On Thu, Feb 24, 2005 at 12:52:17PM -0600, Karl W. Burkett wrote:
> Jon and others are correct that this message is coming from ufsdump when it 
> is run as a user other than root.  For instance when run as "amanda":
> 
> $ /usr/sbin/ufsdump 0Ssf 1048576 - /dev/md/rdsk/d92
> Unable to create temporary directory in any of the directories listed 
> below:
>         /tmp/
>         /var/tmp/
>         /
> Please correct this problem and rerun the program.
> 43413422080
> 
> and when run as root:
> /usr/sbin/ufsdump 0Ssf 1048576 - /dev/md/rdsk/d92
> 43413422080
> 
> When I do "truss -o /var/tmp/truss.output /usr/sbin/ufsdump 0Ssf 1048576 - 
> /dev/md/rdsk/d92" the following results:
> 
> lstat64(".rlg.10aqFe", 0xFFBFE2B8)              Err#2 ENOENT
> mkdir("/tmp/.rlg.10aqFe", 0)                    = 0
> mkdir("/tmp/.rlg.10aqFe/.rlg.10aqFe", 0)        = 0
> mount("/dev/md/dsk/d92", "/tmp/.rlg.10aqFe/.rlg.10aqFe", 
> MS_RDONLY|MS_DATA|MS_OP
> TIONSTR, "ufs", 0xFFBFEBBC, 4) = 0
> umount2("/dev/md/dsk/d92", 0x00000000)          = 0
> rmdir("/tmp/.rlg.10aqFe/.rlg.10aqFe")           = 0
> rmdir("/tmp/.rlg.10aqFe")                       = 0
> 
> 
> and when run as "amanda":
>   Truss will not work on suid applications.
>   

For this situation, as root run something like:

  truss -f ... su -c amanda ufsdump ...

You will be running truss as root and following (-f) any
child processes created by the primary command (su) which
will change its id and run the app you really want to trace.

-- 
Jon H. LaBadie                  jon AT jgcomp DOT com
 JG Computing
 4455 Province Line Road        (609) 252-0159
 Princeton, NJ  08540-4322      (609) 683-7220 (fax)