Bug 3737 - unbound chroot setup doesn't remove pidfile after stopped
unbound chroot setup doesn't remove pidfile after stopped
Status: ASSIGNED
Product: unbound
Classification: Unclassified
Component: server
1.5.8
x86_64 Linux
: P5 normal
Assigned To: unbound team
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2018-03-12 19:24 CET by shawnzhou00
Modified: 2018-03-22 19:05 CET (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description shawnzhou00 2018-03-12 19:24:09 CET
unbound doesn't remove pidfile when it's stopped in a chrooted environment. The log doesn't show message about permission errors and etc. I'd expect the pidfile  to be owned by user unbound rather than root but that's not the case. I am running unbound 1.5.8 on ubuntu xenial.

root@DFW01-CPS02:~# dpkg -l unbound | tail -1
ii  unbound        1.5.8-1ubuntu1 amd64        validating, recursive, caching DNS resolver

root@DFW01-CPS02:~# cat /etc/unbound/unbound.conf
# Unbound configuration file for Debian.
#
# See the unbound.conf(5) man page.
#
# See /usr/share/doc/unbound/examples/unbound.conf for a commented
# reference config file.
#
# The following line includes additional configuration files from the
# /etc/unbound/unbound.conf.d directory.
include: "/etc/unbound/unbound.conf.d/*.conf"
root@DFW01-CPS02:~#
root@DFW01-CPS02:~# cat /etc/unbound/unbound.conf.d/*.conf
server:
    # Send minimum amount of information to upstream servers to enhance
    # privacy. Only sends minimum required labels of the QNAME and sets
    # QTYPE to NS when possible.

    # See RFC 7816 "DNS Query Name Minimisation to Improve Privacy" for
    # details.

    qname-minimisation: yes
server:
    # The following line will configure unbound to perform cryptographic
    # DNSSEC validation using the root trust anchor.
    auto-trust-anchor-file: "/var/lib/unbound/root.key"
server:
  chroot: "/var/lib/unbound"
  pidfile: "./unbound.pid"
  username: "unbound"
  verbosity: 9
  do-not-query-localhost: no
  statistics-cumulative: yes
  extended-statistics: yes
  interface: 127.0.0.1

python:
remote-control:
  control-enable: yes
root@DFW01-CPS02:~#
root@DFW01-CPS02:~# service unbound start
 * Starting DNS server unbound
[1520878731] unbound[60542:0] debug: increased limit(open files) from 1024 to 4140
[1520878731] unbound[60542:0] debug: creating udp4 socket 127.0.0.1 53
[1520878731] unbound[60542:0] debug: creating tcp4 socket 127.0.0.1 53
[1520878731] unbound[60542:0] debug: creating tcp6 socket ::1 8953
[1520878731] unbound[60542:0] debug: creating tcp4 socket 127.0.0.1 8953
[1520878731] unbound[60542:0] debug: switching log to syslog
   ...done.
root@DFW01-CPS02:~# ps -ef |grep unbound
unbound   60543      1  0 18:18 ?        00:00:00 /usr/sbin/unbound
root      60561  53479  0 18:18 pts/3    00:00:00 grep --color=auto unbound
root@DFW01-CPS02:~# ls -l /var/lib/unbound/etc/unbound/unbound.pid
-rw-r--r-- 1 root root 6 Mar 12 18:18 /var/lib/unbound/etc/unbound/unbound.pid
root@DFW01-CPS02:~# cat /var/lib/unbound/etc/unbound/unbound.pid
60543
root@DFW01-CPS02:~# service unbound stop
 * Stopping DNS server unbound
   ...done.
root@DFW01-CPS02:~# ls -l /var/lib/unbound/etc/unbound/unbound.pid
-rw-r--r-- 1 root root 6 Mar 12 18:18 /var/lib/unbound/etc/unbound/unbound.pid
root@DFW01-CPS02:~# ps -ef |grep unbound
root      60664  53479  0 18:19 pts/3    00:00:00 grep --color=auto unbound



Here are the logs:
Mar 12 18:18:51 DFW01-CPS02 unbound-anchor: success: the anchor is ok
Mar 12 18:18:51 DFW01-CPS02 unbound: [60542:0] debug: setup SSL certificates
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: chdir to /var/lib/unbound
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: chroot to /var/lib/unbound
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: chdir to /etc/unbound
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: drop user privileges, run as unbound
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: module config: "validator iterator"
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] notice: init module 0: validator
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: reading autotrust anchor file /root.key
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: trust point . : 1
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: assembled 0 DS and 2 DNSKEYs
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: DNSKEY:: .#011172800#011IN#011DNSKEY#011257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b}
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: DNSKEY:: .#011172800#011IN#011DNSKEY#011257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: file /root.key
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: last_queried: 1520878731 Mon Mar 12 18:18:51 2018
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: last_success: 1520878731 Mon Mar 12 18:18:51 2018
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: next_probe_time: 1520920534 Tue Mar 13 05:55:34 2018
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: query_interval: 43200
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: retry_time: 8640
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: query_failed: 0
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: [  VALID  ] .#011172800#011IN#011DNSKEY#011257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state:2 ;;pending_count:0 last:Tue Mar  6 18:45:49 2018
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: [  VALID  ] .#011172800#011IN#011DNSKEY#011257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b} ;;state:2 ;;pending_count:0 last:Mon Jun 30 08:53:51 2014
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: validator nsec3cfg keysz 1024 mxiter 150
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: validator nsec3cfg keysz 2048 mxiter 500
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: validator nsec3cfg keysz 4096 mxiter 2500
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] notice: init module 1: iterator
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: target fetch policy for level 0 is 3
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: target fetch policy for level 1 is 2
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: target fetch policy for level 2 is 1
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: target fetch policy for level 3 is 0
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: target fetch policy for level 4 is 0
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: total of 59509 outgoing ports available
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: start threads
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: libevent 2.0.21-stable uses epoll method.
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: no config, using builtin root hints.
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: cache memory msg=66072 rrset=66072 infra=2632 val=66344
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] info: start of service (unbound 1.5.8).
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: autotrust probe timer callback
Mar 12 18:18:51 DFW01-CPS02 unbound: [60543:0] debug: autotrust probe timer 0 callbacks done
Mar 12 18:19:10 DFW01-CPS02 unbound: [60543:0] info: service stopped (unbound 1.5.8).
Mar 12 18:19:10 DFW01-CPS02 unbound: [60543:0] debug: stop threads
Mar 12 18:19:10 DFW01-CPS02 unbound: [60543:0] debug: cleanup.
Mar 12 18:19:10 DFW01-CPS02 unbound: [60543:0] info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch
Mar 12 18:19:10 DFW01-CPS02 unbound: [60543:0] info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0
Mar 12 18:19:10 DFW01-CPS02 unbound: [60543:0] info: mesh has 0 recursion states (0 with reply, 0 detached), 0 waiting replies, 0 recursion replies sent, 0 replies dropped, 0 states jostled out
Mar 12 18:19:10 DFW01-CPS02 unbound: [60543:0] debug: cache memory msg=66072 rrset=66072 infra=2632 val=66344
Mar 12 18:19:10 DFW01-CPS02 unbound: [60543:0] debug: Exit cleanup.
Mar 12 18:19:10 DFW01-CPS02 unbound: [60543:0] debug: switching log to stderr
Comment 1 Wouter Wijngaards 2018-03-13 09:16:50 CET
Hi,

Looks like unbound does not have permission to chown the pidfile, because it has no permission on the directory itself that the pidfile is in.

Best regards, Wouter
Comment 2 shawnzhou00 2018-03-13 17:15:23 CET
Hi Wouter,

unbound chown the pidfile after drop user privilege to "unbound" or before?

root@DFW01-CPS02:/etc/apparmor.d# ls -l /var/lib/unbound/etc/unbound/unbound.pid
-rw-r--r-- 1 root root 7 Mar 13 16:10 /var/lib/unbound/etc/unbound/unbound.pid
root@DFW01-CPS02:/etc/apparmor.d# ls -ld /var/lib/unbound/etc/unbound
drwxr-xr-x 3 root root 4096 Mar 13 16:10 /var/lib/unbound/etc/unbound


Does unbound not print permission errors when it has problems with permission as I don't see them on messages?
Comment 3 Wouter Wijngaards 2018-03-14 07:47:19 CET
Hi,

Yes you are right, it chowns before it drops permissions to the username.  Unbound prints error messages if the chown fails.  It chowns when it wrote the pidfile (pidfile: is set, and username: is set).  Because your ls doesn't show that, perhaps that is a different file?  strace could perhaps help, as it shows what syscalls are performed.  And it would also catch the unlink (unbound does not print errors for the unlink call at the end that removes the pidfile).  Before unbound unlinks the pidfile, unbound tries to overwrite it with an empty file (just in case there are permission problems that don't allow deletion).

Best regards, Wouter
Comment 4 shawnzhou00 2018-03-17 00:38:35 CET
The pid file was created with root but chown never happened.
Here is strace output:

execve("/usr/sbin/unbound", ["/usr/sbin/unbound"], [/* 15 vars */]) = 0
brk(NULL)                               = 0x560e22e0c000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4e1000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=38261, ...}) = 0
mmap(NULL, 38261, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f3d4b4d7000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260`\0\0\0\0\0\0@\0\0\0\0\0\0\0\210\23\2\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0)\0&\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\2206\1\0\0\0\0\0\2206\1\0\0\0\0\0\2206\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204y\1\0\0\0\0\0\204y\1\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0x{\1\0\0\0\0\0x{!\0\0\0\0\0x{!\0\0\0\0\0(\7\0\0\0\0\0\0\260H\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0P}\1\0\0\0\0\0P}!\0\0\0\0\0P}!\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0008\2\0\0\0\0\0\0008\2\0\0\0\0\0\0008\2\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\2606\1\0\0\0\0\0\2606\1\0\0\0\0\0\2606\1\0\0\0\0\0\214\10\0\0\0\0\0\0\214\10\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0x{\1\0\0\0\0\0x{!\0\0\0\0\0x{!\0\0\0\0\0\210\4\0\0\0\0\0\0\210\4\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0'\361\211\357\215\270\303sLjg\216n\363\313\v mX\262\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0 \0\0\0\0\0\0\0\345\1\0\0W\0\0\0 \0\0\0\v\0\0\0\31#\2\261\1\10\20\2@@a\370\3\10\10\25\200 \0\0\0\0\200\300\321Q\0\0\0\22\353\3020D\0\10\20A\0\2\0\2\f\1\200\v\221\1\330\240\r\240@\230 \244\200\21\n\202-l@g\214V\24\0\224 \200$H\200P(\1\22\f\311B\240\220\22\10\f \2ZdA\245c\4@\n\n\n\0\2009\1(\314D\204\201\300\22\10(\fD\0\0\0\200Q\10\200\35\4B\320\2608A\0\1\0\0\265\0300\0\200`\2\20\"\0\tA\20\1\5\0P(\251\22G(\0\0\202\4\230@\4\0\20\340T\0\2@\2\2\20\3010f\26\200\0", 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=138696, ...}) = 0
mmap(NULL, 2212904, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d4b0a1000
mprotect(0x7f3d4b0b9000, 2093056, PROT_NONE) = 0
mmap(0x7f3d4b2b8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7f3d4b2b8000
mmap(0x7f3d4b2ba000, 13352, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b2ba000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\t\2\0\0\0\0\0@\0\0\0\0\0\0\0\270r\34\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0H\0G\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0 f\31\0\0\0\0\0 f\31\0\0\0\0\0 f\31\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\320\372\33\0\0\0\0\0\320\372\33\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\300\7\34\0\0\0\0\0\300\7<\0\0\0\0\0\300\7<\0\0\0\0\0`O\0\0\0\0\0\0\340\221\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\240;\34\0\0\0\0\0\240;<\0\0\0\0\0\240;<\0\0\0\0\0\340\1\0\0\0\0\0\0\340\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0p\2\0\0\0\0\0\0p\2\0\0\0\0\0\0p\2\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0\7\0\0\0\4\0\0\0\300\7\34\0\0\0\0\0\300\7<\0\0\0\0\0\300\7<\0\0\0\0\0\20\0\0\0\0\0\0\0x\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0<f\31\0\0\0\0\0<f\31\0\0\0\0\0<f\31\0\0\0\0\0\274T\0\0\0\0\0\0\274T\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\300\7\34\0\0\0\0\0\300\7<\0\0\0\0\0\300\7<\0\0\0\0\0@8\0\0\0\0\0\0@8\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\10\212n\0\241\201F\"!\2374kA\347u\270\335F\305\30\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0 \0\0\0\0\0\0\0\363\3\0\0\n\0\0\0\0\1\0\0\16\0\0\0\0000\20D\240 \2\1\210\3\346\220\305E\214\0\304\0\10\0\5\204\0`\300\200\0\r\212\f\0\4\20\0\210@2\10*@\210T<, \0162H&\204\300\214\4\10\0\2\2\16\241\254\32\4f\300\0\3002\0\300\0P\1 \201\10\204\v  ($\0\4 Z\0\20X\200\312DB(\0\6\200\20\30B\0 @\200\0IP\0Q\212@\22\0\0\0\0\10\0\0\21\20", 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1868984, ...}) = 0
mmap(NULL, 3971488, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d4acd7000
mprotect(0x7f3d4ae97000, 2097152, PROT_NONE) = 0
mmap(0x7f3d4b097000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c0000) = 0x7f3d4b097000
mmap(0x7f3d4b09d000, 14752, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b09d000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libssl.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320^\1\0\0\0\0\0@\0\0\0\0\0\0\0 \202\6\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\35\0\34\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\264\337\5\0\0\0\0\0\264\337\5\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\350\343\5\0\0\0\0\0\350\343%\0\0\0\0\0\350\343%\0\0\0\0\0\370\234\0\0\0\0\0\0\350\235\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\200\35\6\0\0\0\0\0\200\35&\0\0\0\0\0\200\35&\0\0\0\0\0\0\2\0\0\0\0\0\0\0\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\314N\5\0\0\0\0\0\314N\5\0\0\0\0\0\314N\5\0\0\0\0\0\34\25\0\0\0\0\0\0\34\25\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\350\343\5\0\0\0\0\0\350\343%\0\0\0\0\0\350\343%\0\0\0\0\0\30<\0\0\0\0\0\0\30<\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0g_EJ\326\375\vl\242\344\21'\307\271\200y\3327\367\266\0\0\0\0\7\1\0\0\216\1\0\0 \0\0\0\v\0\0\0\32,\6#\33M52%@\2\1\206\0\200\34\4\0035\0b\24\4\10H\250\370\304\10) \32\v\0\0\0 \0\0\201\t\20\22\"\0+\220!\234 '\"\1\2!N9\2\306\312lH9\tz\0\3011!\0\313\1\0(\322\10\24H\20\2100\244\4\0B:B\26\1\0108@\200\365\212\312\242\221\0 \362\240\0\6\10\nD\201\0\341\0\t\304\0\0030\304\2@\5\240D\224$a\300\4(\0\200\206\300\20\24\200@\21\232DX\202\6\4\304\262\0\211$@\205\23\"\0$\201R&x`\n\10\0,\rC\204A\333\2\0\0201\1\0\217\22\204\0\317\2<@``R\20\22\6\1\0\0\204h\222\246\214\220\24L\320\0#N!\340\4!\t\244b\344\31\33NA\v\0100/\250@\0\4\20\2D@ p)\216G\234)8\4@\200\t\320\0\310V\22\0\310\0\206\1\4\0DB\340\302\246\216\1\0\0\217\1\0\0\0\0\0\0\0\0\0\0\220\1\0\0\0\0\0\0\223\1\0\0\226\1\0\0\230\1\0\0\231\1\0\0\232\1\0\0\233\1\0\0\234\1\0\0\237\1\0\0\0\0\0\0\0\0\0\0", 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=428384, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4d6000
mmap(NULL, 2523600, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d4aa6e000
mprotect(0x7f3d4aacc000, 2097152, PROT_NONE) = 0
mmap(0x7f3d4accc000, 45056, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5e000) = 0x7f3d4accc000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/libevent-2.0.so.5", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\236\0\0\0\0\0\0@\0\0\0\0\0\0\0\20S\4\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\32\0\31\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\2440\4\0\0\0\0\0\2440\4\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\2007\4\0\0\0\0\0\2007$\0\0\0\0\0\2007$\0\0\0\0\0p\32\0\0\0\0\0\0\250!\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\300:\4\0\0\0\0\0\300:$\0\0\0\0\0\300:$\0\0\0\0\0\0\2\0\0\0\0\0\0\0\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\314\215\3\0\0\0\0\0\314\215\3\0\0\0\0\0\314\215\3\0\0\0\0\0\334\26\0\0\0\0\0\0\334\26\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\2007\4\0\0\0\0\0\2007$\0\0\0\0\0\2007$\0\0\0\0\0\200\30\0\0\0\0\0\0\200\30\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0005y\230A\24l\207m!.NA\247\206\24\333\31\354\265t\0\0\0\0\t\2\0\0^\0\0\0@\0\0\0\f\0\0\0 \203\0B\1\200,p\201\210I\200\0\20\0\0\202\4d\4\1\24\201\304\4\3\3Tm\0\5\222\21\24\306\30(\200:(@\3@\340\0\0\0Jl\10\314\25\300\212\250@\240\3 \1\24*\10\270\3\1\"\10\10\4\0 Q\264A\36T\264\0#\200\10\0\2\2\0\5\10\236\t\246\0\5\214\22\5\t\2\31\31\n\5\200\0 \0\4\1\20(\5\4\0\0\200\0\4@\20\30\3\307\324\320\16\225p AC@\10\n\10(\310\350]\0\4p\4\1X\300$\n\300\10\2\322R\226bA\20\2\224\4\300)\205\201@\10\"\0\4\f4S\265v\n\243\1\4\0\22\311\200\0\320\200\200\202Q\0@L\220\16\200@ \0\20\0D\"\0p\0m0\32\4R\240 \0\2\320L-\t\0\310D)!(\0\4\0\1\1 \300@\0\220@e\2\0000\"\10\230Q\f\200\200\232\20$\0\20\2\200\244\0004\0\4\20\0d U\7`\26\1\200\0\2\224\320\1\21H\0\2\21\10\1\10D\311R\4F0\34a\f5\312\200\r.\240`\1@\30\0\20\210\3450\rE\0\21R\3s\210@\f\0\1\5\5\10\202\"", 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=285072, ...}) = 0
mmap(NULL, 2382120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d4a828000
mprotect(0x7f3d4a86c000, 2093056, PROT_NONE) = 0
mmap(0x7f3d4aa6b000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x43000) = 0x7f3d4aa6b000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/libpython2.7.so.1.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\365\4\0\0\0\0\0@\0\0\0\0\0\0\0\270\2446\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\34\0\33\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\364\26/\0\0\0\0\0\364\26/\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\350$/\0\0\0\0\0\350$O\0\0\0\0\0\350$O\0\0\0\0\0\240~\7\0\0\0\0\0\310\272\t\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\3605/\0\0\0\0\0\3605O\0\0\0\0\0\3605O\0\0\0\0\0 \2\0\0\0\0\0\0 \2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0PE+\0\0\0\0\0PE+\0\0\0\0\0PE+\0\0\0\0\0<~\0\0\0\0\0\0<~\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\350$/\0\0\0\0\0\350$O\0\0\0\0\0\350$O\0\0\0\0\0\30\33\0\0\0\0\0\0\30\33\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\25\313\360'z\225\r\251D\227O\210I\250\312p\330\322\23\301\0\0\0\0\351\3\0\0O\1\0\0\200\0\0\0\r\0\0\0G\270B\321Ydi\311\0\22\0\300\0(<\3404\230\0103\30 )\1_\314\312\370\0*\200\210\32\20\5\6\10\2002a\240\10\0\10\0\220\22\21\202\30\33\2059\330\216\nA\206@\220\370\303\346z\4B\211\f\3D\t\20\1\0\211\211\24&*\300Qa\0237\234\r\vQG\1\0\252@\340(\30\" \304\1\26\222\20\24a1\270@8$\304\270\2150\272\222\200\20\213\32\4!D\20\301@\25\212R\n\21\203\341P`\2\1\30\200\0\30d0\227F,\206b\0\0039\v<\4\204\214LFp\4\261DKN.\247\304\246(\200\6\v\"\214  \0\20\0&\0`\1\10\211Hh\0\0S\300G\10\222\3(\0@\30\0\0a`\2\0\10\205\30\2\224 \6\207\231\0\310\240J\5\201\223\201\0\23iD\6<\214\0018\10\10\325`\1\32P\241\202p\205\4(\5\200\301\302\265\245\354@\6[\22w\1@\4@\0H\10$\200M\t\347\30\20\345\306\323\266\222H\204\20q\204@\nQ\0\300\31\252D\24H\256\352@$@\314\1\234\0\20\0\342\26([H \21\240\4\10B\r#\10P\20\0\301\204", 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=3582904, ...}) = 0
mmap(NULL, 5824432, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d4a29a000
mprotect(0x7f3d4a58c000, 2097152, PROT_NONE) = 0
mmap(0x7f3d4a78c000, 495616, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2f2000) = 0x7f3d4a78c000
mmap(0x7f3d4a805000, 143280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3d4a805000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\36\6\0\0\0\0\0@\0\0\0\0\0\0\0\300\2$\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\35\0\34\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\214\224!\0\0\0\0\0\214\224!\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\210\232!\0\0\0\0\0\210\232A\0\0\0\0\0\210\232A\0\0\0\0\0\371f\2\0\0\0\0\0\370\240\2\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\220I#\0\0\0\0\0\220IC\0\0\0\0\0\220IC\0\0\0\0\0\0\2\0\0\0\0\0\0\0\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0X\304\35\0\0\0\0\0X\304\35\0\0\0\0\0X\304\35\0\0\0\0\0l\226\0\0\0\0\0\0l\226\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\210\232!\0\0\0\0\0\210\232A\0\0\0\0\0\210\232A\0\0\0\0\0x\265\1\0\0\0\0\0x\265\1\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0-\240\212~[\366\20\3\r\323;p\333\225\23\231bkt\226\0\0\0\0\5\10\0\0p\0\0\0\0\2\0\0\17\0\0\0\1\0\30\205D\4\201\200a\200\0\0 L\4\0\201\0\0\10\30\206\4\200\0\0!\300\20\0@\0\201\204\3\21\204\244`\0F\10\fH\0\3\200\24\201\0\212\4\t\3\311\204\10\0d\30\0\2\0051\10\0\0\200\0\0\0\0\254\24t\201\22\10T\4\0\22@E\t@\200\0\f\224\34\0\0Q\0\300 \1\0H(\f@C\10D\211\2\0\34\0\0@\2 \210\21Q,\224\205\200\0@\10h\"\16\0\0\0\0\4@\0\0\0\6\220\16\0\0(\5\7\0f\0`\260\2\2\0\200\20@\0\0242\10\0\0\0\0\340\0\0\1\1\1\4\202\4#\10\n\10\0A\200\2 \4\202;\4\0\27\5\2\17@\242`\v\4\24\200\2E\304\2\0\210\21\0\0#\0\0\342!\f\304\0\2\0010\241\10\0\0\240 \253\0\0250\201\204\20\0a\10\302\4\34\0\240\21\r\0@\4 \"\4\4\0@\204\263\201\10\200\220\31\5p0\200\2\200\6Pa\0\204@ \3\244\0\0A\0@i@\n\240\240\223\0\23$\354\2D&\270\10\20\0C\1\0H$\0\0C\4\2B\254\21@\0  @\0\16 \0\0\5\21Q", 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=2361856, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4d5000
mmap(NULL, 4471680, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d49e56000
mprotect(0x7f3d4a070000, 2093056, PROT_NONE) = 0
mmap(0x7f3d4a26f000, 163840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x219000) = 0x7f3d4a26f000
mmap(0x7f3d4a297000, 11136, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f3d4a297000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libz.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\35\0\0\0\0\0\0@\0\0\0\0\0\0\0`\222\1\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\35\0\34\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\204\205\1\0\0\0\0\0\204\205\1\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\310\214\1\0\0\0\0\0\310\214!\0\0\0\0\0\310\214!\0\0\0\0\0X\4\0\0\0\0\0\0`\4\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\320\215\1\0\0\0\0\0\320\215!\0\0\0\0\0\320\215!\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\350j\1\0\0\0\0\0\350j\1\0\0\0\0\0\350j\1\0\0\0\0\0\\\3\0\0\0\0\0\0\\\3\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\310\214\1\0\0\0\0\0\310\214!\0\0\0\0\0\310\214!\0\0\0\0\0008\3\0\0\0\0\0\0008\3\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\215\233\324\316&\344^\361`u\306}_^\352\375\213V(2\0\0\0\0C\0\0\0\30\0\0\0\10\0\0\0\t\0\0\0\0\3h\24\f\3$\24\221\2\223A;\0\16\30\234\1\4DQ\f\0\210,\0\303\"\224\27\212\203\0c0\262G\212PC ,\20\35\210\341\200\213A\220\23e$g\304\201V\0.\20\2\200\0\20\30\0\0\0\33\0\0\0\34\0\0\0\36\0\0\0\"\0\0\0#\0\0\0%\0\0\0&\0\0\0\0\0\0\0'\0\0\0(\0\0\0+\0\0\0.\0\0\0/\0\0\0\0\0\0\0001\0\0\0\0\0\0\0002\0\0\0004\0\0\0005\0\0\0007\0\0\0009\0\0\0\0\0\0\0:\0\0\0;\0\0\0<\0\0\0\0\0\0\0=\0\0\0\0\0\0\0?\0\0\0@\0\0\0A\0\0\0B\0\0\0D\0\0\0E\0\0\0G\0\0\0J\0\0\0\0\0\0\0M\0\0\0O\0\0\0P\0\0\0Q\0\0\0U\0\0\0V\0\0\0\0\0\0\0X\0\0\0\0\0\0\0Z\0\0\0\\\0\0\0\0\0\0\0]\0\0\0_\0\0\0\0\0\0\0`\0\0\0d\0\0\0f\0\0\0\0\0\0\0g\0\0\0h\0\0\0i\0\0\0\0\0\0\0\0\0\0\0j\0\0\0k\0\0\0", 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=104864, ...}) = 0
mmap(NULL, 2199848, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d49c3c000
mprotect(0x7f3d49c55000, 2093056, PROT_NONE) = 0
mmap(0x7f3d49e54000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x18000) = 0x7f3d49e54000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\r\0\0\0\0\0\0@\0\0\0\0\0\0\0\2201\0\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\36\0\35\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20 \0\0\0\0\0\0\20 \0\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0`-\0\0\0\0\0\0`- \0\0\0\0\0`- \0\0\0\0\0\20\3\0\0\0\0\0\0\220\3\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\210-\0\0\0\0\0\0\210- \0\0\0\0\0\210- \0\0\0\0\0\20\2\0\0\0\0\0\0\20\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0@\32\0\0\0\0\0\0@\32\0\0\0\0\0\0@\32\0\0\0\0\0\0\274\0\0\0\0\0\0\0\274\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0`-\0\0\0\0\0\0`- \0\0\0\0\0`- \0\0\0\0\0\240\2\0\0\0\0\0\0\240\2\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\17\307\210\360\206\30F%{_\27s\373\3248\351]\374\0202\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0 \0\0\0\0\0\0\0\33\0\0\0\33\0\0\0\2\0\0\0\7\0\0\0\230\2\21\0\200H\0\4\22\0\0@\203(\10\236\33\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\0\0\0\0\35\0\0\0\0\0\0\0\36\0\0\0\0\0\0\0\37\0\0\0\0\0\0\0 \0\0\0\0\0\0\0!\0\0\0#\0\0\0$\0\0\0&\0\0\0'\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0(\0\0\0\0\0\0\0\0\0\0\0\353\26\251\30a\257\0\371\301S\200\30\273\25sB\257\304M\17\221!\374\370\6\2\4\371\3733\373\17\371\31sB\372\31sB\225\263_\31\177\236\320\30a\242\222\6\5\350\7\371\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\v\0\240\f\0\0\0\0\0\0\0\0\0\0\0\0\0\0F\1\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\375\0\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\337\0\0\0 \0\0\0", 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=14608, ...}) = 0
mmap(NULL, 2109680, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d49a38000
mprotect(0x7f3d49a3b000, 2093056, PROT_NONE) = 0
mmap(0x7f3d49c3a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f3d49c3a000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libutil.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\16\0\0\0\0\0\0@\0\0\0\0\0\0\0 \"\0\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\36\0\35\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\30\33\0\0\0\0\0\0\30\33\0\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\250\35\0\0\0\0\0\0\250\35 \0\0\0\0\0\250\35 \0\0\0\0\0X\3\0\0\0\0\0\0`\3\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\300\35\0\0\0\0\0\0\300\35 \0\0\0\0\0\300\35 \0\0\0\0\0\20\2\0\0\0\0\0\0\20\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0004\27\0\0\0\0\0\0004\27\0\0\0\0\0\0004\27\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\250\35\0\0\0\0\0\0\250\35 \0\0\0\0\0\250\35 \0\0\0\0\0X\2\0\0\0\0\0\0X\2\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\264\3057E\206<\351\231\267k\300K\303]\f\356\233\210yS\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0 \0\0\0\0\0\0\0\n\0\0\0$\0\0\0\1\0\0\0\6\0\0\0\200\200@\300\4 \24D\0\0\0\0\0\0\0\0$\0\0\0%\0\0\0&\0\0\0\0\0\0\0'\0\0\0)\0\0\0*\0\0\0\0\0\0\0\365\361\253\272\217\365\310\207\237<\300|\364\243\343p\277\370\337\17_+\337\v\273\25sB\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\v\0`\f\0\0\0\0\0\0\0\0\0\0\0\0\0\0\234\0\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\241\0\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0 \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0w\1\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0[\1\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\226\0\0\0\26\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0o\0\0\0\22\0\0\0\0\0\0\0\0\0\0\0", 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=10656, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4d4000
mmap(NULL, 2105608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d49835000
mprotect(0x7f3d49837000, 2093056, PROT_NONE) = 0
mmap(0x7f3d49a36000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7f3d49a36000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0V\0\0\0\0\0\0@\0\0\0\0\0\0\0\270\225\20\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0 \0\37\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\370z\20\0\0\0\0\0\370z\20\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0p}\20\0\0\0\0\0p}0\0\0\0\0\0p}0\0\0\0\0\0|\3\0\0\0\0\0\0\210\3\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\210}\20\0\0\0\0\0\210}0\0\0\0\0\0\210}0\0\0\0\0\0 \2\0\0\0\0\0\0 \2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0D\0\0\0\0\0\0\0D\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\310\346\17\0\0\0\0\0\310\346\17\0\0\0\0\0\310\346\17\0\0\0\0\0\24\23\0\0\0\0\0\0\24\23\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0p}\20\0\0\0\0\0p}0\0\0\0\0\0p}0\0\0\0\0\0\220\2\0\0\0\0\0\0\220\2\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\377z3\323\211\347V\3128\32\201\211)\32\226\216\245\341\364\370\4\0\0\0\20\0\0\0\1\0\0\0GNU\0\0\0\0\0\2\0\0\0\6\0\0\0 \0\0\0\0\0\0\0&\3\0\0\24\0\0\0@\0\0\0\f\0\0\0%\0`\0\0\240.\"\200\0\26\211\0 E\"\2\0\300``i\10\212\0\t\0\0\0\0\0\0\0\0\0\0\0\0\212P\20\1\10\0\0\4\1\302\24\1 \210\"\0\304\243X\240\n\6\216\0\212\0\0\4\0@\0\0 \20\0\5\0\5\r\7\7\22A\0\1\0\10\0\0@\0\t\0\20\4D\30\4\200a(\22@\4\1\nE\221 @\200\f\22\1\0\0\0\0\0\0\0\0\4\2\0\0\0@\0\200\2\20\322\0\1\10\4\301 E\1\0\310\"\0\4\2\0\202\0\4\0\0\0\4\0Y\4\2\0\n\200\1\0\0\4\0\20 \3\0\0\210 \10\20\0\0 \2\0\0\200\10\2\4\0\0HQ\0\0\f\2\0\0 \10 \0\0\0\0 #\4\0\200\0I\2\fc\2 A\221\242@\4\202EL  \0\0\300\2\4\200\10\2\r(\2\0\20\"\0!\22\30\30\24 8\0\210\0\0\260  B,\10\302\0 \200\361)\24A\21 @\220 \4\1P\20\202\0\0\214\0\0`\242\10HA\0\0\4 \202", 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=1088952, ...}) = 0
mmap(NULL, 3178744, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d4952c000
mprotect(0x7f3d49634000, 2093056, PROT_NONE) = 0
mmap(0x7f3d49833000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x107000) = 0x7f3d49833000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4d3000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4d2000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4d1000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4d0000
arch_prctl(ARCH_SET_FS, 0x7f3d4b4d1700) = 0
mprotect(0x7f3d4b097000, 16384, PROT_READ) = 0
mprotect(0x7f3d49833000, 4096, PROT_READ) = 0
mprotect(0x7f3d49a36000, 4096, PROT_READ) = 0
mprotect(0x7f3d49c3a000, 4096, PROT_READ) = 0
mprotect(0x7f3d49e54000, 4096, PROT_READ) = 0
mprotect(0x7f3d4a26f000, 114688, PROT_READ) = 0
mprotect(0x7f3d4b2b8000, 4096, PROT_READ) = 0
mprotect(0x7f3d4a78c000, 8192, PROT_READ) = 0
mprotect(0x7f3d4aa6b000, 8192, PROT_READ) = 0
mprotect(0x7f3d4accc000, 16384, PROT_READ) = 0
mprotect(0x560e21a82000, 4096, PROT_READ) = 0
mprotect(0x7f3d4b4e3000, 4096, PROT_READ) = 0
munmap(0x7f3d4b4d7000, 38261)           = 0
set_tid_address(0x7f3d4b4d19d0)         = 72586
set_robust_list(0x7f3d4b4d19e0, 24)     = 0
rt_sigaction(SIGRTMIN, {0x7f3d4b0a6b50, [], SA_RESTORER|SA_SIGINFO, 0x7f3d4b0b2390}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x7f3d4b0a6be0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7f3d4b0b2390}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
brk(NULL)                               = 0x560e22e0c000
brk(0x560e22e2d000)                     = 0x560e22e2d000
rt_sigaction(SIGTERM, {0x560e217bf610, [TERM], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGQUIT, {0x560e217bf610, [QUIT], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGHUP, {0x560e217bf610, [HUP], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGPIPE, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGINT, {0x560e217bf610, [INT], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {SIG_DFL, [], 0}, 8) = 0
open("/usr/lib/ssl/openssl.cnf", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=10835, ...}) = 0
read(3, "#\n# OpenSSL example configuration file.\n# This is mostly being used for generation of certificate requests.\n#\n\n# This definition stops the following lines choking if HOME isn't\n# defined.\nHOME\t\t\t= .\nRANDFILE\t\t= $ENV::HOME/.rnd\n\n# Extra OBJECT IDENTIFIER info:\n#oid_file\t\t= $ENV::HOME/.oid\noid_section\t\t= new_oids\n\n# To use this configuration file with the \"-extfile\" option of the\n# \"openssl x509\" utility, name here the section containing the\n# X.509v3 extensions to use:\n# extensions\t\t= \n# (Alternatively, use a configuration file that has only\n# X.509v3 extensions in its main [= default] section.)\n\n[ new_oids ]\n\n# We can add new OIDs in here for use by 'ca', 'req' and 'ts'.\n# Add a simple OID like this:\n# testoid1=1.2.3.4\n# Or use config file substitution like this:\n# testoid2=${testoid1}.5.6\n\n# Policies used by the TSA examples.\ntsa_policy1 = 1.2.3.4.1\ntsa_policy2 = 1.2.3.4.5.6\ntsa_policy3 = 1.2.3.4.5.7\n\n####################################################################\n[ ca ]\ndefault_ca\t= CA_default\t\t# The d"..., 4096) = 4096
read(3, "Netscape crash on BMPStrings or UTF8Strings.\nstring_mask = utf8only\n\n# req_extensions = v3_req # The extensions to add to a certificate request\n\n[ req_distinguished_name ]\ncountryName\t\t\t= Country Name (2 letter code)\ncountryName_default\t\t= AU\ncountryName_min\t\t\t= 2\ncountryName_max\t\t\t= 2\n\nstateOrProvinceName\t\t= State or Province Name (full name)\nstateOrProvinceName_default\t= Some-State\n\nlocalityName\t\t\t= Locality Name (eg, city)\n\n0.organizationName\t\t= Organization Name (eg, company)\n0.organizationName_default\t= Internet Widgits Pty Ltd\n\n# we can do this but it is not needed normally :-)\n#1.organizationName\t\t= Second Organization Name (eg, company)\n#1.organizationName_default\t= World Wide Web Pty Ltd\n\norganizationalUnitName\t\t= Organizational Unit Name (eg, section)\n#organizationalUnitName_default\t=\n\ncommonName\t\t\t= Common Name (e.g. server FQDN or YOUR name)\ncommonName_max\t\t\t= 64\n\nemailAddress\t\t\t= Email Address\nemailAddress_max\t\t= 64\n\n# SET-ex3\t\t\t= SET extension number 3\n\n[ req_attributes ]\nchallengePassword\t\t= A "..., 4096) = 4096
read(3, " this to avoid interpreting an end user certificate as a CA.\n\nbasicConstraints=CA:FALSE\n\n# Here are some examples of the usage of nsCertType. If it is omitted\n# the certificate can be used for anything *except* object signing.\n\n# This is OK for an SSL server.\n# nsCertType\t\t\t= server\n\n# For an object signing certificate this would be used.\n# nsCertType = objsign\n\n# For normal client use this is typical\n# nsCertType = client, email\n\n# and for everything including object signing:\n# nsCertType = client, email, objsign\n\n# This is typical in keyUsage for a client certificate.\n# keyUsage = nonRepudiation, digitalSignature, keyEncipherment\n\n# This will be displayed in Netscape's comment listbox.\nnsComment\t\t\t= \"OpenSSL Generated Certificate\"\n\n# PKIX recommendations harmless if included in all certificates.\nsubjectKeyIdentifier=hash\nauthorityKeyIdentifier=keyid,issuer\n\n# This stuff is for subjectAltName and issuerAltname.\n# Import the email address.\n# subjectAltName=email:copy\n# An alternative to produce certificates t"..., 4096) = 2643
read(3, "", 4096)                       = 0
close(3)                                = 0
futex(0x7f3d49c3b0a8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
open("/usr/lib/x86_64-linux-gnu/openssl-1.0.0/engines/libgost.so", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220T\0\0\0\0\0\0@\0\0\0\0\0\0\0 e\1\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\35\0\34\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\234@\1\0\0\0\0\0\234@\1\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\250I\1\0\0\0\0\0\250I!\0\0\0\0\0\250I!\0\0\0\0\0008\32\0\0\0\0\0\0x\32\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\320M\1\0\0\0\0\0\320M!\0\0\0\0\0\320M!\0\0\0\0\0\0\2\0\0\0\0\0\0\0\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0\310\1\0\0\0\0\0\0$\0\0\0\0\0\0\0$\0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0\234\30\1\0\0\0\0\0\234\30\1\0\0\0\0\0\234\30\1\0\0\0\0\0\244\5\0\0\0\0\0\0\244\5\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0R\345td\4\0\0\0\250I\1\0\0\0\0\0\250I!\0\0\0\0\0\250I!\0\0\0\0\0X\6\0\0\0\0\0\0X\6\0\0\0\0\0\0\1\0\0\0\0\0\0\0\4\0\0\0\24\0\0\0\3\0\0\0GNU\0\r\f\203 #\274\7m\227(\36\16Pa\216A\316g\f7\0\0\0\0\3\0\0\0\276\0\0\0\1\0\0\0\6\0\0\0\0\0 \4\0\2\200\1\0\0\0\0\276\0\0\0\300\0\0\0008\356\353c\225\6\267}w\312\342|\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\n\0\30I\0\0\0\0\0\0\0\0\0\0\0\0\0\0\307\f\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\22\7\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\362\1\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\371\5\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0Q\n\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0~\1\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0J\f\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\331\2\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\215\4\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0P\5\0\0\22\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=93280, ...}) = 0
mmap(NULL, 2188320, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f3d49315000
mprotect(0x7f3d4932a000, 2093056, PROT_NONE) = 0
mmap(0x7f3d49529000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x7f3d49529000
close(3)                                = 0
mprotect(0x7f3d49529000, 4096, PROT_READ) = 0
brk(0x560e22e4e000)                     = 0x560e22e4e000
open("/etc/localtime", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=127, ...}) = 0
fstat(3, {st_mode=S_IFREG|0644, st_size=127, ...}) = 0
read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\4\0\0\0\0\0\0UTC\0\0\0TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\4\370\0\0\0\0\0\0\0\0\0\0\0\0\0\0UTC\0\0\0\nUTC0\n", 4096) = 127
lseek(3, -71, SEEK_CUR)                 = 56
read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\1\0\0\0\1\0\0\0\4\370\0\0\0\0\0\0\0\0\0\0\0\0\0\0UTC\0\0\0\nUTC0\n", 4096) = 71
close(3)                                = 0
mmap(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b48f000
open("/etc/unbound/unbound.conf", O_RDONLY) = 3
ioctl(3, TCGETS, 0x7fff72762120)        = -1 ENOTTY (Inappropriate ioctl for device)
fstat(3, {st_mode=S_IFREG|0644, st_size=332, ...}) = 0
read(3, "# Unbound configuration file for Debian.\n#\n# See the unbound.conf(5) man page.\n#\n# See /usr/share/doc/unbound/examples/unbound.conf for a commented\n# reference config file.\n#\n# The following line includes additional configuration files from the\n# /etc/unbound/unbound.conf.d directory.\ninclude: \"/etc/unbound/unbound.conf.d/*.conf\"\n", 8192) = 332
read(3, "", 4096)                       = 0
open("/etc/unbound/unbound.conf.d", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 4
fstat(4, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
getdents(4, /* 5 entries */, 32768)     = 184
getdents(4, /* 0 entries */, 32768)     = 0
close(4)                                = 0
open("/etc/unbound/unbound.conf.d/qname-minimisation.conf", O_RDONLY) = 4
ioctl(4, TCGETS, 0x7fff72762090)        = -1 ENOTTY (Inappropriate ioctl for device)
open("/etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf", O_RDONLY) = 5
ioctl(5, TCGETS, 0x7fff72762090)        = -1 ENOTTY (Inappropriate ioctl for device)
open("/etc/unbound/unbound.conf.d/test.conf", O_RDONLY) = 6
ioctl(6, TCGETS, 0x7fff72762090)        = -1 ENOTTY (Inappropriate ioctl for device)
fstat(6, {st_mode=S_IFREG|0644, st_size=256, ...}) = 0
read(6, "server:\n  chroot: \"/var/lib/unbound\"\n  pidfile: \"./unbound.pid\"\n  username: \"unbound\"\n  verbosity: 1\n  do-not-query-localhost: no\n  statistics-cumulative: yes\n  extended-statistics: yes\n  interface: 127.0.0.1\n\npython:\nremote-control:\n  control-enable: yes\n", 8192) = 256
read(6, "", 4096)                       = 0
read(6, "", 8192)                       = 0
ioctl(6, TCGETS, 0x7fff72762120)        = -1 ENOTTY (Inappropriate ioctl for device)
close(6)                                = 0
fstat(5, {st_mode=S_IFREG|0644, st_size=190, ...}) = 0
read(5, "server:\n    # The following line will configure unbound to perform cryptographic\n    # DNSSEC validation using the root trust anchor.\n    auto-trust-anchor-file: \"/var/lib/unbound/root.key\"\n", 8192) = 190
read(5, "", 4096)                       = 0
read(5, "", 8192)                       = 0
ioctl(5, TCGETS, 0x7fff72762120)        = -1 ENOTTY (Inappropriate ioctl for device)
close(5)                                = 0
fstat(4, {st_mode=S_IFREG|0644, st_size=302, ...}) = 0
read(4, "server:\n    # Send minimum amount of information to upstream servers to enhance\n    # privacy. Only sends minimum required labels of the QNAME and sets\n    # QTYPE to NS when possible.\n\n    # See RFC 7816 \"DNS Query Name Minimisation to Improve Privacy\" for\n    # details.\n\n    qname-minimisation: yes\n", 8192) = 302
read(4, "", 4096)                       = 0
read(4, "", 8192)                       = 0
ioctl(4, TCGETS, 0x7fff72762120)        = -1 ENOTTY (Inappropriate ioctl for device)
close(4)                                = 0
read(3, "", 8192)                       = 0
ioctl(3, TCGETS, 0x7fff72762120)        = -1 ENOTTY (Inappropriate ioctl for device)
close(3)                                = 0
brk(0x560e22e71000)                     = 0x560e22e71000
getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=4*1024}) = 0
setrlimit(RLIMIT_NOFILE, {rlim_cur=4140, rlim_max=4140}) = 0
socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = 0
sendto(3, "\2\0\0\0\v\0\0\0\7\0\0\0passwd\0", 19, MSG_NOSIGNAL, NULL, 0) = 19
poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}])
recvmsg(3, {msg_name(0)=NULL, msg_iov(2)=[{"passwd\0", 7}, {"\310O\3\0\0\0\0\0", 8}], msg_controllen=20, [{cmsg_len=20, cmsg_level=SOL_SOCKET, cmsg_type=SCM_RIGHTS, [4]}], msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 15
mmap(NULL, 217032, PROT_READ, MAP_SHARED, 4, 0) = 0x7f3d4b45a000
close(4)                                = 0
close(3)                                = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 3
setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
setsockopt(3, SOL_IP, IP_MTU_DISCOVER, [5], 4) = 0
bind(3, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
fcntl(3, F_GETFL)                       = 0x2 (flags O_RDWR)
fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 4
setsockopt(4, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
bind(4, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
fcntl(4, F_GETFL)                       = 0x2 (flags O_RDWR)
fcntl(4, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
listen(4, 256)                          = 0
socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 5
setsockopt(5, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
setsockopt(5, SOL_IPV6, IPV6_V6ONLY, [1], 4) = 0
bind(5, {sa_family=AF_INET6, sin6_port=htons(8953), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0
fcntl(5, F_GETFL)                       = 0x2 (flags O_RDWR)
fcntl(5, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
listen(5, 256)                          = 0
socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 6
setsockopt(6, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
bind(6, {sa_family=AF_INET, sin_port=htons(8953), sin_addr=inet_addr("127.0.0.1")}, 16) = 0
fcntl(6, F_GETFL)                       = 0x2 (flags O_RDWR)
fcntl(6, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
listen(6, 256)                          = 0
socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 7
connect(7, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = 8
fstat(8, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0
poll([{fd=8, events=POLLIN}], 1, 10)    = 1 ([{fd=8, revents=POLLIN}])
read(8, "}\207v\345\274\361p\346\377\363*)\4\202\243\7\26\22\341\274+\233i^\271a\17\n\2226\3\335", 32) = 32
close(8)                                = 0
getuid()                                = 0
open("/var/lib/unbound/etc/unbound/unbound_server.pem", O_RDONLY) = 8
fstat(8, {st_mode=S_IFREG|0640, st_size=1318, ...}) = 0
read(8, "-----BEGIN CERTIFICATE-----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\nTiBR2HIxxnW3c45mAtWyr"..., 4096) = 1318
read(8, "", 4096)                       = 0
close(8)                                = 0
open("/var/lib/unbound/etc/unbound/unbound_server.key", O_RDONLY) = 8
fstat(8, {st_mode=S_IFREG|0640, st_size=2459, ...}) = 0
read(8, "-----BEGIN RSA PRIVATE KEY-----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\nLct9o9U5gkRvE6p1Y"..., 4096) = 2459
close(8)                                = 0
open("/var/lib/unbound/etc/unbound/unbound_server.pem", O_RDONLY) = 8
fstat(8, {st_mode=S_IFREG|0640, st_size=1318, ...}) = 0
read(8, "-----BEGIN CERTIFICATE-----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\nTiBR2HIxxnW3c45mAtWyr"..., 4096) = 1318
read(8, "", 4096)                       = 0
close(8)                                = 0
open("/var/lib/unbound/etc/unbound/unbound_server.pem", O_RDONLY) = 8
fstat(8, {st_mode=S_IFREG|0640, st_size=1318, ...}) = 0
read(8, "-----BEGIN CERTIFICATE-----\nMIIDoDCCAggCCQDsuU96RnOCZjANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAd1\nbmJvdW5kMB4XDTE3MTAyNzIwMTcxN1oXDTM3MDcxNDIwMTcxN1owEjEQMA4GA1UE\nAwwHdW5ib3VuZDCCAaIwDQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBALuugXcJ\nLGHwHt1jdAWMVVnnKV8qoX19sMbt+vWF7Vp4Vsefr3EnBdD0X1+7uRdg7Aa9ITNo\n3tMVqTP5zehrf4HVhOP6yfDozBue5PoNZAP2M2ixLIlcprlhzjX5D9nmTV3NrnFY\noI2rpx6QPgxSqfVgP8L9M8rCQB5dXFAzJMIkvgIHLrBuYxFbg0iJcn0f7Lh+ZfT2\nYGp+vpObmzKXXrgYm8Ag1HVv8DDPT0hUrF+tD+93wSG9txWHZOX2dhjajid0FipV\n6/VSw+rogoHqcdOe/cJAHwc2gpqguoenJXsq8ECMmhcuugGQHqsWbUXvS5qBldxE\nL4OHZAzAnTi2c8CSoIBTp/aNqaI0SKa4N6ZSMfs2TNyg1PX+MHL+c7gV9ZpQCrIy\nxQfhzUHNhptT70B/cKa8jUj8gc2NIBEPIIcIIEZFtAm7Y/iagKSZdCo1kYyzHb3n\n0NbqqpqoBFYO9UOoyXN5gFR1OD8x9n62r5ZIzmv8JmvbYKnzBtx2YDjrFQIDAQAB\nMA0GCSqGSIb3DQEBCwUAA4IBgQBN/xHUQ512rKXQVgwo6oJmnCtgMrDJ9v3HkI4b\nEzHRGLgHU3CBpfXK2eYNEjn0z86PEMGQ6eCaFEJFNEhCngB39T3t/NWXn/HAp/d5\n4RO/QPU/a/eBvXVYT5fB1ImTVKprJq2DeJP6CDjHLVEhYzA3Yh6IcSkiNa4dK7W8\npSjxtuFloAv0jjPG9ZosV+/922HOzQNUqypMcW0ijWkIRXTxSTZxyE2sd0aFmN/3\nTiBR2HIxxnW3c45mAtWyr"..., 4096) = 1318
read(8, "", 4096)                       = 0
close(8)                                = 0
open("/var/lib/unbound/etc/unbound/./unbound.pid", O_RDONLY) = -1 ENOENT (No such file or directory)
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f3d4b4d19d0) = 72587
strace: Process 72587 attached
[pid 72586] exit_group(0)               = ?
[pid 72587] set_robust_list(0x7f3d4b4d19e0, 24) = 0
[pid 72587] setsid()                    = 72587
[pid 72587] open("/dev/null", O_RDWR <unfinished ...>
[pid 72586] +++ exited with 0 +++
<... open resumed> )                    = 8
fstat(8, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 3), ...}) = 0
dup2(8, 0)                              = 0
dup2(8, 1)                              = 1
dup2(8, 2)                              = 2
close(8)                                = 0
open("/var/lib/unbound/etc/unbound/./unbound.pid", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 8
fstat(8, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
write(8, "72587\n", 6)                  = 6
close(8)                                = 0
chdir("/var/lib/unbound")               = 0
chroot("/var/lib/unbound")              = 0
chdir("/")                              = 0
chdir("/etc/unbound")                   = 0
open("/proc/sys/kernel/ngroups_max", O_RDONLY) = -1 ENOENT (No such file or directory)
socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 8
connect(8, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(8)                                = 0
socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 8
connect(8, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(8)                                = 0
open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/tls/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/lib/x86_64-linux-gnu/tls/x86_64", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/tls/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/lib/x86_64-linux-gnu/tls", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/lib/x86_64-linux-gnu/x86_64", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/lib/x86_64-linux-gnu/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/lib/x86_64-linux-gnu", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/tls/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/usr/lib/x86_64-linux-gnu/tls/x86_64", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/tls/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/usr/lib/x86_64-linux-gnu/tls", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/usr/lib/x86_64-linux-gnu/x86_64", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/usr/lib/x86_64-linux-gnu/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/usr/lib/x86_64-linux-gnu", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/lib/tls/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/lib/tls/x86_64", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/lib/tls/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/lib/tls", 0x7fff72761fa0)        = -1 ENOENT (No such file or directory)
open("/lib/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/lib/x86_64", 0x7fff72761fa0)     = -1 ENOENT (No such file or directory)
open("/lib/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/lib", 0x7fff72761fa0)            = -1 ENOENT (No such file or directory)
open("/usr/lib/tls/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/usr/lib/tls/x86_64", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/usr/lib/tls/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/usr/lib/tls", 0x7fff72761fa0)    = -1 ENOENT (No such file or directory)
open("/usr/lib/x86_64/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/usr/lib/x86_64", 0x7fff72761fa0) = -1 ENOENT (No such file or directory)
open("/usr/lib/libnss_compat.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
stat("/usr/lib", 0x7fff72761fa0)        = -1 ENOENT (No such file or directory)
setgroups(1, [125])                     = 0
setresgid(125, 125, 125)                = 0
setresuid(119, 119, 119)                = 0
brk(0x560e22e92000)                     = 0x560e22e92000
brk(0x560e22eb3000)                     = 0x560e22eb3000
brk(0x560e22ed4000)                     = 0x560e22ed4000
brk(0x560e22ef5000)                     = 0x560e22ef5000
brk(0x560e22f16000)                     = 0x560e22f16000
brk(0x560e22f37000)                     = 0x560e22f37000
sendto(7, "<29>Mar 16 23:28:59 unbound: [72587:0] notice: init module 0: validator", 71, MSG_NOSIGNAL, NULL, 0) = 71
brk(0x560e22f58000)                     = 0x560e22f58000
open("/root.key", O_RDONLY)             = 8
fstat(8, {st_mode=S_IFREG|0644, st_size=1252, ...}) = 0
read(8, "; autotrust trust anchor file\n;;id: . 1\n;;last_queried: 1521215598 ;;Fri Mar 16 15:53:18 2018\n;;last_success: 1521215598 ;;Fri Mar 16 15:53:18 2018\n;;next_probe_time: 1521257719 ;;Sat Mar 17 03:35:19 2018\n;;query_failed: 0\n;;query_interval: 43200\n;;retry_time: 8640\n.\t172800\tIN\tDNSKEY\t257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ;{id = 20326 (ksk), size = 2048b} ;;state=2 [  VALID  ] ;;count=0 ;;lastchange=1520361949 ;;Tue Mar  6 18:45:49 2018\n.\t172800\tIN\tDNSKEY\t257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJP"..., 4096) = 1252
read(8, "", 4096)                       = 0
close(8)                                = 0
sendto(7, "<29>Mar 16 23:28:59 unbound: [72587:0] notice: init module 1: iterator", 70, MSG_NOSIGNAL, NULL, 0) = 70
getrandom("\322\36\330K;.o\303[\2763\240\234S\333\34\2wKE\317\344\306\271\240i\255\10\320\367\306\272\216PD\362\300\307qU", 40, 0) = 40
mmap(NULL, 16, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4e0000
mmap(NULL, 1088, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b4df000
mmap(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b419000
mmap(NULL, 241664, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3d4b3de000
socketpair(PF_LOCAL, SOCK_STREAM, 0, [8, 9]) = 0
fcntl(8, F_GETFL)                       = 0x2 (flags O_RDWR)
fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
fcntl(9, F_GETFL)                       = 0x2 (flags O_RDWR)
fcntl(9, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
munmap(0x7f3d4b419000, 266240)          = 0
getuid()                                = 119
geteuid()                               = 119
getgid()                                = 125
getegid()                               = 125
epoll_create(32000)                     = 10
fcntl(10, F_GETFD)                      = 0
fcntl(10, F_SETFD, FD_CLOEXEC)          = 0
getuid()                                = 119
geteuid()                               = 119
getgid()                                = 125
getegid()                               = 125
socketpair(PF_LOCAL, SOCK_STREAM, 0, [11, 12]) = 0
fcntl(11, F_GETFD)                      = 0
fcntl(11, F_SETFD, FD_CLOEXEC)          = 0
fcntl(12, F_GETFD)                      = 0
fcntl(12, F_SETFD, FD_CLOEXEC)          = 0
fcntl(11, F_GETFL)                      = 0x2 (flags O_RDWR)
fcntl(11, F_SETFL, O_RDWR|O_NONBLOCK)   = 0
fcntl(12, F_GETFL)                      = 0x2 (flags O_RDWR)
fcntl(12, F_SETFL, O_RDWR|O_NONBLOCK)   = 0
getuid()                                = 119
geteuid()                               = 119
getgid()                                = 125
getegid()                               = 125
rt_sigprocmask(SIG_UNBLOCK, [HUP], NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [INT], NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [QUIT], NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [TERM], NULL, 8) = 0
rt_sigaction(SIGHUP, {0x7f3d4a84a370, ~[RTMIN RT_1], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, {0x560e217bf610, [HUP], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, 8) = 0
epoll_ctl(10, EPOLL_CTL_ADD, 12, {EPOLLIN, {u32=12, u64=12}}) = 0
rt_sigaction(SIGQUIT, {0x7f3d4a84a370, ~[RTMIN RT_1], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, {0x560e217bf610, [QUIT], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, 8) = 0
rt_sigaction(SIGTERM, {0x7f3d4a84a370, ~[RTMIN RT_1], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, {0x560e217bf610, [TERM], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, 8) = 0
rt_sigaction(SIGINT, {0x7f3d4a84a370, ~[RTMIN RT_1], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, {0x560e217bf610, [INT], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, 8) = 0
epoll_ctl(10, EPOLL_CTL_ADD, 6, {EPOLLIN, {u32=6, u64=6}}) = 0
epoll_ctl(10, EPOLL_CTL_ADD, 5, {EPOLLIN, {u32=5, u64=5}}) = 0
brk(0x560e22f79000)                     = 0x560e22f79000
epoll_ctl(10, EPOLL_CTL_ADD, 4, {EPOLLIN, {u32=4, u64=4}}) = 0
brk(0x560e22fa9000)                     = 0x560e22fa9000
brk(0x560e22fd9000)                     = 0x560e22fd9000
brk(0x560e23009000)                     = 0x560e23009000
epoll_ctl(10, EPOLL_CTL_ADD, 3, {EPOLLIN, {u32=3, u64=3}}) = 0
brk(0x560e23039000)                     = 0x560e23039000
brk(0x560e23069000)                     = 0x560e23069000
brk(0x560e23099000)                     = 0x560e23099000
brk(0x560e230c9000)                     = 0x560e230c9000
brk(0x560e230ea000)                     = 0x560e230ea000
brk(0x560e2310b000)                     = 0x560e2310b000
brk(0x560e2312c000)                     = 0x560e2312c000
brk(0x560e2314d000)                     = 0x560e2314d000
brk(0x560e2316e000)                     = 0x560e2316e000
brk(0x560e2318f000)                     = 0x560e2318f000
brk(0x560e231b0000)                     = 0x560e231b0000
brk(0x560e231d1000)                     = 0x560e231d1000
brk(0x560e231f2000)                     = 0x560e231f2000
brk(0x560e23213000)                     = 0x560e23213000
brk(0x560e23234000)                     = 0x560e23234000
brk(0x560e23255000)                     = 0x560e23255000
brk(0x560e23276000)                     = 0x560e23276000
brk(0x560e23297000)                     = 0x560e23297000
brk(0x560e232b8000)                     = 0x560e232b8000
brk(0x560e2330c000)                     = 0x560e2330c000
brk(0x560e2334e000)                     = 0x560e2334e000
epoll_ctl(10, EPOLL_CTL_ADD, 8, {EPOLLIN, {u32=8, u64=8}}) = 0
brk(0x560e2336f000)                     = 0x560e2336f000
brk(0x560e23393000)                     = 0x560e23393000
brk(0x560e233b7000)                     = 0x560e233b7000
brk(0x560e233db000)                     = 0x560e233db000
brk(0x560e233ff000)                     = 0x560e233ff000
brk(0x560e23423000)                     = 0x560e23423000
brk(0x560e23447000)                     = 0x560e23447000
brk(0x560e2346b000)                     = 0x560e2346b000
brk(0x560e2348f000)                     = 0x560e2348f000
brk(0x560e234b3000)                     = 0x560e234b3000
brk(0x560e234d7000)                     = 0x560e234d7000
brk(0x560e23507000)                     = 0x560e23507000
sendto(7, "<30>Mar 16 23:28:59 unbound: [72587:0] info: start of service (unbound 1.5.8).", 78, MSG_NOSIGNAL, NULL, 0) = 78
epoll_wait(10, [], 32, 0)               = 0
epoll_wait(10, 0x560e22f47ab0, 32, 2100000) = -1 EINTR (Interrupted system call)
--- SIGTERM {si_signo=SIGTERM, si_code=SI_USER, si_pid=71765, si_uid=0} ---
sendto(11, "\17", 1, 0, NULL, 0)        = 1
rt_sigreturn({mask=[]})                 = -1 EINTR (Interrupted system call)
epoll_wait(10, [{EPOLLIN, {u32=12, u64=12}}], 32, 2100000) = 1
recvfrom(12, "\17", 1024, 0, NULL, NULL) = 1
recvfrom(12, 0x7f3d4aa6d500, 1024, 0, NULL, NULL) = -1 EAGAIN (Resource temporarily unavailable)
epoll_wait(10, [], 32, 0)               = 0
sendto(7, "<30>Mar 16 23:34:54 unbound: [72587:0] info: service stopped (unbound 1.5.8).", 77, MSG_NOSIGNAL, NULL, 0) = 77
rt_sigaction(SIGTERM, {0x560e217bf610, [TERM], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {0x7f3d4a84a370, ~[KILL STOP RTMIN RT_1], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, 8) = 0
rt_sigaction(SIGQUIT, {0x560e217bf610, [QUIT], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {0x7f3d4a84a370, ~[KILL STOP RTMIN RT_1], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, 8) = 0
rt_sigaction(SIGHUP, {0x560e217bf610, [HUP], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {0x7f3d4a84a370, ~[KILL STOP RTMIN RT_1], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, 8) = 0
rt_sigaction(SIGPIPE, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, 8) = 0
rt_sigaction(SIGINT, {0x560e217bf610, [INT], SA_RESTORER|SA_RESTART, 0x7f3d4ad0c4b0}, {0x7f3d4a84a370, ~[KILL STOP RTMIN RT_1], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, 8) = 0
epoll_ctl(10, EPOLL_CTL_DEL, 5, 0x7fff727629e0) = 0
epoll_ctl(10, EPOLL_CTL_DEL, 6, 0x7fff727629e0) = 0
sendto(7, "<30>Mar 16 23:34:54 unbound: [72587:0] info: server stats for thread 0: 0 queries, 0 answers from cache, 0 recursions, 0 prefetch", 129, MSG_NOSIGNAL, NULL, 0) = 129
sendto(7, "<30>Mar 16 23:34:54 unbound: [72587:0] info: server stats for thread 0: requestlist max 0 avg 0 exceeded 0 jostled 0", 116, MSG_NOSIGNAL, NULL, 0) = 116
epoll_ctl(10, EPOLL_CTL_DEL, 3, 0x7fff727629c0) = 0
epoll_ctl(10, EPOLL_CTL_DEL, 4, 0x7fff727629c0) = 0
rt_sigaction(SIGINT, {0x560e217bf610, [INT], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, NULL, 8) = 0
rt_sigaction(SIGTERM, {0x560e217bf610, [TERM], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {0x560e217bf610, [QUIT], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, NULL, 8) = 0
rt_sigaction(SIGHUP, {0x560e217bf610, [HUP], SA_RESTORER|SA_RESTART, 0x7f3d4b0b2390}, NULL, 8) = 0
epoll_ctl(10, EPOLL_CTL_DEL, 8, 0x7fff727629d0) = 0
close(8)                                = 0
close(9)                                = 0
munmap(0x7f3d4b3de000, 241664)          = 0
epoll_ctl(10, EPOLL_CTL_DEL, 12, 0x7fff727629c0) = 0
close(11)                               = 0
close(12)                               = 0
close(10)                               = 0
brk(0x560e234a3000)                     = 0x560e234a3000
brk(0x560e2343f000)                     = 0x560e2343f000
brk(0x560e233db000)                     = 0x560e233db000
brk(0x560e23377000)                     = 0x560e23377000
brk(0x560e22f69000)                     = 0x560e22f69000
munmap(0x7f3d4b48f000, 266240)          = 0
open("/etc/unbound/./unbound.pid", O_WRONLY|O_TRUNC) = -1 EACCES (Permission denied)
unlink("/etc/unbound/./unbound.pid")    = -1 EACCES (Permission denied)
close(4)                                = 0
close(3)                                = 0
close(6)                                = 0
close(5)                                = 0
brk(0x560e22e7b000)                     = 0x560e22e7b000
close(7)                                = 0
exit_group(0)                           = ?
+++ exited with 0 +++
root@DFW01-CPS02:~#
Comment 5 Wouter Wijngaards 2018-03-19 09:09:19 CET
Hi,

Unbound only chowns the pidfile if the string of the pidfile: statement in unbound.conf starts with the chroot path.  So, the configuration setting has to be pidfile: "/var/lib/unbound/unbound.pid"

The path has to start with the chroot path, i.e. is has to be an absolute path.  Something that is common in chroot configuration (also for other servers, eg. NSD).

Best regards, Wouter
Comment 6 shawnzhou00 2018-03-21 17:51:33 CET
Thanks Wouter. Setting the pidfile with the chroot prefix works fine.
Comment 7 shawnzhou00 2018-03-22 19:05:36 CET
The default apparmor policy for unbound doesn't give permission for /var/lib/unbound/unbound.pid. Any suggestions on how to tweak the policy to work and not give unbound necessary privilege?