Aug 14 04:13:01 prd-ubuntu2004-docker-8c-8g-10784 passwd[757]: password for 'ubuntu' changed by 'root'
Aug 14 04:13:01 prd-ubuntu2004-docker-8c-8g-10784 systemd-logind[831]: New seat seat0.
Aug 14 04:13:01 prd-ubuntu2004-docker-8c-8g-10784 systemd-logind[831]: Watching system buttons on /dev/input/event0 (Power Button)
Aug 14 04:13:01 prd-ubuntu2004-docker-8c-8g-10784 systemd-logind[831]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Aug 14 04:13:01 prd-ubuntu2004-docker-8c-8g-10784 sshd[874]: Server listening on 0.0.0.0 port 22.
Aug 14 04:13:01 prd-ubuntu2004-docker-8c-8g-10784 sshd[874]: Server listening on :: port 22.
Aug 14 04:13:04 prd-ubuntu2004-docker-8c-8g-10784 sshd[2058]: error: kex_exchange_identification: Connection closed by remote host
Aug 14 04:13:08 prd-ubuntu2004-docker-8c-8g-10784 sshd[3262]: Invalid user jenkins from 10.30.168.15 port 42016
Aug 14 04:13:09 prd-ubuntu2004-docker-8c-8g-10784 sshd[3262]: Received disconnect from 10.30.168.15 port 42016:11: Closed due to user request. [preauth]
Aug 14 04:13:09 prd-ubuntu2004-docker-8c-8g-10784 sshd[3262]: Disconnected from invalid user jenkins 10.30.168.15 port 42016 [preauth]
Aug 14 04:13:15 prd-ubuntu2004-docker-8c-8g-10784 sshd[5172]: Invalid user jenkins from 10.30.168.15 port 42018
Aug 14 04:13:16 prd-ubuntu2004-docker-8c-8g-10784 sshd[5172]: Received disconnect from 10.30.168.15 port 42018:11: Closed due to user request. [preauth]
Aug 14 04:13:16 prd-ubuntu2004-docker-8c-8g-10784 sshd[5172]: Disconnected from invalid user jenkins 10.30.168.15 port 42018 [preauth]
Aug 14 04:13:24 prd-ubuntu2004-docker-8c-8g-10784 sshd[7944]: Invalid user jenkins from 10.30.168.15 port 42026
Aug 14 04:13:24 prd-ubuntu2004-docker-8c-8g-10784 sshd[7944]: Received disconnect from 10.30.168.15 port 42026:11: Closed due to user request. [preauth]
Aug 14 04:13:24 prd-ubuntu2004-docker-8c-8g-10784 sshd[7944]: Disconnected from invalid user jenkins 10.30.168.15 port 42026 [preauth]
Aug 14 04:13:27 prd-ubuntu2004-docker-8c-8g-10784 sshd[8410]: Invalid user jenkins from 10.30.168.15 port 42034
Aug 14 04:13:27 prd-ubuntu2004-docker-8c-8g-10784 sshd[8410]: Received disconnect from 10.30.168.15 port 42034:11: Closed due to user request. [preauth]
Aug 14 04:13:27 prd-ubuntu2004-docker-8c-8g-10784 sshd[8410]: Disconnected from invalid user jenkins 10.30.168.15 port 42034 [preauth]
Aug 14 04:13:31 prd-ubuntu2004-docker-8c-8g-10784 useradd[9117]: new group: name=jenkins, GID=1001
Aug 14 04:13:31 prd-ubuntu2004-docker-8c-8g-10784 useradd[9117]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Aug 14 04:13:31 prd-ubuntu2004-docker-8c-8g-10784 usermod[9154]: add 'jenkins' to group 'docker'
Aug 14 04:13:31 prd-ubuntu2004-docker-8c-8g-10784 usermod[9154]: add 'jenkins' to shadow group 'docker'
Aug 14 04:13:32 prd-ubuntu2004-docker-8c-8g-10784 sshd[9116]: Accepted publickey for jenkins from 10.30.168.15 port 42038 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs
Aug 14 04:13:32 prd-ubuntu2004-docker-8c-8g-10784 sshd[9116]: pam_unix(sshd:session): session opened for user jenkins by (uid=0)
Aug 14 04:13:32 prd-ubuntu2004-docker-8c-8g-10784 systemd-logind[831]: New session 1 of user jenkins.
