fix execsnoop on illumos