On May 9, 2010, at 6:46 PM, Wietse Venema wrote:
> The problem does not happen in the Sendmail process that you run,
> but in a CHILD process of that Sendmail process.
>
> Therefore, you need to specify an option to trace CHILD processes.
>
> The examples above use "-d" or "-f" to achieve that. MacOS dtrace
> may have a different option for the same purpose.
You are the first person to truly help me! Yes, indeed, the -f option traces
child processes. Here is the end of the output for the command "sudo dtruss
-fn sendmail":
12180/0x403cc: fstat64(0x3, 0x7FFF5FBFF650, 0xFC080) = 0 0
12180/0x403cc: close(0x3) = 0 0
12180/0x403cc: getrlimit(0x1008, 0x7FFF5FBFEE10, 0x7FFF82755CCC)
= 0 0
12180/0x403cc: open_nocancel("/etc/sysinfo.conf\0", 0x0, 0x1B6)
= -1 Err#2
12180/0x403cc: __sysctl(0x7FFF5FBFF440, 0x6, 0x0) = 0 0
12180/0x403cc: __sysctl(0x7FFF5FBFF440, 0x6, 0x10082C000) = 0 0
12180/0x403cc: geteuid(0x10001C78E, 0x7FFFFFE00050, 0x0) = 26 0
12180/0x403cc: getuid(0x10001C78E, 0x7FFFFFE00050, 0x0) = 26 0
12180/0x403cc: getgid(0x10001C78E, 0x7FFFFFE00050, 0x1) = 26 0
12180/0x403cc: getegid(0x10001C78E, 0x7FFFFFE00050, 0x0) = 26 0
12180/0x403cc: mmap(0x0, 0x3000, 0x3, 0x1002, 0x1000000, 0x1FFFFFFFF)
= 0x81000 0
12180/0x403cc: __sysctl(0x7FFF5FBFF640, 0x2, 0x7FFF5FBFF600) = 0 0
12180/0x403cc: __sysctl(0x7FFF5FBFF600, 0x2, 0x7FFF5FBFF698) = 0 0
12180/0x403cc: __sysctl(0x7FFF5FBFF640, 0x2, 0x7FFF5FBFF66C) = 0 0
12180/0x403cc: mmap(0x0, 0xD000, 0x3, 0x1002, 0x1000000, 0x1FFFFFFFF)
= 0x84000 0
12180/0x403cc: mmap(0x0, 0xD000, 0x3, 0x1002, 0x1000000, 0x1FFFFFFFF)
= 0x91000 0
12180/0x403cc: mmap(0x0, 0x200000, 0x3, 0x1002, 0x7000000, 0x1FFFFFFFF)
= 0x200000 0
12180/0x403cc: munmap(0x100300000, 0x100000) = 0 0
12180/0x403cc: chdir("/private/var/spool/postfix\0", 0x10010F36E, 0x0)
= 0 0
12180/0x403cc: sigaction(0xD, 0x7FFF5FBFF740, 0x7FFF5FBFF770) = 0 0
12180/0x403cc: getuid(0x2, 0x1, 0x1) = 26 0
12180/0x403cc: getuid(0x100111714, 0xFFFF0000, 0x0) = 26 0
12180/0x403cc: socketpair(0x1, 0x1, 0x0) = 0 0
12180/0x403cc: fork() = 12181 0
12180/0x403cc: close(0x3) = 0 0
12181/0x403d0: fork() = 0 0
12181/0x403d0: thread_selfid(0x7FFF704AEBE0, 0x3, 0x1) = 263120 0
12181/0x403d0: getpid(0x7FFF704AEBE0, 0x3, 0x0) = 12181 0
12181/0x403d0: close(0x4) = 0 0
12181/0x403d0: dup2(0x3, 0x0, 0x0) = 0 0
12181/0x403d0: dup2(0x3, 0x1, 0x0) = 1 0
12181/0x403d0: close(0x3) = 0 0
12181/0x403d0: geteuid(0x1001121B0, 0x3D, 0x3D) = 26 0
12181/0x403d0: getuid(0x1001121B0, 0x3D, 0x0) = 26 0
12181/0x403d0: getgid(0x1001121B0, 0x3D, 0x1) = 26 0
12181/0x403d0: getegid(0x1001121B0, 0x3D, 0x0) = 26 0
12181/0x403d0: geteuid(0x100112210, 0x3D, 0x3D) = 26 0
12181/0x403d0: getuid(0x100112210, 0x3D, 0x0) = 26 0
12181/0x403d0: getgid(0x100112210, 0x3D, 0x1) = 26 0
12181/0x403d0: getegid(0x100112210, 0x3D, 0x0) = 26 0
12181/0x403d0: geteuid(0x100112230, 0x3D, 0x3D) = 26 0
12181/0x403d0: getuid(0x100112230, 0x3D, 0x0) = 26 0
12181/0x403d0: getgid(0x100112230, 0x3D, 0x1) = 26 0
12181/0x403d0: getegid(0x100112230, 0x3D, 0x0) = 26 0
12181/0x403d0: execve(0x100112280, 0x100112380, 0x100200010) = -1
Err#1
12181/0x403d0: stat64("/usr/sbin/postdrop\0", 0x7FFF5FBFF100, 0x2)
= 0 0
12181/0x403d0: write(0x2, "sendmail: fatal: execvp /usr/sbin/postdrop:
Operation not permitted\n\0", 0x44) = 68 0
12181/0x403d0: geteuid(0x7FFF704A4180, 0x0, 0xB) = 26 0
12181/0x403d0: getuid(0x0, 0x7FFF704A25F0, 0x7FFF704A25F0) = 26 0
12181/0x403d0: getgid(0x0, 0x7FFF704A25F0, 0x7FFF704A25F0) = 26 0
12181/0x403d0: __sysctl(0x7FFF5FBFF0A0, 0x2, 0x7FFF5FBFF0B0) = 0 0
12180/0x403cc: getuid(0x0, 0x7FFF704A25F0, 0x7FFF704A25F0) = 26 0
12180/0x403cc: getgid(0x0, 0x7FFF704A25F0, 0x7FFF704A25F0) = 26 0
12180/0x403cc: __sysctl(0x7FFF5FBFF220, 0x2, 0x7FFF5FBFF230) = 0 0
12180/0x403cc: write(0x2, "sendmail: fatal: _lp(26): unable to execute
/usr/sbin/postdrop -r: Unknown error: 0\n\0", 0x54) = 84 0
12180/0x403cc: getuid(0x0, 0x7FFF704A25F0, 0x7FFF704A25F0) = 26 0
12180/0x403cc: getgid(0x0, 0x7FFF704A25F0, 0x7FFF704A25F0) = 26 0
12180/0x403cc: __sysctl(0x7FFF5FBFF240, 0x2, 0x7FFF5FBFF250) = 0 0
12181/0x403d0: __semwait_signal(0x803, 0x0, 0x1) = -1 Err#60
12180/0x403cc: read(0x4, "\333\006\0", 0x1000) = 0 0
12180/0x403cc: close(0x4) = 0 0
12180/0x403cc: wait4(0x2F95, 0x7FFF5FBFF73C, 0x0) = 12181 0
12180/0x403cc: write(0x2, "sendmail: warning: command \"/usr/sbin/postdrop
-r\" exited with status 1\n\0", 0x48) = 72 0
Jamal