Aug 14 04:13:32 prd-ubuntu2004-docker-8c-8g-10784 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0)
Aug 14 04:14:02 prd-ubuntu2004-docker-8c-8g-10784 CRON[18057]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:14:02 prd-ubuntu2004-docker-8c-8g-10784 CRON[18057]: pam_unix(cron:session): session closed for user root
Aug 14 04:15:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[29252]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:15:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[29252]: pam_unix(cron:session): session closed for user root
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session closed for user root
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session closed for user root
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session closed for user root
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 14 04:15:22 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session closed for user root
Aug 14 04:15:23 prd-ubuntu2004-docker-8c-8g-10784 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Aug 14 04:15:23 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 14 04:15:23 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session closed for user root
Aug 14 04:15:23 prd-ubuntu2004-docker-8c-8g-10784 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Aug 14 04:15:23 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 14 04:15:23 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session closed for user root
Aug 14 04:16:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[49355]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:16:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[49355]: pam_unix(cron:session): session closed for user root
Aug 14 04:17:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[49818]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:17:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[49817]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:17:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[49817]: pam_unix(cron:session): session closed for user root
Aug 14 04:17:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[49818]: pam_unix(cron:session): session closed for user root
Aug 14 04:18:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[50414]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:18:02 prd-ubuntu2004-docker-8c-8g-10784 CRON[50414]: pam_unix(cron:session): session closed for user root
Aug 14 04:19:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[52345]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:19:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[52345]: pam_unix(cron:session): session closed for user root
Aug 14 04:20:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[53301]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:20:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[53301]: pam_unix(cron:session): session closed for user root
Aug 14 04:21:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[54044]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:21:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[54044]: pam_unix(cron:session): session closed for user root
Aug 14 04:22:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[54513]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:22:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[54513]: pam_unix(cron:session): session closed for user root
Aug 14 04:23:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[55250]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:23:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[55250]: pam_unix(cron:session): session closed for user root
Aug 14 04:24:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[55993]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:24:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[55993]: pam_unix(cron:session): session closed for user root
Aug 14 04:25:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[56633]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:25:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[56633]: pam_unix(cron:session): session closed for user root
Aug 14 04:26:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[57411]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:26:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[57411]: pam_unix(cron:session): session closed for user root
Aug 14 04:27:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[58157]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:27:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[58157]: pam_unix(cron:session): session closed for user root
Aug 14 04:28:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[58597]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:28:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[58597]: pam_unix(cron:session): session closed for user root
Aug 14 04:29:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[59267]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:29:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[59267]: pam_unix(cron:session): session closed for user root
Aug 14 04:30:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[60110]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:30:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[60110]: pam_unix(cron:session): session closed for user root
Aug 14 04:31:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[60800]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:31:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[60800]: pam_unix(cron:session): session closed for user root
Aug 14 04:32:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[61384]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:32:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[61384]: pam_unix(cron:session): session closed for user root
Aug 14 04:33:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[61955]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:33:02 prd-ubuntu2004-docker-8c-8g-10784 CRON[61955]: pam_unix(cron:session): session closed for user root
Aug 14 04:34:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[62414]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:34:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[62414]: pam_unix(cron:session): session closed for user root
Aug 14 04:35:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[63188]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:35:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[63188]: pam_unix(cron:session): session closed for user root
Aug 14 04:36:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[63915]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:36:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[63915]: pam_unix(cron:session): session closed for user root
Aug 14 04:37:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[64440]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:37:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[64440]: pam_unix(cron:session): session closed for user root
Aug 14 04:38:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[64659]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:38:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[64659]: pam_unix(cron:session): session closed for user root
Aug 14 04:39:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[64849]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:39:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[64849]: pam_unix(cron:session): session closed for user root
Aug 14 04:40:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[64978]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:40:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[64978]: pam_unix(cron:session): session closed for user root
Aug 14 04:41:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[65213]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:41:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[65213]: pam_unix(cron:session): session closed for user root
Aug 14 04:42:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[65866]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:42:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[65866]: pam_unix(cron:session): session closed for user root
Aug 14 04:43:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[66040]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:43:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[66040]: pam_unix(cron:session): session closed for user root
Aug 14 04:44:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[66046]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:44:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[66046]: pam_unix(cron:session): session closed for user root
Aug 14 04:45:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[66049]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:45:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[66049]: pam_unix(cron:session): session closed for user root
Aug 14 04:46:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[66347]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:46:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[66347]: pam_unix(cron:session): session closed for user root
Aug 14 04:47:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[67106]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:47:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[67106]: pam_unix(cron:session): session closed for user root
Aug 14 04:48:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[67320]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:48:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[67320]: pam_unix(cron:session): session closed for user root
Aug 14 04:49:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[67848]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:49:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[67848]: pam_unix(cron:session): session closed for user root
Aug 14 04:50:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[68716]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:50:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[68716]: pam_unix(cron:session): session closed for user root
Aug 14 04:51:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[69333]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:51:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[69333]: pam_unix(cron:session): session closed for user root
Aug 14 04:52:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[69671]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:52:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[69671]: pam_unix(cron:session): session closed for user root
Aug 14 04:53:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[69874]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:53:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[69874]: pam_unix(cron:session): session closed for user root
Aug 14 04:54:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[70220]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:54:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[70220]: pam_unix(cron:session): session closed for user root
Aug 14 04:55:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[70506]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:55:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[70506]: pam_unix(cron:session): session closed for user root
Aug 14 04:56:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[70842]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:56:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[70842]: pam_unix(cron:session): session closed for user root
Aug 14 04:57:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[71178]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:57:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[71178]: pam_unix(cron:session): session closed for user root
Aug 14 04:57:33 prd-ubuntu2004-docker-8c-8g-10784 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/autorelease-release-scandium-mvn39-openjdk21/m2repo
Aug 14 04:57:33 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 14 04:57:33 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session closed for user root
Aug 14 04:58:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[71584]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:58:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[71584]: pam_unix(cron:session): session closed for user root
Aug 14 04:59:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[71652]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 04:59:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[71652]: pam_unix(cron:session): session closed for user root
Aug 14 05:00:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[71885]: pam_unix(cron:session): session opened for user root by (uid=0)
Aug 14 05:00:01 prd-ubuntu2004-docker-8c-8g-10784 CRON[71885]: pam_unix(cron:session): session closed for user root
Aug 14 05:00:25 prd-ubuntu2004-docker-8c-8g-10784 sudo:  jenkins : TTY=unknown ; PWD=/w/workspace/autorelease-release-scandium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp
Aug 14 05:00:25 prd-ubuntu2004-docker-8c-8g-10784 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)