Sep  7 00:29:51 prd-ubuntu2204-docker-8c-8g-873 passwd[739]: password for 'ubuntu' changed by 'root'
Sep  7 00:29:51 prd-ubuntu2204-docker-8c-8g-873 sshd[813]: Server listening on 0.0.0.0 port 22.
Sep  7 00:29:51 prd-ubuntu2204-docker-8c-8g-873 sshd[813]: Server listening on :: port 22.
Sep  7 00:29:51 prd-ubuntu2204-docker-8c-8g-873 systemd-logind[772]: New seat seat0.
Sep  7 00:29:51 prd-ubuntu2204-docker-8c-8g-873 systemd-logind[772]: Watching system buttons on /dev/input/event0 (Power Button)
Sep  7 00:29:51 prd-ubuntu2204-docker-8c-8g-873 systemd-logind[772]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Sep  7 00:29:53 prd-ubuntu2204-docker-8c-8g-873 sshd[962]: error: kex_exchange_identification: Connection closed by remote host
Sep  7 00:29:53 prd-ubuntu2204-docker-8c-8g-873 sshd[962]: Connection closed by 10.30.168.15 port 56368
Sep  7 00:29:58 prd-ubuntu2204-docker-8c-8g-873 sshd[1041]: Invalid user jenkins from 10.30.168.15 port 56372
Sep  7 00:29:58 prd-ubuntu2204-docker-8c-8g-873 sshd[1041]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep  7 00:29:58 prd-ubuntu2204-docker-8c-8g-873 sshd[1041]: Received disconnect from 10.30.168.15 port 56372:11: Closed due to user request. [preauth]
Sep  7 00:29:58 prd-ubuntu2204-docker-8c-8g-873 sshd[1041]: Disconnected from invalid user jenkins 10.30.168.15 port 56372 [preauth]
Sep  7 00:30:01 prd-ubuntu2204-docker-8c-8g-873 CRON[1046]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:30:01 prd-ubuntu2204-docker-8c-8g-873 CRON[1046]: pam_unix(cron:session): session closed for user root
Sep  7 00:30:01 prd-ubuntu2204-docker-8c-8g-873 sshd[1044]: Invalid user jenkins from 10.30.168.15 port 56376
Sep  7 00:30:01 prd-ubuntu2204-docker-8c-8g-873 sshd[1044]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep  7 00:30:01 prd-ubuntu2204-docker-8c-8g-873 sshd[1044]: Received disconnect from 10.30.168.15 port 56376:11: Closed due to user request. [preauth]
Sep  7 00:30:01 prd-ubuntu2204-docker-8c-8g-873 sshd[1044]: Disconnected from invalid user jenkins 10.30.168.15 port 56376 [preauth]
Sep  7 00:30:04 prd-ubuntu2204-docker-8c-8g-873 sshd[1049]: Invalid user jenkins from 10.30.168.15 port 56386
Sep  7 00:30:04 prd-ubuntu2204-docker-8c-8g-873 sshd[1049]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep  7 00:30:04 prd-ubuntu2204-docker-8c-8g-873 sshd[1049]: Received disconnect from 10.30.168.15 port 56386:11: Closed due to user request. [preauth]
Sep  7 00:30:04 prd-ubuntu2204-docker-8c-8g-873 sshd[1049]: Disconnected from invalid user jenkins 10.30.168.15 port 56386 [preauth]
Sep  7 00:30:07 prd-ubuntu2204-docker-8c-8g-873 sshd[1051]: Invalid user jenkins from 10.30.168.15 port 56388
Sep  7 00:30:07 prd-ubuntu2204-docker-8c-8g-873 sshd[1051]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep  7 00:30:07 prd-ubuntu2204-docker-8c-8g-873 sshd[1051]: Received disconnect from 10.30.168.15 port 56388:11: Closed due to user request. [preauth]
Sep  7 00:30:07 prd-ubuntu2204-docker-8c-8g-873 sshd[1051]: Disconnected from invalid user jenkins 10.30.168.15 port 56388 [preauth]
Sep  7 00:30:10 prd-ubuntu2204-docker-8c-8g-873 sshd[1266]: Invalid user jenkins from 10.30.168.15 port 56390
Sep  7 00:30:10 prd-ubuntu2204-docker-8c-8g-873 sshd[1266]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep  7 00:30:10 prd-ubuntu2204-docker-8c-8g-873 sshd[1266]: Received disconnect from 10.30.168.15 port 56390:11: Closed due to user request. [preauth]
Sep  7 00:30:10 prd-ubuntu2204-docker-8c-8g-873 sshd[1266]: Disconnected from invalid user jenkins 10.30.168.15 port 56390 [preauth]
Sep  7 00:30:13 prd-ubuntu2204-docker-8c-8g-873 sshd[1324]: Invalid user jenkins from 10.30.168.15 port 56398
Sep  7 00:30:13 prd-ubuntu2204-docker-8c-8g-873 sshd[1324]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep  7 00:30:13 prd-ubuntu2204-docker-8c-8g-873 sshd[1324]: Received disconnect from 10.30.168.15 port 56398:11: Closed due to user request. [preauth]
Sep  7 00:30:13 prd-ubuntu2204-docker-8c-8g-873 sshd[1324]: Disconnected from invalid user jenkins 10.30.168.15 port 56398 [preauth]
Sep  7 00:30:16 prd-ubuntu2204-docker-8c-8g-873 sshd[1345]: Invalid user jenkins from 10.30.168.15 port 56400
Sep  7 00:30:16 prd-ubuntu2204-docker-8c-8g-873 sshd[1345]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep  7 00:30:16 prd-ubuntu2204-docker-8c-8g-873 sshd[1345]: Received disconnect from 10.30.168.15 port 56400:11: Closed due to user request. [preauth]
Sep  7 00:30:16 prd-ubuntu2204-docker-8c-8g-873 sshd[1345]: Disconnected from invalid user jenkins 10.30.168.15 port 56400 [preauth]
Sep  7 00:30:19 prd-ubuntu2204-docker-8c-8g-873 useradd[1417]: new group: name=jenkins, GID=1001
Sep  7 00:30:19 prd-ubuntu2204-docker-8c-8g-873 useradd[1417]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Sep  7 00:30:19 prd-ubuntu2204-docker-8c-8g-873 usermod[1426]: add 'jenkins' to group 'docker'
Sep  7 00:30:19 prd-ubuntu2204-docker-8c-8g-873 usermod[1426]: add 'jenkins' to shadow group 'docker'
Sep  7 00:30:19 prd-ubuntu2204-docker-8c-8g-873 sshd[1439]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep  7 00:30:19 prd-ubuntu2204-docker-8c-8g-873 sshd[1439]: Received disconnect from 10.30.168.15 port 56404:11: Closed due to user request. [preauth]
Sep  7 00:30:19 prd-ubuntu2204-docker-8c-8g-873 sshd[1439]: Disconnected from authenticating user jenkins 10.30.168.15 port 56404 [preauth]
Sep  7 00:30:22 prd-ubuntu2204-docker-8c-8g-873 sshd[1464]: Accepted publickey for jenkins from 10.30.168.15 port 56406 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs
Sep  7 00:30:22 prd-ubuntu2204-docker-8c-8g-873 sshd[1464]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0)
Sep  7 00:30:22 prd-ubuntu2204-docker-8c-8g-873 systemd-logind[772]: New session 2 of user jenkins.
Sep  7 00:30:22 prd-ubuntu2204-docker-8c-8g-873 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0)
Sep  7 00:31:01 prd-ubuntu2204-docker-8c-8g-873 CRON[2324]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:31:01 prd-ubuntu2204-docker-8c-8g-873 CRON[2324]: pam_unix(cron:session): session closed for user root
Sep  7 00:32:01 prd-ubuntu2204-docker-8c-8g-873 CRON[2376]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:32:01 prd-ubuntu2204-docker-8c-8g-873 CRON[2376]: pam_unix(cron:session): session closed for user root
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo:  jenkins : PWD=/w/workspace/autorelease-release-manganese-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session closed for user root
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo:  jenkins : PWD=/w/workspace/autorelease-release-manganese-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session closed for user root
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo:  jenkins : PWD=/w/workspace/autorelease-release-manganese-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session closed for user root
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo:  jenkins : PWD=/w/workspace/autorelease-release-manganese-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session closed for user root
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo:  jenkins : PWD=/w/workspace/autorelease-release-manganese-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session closed for user root
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo:  jenkins : PWD=/w/workspace/autorelease-release-manganese-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep  7 00:32:17 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session closed for user root
Sep  7 00:33:01 prd-ubuntu2204-docker-8c-8g-873 CRON[13683]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:33:01 prd-ubuntu2204-docker-8c-8g-873 CRON[13683]: pam_unix(cron:session): session closed for user root
Sep  7 00:34:01 prd-ubuntu2204-docker-8c-8g-873 CRON[14199]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:34:01 prd-ubuntu2204-docker-8c-8g-873 CRON[14199]: pam_unix(cron:session): session closed for user root
Sep  7 00:35:01 prd-ubuntu2204-docker-8c-8g-873 CRON[14433]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:35:01 prd-ubuntu2204-docker-8c-8g-873 CRON[14433]: pam_unix(cron:session): session closed for user root
Sep  7 00:36:01 prd-ubuntu2204-docker-8c-8g-873 CRON[14884]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:36:01 prd-ubuntu2204-docker-8c-8g-873 CRON[14884]: pam_unix(cron:session): session closed for user root
Sep  7 00:37:01 prd-ubuntu2204-docker-8c-8g-873 CRON[15836]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:37:01 prd-ubuntu2204-docker-8c-8g-873 CRON[15836]: pam_unix(cron:session): session closed for user root
Sep  7 00:38:01 prd-ubuntu2204-docker-8c-8g-873 CRON[16620]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:38:01 prd-ubuntu2204-docker-8c-8g-873 CRON[16620]: pam_unix(cron:session): session closed for user root
Sep  7 00:39:01 prd-ubuntu2204-docker-8c-8g-873 CRON[17179]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:39:01 prd-ubuntu2204-docker-8c-8g-873 CRON[17179]: pam_unix(cron:session): session closed for user root
Sep  7 00:40:01 prd-ubuntu2204-docker-8c-8g-873 CRON[17558]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:40:01 prd-ubuntu2204-docker-8c-8g-873 CRON[17558]: pam_unix(cron:session): session closed for user root
Sep  7 00:41:01 prd-ubuntu2204-docker-8c-8g-873 CRON[18306]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:41:01 prd-ubuntu2204-docker-8c-8g-873 CRON[18306]: pam_unix(cron:session): session closed for user root
Sep  7 00:42:01 prd-ubuntu2204-docker-8c-8g-873 CRON[18675]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:42:01 prd-ubuntu2204-docker-8c-8g-873 CRON[18675]: pam_unix(cron:session): session closed for user root
Sep  7 00:43:01 prd-ubuntu2204-docker-8c-8g-873 CRON[19468]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:43:01 prd-ubuntu2204-docker-8c-8g-873 CRON[19468]: pam_unix(cron:session): session closed for user root
Sep  7 00:44:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20055]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:44:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20055]: pam_unix(cron:session): session closed for user root
Sep  7 00:45:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20474]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:45:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20474]: pam_unix(cron:session): session closed for user root
Sep  7 00:46:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20641]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:46:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20641]: pam_unix(cron:session): session closed for user root
Sep  7 00:47:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20681]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:47:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20681]: pam_unix(cron:session): session closed for user root
Sep  7 00:48:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20738]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:48:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20738]: pam_unix(cron:session): session closed for user root
Sep  7 00:49:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20996]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:49:01 prd-ubuntu2204-docker-8c-8g-873 CRON[20996]: pam_unix(cron:session): session closed for user root
Sep  7 00:50:01 prd-ubuntu2204-docker-8c-8g-873 CRON[21638]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:50:01 prd-ubuntu2204-docker-8c-8g-873 CRON[21638]: pam_unix(cron:session): session closed for user root
Sep  7 00:51:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22487]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:51:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22487]: pam_unix(cron:session): session closed for user root
Sep  7 00:52:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22508]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:52:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22508]: pam_unix(cron:session): session closed for user root
Sep  7 00:53:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22519]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:53:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22519]: pam_unix(cron:session): session closed for user root
Sep  7 00:54:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22685]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:54:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22685]: pam_unix(cron:session): session closed for user root
Sep  7 00:55:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22945]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:55:01 prd-ubuntu2204-docker-8c-8g-873 CRON[22945]: pam_unix(cron:session): session closed for user root
Sep  7 00:56:01 prd-ubuntu2204-docker-8c-8g-873 CRON[23710]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:56:01 prd-ubuntu2204-docker-8c-8g-873 CRON[23710]: pam_unix(cron:session): session closed for user root
Sep  7 00:57:01 prd-ubuntu2204-docker-8c-8g-873 CRON[23942]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:57:01 prd-ubuntu2204-docker-8c-8g-873 CRON[23942]: pam_unix(cron:session): session closed for user root
Sep  7 00:58:01 prd-ubuntu2204-docker-8c-8g-873 CRON[24103]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:58:01 prd-ubuntu2204-docker-8c-8g-873 CRON[24103]: pam_unix(cron:session): session closed for user root
Sep  7 00:59:01 prd-ubuntu2204-docker-8c-8g-873 CRON[24339]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 00:59:01 prd-ubuntu2204-docker-8c-8g-873 CRON[24339]: pam_unix(cron:session): session closed for user root
Sep  7 01:00:01 prd-ubuntu2204-docker-8c-8g-873 CRON[24590]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 01:00:01 prd-ubuntu2204-docker-8c-8g-873 CRON[24590]: pam_unix(cron:session): session closed for user root
Sep  7 01:00:54 prd-ubuntu2204-docker-8c-8g-873 sudo:  jenkins : PWD=/w/workspace/autorelease-release-manganese-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/autorelease-release-manganese-mvn39-openjdk21/m2repo
Sep  7 01:00:54 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep  7 01:00:54 prd-ubuntu2204-docker-8c-8g-873 sudo: pam_unix(sudo:session): session closed for user root
Sep  7 01:01:01 prd-ubuntu2204-docker-8c-8g-873 CRON[24991]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 01:01:01 prd-ubuntu2204-docker-8c-8g-873 CRON[24991]: pam_unix(cron:session): session closed for user root
Sep  7 01:02:01 prd-ubuntu2204-docker-8c-8g-873 CRON[25001]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 01:02:01 prd-ubuntu2204-docker-8c-8g-873 CRON[25001]: pam_unix(cron:session): session closed for user root
Sep  7 01:03:01 prd-ubuntu2204-docker-8c-8g-873 CRON[25004]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 01:03:01 prd-ubuntu2204-docker-8c-8g-873 CRON[25004]: pam_unix(cron:session): session closed for user root
Sep  7 01:04:01 prd-ubuntu2204-docker-8c-8g-873 CRON[25080]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 01:04:01 prd-ubuntu2204-docker-8c-8g-873 CRON[25080]: pam_unix(cron:session): session closed for user root
Sep  7 01:05:01 prd-ubuntu2204-docker-8c-8g-873 CRON[25453]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep  7 01:05:01 prd-ubuntu2204-docker-8c-8g-873 CRON[25453]: pam_unix(cron:session): session closed for user root
Sep  7 01:05:11 prd-ubuntu2204-docker-8c-8g-873 sudo:  jenkins : PWD=/w/workspace/autorelease-release-manganese-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp