Jul 29 12:59:25 prd-ubuntu2204-docker-8c-8g-329 passwd[741]: password for 'ubuntu' changed by 'root'
Jul 29 12:59:25 prd-ubuntu2204-docker-8c-8g-329 sshd[801]: Server listening on 0.0.0.0 port 22.
Jul 29 12:59:25 prd-ubuntu2204-docker-8c-8g-329 sshd[801]: Server listening on :: port 22.
Jul 29 12:59:25 prd-ubuntu2204-docker-8c-8g-329 systemd-logind[772]: New seat seat0.
Jul 29 12:59:25 prd-ubuntu2204-docker-8c-8g-329 systemd-logind[772]: Watching system buttons on /dev/input/event0 (Power Button)
Jul 29 12:59:25 prd-ubuntu2204-docker-8c-8g-329 systemd-logind[772]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Jul 29 12:59:28 prd-ubuntu2204-docker-8c-8g-329 sshd[1032]: error: kex_exchange_identification: Connection closed by remote host
Jul 29 12:59:28 prd-ubuntu2204-docker-8c-8g-329 sshd[1032]: Connection closed by 10.30.168.15 port 48918
Jul 29 12:59:34 prd-ubuntu2204-docker-8c-8g-329 sshd[1040]: Invalid user jenkins from 10.30.168.15 port 48922
Jul 29 12:59:35 prd-ubuntu2204-docker-8c-8g-329 sshd[1040]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jul 29 12:59:35 prd-ubuntu2204-docker-8c-8g-329 sshd[1040]: Received disconnect from 10.30.168.15 port 48922:11: Closed due to user request. [preauth]
Jul 29 12:59:35 prd-ubuntu2204-docker-8c-8g-329 sshd[1040]: Disconnected from invalid user jenkins 10.30.168.15 port 48922 [preauth]
Jul 29 12:59:37 prd-ubuntu2204-docker-8c-8g-329 sshd[1042]: Invalid user jenkins from 10.30.168.15 port 48926
Jul 29 12:59:38 prd-ubuntu2204-docker-8c-8g-329 sshd[1042]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jul 29 12:59:38 prd-ubuntu2204-docker-8c-8g-329 sshd[1042]: Received disconnect from 10.30.168.15 port 48926:11: Closed due to user request. [preauth]
Jul 29 12:59:38 prd-ubuntu2204-docker-8c-8g-329 sshd[1042]: Disconnected from invalid user jenkins 10.30.168.15 port 48926 [preauth]
Jul 29 12:59:40 prd-ubuntu2204-docker-8c-8g-329 sshd[1044]: Invalid user jenkins from 10.30.168.15 port 48928
Jul 29 12:59:40 prd-ubuntu2204-docker-8c-8g-329 sshd[1044]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jul 29 12:59:40 prd-ubuntu2204-docker-8c-8g-329 sshd[1044]: Received disconnect from 10.30.168.15 port 48928:11: Closed due to user request. [preauth]
Jul 29 12:59:40 prd-ubuntu2204-docker-8c-8g-329 sshd[1044]: Disconnected from invalid user jenkins 10.30.168.15 port 48928 [preauth]
Jul 29 12:59:44 prd-ubuntu2204-docker-8c-8g-329 sshd[1191]: Invalid user jenkins from 10.30.168.15 port 48930
Jul 29 12:59:44 prd-ubuntu2204-docker-8c-8g-329 sshd[1191]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jul 29 12:59:44 prd-ubuntu2204-docker-8c-8g-329 sshd[1191]: Received disconnect from 10.30.168.15 port 48930:11: Closed due to user request. [preauth]
Jul 29 12:59:44 prd-ubuntu2204-docker-8c-8g-329 sshd[1191]: Disconnected from invalid user jenkins 10.30.168.15 port 48930 [preauth]
Jul 29 12:59:47 prd-ubuntu2204-docker-8c-8g-329 sshd[1329]: Invalid user jenkins from 10.30.168.15 port 48932
Jul 29 12:59:47 prd-ubuntu2204-docker-8c-8g-329 sshd[1329]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jul 29 12:59:47 prd-ubuntu2204-docker-8c-8g-329 sshd[1329]: Received disconnect from 10.30.168.15 port 48932:11: Closed due to user request. [preauth]
Jul 29 12:59:47 prd-ubuntu2204-docker-8c-8g-329 sshd[1329]: Disconnected from invalid user jenkins 10.30.168.15 port 48932 [preauth]
Jul 29 12:59:50 prd-ubuntu2204-docker-8c-8g-329 useradd[1410]: new group: name=jenkins, GID=1001
Jul 29 12:59:50 prd-ubuntu2204-docker-8c-8g-329 useradd[1410]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Jul 29 12:59:50 prd-ubuntu2204-docker-8c-8g-329 usermod[1419]: add 'jenkins' to group 'docker'
Jul 29 12:59:50 prd-ubuntu2204-docker-8c-8g-329 usermod[1419]: add 'jenkins' to shadow group 'docker'
Jul 29 12:59:50 prd-ubuntu2204-docker-8c-8g-329 sshd[1395]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Jul 29 12:59:50 prd-ubuntu2204-docker-8c-8g-329 sshd[1395]: Received disconnect from 10.30.168.15 port 48934:11: Closed due to user request. [preauth]
Jul 29 12:59:50 prd-ubuntu2204-docker-8c-8g-329 sshd[1395]: Disconnected from authenticating user jenkins 10.30.168.15 port 48934 [preauth]
Jul 29 12:59:53 prd-ubuntu2204-docker-8c-8g-329 sshd[1453]: Accepted publickey for jenkins from 10.30.168.15 port 48938 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs
Jul 29 12:59:53 prd-ubuntu2204-docker-8c-8g-329 sshd[1453]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0)
Jul 29 12:59:53 prd-ubuntu2204-docker-8c-8g-329 systemd-logind[772]: New session 1 of user jenkins.
Jul 29 12:59:53 prd-ubuntu2204-docker-8c-8g-329 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0)
Jul 29 13:00:02 prd-ubuntu2204-docker-8c-8g-329 CRON[1669]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:00:02 prd-ubuntu2204-docker-8c-8g-329 CRON[1669]: pam_unix(cron:session): session closed for user root
Jul 29 13:01:01 prd-ubuntu2204-docker-8c-8g-329 CRON[1961]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:01:01 prd-ubuntu2204-docker-8c-8g-329 CRON[1961]: pam_unix(cron:session): session closed for user root
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session closed for user root
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session closed for user root
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session closed for user root
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session closed for user root
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session closed for user root
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Jul 29 13:01:15 prd-ubuntu2204-docker-8c-8g-329 sudo: pam_unix(sudo:session): session closed for user root
Jul 29 13:02:01 prd-ubuntu2204-docker-8c-8g-329 CRON[2205]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:02:01 prd-ubuntu2204-docker-8c-8g-329 CRON[2205]: pam_unix(cron:session): session closed for user root
Jul 29 13:03:01 prd-ubuntu2204-docker-8c-8g-329 CRON[2208]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:03:01 prd-ubuntu2204-docker-8c-8g-329 CRON[2208]: pam_unix(cron:session): session closed for user root
Jul 29 13:04:01 prd-ubuntu2204-docker-8c-8g-329 CRON[2215]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:04:01 prd-ubuntu2204-docker-8c-8g-329 CRON[2215]: pam_unix(cron:session): session closed for user root
Jul 29 13:05:01 prd-ubuntu2204-docker-8c-8g-329 CRON[2486]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:05:01 prd-ubuntu2204-docker-8c-8g-329 CRON[2486]: pam_unix(cron:session): session closed for user root
Jul 29 13:06:01 prd-ubuntu2204-docker-8c-8g-329 CRON[3712]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:06:01 prd-ubuntu2204-docker-8c-8g-329 CRON[3712]: pam_unix(cron:session): session closed for user root
Jul 29 13:07:01 prd-ubuntu2204-docker-8c-8g-329 CRON[5090]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:07:01 prd-ubuntu2204-docker-8c-8g-329 CRON[5090]: pam_unix(cron:session): session closed for user root
Jul 29 13:08:01 prd-ubuntu2204-docker-8c-8g-329 CRON[6482]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:08:01 prd-ubuntu2204-docker-8c-8g-329 CRON[6482]: pam_unix(cron:session): session closed for user root
Jul 29 13:09:01 prd-ubuntu2204-docker-8c-8g-329 CRON[7540]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:09:01 prd-ubuntu2204-docker-8c-8g-329 CRON[7540]: pam_unix(cron:session): session closed for user root
Jul 29 13:10:01 prd-ubuntu2204-docker-8c-8g-329 CRON[8727]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:10:01 prd-ubuntu2204-docker-8c-8g-329 CRON[8727]: pam_unix(cron:session): session closed for user root
Jul 29 13:11:01 prd-ubuntu2204-docker-8c-8g-329 CRON[9358]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:11:01 prd-ubuntu2204-docker-8c-8g-329 CRON[9358]: pam_unix(cron:session): session closed for user root
Jul 29 13:12:01 prd-ubuntu2204-docker-8c-8g-329 CRON[10073]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:12:01 prd-ubuntu2204-docker-8c-8g-329 CRON[10073]: pam_unix(cron:session): session closed for user root
Jul 29 13:13:01 prd-ubuntu2204-docker-8c-8g-329 CRON[10661]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:13:01 prd-ubuntu2204-docker-8c-8g-329 CRON[10661]: pam_unix(cron:session): session closed for user root
Jul 29 13:14:01 prd-ubuntu2204-docker-8c-8g-329 CRON[11505]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:14:01 prd-ubuntu2204-docker-8c-8g-329 CRON[11505]: pam_unix(cron:session): session closed for user root
Jul 29 13:15:01 prd-ubuntu2204-docker-8c-8g-329 CRON[13259]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:15:01 prd-ubuntu2204-docker-8c-8g-329 CRON[13259]: pam_unix(cron:session): session closed for user root
Jul 29 13:16:01 prd-ubuntu2204-docker-8c-8g-329 CRON[15306]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:16:01 prd-ubuntu2204-docker-8c-8g-329 CRON[15306]: pam_unix(cron:session): session closed for user root
Jul 29 13:17:01 prd-ubuntu2204-docker-8c-8g-329 CRON[16682]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:17:01 prd-ubuntu2204-docker-8c-8g-329 CRON[16681]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:17:01 prd-ubuntu2204-docker-8c-8g-329 CRON[16682]: pam_unix(cron:session): session closed for user root
Jul 29 13:17:01 prd-ubuntu2204-docker-8c-8g-329 CRON[16681]: pam_unix(cron:session): session closed for user root
Jul 29 13:18:01 prd-ubuntu2204-docker-8c-8g-329 CRON[17699]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:18:01 prd-ubuntu2204-docker-8c-8g-329 CRON[17699]: pam_unix(cron:session): session closed for user root
Jul 29 13:19:01 prd-ubuntu2204-docker-8c-8g-329 CRON[17768]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:19:01 prd-ubuntu2204-docker-8c-8g-329 CRON[17768]: pam_unix(cron:session): session closed for user root
Jul 29 13:20:01 prd-ubuntu2204-docker-8c-8g-329 CRON[19735]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:20:01 prd-ubuntu2204-docker-8c-8g-329 CRON[19735]: pam_unix(cron:session): session closed for user root
Jul 29 13:21:01 prd-ubuntu2204-docker-8c-8g-329 CRON[20948]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:21:01 prd-ubuntu2204-docker-8c-8g-329 CRON[20948]: pam_unix(cron:session): session closed for user root
Jul 29 13:22:01 prd-ubuntu2204-docker-8c-8g-329 CRON[22072]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:22:01 prd-ubuntu2204-docker-8c-8g-329 CRON[22072]: pam_unix(cron:session): session closed for user root
Jul 29 13:23:01 prd-ubuntu2204-docker-8c-8g-329 CRON[23182]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:23:01 prd-ubuntu2204-docker-8c-8g-329 CRON[23182]: pam_unix(cron:session): session closed for user root
Jul 29 13:24:01 prd-ubuntu2204-docker-8c-8g-329 CRON[25074]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:24:01 prd-ubuntu2204-docker-8c-8g-329 CRON[25074]: pam_unix(cron:session): session closed for user root
Jul 29 13:25:01 prd-ubuntu2204-docker-8c-8g-329 CRON[26956]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:25:01 prd-ubuntu2204-docker-8c-8g-329 CRON[26956]: pam_unix(cron:session): session closed for user root
Jul 29 13:26:01 prd-ubuntu2204-docker-8c-8g-329 CRON[28351]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:26:01 prd-ubuntu2204-docker-8c-8g-329 CRON[28351]: pam_unix(cron:session): session closed for user root
Jul 29 13:27:01 prd-ubuntu2204-docker-8c-8g-329 CRON[29489]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:27:01 prd-ubuntu2204-docker-8c-8g-329 CRON[29489]: pam_unix(cron:session): session closed for user root
Jul 29 13:28:02 prd-ubuntu2204-docker-8c-8g-329 CRON[31127]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:28:02 prd-ubuntu2204-docker-8c-8g-329 CRON[31127]: pam_unix(cron:session): session closed for user root
Jul 29 13:29:01 prd-ubuntu2204-docker-8c-8g-329 CRON[32218]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:29:01 prd-ubuntu2204-docker-8c-8g-329 CRON[32218]: pam_unix(cron:session): session closed for user root
Jul 29 13:30:01 prd-ubuntu2204-docker-8c-8g-329 CRON[33665]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:30:01 prd-ubuntu2204-docker-8c-8g-329 CRON[33665]: pam_unix(cron:session): session closed for user root
Jul 29 13:31:01 prd-ubuntu2204-docker-8c-8g-329 CRON[34671]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:31:01 prd-ubuntu2204-docker-8c-8g-329 CRON[34671]: pam_unix(cron:session): session closed for user root
Jul 29 13:32:01 prd-ubuntu2204-docker-8c-8g-329 CRON[36115]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:32:01 prd-ubuntu2204-docker-8c-8g-329 CRON[36115]: pam_unix(cron:session): session closed for user root
Jul 29 13:33:01 prd-ubuntu2204-docker-8c-8g-329 CRON[37772]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:33:01 prd-ubuntu2204-docker-8c-8g-329 CRON[37772]: pam_unix(cron:session): session closed for user root
Jul 29 13:34:01 prd-ubuntu2204-docker-8c-8g-329 CRON[39230]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:34:01 prd-ubuntu2204-docker-8c-8g-329 CRON[39230]: pam_unix(cron:session): session closed for user root
Jul 29 13:35:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40282]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:35:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40282]: pam_unix(cron:session): session closed for user root
Jul 29 13:36:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40916]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:36:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40916]: pam_unix(cron:session): session closed for user root
Jul 29 13:37:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40924]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:37:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40924]: pam_unix(cron:session): session closed for user root
Jul 29 13:38:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40930]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:38:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40930]: pam_unix(cron:session): session closed for user root
Jul 29 13:39:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40933]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:39:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40933]: pam_unix(cron:session): session closed for user root
Jul 29 13:40:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40938]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:40:01 prd-ubuntu2204-docker-8c-8g-329 CRON[40938]: pam_unix(cron:session): session closed for user root
Jul 29 13:41:01 prd-ubuntu2204-docker-8c-8g-329 CRON[41130]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Jul 29 13:41:01 prd-ubuntu2204-docker-8c-8g-329 CRON[41130]: pam_unix(cron:session): session closed for user root
Jul 29 13:41:20 prd-ubuntu2204-docker-8c-8g-329 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-merge-master ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp