The /bin/sh and csh files have permission of 555
I switched a user to /sbin/sh witht the same results.
Here is a listing of the truss:
execve("/usr/bin/su", 0xFFBEF5CC, 0xFFBEF5DC) argc = 3
resolvepath("/usr/lib/ld.so.1", "/usr/lib/ld.so.1", 1023) = 16
open("/var/ld/ld.config", O_RDONLY) Err#2 ENOENT
stat("/usr/lib/libcrypt_i.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libcrypt_i.so.1", "/usr/lib/libcrypt_i.so.1", 1023) = 24
open("/usr/lib/libcrypt_i.so.1", O_RDONLY) = 3
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF390000
mmap(0x14444B20, 81920, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF370000
mmap(0xFF370000, 6800, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF370000
mmap(0xFF382000, 1612, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 8192) = 0xFF382000
munmap(0xFF372000, 65536) = 0
memcntl(0xFF370000, 3628, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/lib/libcmd.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libcmd.so.1", "/usr/lib/libcmd.so.1", 1023) = 20
open("/usr/lib/libcmd.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x0393DCF0, 90112, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF350000
mmap(0xFF350000, 10780, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF350000
mmap(0xFF364000, 1155, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 16384) = 0xFF364000
munmap(0xFF354000, 65536) = 0
memcntl(0xFF350000, 4344, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/lib/libbsm.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libbsm.so.1", "/usr/lib/libbsm.so.1", 1023) = 20
open("/usr/lib/libbsm.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x04C4D340, 155648, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF320000
mmap(0xFF320000, 70322, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF320000
mmap(0xFF342000, 8760, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 73728) = 0xFF342000
munmap(0xFF332000, 65536) = 0
memcntl(0xFF320000, 21192, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/lib/libmp.so.2", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libmp.so.2", "/usr/lib/libmp.so.2", 1023) = 19
open("/usr/lib/libmp.so.2", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x03949C58, 90112, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF300000
mmap(0xFF300000, 11316, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF300000
mmap(0xFF314000, 865, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 16384) = 0xFF314000
munmap(0xFF304000, 65536) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFF2F0000
memcntl(0xFF300000, 3124, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/lib/libsocket.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libsocket.so.1", "/usr/lib/libsocket.so.1", 1023) = 23
open("/usr/lib/libsocket.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x04C4CF58, 114688, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF2D0000
mmap(0xFF2D0000, 40558, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF2D0000
mmap(0xFF2EA000, 4365, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 40960) = 0xFF2EA000
munmap(0xFF2DA000, 65536) = 0
memcntl(0xFF2D0000, 14496, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/lib/libnsl.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libnsl.so.1", "/usr/lib/libnsl.so.1", 1023) = 20
open("/usr/lib/libnsl.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x07273CE0, 655360, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF200000
mmap(0xFF200000, 582238, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF200000
mmap(0xFF290000, 33256, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 589824) = 0xFF290000
mmap(0xFF29A000, 23312, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xFF29A000
memcntl(0xFF200000, 84064, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/lib/libdl.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libdl.so.1", "/usr/lib/libdl.so.1", 1023) = 19
open("/usr/lib/libdl.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x3938E530, 8192, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF2C0000
mmap(0xFF2C0000, 2302, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF2C0000
close(3) = 0
stat("/usr/lib/libproject.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libproject.so.1", "/usr/lib/libproject.so.1", 1023) = 24
open("/usr/lib/libproject.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x042C5048, 81920, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF1E0000
mmap(0xFF1E0000, 6045, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF1E0000
mmap(0xFF1F2000, 704, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 8192) = 0xFF1F2000
munmap(0xFF1E2000, 65536) = 0
memcntl(0xFF1E0000, 3072, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/lib/libpam.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libpam.so.1", "/usr/lib/libpam.so.1", 1023) = 20
open("/usr/lib/libpam.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x055D4A80, 98304, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF1C0000
mmap(0xFF1C0000, 24491, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF1C0000
mmap(0xFF1D6000, 6303, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 24576) = 0xFF1D6000
munmap(0xFF1C6000, 65536) = 0
memcntl(0xFF1C0000, 7496, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/lib/libc.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libc.so.1", "/usr/lib/libc.so.1", 1023) = 18
open("/usr/lib/libc.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x393942F0, 802816, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF080000
mmap(0xFF080000, 704200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF080000
mmap(0xFF13C000, 24772, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 704512) = 0xFF13C000
munmap(0xFF12C000, 65536) = 0
memcntl(0xFF080000, 113528, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/lib/libgen.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libgen.so.1", "/usr/lib/libgen.so.1", 1023) = 20
open("/usr/lib/libgen.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x144456D8, 98304, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF1A0000
mmap(0xFF1A0000, 23073, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF1A0000
mmap(0xFF1B6000, 2335, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 24576) = 0xFF1B6000
munmap(0xFF1A6000, 65536) = 0
memcntl(0xFF1A0000, 6932, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFF2B0000
stat("/usr/lib/libsecdb.so.1", 0xFFBEEEB0) = 0
resolvepath("/usr/lib/libsecdb.so.1", "/usr/lib/libsecdb.so.1", 1023) = 22
open("/usr/lib/libsecdb.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
mmap(0x042C92B0, 90112, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF180000
mmap(0xFF180000, 14138, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF180000
mmap(0xFF194000, 1399, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 16384) = 0xFF194000
munmap(0xFF184000, 65536) = 0
memcntl(0xFF180000, 5784, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
stat("/usr/platform/SUNW,Sun-Fire-280R/lib/libc_psr.so.1", 0xFFBEEBC8) = 0
resolvepath("/usr/platform/SUNW,Sun-Fire-280R/lib/libc_psr.so.1", "/usr/platform/sun4u-us3/lib/libc_psr.so.1", 1023) = 41
open("/usr/platform/SUNW,Sun-Fire-280R/lib/libc_psr.so.1", O_RDONLY) = 3
mmap(0xFF390000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF390000
close(3) = 0
brk(0x00025EB8) = 0
brk(0x00027EB8) = 0
stat("/usr/lib/locale/en_US.ISO8859-1/en_US.ISO8859-1.so.2", 0xFFBED7A8) = 0
resolvepath("/usr/lib/locale/en_US.ISO8859-1/en_US.ISO8859-1.so.2", "/usr/lib/locale/en_US.ISO8859-1/en_US.ISO8859-1.so.2"
, 1023) = 52
open("/usr/lib/locale/en_US.ISO8859-1/en_US.ISO8859-1.so.2", O_RDONLY) = 3
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF170000
mmap(0x00000000, 90112, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF150000
mmap(0xFF150000, 15170, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF150000
mmap(0xFF162000, 9134, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 8192) = 0xFF162000
munmap(0xFF154000, 57344) = 0
memcntl(0xFF150000, 7260, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
munmap(0xFF170000, 8192) = 0
open("/etc/default/su", O_RDONLY) = 3
llseek(3, 0, SEEK_CUR) = 0
llseek(3, 0, SEEK_SET) = 0
fstat64(3, 0xFFBEE398) = 0
brk(0x00027EB8) = 0
brk(0x00029EB8) = 0
ioctl(3, TCGETA, 0xFFBEE324) Err#25 ENOTTY
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
llseek(3, 0xFFFFFFFFFFFFFDD7, SEEK_CUR) = 150
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
read(3, 0x00027444, 8192) = 0
llseek(3, 0, SEEK_CUR) = 703
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
read(3, 0x00027444, 8192) = 0
llseek(3, 0, SEEK_CUR) = 703
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
read(3, 0x00027444, 8192) = 0
llseek(3, 0, SEEK_CUR) = 703
llseek(3, 0, SEEK_SET) = 0
read(3, " # i d e n t\t " @ ( # )".., 8192) = 703
llseek(3, 0, SEEK_CUR) = 703
close(3) = 0
fstat64(0, 0xFFBEE458) = 0
ioctl(0, TCGETA, 0xFFBEE33C) = 0
stat64("/dev/tty", 0xFFBEE3C0) = 0
stat64("/dev/console", 0xFFBEE3C0) = 0
stat64("/dev/conslog", 0xFFBEE3C0) = 0
stat64("/dev/syscon", 0xFFBEE3C0) = 0
stat64("/dev/systty", 0xFFBEE3C0) = 0
stat64("/dev/wscons", 0xFFBEE3C0) = 0
open("/etc/ttysrch", O_RDONLY) = 3
stat64("/etc/ttysrch", 0xFFBEE2B8) = 0
read(3, " # i d e n t\t " @ ( # )".., 1408) = 1408
close(3) = 0
stat64("/dev/pts/4", 0xFFBEE2B8) = 0
fstat64(0, 0xFFBEDD10) = 0
ioctl(0, TCGETA, 0xFFBEDBF4) = 0
stat64("/dev/tty", 0xFFBEDC78) = 0
stat64("/dev/console", 0xFFBEDC78) = 0
stat64("/dev/conslog", 0xFFBEDC78) = 0
stat64("/dev/syscon", 0xFFBEDC78) = 0
stat64("/dev/systty", 0xFFBEDC78) = 0
stat64("/dev/wscons", 0xFFBEDC78) = 0
open("/etc/ttysrch", O_RDONLY) = 3
stat64("/etc/ttysrch", 0xFFBEDB70) = 0
read(3, " # i d e n t\t " @ ( # )".., 1408) = 1408
close(3) = 0
stat64("/dev/pts/4", 0xFFBEDB70) = 0
open("/var/adm/utmpx", O_RDONLY) = 3
fstat64(3, 0xFFBEDC50) = 0
ioctl(3, TCGETA, 0xFFBEDBDC) Err#25 ENOTTY
read(3, "\0\0\0\0\0\0\0\0\0\0\0\0".., 8192) = 4092
llseek(3, 0, SEEK_CUR) = 4092
close(3) = 0
open64("/var/adm/utmpx", O_RDONLY) = 3
llseek(3, 3720, SEEK_SET) = 3720
read(3, " r o o t\0\0\0\0\0\0\0\0".., 372) = 372
close(3) = 0
open("/var/adm/sulog", O_WRONLY|O_APPEND|O_CREAT, 0600) = 3
close(3) = 0
chown("/var/adm/sulog", 0, 0) = 0
open("/etc/pam_debug", O_RDONLY) Err#2 ENOENT
stat64("/etc/pam.conf", 0xFFBEE378) = 0
open("/etc/pam.conf", O_RDONLY) = 3
mmap(0x00000000, 2609, PROT_READ, MAP_PRIVATE, 3, 0) = 0xFF170000
munmap(0xFF170000, 2609) = 0
close(3) = 0
uname(0x00024E18) = 1
auditsys(BSM_AUDITCTL, 0x00000014) = 0
open("/etc/nsswitch.conf", O_RDONLY) = 3
fcntl(3, F_DUPFD, 0x00000100) Err#22 EINVAL
read(3, " #\n # / e t c / n s s".., 1024) = 780
read(3, 0x00028820, 1024) = 0
close(3) = 0
stat("/usr/lib/nss_files.so.1", 0xFFBEDD48) = 0
resolvepath("/usr/lib/nss_files.so.1", "/usr/lib/nss_files.so.1", 1023) = 23
open("/usr/lib/nss_files.so.1", O_RDONLY) = 3
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF170000
mmap(0x055D7190, 98304, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF060000
mmap(0xFF060000, 19978, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF060000
mmap(0xFF076000, 1760, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 24576) = 0xFF076000
munmap(0xFF066000, 65536) = 0
memcntl(0xFF060000, 6884, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(3) = 0
munmap(0xFF170000, 8192) = 0
open("/etc/shadow", O_RDONLY|O_LARGEFILE) = 3
fcntl(3, F_DUPFD, 0x00000100) Err#22 EINVAL
read(3, " r o o t : q 2 e h f a /".., 1024) = 388
close(3) = 0
auditsys(35, 0xFF345154) = 0
auditsys(35, 0xFFBEE4C8) = 0
getuid() = 0 [0]
getgid() = 1 [1]
getuid() = 0 [0]
getgid() = 1 [1]
getpid() = 558 [557]
fstat(-1, 0xFFBEE468) Err#9 EBADF
sigaction(SIGQUIT, 0xFFBEE430, 0xFFBEE4B0) = 0
sigaction(SIGINT, 0xFFBEE430, 0xFFBEE4B0) = 0
open64("/etc/.name_service_door", O_RDONLY) = 3
fcntl(3, F_SETFD, 0x00000001) = 0
door_info(3, 0xFF142748) = 0
door_call(3, 0xFFBEE020) = 0
getuid() = 0 [0]
open("/etc/security/audit_control", O_RDONLY) = 4
llseek(4, 0, SEEK_CUR) = 0
llseek(4, 0, SEEK_SET) = 0
fstat64(4, 0xFFBEDF68) = 0
brk(0x00029EB8) = 0
brk(0x0002BEB8) = 0
ioctl(4, TCGETA, 0xFFBEDEF4) Err#25 ENOTTY
read(4, " #\n # C o p y r i g h".., 8192) = 183
open("/etc/security/audit_class", O_RDONLY) = 5
fstat64(5, 0xFFBEDF50) = 0
brk(0x0002BEB8) = 0
brk(0x0002DEB8) = 0
ioctl(5, TCGETA, 0xFFBEDEDC) Err#25 ENOTTY
read(5, " #\n # C o p y r i g h".., 8192) = 1376
read(5, 0x0002B45C, 8192) = 0
llseek(5, 0, SEEK_CUR) = 1376
close(5) = 0
open("/etc/security/audit_class", O_RDONLY) = 5
fstat64(5, 0xFFBEDDE8) = 0
ioctl(5, TCGETA, 0xFFBEDD74) Err#25 ENOTTY
read(5, " #\n # C o p y r i g h".., 8192) = 1376
read(5, 0x0002B5AC, 8192) = 0
llseek(5, 0, SEEK_CUR) = 1376
close(5) = 0
llseek(4, 0xFFFFFFFFFFFFFFEA, SEEK_CUR) = 161
close(4) = 0
open("/etc/security/audit_user", O_RDONLY|O_LARGEFILE) = 4
fcntl(4, F_DUPFD, 0x00000100) Err#22 EINVAL
open("/etc/security/audit_user", O_RDONLY|O_LARGEFILE) = 5
fcntl(5, F_DUPFD, 0x00000100) Err#22 EINVAL
read(5, " #\n # C o p y r i g h".., 1024) = 188
read(5, 0x00029C78, 1024) = 0
close(5) = 0
close(4) = 0
auditsys(36, 0xFF345154) = 0
door_info(3, 0xFFBEDDA8) = 0
door_call(3, 0xFFBEDD90) = 0
auditsys(35, 0xFFBEE2C0) = 0
open("/etc/security/audit_event", O_RDONLY) = 4
fstat64(4, 0xFFBEDF28) = 0
ioctl(4, TCGETA, 0xFFBEDEB4) Err#25 ENOTTY
read(4, " #\n # C o p y r i g h".., 8192) = 8192
read(4, " : n t\n 2 1 9 : A U E _".., 8192) = 4217
read(4, 0x0002B5AC, 8192) = 0
llseek(4, 0, SEEK_CUR) = 12409
close(4) = 0
open("/etc/security/audit_event", O_RDONLY) = 4
fstat64(4, 0xFFBEDF28) = 0
ioctl(4, TCGETA, 0xFFBEDEB4) Err#25 ENOTTY
read(4, " #\n # C o p y r i g h".., 8192) = 8192
read(4, " : n t\n 2 1 9 : A U E _".., 8192) = 4217
read(4, 0x0002B5AC, 8192) = 0
llseek(4, 0, SEEK_CUR) = 12409
close(4) = 0
auditsys(BSM_AUDIT, 0x000276D0) = 0
getuid() = 0 [0]
fstat(-1, 0xFFBED838) Err#9 EBADF
open("/dev/conslog", O_WRONLY) = 4
fcntl(4, F_SETFD, 0x00000001) = 0
fstat(4, 0xFFBED838) = 0
fstat(4, 0xFFBEE298) = 0
time() = 1158332220
open("/usr/share/lib/zoneinfo/GMT", O_RDONLY) = 5
read(5, " T Z i f\0\0\0\0\0\0\0\0".., 8192) = 56
close(5) = 0
putmsg(4, 0xFFBED950, 0xFFBED944, 0) = 0
open("/var/run/syslog_door", O_RDONLY) = 5
door_info(5, 0xFFBED888) = 0
getpid() = 558 [557]
door_call(5, 0xFFBED870) = 0
close(5) = 0
fstat(4, 0xFFBEE468) = 0
close(4) = 0
sigaction(SIGQUIT, 0xFFBEE430, 0xFFBEE4B0) = 0
sigaction(SIGINT, 0xFFBEE430, 0xFFBEE4B0) = 0
door_info(3, 0xFFBEDB18) = 0
door_call(3, 0xFFBEDB00) = 0
open("/etc/project", O_RDONLY|O_LARGEFILE) = 4
fcntl(4, F_DUPFD, 0x00000100) Err#22 EINVAL
read(4, " s y s t e m : 0 : : : :".., 1024) = 78
read(4, 0x0002AB58, 1024) = 0
close(4) = 0
door_info(3, 0xFFBEDF30) = 0
door_call(3, 0xFFBEDF18) = 0
door_info(3, 0xFFBEC330) = 0
door_call(3, 0xFFBEC318) = 0
open("/etc/project", O_RDONLY|O_LARGEFILE) = 4
fcntl(4, F_DUPFD, 0x00000100) Err#22 EINVAL
read(4, " s y s t e m : 0 : : : :".., 1024) = 78
read(4, 0x0002AB58, 1024) = 0
close(4) = 0
open("/etc/project", O_RDONLY|O_LARGEFILE) = 4
fcntl(4, F_DUPFD, 0x00000100) Err#22 EINVAL
read(4, " s y s t e m : 0 : : : :".., 1024) = 78
close(4) = 0
settaskid(3, 0x00000000) = 9
open("/var/adm/sulog", O_WRONLY|O_APPEND|O_CREAT, 0666) = 4
llseek(4, 0, SEEK_END) = 7587
time() = 1158332220
fstat64(4, 0xFFBED758) = 0
ioctl(4, TCGETA, 0xFFBED6E4) Err#25 ENOTTY
write(4, " S U 0 9 / 1 5 1 4 :".., 37) = 37
close(4) = 0
setgid(101) = 0
sysconfig(_CONFIG_NGROUPS) = 16
open("/etc/default/nss", O_RDONLY) = 4
fcntl(4, F_DUPFD, 0x00000100) Err#22 EINVAL
read(4, " # i d e n t\t " @ ( #".., 1024) = 754
read(4, 0x0002AB48, 1024) = 0
close(4) = 0
open("/etc/group", O_RDONLY|O_LARGEFILE) = 4
fcntl(4, F_DUPFD, 0x00000100) Err#22 EINVAL
read(4, " r o o t : : 0 : r o o t".., 1024) = 324
brk(0x0002DEB8) = 0
brk(0x0002FEB8) = 0
read(4, 0x0002ABB8, 1024) = 0
close(4) = 0
setgroups(1, 0x0002B5F0) = 0
stat64("/usr/lib/security/pam_authtok_get.so.1", 0xFFBEE380) = 0
stat("/usr/lib/security/pam_authtok_get.so.1", 0xFFBEDEB0) = 0
resolvepath("/usr/lib/security/pam_authtok_get.so.1", "/usr/lib/security/pam_authtok_get.so.1", 1023) = 38
open("/usr/lib/security/pam_authtok_get.so.1", O_RDONLY) = 4
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0xFF170000
mmap(0x81010000, 81920, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF040000
mmap(0xFF040000, 5746, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFF040000
mmap(0xFF052000, 2091, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 8192) = 0xFF052000
munmap(0xFF042000, 65536) = 0
memcntl(0xFF040000, 3288, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(4) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFF030000
stat("/usr/lib/passwdutil.so.1", 0xFFBEDD78) = 0
resolvepath("/usr/lib/passwdutil.so.1", "/usr/lib/passwdutil.so.1", 1023) = 24
open("/usr/lib/passwdutil.so.1", O_RDONLY) = 4
mmap(0xFF170000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFF170000
mmap(0x07273128, 122880, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFF000000
mmap(0xFF000000, 48830, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFF000000
mmap(0xFF01C000, 4043, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 49152) = 0xFF01C000
munmap(0xFF00C000, 65536) = 0
memcntl(0xFF000000, 11272, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(4) = 0
stat("/usr/lib/libsldap.so.1", 0xFFBEDD78) = 0
resolvepath("/usr/lib/libsldap.so.1", "/usr/lib/libsldap.so.1", 1023) = 22
open("/usr/lib/libsldap.so.1", O_RDONLY) = 4
mmap(0xFF170000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFF170000
mmap(0x068EFC50, 221184, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFEFC0000
mmap(0xFEFC0000, 133152, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFEFC0000
mmap(0xFEFF2000, 10849, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 139264) = 0xFEFF2000
munmap(0xFEFE2000, 65536) = 0
memcntl(0xFEFC0000, 21348, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(4) = 0
stat("/usr/lib/sldaputil.so.5", 0xFFBEDD78) = 0
resolvepath("/usr/lib/sldaputil.so.5", "/usr/lib/sldaputil.so.5", 1023) = 23
open("/usr/lib/sldaputil.so.5", O_RDONLY) = 4
mmap(0xFF170000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFF170000
mmap(0x068EF480, 1056768, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFEE80000
mmap(0xFEE80000, 919887, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFEE80000
mmap(0xFEF72000, 41068, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 925696) = 0xFEF72000
mmap(0xFEF7E000, 12256, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANON, -1, 0) = 0xFEF7E000
munmap(0xFEF62000, 65536) = 0
memcntl(0xFEE80000, 57016, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(4) = 0
stat("/usr/lib/libdoor.so.1", 0xFFBEDD78) = 0
resolvepath("/usr/lib/libdoor.so.1", "/usr/lib/libdoor.so.1", 1023) = 21
open("/usr/lib/libdoor.so.1", O_RDONLY) = 4
mmap(0xFF170000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFF170000
mmap(0x068EB218, 81920, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFEFA0000
mmap(0xFEE40000, 6376, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFEE40000
mmap(0xFEE52000, 436, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 8192) = 0xFEE52000
munmap(0xFEE42000, 65536) = 0
memcntl(0xFEE40000, 1768, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(4) = 0
stat("/usr/lib/libaio.so.1", 0xFFBEDD78) = 0
resolvepath("/usr/lib/libaio.so.1", "/usr/lib/libaio.so.1", 1023) = 20
open("/usr/lib/libaio.so.1", O_RDONLY) = 4
mmap(0xFF170000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFF170000
mmap(0x068EF098, 106496, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFEE20000
mmap(0xFEE20000, 28861, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFEE20000
mmap(0xFEE38000, 1584, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 32768) = 0xFEE38000
munmap(0xFEE28000, 65536) = 0
mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0xFEF90000
memcntl(0xFEE20000, 7184, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(4) = 0
munmap(0xFF170000, 8192) = 0
sysconfig(_CONFIG_SEM_VALUE_MAX) = 2147483647
stat64("/usr/lib/security/pam_dhkeys.so.1", 0xFFBEE380) = 0
stat("/usr/lib/security/pam_dhkeys.so.1", 0xFFBEDEB0) = 0
resolvepath("/usr/lib/security/pam_dhkeys.so.1", "/usr/lib/security/pam_dhkeys.so.1", 1023) = 33
open("/usr/lib/security/pam_dhkeys.so.1", O_RDONLY) = 4
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0xFF170000
mmap(0xFF3DE190, 90112, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFEE00000
mmap(0xFEE00000, 12721, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFEE00000
mmap(0xFEE14000, 2928, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 16384) = 0xFEE14000
munmap(0xFEE04000, 65536) = 0
memcntl(0xFEE00000, 5484, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(4) = 0
munmap(0xFF170000, 8192) = 0
stat64("/usr/lib/security/pam_unix_auth.so.1", 0xFFBEE380) = 0
stat("/usr/lib/security/pam_unix_auth.so.1", 0xFFBEDEB0) = 0
resolvepath("/usr/lib/security/pam_unix_auth.so.1", "/usr/lib/security/pam_unix_auth.so.1", 1023) = 36
open("/usr/lib/security/pam_unix_auth.so.1", O_RDONLY) = 4
mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0xFF170000
mmap(0xFEE00000, 81920, PROT_NONE, MAP_PRIVATE|MAP_NORESERVE|MAP_ANON, -1, 0) = 0xFEDE0000
mmap(0xFEDE0000, 4389, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 0) = 0xFEDE0000
mmap(0xFEDF2000, 1898, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 4, 8192) = 0xFEDF2000
munmap(0xFEDE2000, 65536) = 0
memcntl(0xFEDE0000, 2784, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
close(4) = 0
munmap(0xFF170000, 8192) = 0
door_info(3, 0xFFBEDD90) = 0
door_call(3, 0xFFBEDD78) = 0
open("/etc/nsswitch.conf", O_RDONLY) = 4
fcntl(4, F_DUPFD, 0x00000100) Err#22 EINVAL
read(4, " #\n # / e t c / n s s".., 1024) = 780
read(4, 0x0002AFB0, 1024) = 0
close(4) = 0
open("/etc/shadow", O_RDONLY) = 4
fstat64(4, 0xFFBED6D8) = 0
ioctl(4, TCGETA, 0xFFBED664) Err#25 ENOTTY
read(4, " r o o t : q 2 e h f a /".., 8192) = 388
llseek(4, 0xFFFFFFFFFFFFFF9C, SEEK_CUR) = 288
close(4) = 0
sysinfo(SI_SRPC_DOMAIN, "", 256) = 1
setuid(1001) = 0
chdir("/export/home/hilliarm") Err#13 EACCES
No directory!
write(2, " N o d i r e c t o r y".., 14) = 14
llseek(0, 0, SEEK_CUR) = 162389
_exit(1)
[Blue]Blue[/Blue] [Dragon]
If I wasn't Blue, I would just be a Dragon...