root@xxx [/usr/local/lsws-4.1RC2]# strace -f -p 27094
Process 27094 attached - interrupt to quit
getppid() = 27090
poll([{fd=0, events=POLLIN}], 1, 1000) = 0 (Timeout)
getppid() = 27090
poll([{fd=0, events=POLLIN}], 1, 1000) = 0 (Timeout)
getppid() = 27090
poll([{fd=0, events=POLLIN}], 1, 1000) = 0 (Timeout)
getppid() = 27090
poll([{fd=0, events=POLLIN}], 1, 1000) = 1 ([{fd=0, revents=POLLIN}])
accept(0, 0, NULL) = 1
clone(Process 12258 attached (waiting for parent)
Process 12258 resumed (parent 27094 ready)
child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x2b61379d82a0) = 12258
[pid 27094] close(1) = 0
[pid 27094] poll([{fd=0, events=POLLIN}], 1, 1000 <unfinished ...>
[pid 12258] dup2(1, 0) = 0
[pid 12258] poll([{fd=0, events=POLLIN}], 1, 1000) = 1 ([{fd=0, revents=POLLIN}])
[pid 12258] read(0, "\1\0\0\0\4\0\0\0000\4\0\0\33\0\0\0\2\0\0\0\32\0\17\0c\0\0\0c\0\0\0"..., 120) = 120
[pid 12258] poll([{fd=0, events=POLLIN}], 1, 1000) = 1 ([{fd=0, revents=POLLIN}])
[pid 12258] read(0, "/usr/local/cpanel/cgi-sys/whmred"..., 1072) = 1072
[pid 12258] setpriority(PRIO_PROCESS, 0, 0) = 0
[pid 12258] setrlimit(RLIMIT_AS, {rlim_cur=512000*1024, rlim_max=524288*1024}) = 0
[pid 12258] setrlimit(RLIMIT_NPROC, {rlim_cur=6, rlim_max=7}) = 0
[pid 12258] setrlimit(RLIMIT_CPU, {rlim_cur=50, rlim_max=60}) = 0
[pid 12258] socket(PF_FILE, SOCK_STREAM, 0) = 3
[pid 12258] fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0
[pid 12258] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"...}, 110) = -1 ENOENT (No such file or directory)
[pid 12258] close(3) = 0
[pid 12258] socket(PF_FILE, SOCK_STREAM, 0) = 3
[pid 12258] fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0
[pid 12258] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"...}, 110) = -1 ENOENT (No such file or directory)
[pid 12258] close(3) = 0
[pid 12258] open("/etc/nsswitch.conf", O_RDONLY) = 3
[pid 12258] fstat(3, {st_mode=S_IFREG|0644, st_size=1696, ...}) = 0
[pid 12258] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2b61379c5000
[pid 12258] read(3, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1696
[pid 12258] read(3, "", 4096) = 0
[pid 12258] close(3) = 0
[pid 12258] munmap(0x2b61379c5000, 4096) = 0
[pid 12258] open("/etc/ld.so.cache", O_RDONLY) = 3
[pid 12258] fstat(3, {st_mode=S_IFREG|0644, st_size=73150, ...}) = 0
[pid 12258] mmap(NULL, 73150, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2b61379c5000
[pid 12258] close(3) = 0
[pid 12258] open("/lib64/libnss_files.so.2", O_RDONLY) = 3
[pid 12258] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\37\0\0\0\0\0\0"..., 832) = 832
[pid 12258] fstat(3, {st_mode=S_IFREG|0755, st_size=53880, ...}) = 0
[pid 12258] mmap(NULL, 2139432, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x2b61379d9000
[pid 12258] mprotect(0x2b61379e3000, 2093056, PROT_NONE) = 0
[pid 12258] mmap(0x2b6137be2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x2b6137be2000
[pid 12258] close(3) = 0
[pid 12258] mprotect(0x2b6137be2000, 4096, PROT_READ) = 0
[pid 12258] munmap(0x2b61379c5000, 73150) = 0
[pid 12258] open("/etc/passwd", O_RDONLY) = 3
[pid 12258] fcntl(3, F_GETFD) = 0
[pid 12258] fcntl(3, F_SETFD, FD_CLOEXEC) = 0
[pid 12258] fstat(3, {st_mode=S_IFREG|0644, st_size=51597, ...}) = 0
[pid 12258] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2b61379c5000
[pid 12258] read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 4096
[pid 12258] close(3) = 0
[pid 12258] munmap(0x2b61379c5000, 4096) = 0
[pid 12258] setgid(99) = 0
[pid 12258] open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 3
[pid 12258] read(3, "65536\n", 31) = 6
[pid 12258] close(3) = 0
[pid 12258] socket(PF_FILE, SOCK_STREAM, 0) = 3
[pid 12258] fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0
[pid 12258] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"...}, 110) = -1 ENOENT (No such file or directory)
[pid 12258] close(3) = 0
[pid 12258] socket(PF_FILE, SOCK_STREAM, 0) = 3
[pid 12258] fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0
[pid 12258] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"...}, 110) = -1 ENOENT (No such file or directory)
[pid 12258] close(3) = 0
[pid 12258] open("/etc/group", O_RDONLY) = 3
[pid 12258] fcntl(3, F_GETFD) = 0
[pid 12258] fcntl(3, F_SETFD, FD_CLOEXEC) = 0
[pid 12258] fstat(3, {st_mode=S_IFREG|0644, st_size=13330, ...}) = 0
[pid 12258] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x2b61379c5000
[pid 12258] lseek(3, 0, SEEK_CUR) = 0
[pid 12258] read(3, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 4096
[pid 12258] read(3, "6:\nsabar:x:900:\nsativa:x:901:\nsa"..., 4096) = 4096
[pid 12258] read(3, "404:\npelatcom:x:1405:\nkreaucom:x"..., 4096) = 4096
[pid 12258] read(3, "alere:x:1835:\nipodjunk:x:1836:\nm"..., 4096) = 1042
[pid 12258] read(3, "", 4096) = 0
[pid 12258] close(3) = 0
[pid 12258] munmap(0x2b61379c5000, 4096) = 0
[pid 12258] setgroups(1, [99]) = 0
[pid 12258] setuid(99) = -1 EAGAIN (Resource temporarily unavailable)
[pid 12258] write(2, "lscgid: setuid():: Resource temp"..., 52) = 52
[pid 12258] write(0, "Status:403\n\nsetuid() failed!", 28) = 28
[pid 12258] close(0) = 0
[pid 12258] exit_group(0) = ?
Process 12258 detached
<... poll resumed> ) = -1 EINTR (Interrupted system call)
--- SIGCHLD (Child exited) @ 0 (0) ---
getppid() = 27090
poll([{fd=0, events=POLLIN}], 1, 1000) = 0 (Timeout)
getppid() = 27090
poll([{fd=0, events=POLLIN}], 1, 1000) = 0 (Timeout)
getppid() = 27090
poll([{fd=0, events=POLLIN}], 1, 1000) = 0 (Timeout)
getppid() = 27090
poll([{fd=0, events=POLLIN}], 1, 1000 <unfinished ...>
Process 27094 detached
root@xxx [/usr/local/lsws-4.1RC2]#