Unable to run/connect VPN using Forticlient 7.2.2 or 7.2.3 on ubuntu noble

[althaser]

I am running Ubuntu:
Description: Ubuntu Noble Numbat (development branch)
Release: 24.04
Codename: noble

yes, I know it's a development branch, however it will be the next LTS in April 2024 (~2months left).

ii forticlient 7.2.2.0753 amd64 FortiClient, now available on Linux, is an endpoint protection application that runs on Microsoft Windows, Mac OS X, iOS and Android. It is backed by antivirus engine and signatures from the well-known FortiGuard labs - www.fortiguard.com. FortiClient on Windows has won various third-party awards, such as from VB100, AV Comparatives and NSS.

to get forticlient 7.2.2.0753 installed I had to installed the following packages dependencies:

libdbusmenu-gtk4:amd64 18.10.20180917~bzr492+repack1-3ubuntu1

libayatana-appindicator1:amd64 0.5.92-1

libayatana-indicator7:amd64 0.9.3-1

libnss3-tools:amd64 2:3.96.1-1

some comes from mantic and others from lunar.

If I run /opt/forticlient/fortitray I got the following error every time I try to open UI as normal user:

[20389:0211/145757.522856:FATAL:credentials.cc(127)] Check failed: . : Permission denied (13)
[20428:0211/145831.560810:FATAL:credentials.cc(127)] Check failed: . : Permission denied (13)

and UI doesn't open.

while I run via root:

sudo forticlient gui

the UI pops up but I couldn't manage to get a VPN connection:

press SAML Login

......

14:59:49.486 › Server running on http://localhost:8020
14:59:49.486 › Saml - openExternal url=https://<MYLINK>/remote/saml/start?redirect=1

when I manually open a link I got:
Vpn Connected
You may close the browser now.

although I am not connected.

In UI I got Status: Connecting and a Disconnect button available, but I don't have the vpn connection available.

If I use latest version available from forticlient:

ii forticlient 7.2.3.0790

$ forticlient gui
[5243:0211/154838.826896:FATAL:credentials.cc(127)] Check failed: . : Permission denied (13)
Trace/breakpoint trap (core dumped)

$ strace forticlient gui

............................

openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libzstd.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libzstd.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=743576, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 745528, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4be6000
mmap(0x7958a4bea000, 659456, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7958a4bea000
mmap(0x7958a4c8b000, 65536, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa5000) = 0x7958a4c8b000
mmap(0x7958a4c9b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb4000) = 0x7958a4c9b000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/liblz4.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/liblz4.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=137432, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 139352, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4bc3000
mmap(0x7958a4bc6000, 110592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7958a4bc6000
mmap(0x7958a4be1000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1e000) = 0x7958a4be1000
mmap(0x7958a4be4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7958a4be4000
close(3) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7958a4bc1000
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libwayland-client.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libwayland-client.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=64776, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 66696, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4bb0000
mmap(0x7958a4bb5000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0x7958a4bb5000
mmap(0x7958a4bbb000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7958a4bbb000
mmap(0x7958a4bbe000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7958a4bbe000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libwayland-cursor.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libwayland-cursor.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=35352, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 37352, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4ba6000
mmap(0x7958a4ba8000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4ba8000
mmap(0x7958a4baa000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7958a4baa000
mmap(0x7958a4bab000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7958a4bab000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libwayland-egl.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libwayland-egl.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=14344, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 16416, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4ba1000
mmap(0x7958a4ba2000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7958a4ba2000
mmap(0x7958a4ba3000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4ba3000
mmap(0x7958a4ba4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4ba4000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libXcursor.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libXcursor.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=43488, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 45512, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4b95000
mmap(0x7958a4b97000, 24576, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4b97000
mmap(0x7958a4b9d000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7958a4b9d000
mmap(0x7958a4b9f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7958a4b9f000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libXinerama.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libXinerama.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=18736, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 16680, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4b90000
mmap(0x7958a4b91000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7958a4b91000
mmap(0x7958a4b92000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4b92000
mmap(0x7958a4b93000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7958a4b93000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libgraphite2.so.3", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libgraphite2.so.3", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=149776, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7958a4b8e000
mmap(NULL, 151696, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4b68000
mmap(0x7958a4b6b000, 118784, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7958a4b6b000
mmap(0x7958a4b88000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0x7958a4b88000
mmap(0x7958a4b8b000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22000) = 0x7958a4b8b000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libjpeg.so.8", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libjpeg.so.8", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=534592, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 532496, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4ae5000
mmap(0x7958a4ae9000, 307200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7958a4ae9000
mmap(0x7958a4b34000, 204800, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4f000) = 0x7958a4b34000
mmap(0x7958a4b66000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x81000) = 0x7958a4b66000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libdatrie.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libdatrie.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=30792, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 32784, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4adc000
mmap(0x7958a4ade000, 16384, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4ade000
mmap(0x7958a4ae2000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7958a4ae2000
mmap(0x7958a4ae3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0x7958a4ae3000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libbz2.so.1.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libbz2.so.1.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=74848, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 76840, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4ac9000
mmap(0x7958a4acb000, 53248, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4acb000
mmap(0x7958a4ad8000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7958a4ad8000
mmap(0x7958a4ada000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7958a4ada000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libbrotlidec.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libbrotlidec.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=51512, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 53352, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4abb000
mmap(0x7958a4abc000, 32768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7958a4abc000
mmap(0x7958a4ac4000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0x7958a4ac4000
mmap(0x7958a4ac7000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7958a4ac7000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libbsd.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libbsd.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=80888, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7958a4ab9000
mmap(NULL, 86216, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4aa3000
mmap(0x7958a4aa7000, 49152, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7958a4aa7000
mmap(0x7958a4ab3000, 12288, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0x7958a4ab3000
mmap(0x7958a4ab6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12000) = 0x7958a4ab6000
mmap(0x7958a4ab8000, 200, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7958a4ab8000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libkeyutils.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libkeyutils.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=22600, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 24592, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4a9c000
mmap(0x7958a4a9e000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4a9e000
mmap(0x7958a4aa0000, 4096, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7958a4aa0000
mmap(0x7958a4aa1000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7958a4aa1000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libresolv.so.2", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=64008, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 71816, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4a8a000
mmap(0x7958a4a8d000, 36864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0x7958a4a8d000
mmap(0x7958a4a96000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7958a4a96000
mmap(0x7958a4a98000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0x7958a4a98000
mmap(0x7958a4a9a000, 6280, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7958a4a9a000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libgpg-error.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libgpg-error.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=149760, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 147880, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4a65000
mmap(0x7958a4a69000, 90112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7958a4a69000
mmap(0x7958a4a7f000, 36864, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x7958a4a7f000
mmap(0x7958a4a88000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x23000) = 0x7958a4a88000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libbrotlicommon.so.1", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libbrotlicommon.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=141640, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7958a4a63000
mmap(NULL, 139304, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4a40000
mmap(0x7958a4a41000, 4096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7958a4a41000
mmap(0x7958a4a42000, 126976, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4a42000
mmap(0x7958a4a61000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x21000) = 0x7958a4a61000
close(3) = 0
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/libmd.so.0", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/lib/x86_64-linux-gnu/libmd.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=55536, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 57448, PROT_READ, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7958a4a31000
mmap(0x7958a4a33000, 36864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7958a4a33000
mmap(0x7958a4a3c000, 8192, PROT_READ, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7958a4a3c000
mmap(0x7958a4a3e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7958a4a3e000
close(3) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7958a4a2f000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7958a4a2d000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7958a4a2b000
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7958a4a29000
mmap(NULL, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7958a4a26000
arch_prctl(ARCH_SET_FS, 0x7958a4a26e00) = 0
set_tid_address(0x7958a4a270d0) = 5260
set_robust_list(0x7958a4a270e0, 24) = 0
rseq(0x7958a4a27720, 0x20, 0, 0x53053053) = 0
mprotect(0x7958a5ffa000, 16384, PROT_READ) = 0
mprotect(0x7958a4a3e000, 4096, PROT_READ) = 0
mprotect(0x7958a4a61000, 4096, PROT_READ) = 0
mprotect(0x7958a4a88000, 4096, PROT_READ) = 0
mprotect(0x7958a4a98000, 4096, PROT_READ) = 0
mprotect(0x7958a4aa1000, 4096, PROT_READ) = 0
mprotect(0x7958a4ab6000, 4096, PROT_READ) = 0
mprotect(0x7958a4ac7000, 4096, PROT_READ) = 0
mprotect(0x7958a4ada000, 4096, PROT_READ) = 0
mprotect(0x7958a4ae3000, 4096, PROT_READ) = 0
mprotect(0x7958a4b66000, 4096, PROT_READ) = 0
mprotect(0x7958a4b8b000, 8192, PROT_READ) = 0
mprotect(0x7958a5425000, 4096, PROT_READ) = 0
mprotect(0x7958a541f000, 4096, PROT_READ) = 0
mprotect(0x7958a6e12000, 4096, PROT_READ) = 0
mprotect(0x7958a64b4000, 4096, PROT_READ) = 0
mprotect(0x7958a6e78000, 4096, PROT_READ) = 0
mprotect(0x7958a4b93000, 4096, PROT_READ) = 0
mprotect(0x7958a551b000, 4096, PROT_READ) = 0
mprotect(0x7958a6e63000, 4096, PROT_READ) = 0
mprotect(0x7958a4b9f000, 4096, PROT_READ) = 0
mprotect(0x7958a4ba4000, 4096, PROT_READ) = 0
mprotect(0x7958a6de6000, 4096, PROT_READ) = 0
mprotect(0x7958a4bbe000, 8192, PROT_READ) = 0
mprotect(0x7958a4bab000, 4096, PROT_READ) = 0
mprotect(0x7958a4be4000, 4096, PROT_READ) = 0
mprotect(0x7958a4c9b000, 4096, PROT_READ) = 0
mprotect(0x7958a4ccd000, 4096, PROT_READ) = 0
mprotect(0x7958a4e0d000, 20480, PROT_READ) = 0
mprotect(0x7958a4e21000, 4096, PROT_READ) = 0
mprotect(0x7958a4ea6000, 4096, PROT_READ) = 0
mprotect(0x7958a4f45000, 8192, PROT_READ) = 0
mprotect(0x7958a4ef0000, 8192, PROT_READ) = 0
mprotect(0x7958a4f5d000, 4096, PROT_READ) = 0
mprotect(0x7958a5107000, 16384, PROT_READ) = 0
mprotect(0x7958a512c000, 4096, PROT_READ) = 0
mprotect(0x7958a52b7000, 53248, PROT_READ) = 0
mprotect(0x7958a52df000, 4096, PROT_READ) = 0
mprotect(0x7958a52e5000, 4096, PROT_READ) = 0
mprotect(0x7958a5311000, 4096, PROT_READ) = 0
mprotect(0x7958a53cd000, 53248, PROT_READ) = 0
mprotect(0x7958a5410000, 24576, PROT_READ) = 0
mprotect(0x7958a5437000, 4096, PROT_READ) = 0
mprotect(0x7958a544c000, 8192, PROT_READ) = 0
mprotect(0x7958a61ee000, 4096, PROT_READ) = 0
mprotect(0x7958a54f2000, 32768, PROT_READ) = 0
mprotect(0x7958a5500000, 4096, PROT_READ) = 0
mprotect(0x7958a550e000, 4096, PROT_READ) = 0
mprotect(0x7958a603b000, 4096, PROT_READ) = 0
mprotect(0x7958a561f000, 4096, PROT_READ) = 0
mprotect(0x7958a55e1000, 28672, PROT_READ) = 0
mprotect(0x7958a562a000, 4096, PROT_READ) = 0
mprotect(0x7958a5640000, 4096, PROT_READ) = 0
mprotect(0x7958a5768000, 32768, PROT_READ) = 0
mprotect(0x7958a60d6000, 4096, PROT_READ) = 0
mprotect(0x7958a73fd000, 4096, PROT_READ) = 0
mprotect(0x7958a79b7000, 12288, PROT_READ) = 0
mprotect(0x7958a6dd9000, 4096, PROT_READ) = 0
mprotect(0x7958a5db0000, 4096, PROT_READ) = 0
mprotect(0x7958a5dfd000, 8192, PROT_READ) = 0
mprotect(0x7958a72af000, 32768, PROT_READ) = 0
mprotect(0x7958a57a3000, 4096, PROT_READ) = 0
mprotect(0x7958a6e3c000, 8192, PROT_READ) = 0
mprotect(0x7958a581b000, 8192, PROT_READ) = 0
mprotect(0x7958a65f9000, 16384, PROT_READ) = 0
mprotect(0x7958a57ad000, 8192, PROT_READ) = 0
mprotect(0x7958a57cc000, 4096, PROT_READ) = 0
mprotect(0x7958a5943000, 4096, PROT_READ) = 0
mprotect(0x7958a6ee0000, 16384, PROT_READ) = 0
mprotect(0x7958a5836000, 4096, PROT_READ) = 0
mprotect(0x7958a5954000, 4096, PROT_READ) = 0
mprotect(0x7958a6378000, 8192, PROT_READ) = 0
mprotect(0x7958a7820000, 4096, PROT_READ) = 0
mprotect(0x7958a7825000, 4096, PROT_READ) = 0
mprotect(0x7958a6e5b000, 4096, PROT_READ) = 0
mprotect(0x7958a5a46000, 36864, PROT_READ) = 0
mprotect(0x7958a5b1a000, 45056, PROT_READ) = 0
mprotect(0x7958a5d0b000, 65536, PROT_READ) = 0
mprotect(0x7958a6f49000, 4096, PROT_READ) = 0
mprotect(0x7958a601c000, 4096, PROT_READ) = 0
mprotect(0x7958a5d31000, 4096, PROT_READ) = 0
mprotect(0x7958a5d83000, 8192, PROT_READ) = 0
mprotect(0x7958a708a000, 4096, PROT_READ) = 0
mprotect(0x7958a6dc9000, 4096, PROT_READ) = 0
mprotect(0x7958a6dd2000, 4096, PROT_READ) = 0
mprotect(0x7958a6103000, 4096, PROT_READ) = 0
mprotect(0x7958a6224000, 12288, PROT_READ) = 0
mprotect(0x7958a632a000, 28672, PROT_READ) = 0
mprotect(0x7958a6efa000, 4096, PROT_READ) = 0
mprotect(0x7958a6e4e000, 4096, PROT_READ) = 0
mprotect(0x7958a704b000, 12288, PROT_READ) = 0
mprotect(0x7958a7023000, 4096, PROT_READ) = 0
mprotect(0x7958a6daf000, 65536, PROT_READ) = 0
mprotect(0x7958a6fe0000, 36864, PROT_READ) = 0
mprotect(0x7958a70e2000, 28672, PROT_READ) = 0
mprotect(0x7958a794f000, 24576, PROT_READ) = 0
