you can't remotely attach to it..
'strace su' in one term, strace -p $PID in another.. You'll get an 'operation not permitted'
haha.. Sorry for all of the extra list traffic, but I wanted to correct this as well before people may try and think I'm crazy.
Don't 'strace su' in one term.. just 'su' in one term.. and then try to attach to it with strace in another term.
further, if you 'strace' su, sudo, or anything else.. it wont run with root permissions, it'll run with the permissions of the user who ran strace.
Again, apologizes on having to send two extra messages.
