Jun 29 00:21:30 prd-ubuntu2204-docker-8c-8g-38136 passwd[747]: password for 'ubuntu' changed by 'root'
Jun 29 00:21:30 prd-ubuntu2204-docker-8c-8g-38136 systemd-logind[781]: New seat seat0.
Jun 29 00:21:30 prd-ubuntu2204-docker-8c-8g-38136 systemd-logind[781]: Watching system buttons on /dev/input/event0 (Power Button)
Jun 29 00:21:30 prd-ubuntu2204-docker-8c-8g-38136 systemd-logind[781]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jun 29 00:21:30 prd-ubuntu2204-docker-8c-8g-38136 sshd[827]: Server listening on 0.0.0.0 port 22.
Jun 29 00:21:30 prd-ubuntu2204-docker-8c-8g-38136 sshd[827]: Server listening on :: port 22.
Jun 29 00:21:34 prd-ubuntu2204-docker-8c-8g-38136 sshd[1014]: error: kex_exchange_identification: Connection closed by remote host
Jun 29 00:21:34 prd-ubuntu2204-docker-8c-8g-38136 sshd[1014]: Connection closed by 10.30.168.15 port 46774
Jun 29 00:21:39 prd-ubuntu2204-docker-8c-8g-38136 sshd[1021]: Invalid user jenkins from 10.30.168.15 port 46782
Jun 29 00:21:39 prd-ubuntu2204-docker-8c-8g-38136 sshd[1021]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jun 29 00:21:39 prd-ubuntu2204-docker-8c-8g-38136 sshd[1021]: Received disconnect from 10.30.168.15 port 46782:11: Closed due to user request. [preauth]
Jun 29 00:21:39 prd-ubuntu2204-docker-8c-8g-38136 sshd[1021]: Disconnected from invalid user jenkins 10.30.168.15 port 46782 [preauth]
Jun 29 00:21:42 prd-ubuntu2204-docker-8c-8g-38136 sshd[1023]: Invalid user jenkins from 10.30.168.15 port 46784
Jun 29 00:21:42 prd-ubuntu2204-docker-8c-8g-38136 sshd[1023]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jun 29 00:21:42 prd-ubuntu2204-docker-8c-8g-38136 sshd[1023]: Received disconnect from 10.30.168.15 port 46784:11: Closed due to user request. [preauth]
Jun 29 00:21:42 prd-ubuntu2204-docker-8c-8g-38136 sshd[1023]: Disconnected from invalid user jenkins 10.30.168.15 port 46784 [preauth]
Jun 29 00:21:45 prd-ubuntu2204-docker-8c-8g-38136 sshd[1025]: Invalid user jenkins from 10.30.168.15 port 46788
Jun 29 00:21:45 prd-ubuntu2204-docker-8c-8g-38136 sshd[1025]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jun 29 00:21:45 prd-ubuntu2204-docker-8c-8g-38136 sshd[1025]: Received disconnect from 10.30.168.15 port 46788:11: Closed due to user request. [preauth]
Jun 29 00:21:45 prd-ubuntu2204-docker-8c-8g-38136 sshd[1025]: Disconnected from invalid user jenkins 10.30.168.15 port 46788 [preauth]
Jun 29 00:21:48 prd-ubuntu2204-docker-8c-8g-38136 sshd[1164]: Invalid user jenkins from 10.30.168.15 port 46794
Jun 29 00:21:48 prd-ubuntu2204-docker-8c-8g-38136 sshd[1164]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jun 29 00:21:48 prd-ubuntu2204-docker-8c-8g-38136 sshd[1164]: Received disconnect from 10.30.168.15 port 46794:11: Closed due to user request. [preauth]
Jun 29 00:21:48 prd-ubuntu2204-docker-8c-8g-38136 sshd[1164]: Disconnected from invalid user jenkins 10.30.168.15 port 46794 [preauth]
Jun 29 00:21:51 prd-ubuntu2204-docker-8c-8g-38136 sshd[1321]: Invalid user jenkins from 10.30.168.15 port 46796
Jun 29 00:21:51 prd-ubuntu2204-docker-8c-8g-38136 sshd[1321]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jun 29 00:21:51 prd-ubuntu2204-docker-8c-8g-38136 sshd[1321]: Received disconnect from 10.30.168.15 port 46796:11: Closed due to user request. [preauth]
Jun 29 00:21:51 prd-ubuntu2204-docker-8c-8g-38136 sshd[1321]: Disconnected from invalid user jenkins 10.30.168.15 port 46796 [preauth]
Jun 29 00:21:54 prd-ubuntu2204-docker-8c-8g-38136 sshd[1387]: Invalid user jenkins from 10.30.168.15 port 46798
Jun 29 00:21:54 prd-ubuntu2204-docker-8c-8g-38136 sshd[1387]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jun 29 00:21:54 prd-ubuntu2204-docker-8c-8g-38136 sshd[1387]: Received disconnect from 10.30.168.15 port 46798:11: Closed due to user request. [preauth]
Jun 29 00:21:54 prd-ubuntu2204-docker-8c-8g-38136 sshd[1387]: Disconnected from invalid user jenkins 10.30.168.15 port 46798 [preauth]
Jun 29 00:21:56 prd-ubuntu2204-docker-8c-8g-38136 useradd[1417]: new group: name=jenkins, GID=1001
Jun 29 00:21:56 prd-ubuntu2204-docker-8c-8g-38136 useradd[1417]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Jun 29 00:21:56 prd-ubuntu2204-docker-8c-8g-38136 usermod[1426]: add 'jenkins' to group 'docker'
Jun 29 00:21:56 prd-ubuntu2204-docker-8c-8g-38136 usermod[1426]: add 'jenkins' to shadow group 'docker'
Jun 29 00:21:57 prd-ubuntu2204-docker-8c-8g-38136 sshd[1439]: Accepted publickey for jenkins from 10.30.168.15 port 46800 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs
Jun 29 00:21:57 prd-ubuntu2204-docker-8c-8g-38136 sshd[1439]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0)
Jun 29 00:21:57 prd-ubuntu2204-docker-8c-8g-38136 systemd-logind[781]: New session 1 of user jenkins.
