Oct 28 16:14:53 prd-ubuntu2204-docker-4c-4g-2922 sshd[912]: error: kex_exchange_identification: Connection closed by remote host Oct 28 16:14:53 prd-ubuntu2204-docker-4c-4g-2922 sshd[912]: Connection closed by 10.30.168.15 port 50308 Oct 28 16:14:59 prd-ubuntu2204-docker-4c-4g-2922 sshd[920]: Invalid user jenkins from 10.30.168.15 port 50326 Oct 28 16:14:59 prd-ubuntu2204-docker-4c-4g-2922 sshd[920]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:14:59 prd-ubuntu2204-docker-4c-4g-2922 sshd[920]: Received disconnect from 10.30.168.15 port 50326:11: Closed due to user request. [preauth] Oct 28 16:14:59 prd-ubuntu2204-docker-4c-4g-2922 sshd[920]: Disconnected from invalid user jenkins 10.30.168.15 port 50326 [preauth] Oct 28 16:15:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[922]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:15:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[922]: pam_unix(cron:session): session closed for user root Oct 28 16:15:02 prd-ubuntu2204-docker-4c-4g-2922 sshd[925]: Invalid user jenkins from 10.30.168.15 port 50350 Oct 28 16:15:03 prd-ubuntu2204-docker-4c-4g-2922 sshd[925]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:03 prd-ubuntu2204-docker-4c-4g-2922 sshd[925]: Received disconnect from 10.30.168.15 port 50350:11: Closed due to user request. [preauth] Oct 28 16:15:03 prd-ubuntu2204-docker-4c-4g-2922 sshd[925]: Disconnected from invalid user jenkins 10.30.168.15 port 50350 [preauth] Oct 28 16:15:06 prd-ubuntu2204-docker-4c-4g-2922 sshd[927]: Invalid user jenkins from 10.30.168.15 port 50360 Oct 28 16:15:06 prd-ubuntu2204-docker-4c-4g-2922 sshd[927]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:06 prd-ubuntu2204-docker-4c-4g-2922 sshd[927]: Received disconnect from 10.30.168.15 port 50360:11: Closed due to user request. [preauth] Oct 28 16:15:06 prd-ubuntu2204-docker-4c-4g-2922 sshd[927]: Disconnected from invalid user jenkins 10.30.168.15 port 50360 [preauth] Oct 28 16:15:09 prd-ubuntu2204-docker-4c-4g-2922 sshd[929]: Invalid user jenkins from 10.30.168.15 port 50368 Oct 28 16:15:09 prd-ubuntu2204-docker-4c-4g-2922 sshd[929]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:09 prd-ubuntu2204-docker-4c-4g-2922 sshd[929]: Received disconnect from 10.30.168.15 port 50368:11: Closed due to user request. [preauth] Oct 28 16:15:09 prd-ubuntu2204-docker-4c-4g-2922 sshd[929]: Disconnected from invalid user jenkins 10.30.168.15 port 50368 [preauth] Oct 28 16:15:11 prd-ubuntu2204-docker-4c-4g-2922 sshd[931]: Invalid user jenkins from 10.30.168.15 port 50374 Oct 28 16:15:12 prd-ubuntu2204-docker-4c-4g-2922 sshd[931]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:12 prd-ubuntu2204-docker-4c-4g-2922 sshd[931]: Received disconnect from 10.30.168.15 port 50374:11: Closed due to user request. [preauth] Oct 28 16:15:12 prd-ubuntu2204-docker-4c-4g-2922 sshd[931]: Disconnected from invalid user jenkins 10.30.168.15 port 50374 [preauth] Oct 28 16:15:14 prd-ubuntu2204-docker-4c-4g-2922 sshd[933]: Invalid user jenkins from 10.30.168.15 port 50382 Oct 28 16:15:14 prd-ubuntu2204-docker-4c-4g-2922 sshd[933]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:14 prd-ubuntu2204-docker-4c-4g-2922 sshd[933]: Received disconnect from 10.30.168.15 port 50382:11: Closed due to user request. [preauth] Oct 28 16:15:14 prd-ubuntu2204-docker-4c-4g-2922 sshd[933]: Disconnected from invalid user jenkins 10.30.168.15 port 50382 [preauth] Oct 28 16:15:17 prd-ubuntu2204-docker-4c-4g-2922 sshd[936]: Invalid user jenkins from 10.30.168.15 port 50392 Oct 28 16:15:17 prd-ubuntu2204-docker-4c-4g-2922 sshd[936]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:17 prd-ubuntu2204-docker-4c-4g-2922 sshd[936]: Received disconnect from 10.30.168.15 port 50392:11: Closed due to user request. [preauth] Oct 28 16:15:17 prd-ubuntu2204-docker-4c-4g-2922 sshd[936]: Disconnected from invalid user jenkins 10.30.168.15 port 50392 [preauth] Oct 28 16:15:21 prd-ubuntu2204-docker-4c-4g-2922 sshd[938]: Invalid user jenkins from 10.30.168.15 port 50400 Oct 28 16:15:21 prd-ubuntu2204-docker-4c-4g-2922 sshd[938]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:21 prd-ubuntu2204-docker-4c-4g-2922 sshd[938]: Received disconnect from 10.30.168.15 port 50400:11: Closed due to user request. [preauth] Oct 28 16:15:21 prd-ubuntu2204-docker-4c-4g-2922 sshd[938]: Disconnected from invalid user jenkins 10.30.168.15 port 50400 [preauth] Oct 28 16:15:24 prd-ubuntu2204-docker-4c-4g-2922 sshd[947]: Invalid user jenkins from 10.30.168.15 port 50404 Oct 28 16:15:24 prd-ubuntu2204-docker-4c-4g-2922 sshd[947]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:24 prd-ubuntu2204-docker-4c-4g-2922 sshd[947]: Received disconnect from 10.30.168.15 port 50404:11: Closed due to user request. [preauth] Oct 28 16:15:24 prd-ubuntu2204-docker-4c-4g-2922 sshd[947]: Disconnected from invalid user jenkins 10.30.168.15 port 50404 [preauth] Oct 28 16:15:27 prd-ubuntu2204-docker-4c-4g-2922 sshd[949]: Invalid user jenkins from 10.30.168.15 port 50410 Oct 28 16:15:27 prd-ubuntu2204-docker-4c-4g-2922 sshd[949]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:27 prd-ubuntu2204-docker-4c-4g-2922 sshd[949]: Received disconnect from 10.30.168.15 port 50410:11: Closed due to user request. [preauth] Oct 28 16:15:27 prd-ubuntu2204-docker-4c-4g-2922 sshd[949]: Disconnected from invalid user jenkins 10.30.168.15 port 50410 [preauth] Oct 28 16:15:30 prd-ubuntu2204-docker-4c-4g-2922 sshd[968]: Invalid user jenkins from 10.30.168.15 port 50414 Oct 28 16:15:30 prd-ubuntu2204-docker-4c-4g-2922 sshd[968]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:30 prd-ubuntu2204-docker-4c-4g-2922 sshd[968]: Received disconnect from 10.30.168.15 port 50414:11: Closed due to user request. [preauth] Oct 28 16:15:30 prd-ubuntu2204-docker-4c-4g-2922 sshd[968]: Disconnected from invalid user jenkins 10.30.168.15 port 50414 [preauth] Oct 28 16:15:33 prd-ubuntu2204-docker-4c-4g-2922 sshd[1150]: Invalid user jenkins from 10.30.168.15 port 50430 Oct 28 16:15:33 prd-ubuntu2204-docker-4c-4g-2922 sshd[1150]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:33 prd-ubuntu2204-docker-4c-4g-2922 sshd[1150]: Received disconnect from 10.30.168.15 port 50430:11: Closed due to user request. [preauth] Oct 28 16:15:33 prd-ubuntu2204-docker-4c-4g-2922 sshd[1150]: Disconnected from invalid user jenkins 10.30.168.15 port 50430 [preauth] Oct 28 16:15:36 prd-ubuntu2204-docker-4c-4g-2922 sshd[1216]: Invalid user jenkins from 10.30.168.15 port 50440 Oct 28 16:15:36 prd-ubuntu2204-docker-4c-4g-2922 sshd[1216]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:36 prd-ubuntu2204-docker-4c-4g-2922 sshd[1216]: Received disconnect from 10.30.168.15 port 50440:11: Closed due to user request. [preauth] Oct 28 16:15:36 prd-ubuntu2204-docker-4c-4g-2922 sshd[1216]: Disconnected from invalid user jenkins 10.30.168.15 port 50440 [preauth] Oct 28 16:15:39 prd-ubuntu2204-docker-4c-4g-2922 sshd[1262]: Invalid user jenkins from 10.30.168.15 port 50452 Oct 28 16:15:39 prd-ubuntu2204-docker-4c-4g-2922 sshd[1262]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:39 prd-ubuntu2204-docker-4c-4g-2922 sshd[1262]: Received disconnect from 10.30.168.15 port 50452:11: Closed due to user request. [preauth] Oct 28 16:15:39 prd-ubuntu2204-docker-4c-4g-2922 sshd[1262]: Disconnected from invalid user jenkins 10.30.168.15 port 50452 [preauth] Oct 28 16:15:42 prd-ubuntu2204-docker-4c-4g-2922 sshd[1334]: Invalid user jenkins from 10.30.168.15 port 50464 Oct 28 16:15:42 prd-ubuntu2204-docker-4c-4g-2922 sshd[1334]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:42 prd-ubuntu2204-docker-4c-4g-2922 sshd[1334]: Received disconnect from 10.30.168.15 port 50464:11: Closed due to user request. [preauth] Oct 28 16:15:42 prd-ubuntu2204-docker-4c-4g-2922 sshd[1334]: Disconnected from invalid user jenkins 10.30.168.15 port 50464 [preauth] Oct 28 16:15:45 prd-ubuntu2204-docker-4c-4g-2922 sshd[1340]: Invalid user jenkins from 10.30.168.15 port 50478 Oct 28 16:15:45 prd-ubuntu2204-docker-4c-4g-2922 sshd[1340]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:45 prd-ubuntu2204-docker-4c-4g-2922 sshd[1340]: Received disconnect from 10.30.168.15 port 50478:11: Closed due to user request. [preauth] Oct 28 16:15:45 prd-ubuntu2204-docker-4c-4g-2922 sshd[1340]: Disconnected from invalid user jenkins 10.30.168.15 port 50478 [preauth] Oct 28 16:15:48 prd-ubuntu2204-docker-4c-4g-2922 sshd[1342]: Invalid user jenkins from 10.30.168.15 port 50492 Oct 28 16:15:48 prd-ubuntu2204-docker-4c-4g-2922 sshd[1342]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:48 prd-ubuntu2204-docker-4c-4g-2922 sshd[1342]: Received disconnect from 10.30.168.15 port 50492:11: Closed due to user request. [preauth] Oct 28 16:15:48 prd-ubuntu2204-docker-4c-4g-2922 sshd[1342]: Disconnected from invalid user jenkins 10.30.168.15 port 50492 [preauth] Oct 28 16:15:51 prd-ubuntu2204-docker-4c-4g-2922 sshd[1344]: Invalid user jenkins from 10.30.168.15 port 50498 Oct 28 16:15:58 prd-ubuntu2204-docker-4c-4g-2922 sshd[1344]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:15:58 prd-ubuntu2204-docker-4c-4g-2922 sshd[1344]: Received disconnect from 10.30.168.15 port 50498:11: Closed due to user request. [preauth] Oct 28 16:15:58 prd-ubuntu2204-docker-4c-4g-2922 sshd[1344]: Disconnected from invalid user jenkins 10.30.168.15 port 50498 [preauth] Oct 28 16:16:01 prd-ubuntu2204-docker-4c-4g-2922 sshd[1346]: Invalid user jenkins from 10.30.168.15 port 50528 Oct 28 16:16:01 prd-ubuntu2204-docker-4c-4g-2922 sshd[1346]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:16:01 prd-ubuntu2204-docker-4c-4g-2922 sshd[1346]: Received disconnect from 10.30.168.15 port 50528:11: Closed due to user request. [preauth] Oct 28 16:16:01 prd-ubuntu2204-docker-4c-4g-2922 sshd[1346]: Disconnected from invalid user jenkins 10.30.168.15 port 50528 [preauth] Oct 28 16:16:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[1370]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:16:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[1370]: pam_unix(cron:session): session closed for user root Oct 28 16:16:02 prd-ubuntu2204-docker-4c-4g-2922 useradd[1378]: new group: name=jenkins, GID=1001 Oct 28 16:16:02 prd-ubuntu2204-docker-4c-4g-2922 useradd[1378]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Oct 28 16:16:04 prd-ubuntu2204-docker-4c-4g-2922 usermod[1387]: add 'jenkins' to group 'docker' Oct 28 16:16:04 prd-ubuntu2204-docker-4c-4g-2922 usermod[1387]: add 'jenkins' to shadow group 'docker' Oct 28 16:16:04 prd-ubuntu2204-docker-4c-4g-2922 sshd[1388]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Oct 28 16:16:04 prd-ubuntu2204-docker-4c-4g-2922 sshd[1388]: Received disconnect from 10.30.168.15 port 50532:11: Closed due to user request. [preauth] Oct 28 16:16:04 prd-ubuntu2204-docker-4c-4g-2922 sshd[1388]: Disconnected from authenticating user jenkins 10.30.168.15 port 50532 [preauth] Oct 28 16:16:07 prd-ubuntu2204-docker-4c-4g-2922 sshd[1423]: Accepted publickey for jenkins from 10.30.168.15 port 50538 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Oct 28 16:16:07 prd-ubuntu2204-docker-4c-4g-2922 sshd[1423]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Oct 28 16:16:07 prd-ubuntu2204-docker-4c-4g-2922 systemd-logind[710]: New session 3 of user jenkins. Oct 28 16:16:07 prd-ubuntu2204-docker-4c-4g-2922 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Oct 28 16:17:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[1872]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:17:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[1873]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:17:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[1872]: pam_unix(cron:session): session closed for user root Oct 28 16:17:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[1873]: pam_unix(cron:session): session closed for user root Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session closed for user root Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session closed for user root Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session closed for user root Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session closed for user root Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session closed for user root Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Oct 28 16:18:00 prd-ubuntu2204-docker-4c-4g-2922 sudo: pam_unix(sudo:session): session closed for user root Oct 28 16:18:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[2021]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:18:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[2021]: pam_unix(cron:session): session closed for user root Oct 28 16:19:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[2053]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:19:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[2053]: pam_unix(cron:session): session closed for user root Oct 28 16:20:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[2674]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:20:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[2674]: pam_unix(cron:session): session closed for user root Oct 28 16:21:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[4385]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:21:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[4385]: pam_unix(cron:session): session closed for user root Oct 28 16:22:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[5526]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:22:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[5526]: pam_unix(cron:session): session closed for user root Oct 28 16:23:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[6507]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:23:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[6507]: pam_unix(cron:session): session closed for user root Oct 28 16:24:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[7426]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:24:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[7426]: pam_unix(cron:session): session closed for user root Oct 28 16:25:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[8297]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:25:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[8297]: pam_unix(cron:session): session closed for user root Oct 28 16:26:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[8606]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:26:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[8606]: pam_unix(cron:session): session closed for user root Oct 28 16:27:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[8792]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Oct 28 16:27:01 prd-ubuntu2204-docker-4c-4g-2922 CRON[8792]: pam_unix(cron:session): session closed for user root Oct 28 16:27:25 prd-ubuntu2204-docker-4c-4g-2922 sudo: jenkins : PWD=/w/workspace/aaa-maven-merge-master ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp