setsid() = 17230 close(8) = 0 close(10) = 0 dup2(7, 0) = 0 dup2(7, 1) = 1 dup2(9, 2) = 2 open("/etc/nologin", O_RDONLY) = -1 ENOENT (No such file or directory) getuid() = 618 geteuid() = 618 getuid() = 618 geteuid() = 618 getsockname(3, {sa_family=AF_INET6, sin6_port=htons(22), inet_pton(AF_INET6, "::ffff:130.112.251.4", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [1585267111784087580]) = 0 getsockname(3, {sa_family=AF_INET6, sin6_port=htons(22), inet_pton(AF_INET6, "::ffff:130.112.251.4", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [14577688910424440860]) = 0 getsockname(3, {sa_family=AF_INET6, sin6_port=htons(22), inet_pton(AF_INET6, "::ffff:130.112.251.4", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [1585267111784087580]) = 0 close(3) = 0 close(3) = -1 EBADF (Bad file descriptor) close(4) = 0 close(5) = 0 close(6) = 0 close(7) = 0 close(8) = -1 EBADF (Bad file descriptor) close(9) = 0 close(10) = -1 EBADF (Bad file descriptor) close(11) = -1 EBADF (Bad file descriptor) close(12) = -1 EBADF (Bad file descriptor) close(13) = -1 EBADF (Bad file descriptor) close(14) = -1 EBADF (Bad file descriptor) close(15) = -1 EBADF (Bad file descriptor) close(16) = -1 EBADF (Bad file descriptor) close(17) = -1 EBADF (Bad file descriptor) close(18) = -1 EBADF (Bad file descriptor) close(19) = -1 EBADF (Bad file descriptor) close(20) = -1 EBADF (Bad file descriptor) close(21) = -1 EBADF (Bad file descriptor) close(22) = -1 EBADF (Bad file descriptor) close(23) = -1 EBADF (Bad file descriptor) close(24) = -1 EBADF (Bad file descriptor) close(25) = -1 EBADF (Bad file descriptor) close(26) = -1 EBADF (Bad file descriptor) close(27) = -1 EBADF (Bad file descriptor) close(28) = -1 EBADF (Bad file descriptor) close(29) = -1 EBADF (Bad file descriptor) close(30) = -1 EBADF (Bad file descriptor) close(31) = -1 EBADF (Bad file descriptor) close(32) = -1 EBADF (Bad file descriptor) close(33) = -1 EBADF (Bad file descriptor) close(34) = -1 EBADF (Bad file descriptor) close(35) = -1 EBADF (Bad file descriptor) close(36) = -1 EBADF (Bad file descriptor) close(37) = -1 EBADF (Bad file descriptor) close(38) = -1 EBADF (Bad file descriptor) close(39) = -1 EBADF (Bad file descriptor) close(40) = -1 EBADF (Bad file descriptor) close(41) = -1 EBADF (Bad file descriptor) close(42) = -1 EBADF (Bad file descriptor) close(43) = -1 EBADF (Bad file descriptor) close(44) = -1 EBADF (Bad file descriptor) close(45) = -1 EBADF (Bad file descriptor) close(46) = -1 EBADF (Bad file descriptor) close(47) = -1 EBADF (Bad file descriptor) close(48) = -1 EBADF (Bad file descriptor) close(49) = -1 EBADF (Bad file descriptor) close(50) = -1 EBADF (Bad file descriptor) close(51) = -1 EBADF (Bad file descriptor) close(52) = -1 EBADF (Bad file descriptor) close(53) = -1 EBADF (Bad file descriptor) close(54) = -1 EBADF (Bad file descriptor) close(55) = -1 EBADF (Bad file descriptor) close(56) = -1 EBADF (Bad file descriptor) close(57) = -1 EBADF (Bad file descriptor) close(58) = -1 EBADF (Bad file descriptor) close(59) = -1 EBADF (Bad file descriptor) close(60) = -1 EBADF (Bad file descriptor) close(61) = -1 EBADF (Bad file descriptor) close(62) = -1 EBADF (Bad file descriptor) close(63) = -1 EBADF (Bad file descriptor) chdir("/export/ftp/sguests//stest") = 0 stat("/etc/ssh/sshrc", 0x7fffca4e6050) = -1 ENOENT (No such file or directory) rt_sigaction(SIGPIPE, NULL, {0x1, [], 0}, 8) = 0 rt_sigaction(SIGPIPE, {SIG_DFL, [], SA_RESTORER, 0x2b108a53f2d0}, NULL, 8) = 0 execve("/usr/bin/scponly", ["scponly", "-c", "/usr/libexec/openssh/sftp-server"], [/* 8 vars */]) = 0 brk(0) = 0x18b6b000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ad54cbe3000 uname({sys="Linux", node="question.ecn.nl", ...}) = 0 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=103589, ...}) = 0 mmap(NULL, 103589, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2ad54cbe4000 close(3) = 0 open("/lib64/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220\332\301g?\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1717800, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ad54cbfe000 mmap(0x3f67c00000, 3498328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3f67c00000 mprotect(0x3f67d4d000, 2097152, PROT_NONE) = 0 mmap(0x3f67f4d000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14d000) = 0x3f67f4d000 mmap(0x3f67f52000, 16728, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3f67f52000 close(3) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ad54cbff000 arch_prctl(ARCH_SET_FS, 0x2ad54cbff240) = 0 mprotect(0x3f67f4d000, 16384, PROT_READ) = 0 mprotect(0x3f67a1b000, 4096, PROT_READ) = 0 munmap(0x2ad54cbe4000, 103589) = 0 brk(0) = 0x18b6b000 brk(0x18b8c000) = 0x18b8c000 open("/etc/scponly/debuglevel", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=2, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ad54cbe4000 read(3, "4\n", 4096) = 2 close(3) = 0 munmap(0x2ad54cbe4000, 4096) = 0 socket(PF_FILE, SOCK_DGRAM, 0) = 3 fcntl(3, F_SETFD, FD_CLOEXEC) = 0 connect(3, {sa_family=AF_FILE, path="/dev/log"...}, 110) = 0 open("/etc/localtime", O_RDONLY) = 4 fstat(4, {st_mode=S_IFREG|0644, st_size=2917, ...}) = 0 fstat(4, {st_mode=S_IFREG|0644, st_size=2917, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2ad54cbe4000 read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\r\0\0\0\r\0\0\0\0"..., 4096) = 2917 lseek(4, -1843, SEEK_CUR) = 1074 read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\16\0\0\0\16\0\0\0\0"..., 4096) = 1843 close(4) = 0 munmap(0x2ad54cbe4000, 4096) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2917, ...}) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2917, ...}) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2917, ...}) = 0 getpid() = 17230 writev(2, [{"scponly[17230]: 3 arguments in t"..., 37}, {"\n", 1}], 2) = -1 EPIPE (Broken pipe) --- SIGPIPE (Broken pipe) @ 0 (0) ---