execve("/bin/su", ["su", "mysql"], [/* 66 vars */]) = 0
brk(0)                                  = 0x8053000
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f2e000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = -1 ENOENT (No such file or directory)
open("/lib/tls/i686/sse2/libcrypt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/i686/libcrypt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/sse2/libcrypt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/libcrypt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/sse2/libcrypt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/libcrypt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/sse2/libcrypt.so.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/libcrypt.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \10\0\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=22164, ...}) = 0
mmap2(NULL, 184636, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7f00000
mmap2(0xb7f05000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4) = 0xb7f05000
mmap2(0xb7f07000, 155964, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7f07000
close(3)                                = 0
open("/lib/tls/i686/sse2/libpam.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/i686/libpam.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/sse2/libpam.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/libpam.so.0", O_RDONLY)  = -1 ENOENT (No such file or directory)
open("/lib/i686/sse2/libpam.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/libpam.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/sse2/libpam.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/libpam.so.0", O_RDONLY)      = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \24\0\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=29576, ...}) = 0
mmap2(NULL, 31856, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7ef8000
mmap2(0xb7eff000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6) = 0xb7eff000
close(3)                                = 0
open("/lib/tls/i686/sse2/libpam_misc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/i686/libpam_misc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/sse2/libpam_misc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/libpam_misc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/sse2/libpam_misc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/libpam_misc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/sse2/libpam_misc.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/libpam_misc.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P\f\0\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=8576, ...}) = 0
mmap2(NULL, 11360, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7ef5000
mmap2(0xb7ef7000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0xb7ef7000
close(3)                                = 0
open("/lib/tls/i686/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/i686/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/libc.so.6", O_RDONLY)    = -1 ENOENT (No such file or directory)
open("/lib/i686/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/libc.so.6", O_RDONLY)   = -1 ENOENT (No such file or directory)
open("/lib/sse2/libc.so.6", O_RDONLY)   = -1 ENOENT (No such file or directory)
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\212Y\1"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1167888, ...}) = 0
mmap2(NULL, 1140092, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7dde000
mmap2(0xb7eee000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10f) = 0xb7eee000
mmap2(0xb7ef2000, 9596, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7ef2000
close(3)                                = 0
open("/lib/tls/i686/sse2/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/i686/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/sse2/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/libdl.so.2", O_RDONLY)   = -1 ENOENT (No such file or directory)
open("/lib/i686/sse2/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/libdl.so.2", O_RDONLY)  = -1 ENOENT (No such file or directory)
open("/lib/sse2/libdl.so.2", O_RDONLY)  = -1 ENOENT (No such file or directory)
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`\f\0\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=10144, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7ddd000
mmap2(NULL, 12412, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7dd9000
mmap2(0xb7ddb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0xb7ddb000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7dd8000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb7dd86b0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_
in_pages:1, seg_not_present:0, useable:1}) = 0
open("/dev/urandom", O_RDONLY)          = 3
read(3, "\305\344\325C", 4)             = 4
close(3)                                = 0
mprotect(0xb7eee000, 8192, PROT_READ)   = 0
mprotect(0xb7f48000, 4096, PROT_READ)   = 0
open("/usr/lib/locale/locale-archive", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory)
brk(0)                                  = 0x8053000
brk(0x8074000)                          = 0x8074000
open("/usr/share/locale/locale.alias", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/es_ES@euro/LC_IDENTIFICATION", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/es@euro/LC_IDENTIFICATION", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/es_ES/LC_IDENTIFICATION", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/locale/es/LC_IDENTIFICATION", O_RDONLY) = -1 ENOENT (No such file or directory)
getuid32()                              = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
readlink("/proc/self/fd/0", "/dev/pts/4", 4095) = 10
readlink("/proc/self/fd/0", "/dev/pts/4", 511) = 10
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
access("/var/run/utmpx", F_OK)          = -1 ENOENT (No such file or directory)
open("/var/run/utmp", O_RDWR)           = -1 ENOENT (No such file or directory)
open("/var/run/utmp", O_RDONLY)         = -1 ENOENT (No such file or directory)
access("/var/run/utmpx", F_OK)          = -1 ENOENT (No such file or directory)
open("/var/run/utmp", O_RDWR)           = -1 ENOENT (No such file or directory)
open("/var/run/utmp", O_RDONLY)         = -1 ENOENT (No such file or directory)
getuid32()                              = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
fcntl64(3, F_GETFL)                     = 0x2 (flags O_RDWR)
fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
fcntl64(3, F_GETFL)                     = 0x2 (flags O_RDWR)
fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
open("/etc/nsswitch.conf", O_RDONLY)    = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=503, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7dd7000
read(3, "# /etc/nsswitch.conf:\n# $Header:"..., 4096) = 503
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb7dd7000, 4096)                = 0
open("/lib/tls/i686/sse2/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/i686/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/sse2/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/tls/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/sse2/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/i686/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/sse2/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/tls/i686/sse2/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/tls/i686/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/tls/sse2/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/tls/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/i686/sse2/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/i686/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/sse2/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/libnss_compat.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
time(NULL)                              = 1164486474
open("/etc/localtime", O_RDONLY)        = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
fstat64(3, {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7dd7000
read(3, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0"..., 4096) = 101
close(3)                                = 0
munmap(0xb7dd7000, 4096)                = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
getpid()                                = 10008
socket(PF_FILE, SOCK_DGRAM, 0)          = 3
fcntl64(3, F_SETFD, FD_CLOEXEC)         = 0
connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 EPROTOTYPE (Protocol wrong type for socket)
close(3)                                = 0
socket(PF_FILE, SOCK_STREAM, 0)         = 3
fcntl64(3, F_SETFD, FD_CLOEXEC)         = 0
connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
send(3, "<82>Nov 25 20:27:54 su[10008]: U"..., 46, MSG_NOSIGNAL) = 46
time(NULL)                              = 1164486474
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
send(3, "<85>Nov 25 20:27:54 su[10008]: F"..., 55, MSG_NOSIGNAL) = 55
open("/etc/login.defs", O_RDONLY|O_LARGEFILE) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=6254, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7dd7000
read(4, "#\n# /etc/login.defs - Configurat"..., 4096) = 4096
read(4, " name, room number, work\n# phone"..., 4096) = 2158
read(4, "", 4096)                       = 0
close(4)                                = 0
munmap(0xb7dd7000, 4096)                = 0
time(NULL)                              = 1164486474
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=101, ...}) = 0
send(3, "<85>Nov 25 20:27:54 su[10008]: -"..., 49, MSG_NOSIGNAL) = 49
close(3)                                = 0
fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 4), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7dd7000
write(1, "Sorry.\n", 7)                 = 7
exit_group(1)                           = ?