strace -f -o /tmp/dump -s 200 \
execcap 'CAP_SETUID=i CAP_SETGID=i' \
/bin/su nobody -c "sleep 1000&"
This leaves in /tmp/dump:
205 accept(134519532, 0x8049af4, NULL) = 0
205 execve("/bin/su", ["/bin/su", "nobody", "-c", "sleep 1000&"],
= -1 EPERM (Operation not permitted)
The EPERM is ok, but what is the accept() above?
Completely confused
-Winfried
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu