Jul 27 17:58:28 prd-ubuntu2204-docker-8c-8g-46625 passwd[745]: password for 'ubuntu' changed by 'root' Jul 27 17:58:28 prd-ubuntu2204-docker-8c-8g-46625 systemd-logind[778]: New seat seat0. Jul 27 17:58:28 prd-ubuntu2204-docker-8c-8g-46625 systemd-logind[778]: Watching system buttons on /dev/input/event0 (Power Button) Jul 27 17:58:28 prd-ubuntu2204-docker-8c-8g-46625 systemd-logind[778]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jul 27 17:58:28 prd-ubuntu2204-docker-8c-8g-46625 sshd[815]: Server listening on 0.0.0.0 port 22. Jul 27 17:58:28 prd-ubuntu2204-docker-8c-8g-46625 sshd[815]: Server listening on :: port 22. Jul 27 17:58:31 prd-ubuntu2204-docker-8c-8g-46625 sshd[1010]: error: kex_exchange_identification: Connection closed by remote host Jul 27 17:58:31 prd-ubuntu2204-docker-8c-8g-46625 sshd[1010]: Connection closed by 10.30.168.15 port 47086 Jul 27 17:58:38 prd-ubuntu2204-docker-8c-8g-46625 sshd[1017]: Invalid user jenkins from 10.30.168.15 port 47092 Jul 27 17:58:38 prd-ubuntu2204-docker-8c-8g-46625 sshd[1017]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jul 27 17:58:38 prd-ubuntu2204-docker-8c-8g-46625 sshd[1017]: Received disconnect from 10.30.168.15 port 47092:11: Closed due to user request. [preauth] Jul 27 17:58:38 prd-ubuntu2204-docker-8c-8g-46625 sshd[1017]: Disconnected from invalid user jenkins 10.30.168.15 port 47092 [preauth] Jul 27 17:58:40 prd-ubuntu2204-docker-8c-8g-46625 sshd[1019]: Invalid user jenkins from 10.30.168.15 port 47094 Jul 27 17:58:40 prd-ubuntu2204-docker-8c-8g-46625 sshd[1019]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jul 27 17:58:40 prd-ubuntu2204-docker-8c-8g-46625 sshd[1019]: Received disconnect from 10.30.168.15 port 47094:11: Closed due to user request. [preauth] Jul 27 17:58:40 prd-ubuntu2204-docker-8c-8g-46625 sshd[1019]: Disconnected from invalid user jenkins 10.30.168.15 port 47094 [preauth] Jul 27 17:58:43 prd-ubuntu2204-docker-8c-8g-46625 sshd[1021]: Invalid user jenkins from 10.30.168.15 port 47102 Jul 27 17:58:43 prd-ubuntu2204-docker-8c-8g-46625 sshd[1021]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jul 27 17:58:43 prd-ubuntu2204-docker-8c-8g-46625 sshd[1021]: Received disconnect from 10.30.168.15 port 47102:11: Closed due to user request. [preauth] Jul 27 17:58:43 prd-ubuntu2204-docker-8c-8g-46625 sshd[1021]: Disconnected from invalid user jenkins 10.30.168.15 port 47102 [preauth] Jul 27 17:58:47 prd-ubuntu2204-docker-8c-8g-46625 sshd[1120]: Invalid user jenkins from 10.30.168.15 port 47106 Jul 27 17:58:47 prd-ubuntu2204-docker-8c-8g-46625 sshd[1120]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jul 27 17:58:47 prd-ubuntu2204-docker-8c-8g-46625 sshd[1120]: Received disconnect from 10.30.168.15 port 47106:11: Closed due to user request. [preauth] Jul 27 17:58:47 prd-ubuntu2204-docker-8c-8g-46625 sshd[1120]: Disconnected from invalid user jenkins 10.30.168.15 port 47106 [preauth] Jul 27 17:58:50 prd-ubuntu2204-docker-8c-8g-46625 sshd[1318]: Invalid user jenkins from 10.30.168.15 port 47110 Jul 27 17:58:50 prd-ubuntu2204-docker-8c-8g-46625 sshd[1318]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jul 27 17:58:50 prd-ubuntu2204-docker-8c-8g-46625 sshd[1318]: Received disconnect from 10.30.168.15 port 47110:11: Closed due to user request. [preauth] Jul 27 17:58:50 prd-ubuntu2204-docker-8c-8g-46625 sshd[1318]: Disconnected from invalid user jenkins 10.30.168.15 port 47110 [preauth] Jul 27 17:58:53 prd-ubuntu2204-docker-8c-8g-46625 sshd[1384]: Invalid user jenkins from 10.30.168.15 port 47112 Jul 27 17:58:53 prd-ubuntu2204-docker-8c-8g-46625 sshd[1384]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jul 27 17:58:53 prd-ubuntu2204-docker-8c-8g-46625 sshd[1384]: Received disconnect from 10.30.168.15 port 47112:11: Closed due to user request. [preauth] Jul 27 17:58:53 prd-ubuntu2204-docker-8c-8g-46625 sshd[1384]: Disconnected from invalid user jenkins 10.30.168.15 port 47112 [preauth] Jul 27 17:58:56 prd-ubuntu2204-docker-8c-8g-46625 sshd[1402]: Invalid user jenkins from 10.30.168.15 port 47114 Jul 27 17:58:56 prd-ubuntu2204-docker-8c-8g-46625 useradd[1415]: new group: name=jenkins, GID=1001 Jul 27 17:58:56 prd-ubuntu2204-docker-8c-8g-46625 sshd[1402]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jul 27 17:58:56 prd-ubuntu2204-docker-8c-8g-46625 useradd[1415]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jul 27 17:58:56 prd-ubuntu2204-docker-8c-8g-46625 sshd[1402]: Received disconnect from 10.30.168.15 port 47114:11: Closed due to user request. [preauth] Jul 27 17:58:56 prd-ubuntu2204-docker-8c-8g-46625 sshd[1402]: Disconnected from invalid user jenkins 10.30.168.15 port 47114 [preauth] Jul 27 17:58:56 prd-ubuntu2204-docker-8c-8g-46625 usermod[1424]: add 'jenkins' to group 'docker' Jul 27 17:58:56 prd-ubuntu2204-docker-8c-8g-46625 usermod[1424]: add 'jenkins' to shadow group 'docker' Jul 27 17:58:58 prd-ubuntu2204-docker-8c-8g-46625 sshd[1458]: Accepted publickey for jenkins from 10.30.168.15 port 47118 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Jul 27 17:58:58 prd-ubuntu2204-docker-8c-8g-46625 sshd[1458]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Jul 27 17:58:59 prd-ubuntu2204-docker-8c-8g-46625 systemd-logind[778]: New session 1 of user jenkins. Jul 27 17:58:59 prd-ubuntu2204-docker-8c-8g-46625 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Jul 27 17:59:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[1627]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 17:59:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[1627]: pam_unix(cron:session): session closed for user root Jul 27 18:00:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[1986]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:00:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[1986]: pam_unix(cron:session): session closed for user root Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-0.22.