you can't remotely attach to it..
'strace su' in one term, strace -p $PID in another.. You'll get an
'operation not permitted'
haha.. Sorry for all of the extra list traffic, but I wanted to correct this
as well before people may try and think I'm crazy.
Don't 'strace su' in one term.. just 'su' in one term.. and then try
to attach
to it with strace in another term.
further, if you 'strace' su, sudo, or anything else.. it wont run with root
permissions, it'll run with the permissions of the user who ran strace.
Again, apologizes on having to send two extra messages.