On 2019-08-02, dmitry.sensei <[email protected]> wrote: > Lol! > ORLOV-NB$ kdump -f ktrace.out > 58118 ktrace RET ktrace 0 > 58118 ktrace CALL execve(0x7f7ffffd9100,0x7f7ffffd9710,0x7f7ffffd9730) > 58118 ktrace NAMI "*/usr/local/heimdal/bin/su*" > 58118 ktrace ARGS > [0] = "su" > [1] = "-" > [2] = "root" > ORLOV-NB$ whereis su > /usr/bin/su
whereis isn't terribly useful, it doesn't use $PATH, instead uses a fixed path of common directories. The "type" builtin in most Bourne-style shells is usually more helpful.