Jun 29 00:21:57 prd-ubuntu2204-docker-8c-8g-38136 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0)
Jun 29 00:22:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[1637]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:22:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[1637]: pam_unix(cron:session): session closed for user root
Jun 29 00:23:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[2398]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:23:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[2398]: pam_unix(cron:session): session closed for user root
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo:  jenkins : PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session closed for user root
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo:  jenkins : PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session closed for user root
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo:  jenkins : PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session closed for user root
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo:  jenkins : PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session closed for user root
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo:  jenkins : PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session closed for user root
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo:  jenkins : PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jun 29 00:23:23 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session closed for user root
Jun 29 00:24:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[13797]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:24:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[13797]: pam_unix(cron:session): session closed for user root
Jun 29 00:25:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[14317]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:25:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[14317]: pam_unix(cron:session): session closed for user root
Jun 29 00:26:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[14770]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:26:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[14770]: pam_unix(cron:session): session closed for user root
Jun 29 00:27:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[16731]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:27:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[16731]: pam_unix(cron:session): session closed for user root
Jun 29 00:28:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[17501]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:28:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[17501]: pam_unix(cron:session): session closed for user root
Jun 29 00:29:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[18071]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:29:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[18071]: pam_unix(cron:session): session closed for user root
Jun 29 00:30:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[18566]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:30:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[18566]: pam_unix(cron:session): session closed for user root
Jun 29 00:31:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[19364]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:31:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[19364]: pam_unix(cron:session): session closed for user root
Jun 29 00:32:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[19771]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:32:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[19771]: pam_unix(cron:session): session closed for user root
Jun 29 00:33:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[20484]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:33:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[20484]: pam_unix(cron:session): session closed for user root
Jun 29 00:34:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[21191]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:34:02 prd-ubuntu2204-docker-8c-8g-38136 CRON[21191]: pam_unix(cron:session): session closed for user root
Jun 29 00:35:02 prd-ubuntu2204-docker-8c-8g-38136 CRON[21656]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:35:02 prd-ubuntu2204-docker-8c-8g-38136 CRON[21656]: pam_unix(cron:session): session closed for user root
Jun 29 00:36:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[21870]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:36:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[21870]: pam_unix(cron:session): session closed for user root
Jun 29 00:37:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[22010]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:37:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[22010]: pam_unix(cron:session): session closed for user root
Jun 29 00:38:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[22048]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:38:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[22048]: pam_unix(cron:session): session closed for user root
Jun 29 00:39:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[22120]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:39:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[22120]: pam_unix(cron:session): session closed for user root
Jun 29 00:40:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[22786]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:40:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[22786]: pam_unix(cron:session): session closed for user root
Jun 29 00:41:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23138]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:41:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23138]: pam_unix(cron:session): session closed for user root
Jun 29 00:42:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23148]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:42:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23148]: pam_unix(cron:session): session closed for user root
Jun 29 00:43:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23152]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:43:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23152]: pam_unix(cron:session): session closed for user root
Jun 29 00:44:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23210]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:44:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23210]: pam_unix(cron:session): session closed for user root
Jun 29 00:45:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23382]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:45:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[23382]: pam_unix(cron:session): session closed for user root
Jun 29 00:46:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[24102]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:46:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[24102]: pam_unix(cron:session): session closed for user root
Jun 29 00:47:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[24634]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:47:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[24634]: pam_unix(cron:session): session closed for user root
Jun 29 00:48:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[24792]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:48:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[24792]: pam_unix(cron:session): session closed for user root
Jun 29 00:49:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25131]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:49:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25131]: pam_unix(cron:session): session closed for user root
Jun 29 00:50:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25475]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:50:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25475]: pam_unix(cron:session): session closed for user root
Jun 29 00:50:17 prd-ubuntu2204-docker-8c-8g-38136 sudo:  jenkins : PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/autorelease-release-titanium-mvn39-openjdk21/m2repo
Jun 29 00:50:17 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jun 29 00:50:17 prd-ubuntu2204-docker-8c-8g-38136 sudo: pam_unix(sudo:session): session closed for user root
Jun 29 00:51:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25770]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:51:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25770]: pam_unix(cron:session): session closed for user root
Jun 29 00:52:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25842]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:52:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25842]: pam_unix(cron:session): session closed for user root
Jun 29 00:53:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25849]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:53:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25849]: pam_unix(cron:session): session closed for user root
Jun 29 00:54:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25855]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:54:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25855]: pam_unix(cron:session): session closed for user root
Jun 29 00:55:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25858]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:55:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25858]: pam_unix(cron:session): session closed for user root
Jun 29 00:56:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25867]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:56:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25867]: pam_unix(cron:session): session closed for user root
Jun 29 00:57:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25875]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:57:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25875]: pam_unix(cron:session): session closed for user root
Jun 29 00:58:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25882]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:58:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25882]: pam_unix(cron:session): session closed for user root
Jun 29 00:59:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25888]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 00:59:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25888]: pam_unix(cron:session): session closed for user root
Jun 29 01:00:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25892]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jun 29 01:00:01 prd-ubuntu2204-docker-8c-8g-38136 CRON[25892]: pam_unix(cron:session): session closed for user root
Jun 29 01:00:57 prd-ubuntu2204-docker-8c-8g-38136 sudo:  jenkins : PWD=/w/workspace/autorelease-release-titanium-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp