How to debug and determine privileges required by a command using ppriv command

1. Enter the command that failed as an argument to the ppriv command

2. Determine which system call is failing by consulting the /etc/name_to_sysnum file and searching for the syscall number.

e.g

$ ppriv -eD touch /tmp/file.txt

touch[xxxx] : missing privilege "file_dac_write" ...
(euid = nnn, syscall = 224 )

$ grep 224 /etc/name_to_sysnum