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session closed for user root Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-0.22.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session closed for user root Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-0.22.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session closed for user root Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-0.22.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session closed for user root Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-0.22.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session closed for user root Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-0.22.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jul 27 18:00:15 prd-ubuntu2204-docker-8c-8g-46625 sudo: pam_unix(sudo:session): session closed for user root Jul 27 18:01:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[2119]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:01:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[2119]: pam_unix(cron:session): session closed for user root Jul 27 18:02:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[2122]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:02:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[2122]: pam_unix(cron:session): session closed for user root Jul 27 18:03:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[2377]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:03:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[2377]: pam_unix(cron:session): session closed for user root Jul 27 18:04:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[4252]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:04:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[4252]: pam_unix(cron:session): session closed for user root Jul 27 18:05:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[5823]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:05:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[5823]: pam_unix(cron:session): session closed for user root Jul 27 18:06:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[7067]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:06:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[7067]: pam_unix(cron:session): session closed for user root Jul 27 18:07:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[8043]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:07:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[8043]: pam_unix(cron:session): session closed for user root Jul 27 18:08:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[9305]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:08:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[9305]: pam_unix(cron:session): session closed for user root Jul 27 18:09:02 prd-ubuntu2204-docker-8c-8g-46625 CRON[9962]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:09:02 prd-ubuntu2204-docker-8c-8g-46625 CRON[9962]: pam_unix(cron:session): session closed for user root Jul 27 18:10:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[10626]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:10:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[10626]: pam_unix(cron:session): session closed for user root Jul 27 18:11:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[11285]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:11:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[11285]: pam_unix(cron:session): session closed for user root Jul 27 18:12:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[11931]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:12:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[11931]: pam_unix(cron:session): session closed for user root Jul 27 18:13:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[13506]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:13:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[13506]: pam_unix(cron:session): session closed for user root Jul 27 18:14:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[15506]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:14:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[15506]: pam_unix(cron:session): session closed for user root Jul 27 18:15:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[17236]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:15:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[17236]: pam_unix(cron:session): session closed for user root Jul 27 18:16:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[18349]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:16:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[18349]: pam_unix(cron:session): session closed for user root Jul 27 18:17:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[18560]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:17:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[18560]: pam_unix(cron:session): session closed for user root Jul 27 18:17:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[18559]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:17:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[18559]: pam_unix(cron:session): session closed for user root Jul 27 18:18:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[20655]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:18:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[20655]: pam_unix(cron:session): session closed for user root Jul 27 18:19:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[21819]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:19:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[21819]: pam_unix(cron:session): session closed for user root Jul 27 18:20:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[22857]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:20:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[22857]: pam_unix(cron:session): session closed for user root Jul 27 18:21:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[23941]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:21:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[23941]: pam_unix(cron:session): session closed for user root Jul 27 18:22:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[25622]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:22:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[25622]: pam_unix(cron:session): session closed for user root Jul 27 18:23:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[27637]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:23:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[27637]: pam_unix(cron:session): session closed for user root Jul 27 18:24:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[29030]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:24:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[29030]: pam_unix(cron:session): session closed for user root Jul 27 18:25:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[30370]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:25:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[30370]: pam_unix(cron:session): session closed for user root Jul 27 18:26:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[32041]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:26:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[32041]: pam_unix(cron:session): session closed for user root Jul 27 18:27:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[33156]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:27:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[33156]: pam_unix(cron:session): session closed for user root Jul 27 18:28:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[34961]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:28:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[34961]: pam_unix(cron:session): session closed for user root Jul 27 18:29:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[36102]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:29:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[36102]: pam_unix(cron:session): session closed for user root Jul 27 18:30:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[36901]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:30:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[36901]: pam_unix(cron:session): session closed for user root Jul 27 18:31:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[39019]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:31:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[39019]: pam_unix(cron:session): session closed for user root Jul 27 18:32:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[40682]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:32:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[40682]: pam_unix(cron:session): session closed for user root Jul 27 18:33:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[42324]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:33:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[42324]: pam_unix(cron:session): session closed for user root Jul 27 18:34:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[43772]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:34:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[43772]: pam_unix(cron:session): session closed for user root Jul 27 18:35:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[44576]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:35:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[44576]: pam_unix(cron:session): session closed for user root Jul 27 18:36:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[45267]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:36:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[45267]: pam_unix(cron:session): session closed for user root Jul 27 18:37:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[45271]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jul 27 18:37:01 prd-ubuntu2204-docker-8c-8g-46625 CRON[45271]: pam_unix(cron:session): session closed for user root Jul 27 18:37:54 prd-ubuntu2204-docker-8c-8g-46625 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-merge-0.22.x ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp