.000008>
4151 15:45:42.776032 munmap(0x2aaaaaac6000, 268855) = 0 <0.000013>
4151 15:45:42.776120 getuid() = 0 <0.000006>
4151 15:45:42.776217 brk(0) = 0x5555583cf000 <0.000006>
4151 15:45:42.776252 brk(0x5555583f0000) = 0x5555583f0000 <0.000007>
4151 15:45:42.776304 getcwd("/mnt", 4096) = 5 <0.000008>
4151 15:45:42.776346 lstat("/mnt/local", {st_mode=S_IFDIR|0755, st_size=4096,
...}) = 0 <0.000009>
4151 15:45:42.776413 uname({sys="Linux", node="adcgar05", ...}) = 0 <0.000006>
4151 15:45:42.776506 getpid() = 4151 <0.000006>
4151 15:45:42.776549 open("/etc/resolv.conf", O_RDONLY) = 3 <0.000009>
4151 15:45:42.776597 fstat(3, {st_mode=S_IFREG|0644, st_size=206, ...}) = 0
<0.000006>
4151 15:45:42.776652 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaac6000 <0.000006>
4151 15:45:42.776689 read(3, "# resolv.conf file auto-generated by cfengine
from /etc/nameservers.db on 2007-04-26 01:14:28 PM\noptions rotate\nsearch
amd.com\nnameserver 163.181.73.251\nnameserver 163.181.34.251\nnameserver
163.181.224.251\n", 4096) = 206 <0.000015>
4151 15:45:42.776766 read(3, "", 4096) = 0 <0.000006>
4151 15:45:42.776802 close(3) = 0 <0.000007>
4151 15:45:42.776836 munmap(0x2aaaaaac6000, 4096) = 0 <0.000009>
4151 15:45:42.776887 socket(PF_FILE, SOCK_STREAM, 0) = 3 <0.000020>
4151 15:45:42.776941 fcntl(3, F_GETFL) = 0x2 (flags O_RDWR) <0.000006>
4151 15:45:42.776981 fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0 <0.000007>
4151 15:45:42.777016 connect(3, {sa_family=AF_FILE,
path="/var/run/nscd/socket"}, 110) = 0 <0.000023>
4151 15:45:42.777084 poll([{fd=3, events=POLLOUT|POLLERR|POLLHUP,
revents=POLLOUT}], 1, 5000) = 1 <0.000008>
4151 15:45:42.777128 sendto(3, "\2\0\0\0\r\0\0\0\6\0\0\0hosts\0\0\0", 20,
MSG_NOSIGNAL, NULL, 0) = 20 <0.000013>
4151 15:45:42.777177 poll([{fd=3, events=POLLIN|POLLERR|POLLHUP,
revents=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 <0.000006>
4151 15:45:42.777217 recvmsg(3, 0x7fff97741cd0, 0) = -1 ECONNRESET (Connection
reset by peer) <0.000008>
4151 15:45:42.777255 close(3) = 0 <0.000013>
4151 15:45:42.777297 socket(PF_FILE, SOCK_STREAM, 0) = 3 <0.000010>
4151 15:45:42.777335 fcntl(3, F_GETFL) = 0x2 (flags O_RDWR) <0.000006>
4151 15:45:42.777369 fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0 <0.000006>
4151 15:45:42.777404 connect(3, {sa_family=AF_FILE,
path="/var/run/nscd/socket"}, 110) = 0 <0.000013>
4151 15:45:42.777458 poll([{fd=3, events=POLLOUT|POLLERR|POLLHUP,
revents=POLLOUT}], 1, 5000) = 1 <0.000007>
4151 15:45:42.777496 writev(3, [{"\2\0\0\0\4\0\0\0\4\0\0\0", 12}, {"eng\0",
4}], 2) = 16 <0.000012>
4151 15:45:42.777547 poll([{fd=3, events=POLLIN|POLLERR|POLLHUP,
revents=POLLIN|POLLHUP}], 1, 5000) = 1 <0.000007>
4151 15:45:42.777585 read(3,
"\2\0\0\0\1\0\0\0\f\0\0\0\0\0\0\0\2\0\0\0\4\0\0\0\1\0\0\0\0\0\0\0", 32) = 32
<0.000008>
4151 15:45:42.777633 readv(3, [{"eng.amd.com\0", 12}, {"\243\265\"\211", 4}],
2) = 16 <0.000008>
4151 15:45:42.777679 close(3) = 0 <0.000009>
4151 15:45:42.777750 time(NULL) = 1178225142 <0.000008>
4151 15:45:42.777791 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 <0.000014>
4151 15:45:42.777835 bind(3, {sa_family=AF_INET, sin_port=htons(0),
sin_addr=inet_addr("0.0.0.0")}, 16) = 0 <0.000010>
4151 15:45:42.777885 connect(3, {sa_family=AF_INET, sin_port=htons(111),
sin_addr=inet_addr("163.181.34.137")}, 16) = 0 <0.000196>
4151 15:45:42.778135 gettimeofday({1178225142, 778155}, NULL) = 0 <0.000007>
4151 15:45:42.778199 write(3,
"\200\0\0008n\325\373:\0\0\0\0\0\0\0\2\0\1\206\240\0\0\0\2\0\0\0\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\206\243\0\0\0\3\0\0\0\6\0\0\0\0",
60) = 60 <0.000016>
4151 15:45:42.778267 poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 20000) =
1 <0.002668>
4151 15:45:42.780971 read(3,
"\200\0\0\34n\325\373:\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\1", 500)
= 32 <0.000010>
4151 15:45:42.781025 close(3) = 0 <0.000014>
4151 15:45:42.781075 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 <0.000013>
4151 15:45:42.781118 bind(3, {sa_family=AF_INET, sin_port=htons(0),
sin_addr=inet_addr("0.0.0.0")}, 16) = 0 <0.000010>
4151 15:45:42.781179 connect(3, {sa_family=AF_INET, sin_port=htons(2049),
sin_addr=inet_addr("163.181.34.137")}, 16) = 0 <0.000230>
4151 15:45:42.781465 write(3,
"\200\0\0(\37\207\360\323\0\0\0\0\0\0\0\2\0\1\206\243\0\0\0\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
44) = 44 <0.000010>
4151 15:45:42.781520 poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 20000) =
1 <0.000159>
4151 15:45:42.781711 read(3,
"\200\0\0\34\37\207\360\323\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
400) = 32 <0.000007>
4151 15:45:42.781764 close(3) = 0 <0.000010>
4151 15:45:42.781805 socket(PF_INET, SOCK_DGRAM, IPPROTO_UDP) = 3 <0.000012>
4151 15:45:42.781850 bind(3, {sa_family=AF_INET, sin_port=htons(0),
sin_addr=inet_addr("0.0.0.0")}, 16) = 0 <0.000008>
4151 15:45:42.781902 sendto(3,
"\35\276)\353\0\0\0\0\0\0\0\2\0\1\206\240\0\0\0\2\0\0\0\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\206\245\0\0\0\3\0\0\0\21\0\0\0\0",
56, 0, {sa_family=AF_INET, sin_port=htons(111),
sin_addr=inet_addr("163.181.34.137")}, 16) = 56 <0.000013>
4151 15:45:42.781986 poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 20000) =
1 <0.006939>
4151 15:45:42.788958 recvfrom(3,
"\35\276)\353\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\17\316", 8800, 0,
{sa_family=AF_INET, sin_port=htons(111), sin_addr=inet_addr("163.181.34.137")},
[16]) = 28 <0.000008>
4151 15:45:42.789023 close(3) = 0 <0.000008>
4151 15:45:42.789060 socket(PF_INET, SOCK_DGRAM, IPPROTO_UDP) = 3 <0.000008>
4151 15:45:42.789096 bind(3, {sa_family=AF_INET, sin_port=htons(0),
sin_addr=inet_addr("0.0.0.0")}, 16) = 0 <0.000006>
4151 15:45:42.789138 sendto(3,
"\1\365\'\'\0\0\0\0\0\0\0\2\0\1\206\245\0\0\0\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0",
40, 0, {sa_family=AF_INET, sin_port=htons(4046),
sin_addr=inet_addr("163.181.34.137")}, 16) = 40 <0.000009>
4151 15:45:42.789192 poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 3000) =
1 <0.004728>
4151 15:45:42.793953 recvfrom(3,
"\1\365\'\'\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 400, 0,
{sa_family=AF_INET, sin_port=htons(4046),
sin_addr=inet_addr("163.181.34.137")}, [16]) = 24 <0.000007>
4151 15:45:42.794015 close(3) = 0 <0.000008>
4151 15:45:42.794052 socket(PF_INET, SOCK_DGRAM, IPPROTO_UDP) = 3 <0.000008>
4151 15:45:42.794091 bind(3, {sa_family=AF_INET, sin_port=htons(935),
sin_addr=inet_addr("0.0.0.0")}, 16) = 0 <0.000007>
4151 15:45:42.794132 uname({sys="Linux", node="adcgar05", ...}) = 0 <0.000006>
4151 15:45:42.794199 geteuid() = 0 <0.000006>
4151 15:45:42.794230 getegid() = 0 <0.000006>
4151 15:45:42.794263 getgroups(0, NULL) = 14 <0.000006>
4151 15:45:42.794295 getgroups(14, [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 12, 101,
1120]) = 14 <0.000006>
4151 15:45:42.794342 gettimeofday({1178225142, 794359}, NULL) = 0 <0.000007>
4151 15:45:42.794386 sendto(3,
"&j\336\345\0\0\0\0\0\0\0\2\0\1\206\245\0\0\0\3\0\0\0\1\0\0\0\1\0\0\0TF:I\366\0\0\0\10adcgar05\0\0\0\0\0\0\0\0\0\0\0\16\0\0\0\0\0\0\0\1\0\0\0\2\0\0\0\3\0\0\0\4\0\0\0\5\0\0\0\6\0\0\0\7\0\0\0\10\0\0\0\t\0\0\0\n\0\0\0\f\0\0\0e\0\0\4`\0\0\0\0\0\0\0\0\0\0\0\27/vol/vol18/sysadmin_tmp\0",
152, 0, {sa_family=AF_INET, sin_port=htons(4046),
sin_addr=inet_addr("163.181.34.137")}, 16) = 152 <0.000009>
4151 15:45:42.794466 poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 3000) =
1 <0.000954>
4151 15:45:42.795453 recvfrom(3,
"&j\336\345\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0
\0}U\0\236]\336H [EMAIL PROTECTED]", 1024, 0, {sa_family=AF_INET,
sin_port=htons(4046), sin_addr=inet_addr("163.181.34.137")}, [16]) = 72
<0.000006>
4151 15:45:42.795528 close(3) = 0 <0.000008>
4151 15:45:42.795571 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 <0.000009>
4151 15:45:42.795608 bind(3, {sa_family=AF_INET, sin_port=htons(936),
sin_addr=inet_addr("0.0.0.0")}, 16) = 0 <0.000007>
4151 15:45:42.795646 uname({sys="Linux", node="adcgar05", ...}) = 0 <0.000006>
4151 15:45:42.795727 mount("eng:/vol/vol18/sysadmin_tmp", "/mnt/local", "nfs",
0, "\6") = 0 <0.003312>
4151 15:45:42.799098 open("/etc/mtab~", O_RDWR|O_CREAT|O_EXCL, 0600) = 4
<0.000037>
4151 15:45:42.799188 close(4) = 0 <0.000006>
4151 15:45:42.799230 open("/etc/mtab", O_RDWR|O_CREAT|O_APPEND, 0666) = 4
<0.000009>
4151 15:45:42.799278 fstat(4, {st_mode=S_IFREG|0644, st_size=2097, ...}) = 0
<0.000006>
4151 15:45:42.799330 mmap(NULL, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2aaaaaac6000 <0.000010>
4151 15:45:42.799370 fstat(4, {st_mode=S_IFREG|0644, st_size=2097, ...}) = 0
<0.000006>
4151 15:45:42.799423 lseek(4, 0, SEEK_SET) = 0 <0.000006>
4151 15:45:42.799458 read(4, "/dev/sda2 / ext3 rw 0 0\nproc /proc proc rw 0
0\nsysfs /sys sysfs rw 0 0\ndevpts /dev/pts devpts rw,gid=5,mode=620 0 0\nusbfs
/proc/bus/usb usbfs rw,noexec,nosuid,nodev 0 0\n/dev/sda1 /boot ext3 rw 0
0\ntmpfs /dev/shm tmpfs rw 0 0\n/dev/sda5 /tmp ext3 rw 0 0\nnone
/proc/sys/fs/binfmt_misc binfmt_misc rw 0 0\nsunrpc /var/lib/nfs/rpc_pipefs
rpc_pipefs rw 0 0\nsiam:/vol/vol7/pandora_mirror/pandora-k26_g25_64
/tool/pandora nfs ro,intr,addr=163.181.34.139 0
0\nsiam:/vol/vol13/lsf_texas2/lsf /tool/lsf nfs rw,intr,addr=163.181.34.139 0
0\nsiam:/vol/vol13/lsf_texas2/lsf/k26_g25_64 /tool/lsfd nfs
rw,intr,addr=163.181.34.139 0 0\nkuching:/vol/vol19/yum /tool/yum nfs
rw,intr,addr=163.181.34.138 0 0\nchang:/vol/vol6/home4/humphries
/home/humphries nfs rw,intr,addr=163.181.34.136 0
0\nprudence:/vol/vol16/rtl.work6 /proj/rtl.work6 nfs
rw,intr,addr=163.181.34.175 0 0\nchang:/vol/vol6/home2/pravikan /home/pravikan
nfs rw,intr,addr=163.181.34.136 0 0\nkuching:/vol/vol501/bda_livedb_bdc1
/proj/bda_livedb_bdc1 nfs ro,intr,addr=163.181.34.138 0 "..., 2097) = 2097
<0.000015>
4151 15:45:42.799629 fchmod(4, 0644) = 0 <0.000011>
4151 15:45:42.799673 write(4, "eng:/vol/vol18/sysadmin_tmp /mnt/local nfs
rw,rsize=1024,wsize=1024,addr=163.181.34.137 0 0\n", 92) = 92 <0.000011>
4151 15:45:42.799725 close(4) = 0 <0.000007>
4151 15:45:42.799762 munmap(0x2aaaaaac6000, 4096) = 0 <0.000017>
4151 15:45:42.799811 unlink("/etc/mtab~") = 0 <0.000027>
4151 15:45:42.799877 exit_group(0) = ?
4150 15:45:42.799995 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) ==
0}], 0, NULL) = 4151 <0.025776>
4150 15:45:42.800020 --- SIGCHLD (Child exited) @ 0 (0) ---
4150 15:45:42.800107 exit_group(0) = ?
_______________________________________________
rhelv5-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/rhelv5-list
