solar@simple / $ id uid=2600(solar) gid=2600(solar) groups=2600(solar),18(audio),35(games),250(portage) solar@simple / $ ls -l /bin/netstat -rwxr-xr-- 1 root root 96468 Aug 17 08:34 /bin/netstat solar@simple / $ netstat -bash: /bin/netstat: Permission denied solar@simple / $ /lib/ld-linux.so.2 /bin/netstat Active Internet connections (w/o servers) Proto Recv-Q Send-Q Local Address Foreign Address State /proc/net/tcp: Permission denied ----------------------------------------------------------------------------- strace -i -f -v /lib/ld-linux.so.2 /bin/netstat upeek: ptrace(PTRACE_PEEKUSER,1600,48,0): No such process [????????] execve("/lib/ld-linux.so.2", ["/lib/ld-linux.so.2", "/bin/netstat"], [/* 44 vars */]) = 0 [0a0a833f] brk(0) = 0xa0c008c [0a0a833f] brk(0xa0c1000) = 0xa0c1000 [0a0a8db4] open("/bin/netstat", O_RDONLY) = 3 [0a0a8e34] read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\3403\0"..., 512) = 512 [0a0a8cf0] fstat64(3, {st_dev=makedev(8, 6), st_ino=33667, st_mode=S_IFREG|0754, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=200, st_size=96468, st_atime=2004/10/01-16:42:18, st_mtime=2004/08/17-08:34:12, st_ctime=2004/10/01-16:41:32}) = 0 [0a0a9c3d] old_mmap(NULL, 98492, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x2959e000 [0a0a9c3d] old_mmap(0x295b3000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x295b3000 [0a0a9c3d] old_mmap(0x295b6000, 188, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x295b6000 [0a0a8ded] close(3) = 0 [0a0a8db4] open("/etc/ld.so.preload", O_RDONLY) = -1 ENOENT (No such file or directory) [0a0a8db4] open("/etc/ld.so.cache", O_RDONLY) = 3 [0a0a8cf0] fstat64(3, {st_dev=makedev(8, 6), st_ino=196305, st_mode=S_IFREG|0644, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=160, st_size=77680, st_atime=2004/10/01-16:42:13, st_mtime=2004/10/01-15:33:51, st_ctime=2004/10/01-15:33:51}) = 0 [0a0a9c3d] old_mmap(NULL, 77680, PROT_READ, MAP_PRIVATE, 3, 0) = 0x295b7000 [0a0a8ded] close(3) = 0 [0a0a8db4] open("/lib/libc.so.6", O_RDONLY) = 3 [0a0a8e34] read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0aS\1\000"..., 512) = 512 [0a0a8cf0] fstat64(3, {st_dev=makedev(8, 6), st_ino=705461, st_mode=S_IFREG|0755, st_nlink=1, st_uid=0, st_gid=0, st_blksize=4096, st_blocks=2144, st_size=1090280, st_atime=2004/10/01-16:42:18, st_mtime=2004/09/05-23:53:30, st_ctime=2004/09/05-23:54:41}) = 0 [0a0a9c3d] old_mmap(NULL, 1010980, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x295ca000 [0a0a9c3d] old_mmap(0x296bb000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf0000) = 0x296bb000 [0a0a9c3d] old_mmap(0x296bf000, 7460, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x296bf000 [0a0a8ded] close(3) = 0 [0a0a9cc4] mprotect(0x296bb000, 4096, PROT_READ) = 0 [0a0a9cc4] mprotect(0x295b3000, 4096, PROT_READ) = 0 [0a0a9c81] munmap(0x295b7000, 77680) = 0 [2965eba8] open("/dev/urandom", O_RDONLY) = 3 [2965ed58] read(3, "\315\310\327\270", 4) = 4 [2965ecd1] close(3) = 0 [2965e3d5] fstat64(1, {st_dev=makedev(0, 7), st_ino=7916, st_mode=S_IFCHR|0620, st_nlink=1, st_uid=2600, st_gid=5, st_blksize=1024, st_blocks=0, st_rdev=makedev(136, 3), st_atime=2004/10/01-16:42:18, st_mtime=2004/10/01-16:42:18, st_ctime=2004/10/01-12:44:25}) = 0 [29668cfd] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x295b7000 [2965edd8] write(1, "Active Internet connections (w/o"..., 42Active Internet connections (w/o servers) ) = 42 [2965edd8] write(1, "Proto Recv-Q Send-Q Local Addres"..., 80Proto Recv-Q Send-Q Local Address Foreign Address State ) = 80 [296656e3] brk(0) = 0xa0c1000 [296656e3] brk(0xa0e2000) = 0xa0e2000 [2965eba8] open("/proc/net/tcp", O_RDONLY) = -1 EACCES (Permission denied) [2965f59d] dup(2) = 3 [2965efd9] fcntl64(3, F_GETFL) = 0x2 (flags O_RDWR) [2965e3d5] fstat64(3, {st_dev=makedev(0, 7), st_ino=7916, st_mode=S_IFCHR|0620, st_nlink=1, st_uid=2600, st_gid=5, st_blksize=1024, st_blocks=0, st_rdev=makedev(136, 3), st_atime=2004/10/01-16:42:18, st_mtime=2004/10/01-16:42:18, st_ctime=2004/10/01-12:44:25}) = 0 [29668cfd] old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x295b8000 [2966b7c3] _llseek(3, 0, 0x5f53a1b0, SEEK_CUR) = -1 ESPIPE (Illegal seek) [2965edd8] write(3, "/proc/net/tcp: Permission denied"..., 33/proc/net/tcp: Permission denied ) = 33 [2961e7b6] close(3) = 0 [29668de1] munmap(0x295b8000, 4096) = 0 [29668de1] munmap(0x295b7000, 4096) = 0 [29641017] exit_group(-1) = ?