mprotect(0x7958a70b4000, 12288, PROT_READ) = 0
mprotect(0x7958a79be000, 4096, PROT_READ) = 0
mprotect(0x7958a79c3000, 4096, PROT_READ) = 0
mprotect(0x7958a768a000, 147456, PROT_READ) = 0
mprotect(0x57d837648000, 5705728, PROT_READ) = 0
mprotect(0x7958a7a12000, 8192, PROT_READ) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
munmap(0x7958a79c5000, 89733) = 0
getrandom("\x88\x8b\xff\xab\x06\x73\x35\x68", 8, 0) = 8
getrandom("\xbb\x0a\x8f\xe3\xca\x45\xe2\xd7", 8, 0) = 8
mmap(0x25400000000, 17179869184, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x25400000000
mmap(0xdebfffff000, 17179873280, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xdebfffff000
mprotect(0x25400201000, 4096, PROT_READ|PROT_WRITE) = 0
mprotect(0x2540020c000, 16384, PROT_READ|PROT_WRITE) = 0
prctl(PR_CAPBSET_READ, CAP_MAC_OVERRIDE) = 1
prctl(PR_CAPBSET_READ, 0x30 /* CAP_??? */) = -1 EINVAL (Invalid argument)
prctl(PR_CAPBSET_READ, CAP_CHECKPOINT_RESTORE) = 1
prctl(PR_CAPBSET_READ, 0x2c /* CAP_??? */) = -1 EINVAL (Invalid argument)
prctl(PR_CAPBSET_READ, 0x2a /* CAP_??? */) = -1 EINVAL (Invalid argument)
prctl(PR_CAPBSET_READ, 0x29 /* CAP_??? */) = -1 EINVAL (Invalid argument)
mprotect(0x25400210000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400214000, 40960, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400220000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400224000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400228000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x2540022c000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400230000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400234000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400238000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x2540023c000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400240000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400244000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400248000, 16384, PROT_READ|PROT_WRITE) = 0
futex(0x7958a73feee8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
futex(0x7958a73feee8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
mprotect(0x2540024c000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400250000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400254000, 16384, PROT_READ|PROT_WRITE) = 0
statfs("/sys/fs/selinux", 0x7ffce6dc6010) = -1 ENOENT (No such file or directory)
statfs("/selinux", 0x7ffce6dc6010) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/proc/filesystems", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0
read(3, "nodev\tsysfs\nnodev\ttmpfs\nnodev\tbd"..., 1024) = 449
read(3, "", 1024) = 0
close(3) = 0
access("/etc/selinux/config", F_OK) = -1 ENOENT (No such file or directory)
mprotect(0x25400258000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x2540025c000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400260000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400264000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400268000, 16384, PROT_READ|PROT_WRITE) = 0
getrandom("\x67", 1, GRND_NONBLOCK) = 1
newfstatat(AT_FDCWD, "/etc/gnutls/config", {st_mode=S_IFREG|0644, st_size=119, ...}, 0) = 0
openat(AT_FDCWD, "/etc/gnutls/config", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=119, ...}, AT_EMPTY_PATH) = 0
read(3, "[overrides]\ndisabled-version = t"..., 4096) = 119
read(3, "", 4096) = 0
lseek(3, 0, SEEK_SET) = 0
read(3, "[overrides]\ndisabled-version = t"..., 4096) = 119
read(3, "", 4096) = 0
close(3) = 0
gettid() = 5260
gettid() = 5260
gettid() = 5260
gettid() = 5260
gettid() = 5260
gettid() = 5260
gettid() = 5260
gettid() = 5260
gettid() = 5260
mprotect(0x2540026c000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400270000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400274000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400278000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x2540027c000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400280000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400284000, 16384, PROT_READ|PROT_WRITE) = 0
mprotect(0x25400288000, 16384, PROT_READ|PROT_WRITE) = 0
gettid() = 5260
futex(0x57d837c2c670, FUTEX_WAKE_PRIVATE, 2147483647) = 0
mprotect(0x2540028c000, 40960, PROT_READ|PROT_WRITE) = 0
fstat(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(0x88, 0), ...}) = 0
fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(0x88, 0), ...}) = 0
fstat(2, {st_mode=S_IFCHR|0620, st_rdev=makedev(0x88, 0), ...}) = 0
gettid() = 5260
gettid() = 5260
gettid() = 5260
readlink("/proc/self/exe", "/opt/forticlient/gui/FortiClient"..., 4096) = 54
prctl(PR_SET_NAME, "FortiClient") = 0
gettid() = 5260
gettid() = 5260
gettid() = 5260
gettid() = 5260
openat(AT_FDCWD, "/proc/self/cmdline", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0444, st_size=0, ...}, AT_EMPTY_PATH) = 0
lseek(3, 0, SEEK_SET) = 0
fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mprotect(0x25400298000, 40960, PROT_READ|PROT_WRITE) = 0
read(3, "\0", 4096) = 1
read(3, "", 3072) = 0
close(3) = 0
openat(AT_FDCWD, "/usr/lib/locale/locale-archive", O_RDONLY|O_CLOEXEC) = 3
newfstatat(3, "", {st_mode=S_IFREG|0644, st_size=5720672, ...}, AT_EMPTY_PATH) = 0
mmap(NULL, 5720672, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7958a4400000
close(3) = 0
rt_sigaction(SIGPIPE, {sa_handler=SIG_IGN, sa_mask=[PIPE], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7958a5e42900}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGHUP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGINT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGILL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGABRT, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGFPE, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGALRM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGTERM, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGCHLD, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigaction(SIGTRAP, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
gettid() = 5260
gettid() = 5260
gettid() = 5260
getpid() = 5260
gettid() = 5260
gettid() = 5260
gettid() = 5260
getuid() = 1000
gettid() = 5260
gettid() = 5260
gettid() = 5260
mprotect(0x254002a4000, 16384, PROT_READ|PROT_WRITE) = 0
gettid() = 5260
gettid() = 5260
gettid() = 5260
getpid() = 5260
mprotect(0x254002a8000, 32768, PROT_READ|PROT_WRITE) = 0
readlink("/proc/self/exe", "/opt/forticlient/gui/FortiClient"..., 4096) = 54
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/icudtl.dat", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=10544880, ...}) = 0
mmap(NULL, 10544880, PROT_READ, MAP_SHARED, 3, 0) = 0x7958a3800000
openat(AT_FDCWD, "/etc/localtime", O_RDONLY|O_CLOEXEC) = 4
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=3497, ...}, AT_EMPTY_PATH) = 0
newfstatat(4, "", {st_mode=S_IFREG|0644, st_size=3497, ...}, AT_EMPTY_PATH) = 0
read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\0\0\0\f\0\0\0\0"..., 4096) = 3497
lseek(4, -2210, SEEK_CUR) = 1287
read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\0\0\0\f\0\0\0\0"..., 4096) = 2210
close(4) = 0
readlink("/etc/localtime", "/usr/share/zoneinfo/Europe/Lisbo"..., 4095) = 33
gettid() = 5260
openat(AT_FDCWD, "/opt/forticlient/gui/FortiClient-linux-x64/v8_context_snapshot.bin", O_RDONLY) = 4
gettid() = 5260
gettid() = 5260
fstat(4, {st_mode=S_IFREG|0644, st_size=588152, ...}) = 0
mmap(NULL, 588152, PROT_READ, MAP_SHARED, 4, 0) = 0x7958a4996000
gettid() = 5260
gettid() = 5260
gettid() = 5260
socketpair(AF_UNIX, SOCK_SEQPACKET, 0, [5, 6]) = 0
shutdown(5, SHUT_RD) = 0
shutdown(6, SHUT_WR) = 0
pipe2([7, 8], 0) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x7958a5e94810, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7958a5e42900}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
mmap(NULL, 8392704, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7958a2fff000
mprotect(0x7958a3000000, 8388608, PROT_READ|PROT_WRITE) = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0
clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7958a37ff990, parent_tid=0x7958a37ff990, exit_signal=0, stack=0x7958a2fff000, stack_size=0x7ff8c0, tls=0x7958a37ff6c0} => {parent_tid=[5266]}, 88) = 5266
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x7ffce6dc5928, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 0, NULL, FUTEX_BITSET_MATCH_ANY) = -1 EAGAIN (Resource temporarily unavailable)
futex(0x7ffce6dc58d8, FUTEX_WAKE_PRIVATE, 1) = 0
getresuid([1000], [1000], [1000]) = 0
getresgid([1000], [1000], [1000]) = 0
readlink("/proc/self/exe", "/opt/forticlient/gui/FortiClient"..., 4096) = 54
access("/opt/forticlient/gui/FortiClient-linux-x64/chrome-sandbox", F_OK) = 0
getresuid([1000], [1000], [1000]) = 0
getresgid([1000], [1000], [1000]) = 0
clone(child_stack=0x7ffce6dc5790, flags=CLONE_NEWUSER|SIGCHLD) = -1 EACCES (Permission denied)
getpid() = 5260
futex(0x57d837d2f0e8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
openat(AT_FDCWD, "/usr/share/locale/locale.alias", O_RDONLY|O_CLOEXEC) = 9
newfstatat(9, "", {st_mode=S_IFREG|0644, st_size=2996, ...}, AT_EMPTY_PATH) = 0
read(9, "# Locale name alias data base.\n#"..., 4096) = 2996
read(9, "", 4096) = 0
close(9) = 0
openat(AT_FDCWD, "/usr/share/locale/en_US.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en_US.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en_US/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale/en/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale-langpack/en_US.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale-langpack/en_US.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale-langpack/en_US/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale-langpack/en.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale-langpack/en.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/usr/share/locale-langpack/en/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT (No such file or directory)
gettid() = 5260
write(2, "[5260:0211/154842.143096:FATAL:c"..., 93[5260:0211/154842.143096:FATAL:credentials.cc(127)] Check failed: . : Permission denied (13)
) = 93
gettid() = 5260
--- SIGTRAP {si_signo=SIGTRAP, si_code=SI_KERNEL, si_addr=NULL} ---
+++ killed by SIGTRAP (core dumped) +++
Trace/breakpoint trap (core dumped)

thanks in advance

[althaser · Accepted solution]

It's not specific to Forticlient software but related to the kernel privileges:

as a workaround: $ sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0

thanks