Mar 14 11:41:08 prd-ubuntu2204-docker-8c-8g-471409 passwd[735]: password for 'ubuntu' changed by 'root' Mar 14 11:41:08 prd-ubuntu2204-docker-8c-8g-471409 systemd-logind[766]: New seat seat0. Mar 14 11:41:08 prd-ubuntu2204-docker-8c-8g-471409 systemd-logind[766]: Watching system buttons on /dev/input/event0 (Power Button) Mar 14 11:41:08 prd-ubuntu2204-docker-8c-8g-471409 systemd-logind[766]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Mar 14 11:41:08 prd-ubuntu2204-docker-8c-8g-471409 sshd[819]: Server listening on 0.0.0.0 port 22. Mar 14 11:41:08 prd-ubuntu2204-docker-8c-8g-471409 sshd[819]: Server listening on :: port 22. Mar 14 11:41:12 prd-ubuntu2204-docker-8c-8g-471409 sshd[1030]: error: kex_exchange_identification: Connection closed by remote host Mar 14 11:41:12 prd-ubuntu2204-docker-8c-8g-471409 sshd[1030]: Connection closed by 10.30.168.15 port 37630 Mar 14 11:41:20 prd-ubuntu2204-docker-8c-8g-471409 sshd[1037]: Invalid user jenkins from 10.30.168.15 port 37642 Mar 14 11:41:20 prd-ubuntu2204-docker-8c-8g-471409 sshd[1037]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 14 11:41:20 prd-ubuntu2204-docker-8c-8g-471409 sshd[1037]: Received disconnect from 10.30.168.15 port 37642:11: Closed due to user request. [preauth] Mar 14 11:41:20 prd-ubuntu2204-docker-8c-8g-471409 sshd[1037]: Disconnected from invalid user jenkins 10.30.168.15 port 37642 [preauth] Mar 14 11:41:23 prd-ubuntu2204-docker-8c-8g-471409 sshd[1039]: Invalid user jenkins from 10.30.168.15 port 37656 Mar 14 11:41:23 prd-ubuntu2204-docker-8c-8g-471409 sshd[1039]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 14 11:41:23 prd-ubuntu2204-docker-8c-8g-471409 sshd[1039]: Received disconnect from 10.30.168.15 port 37656:11: Closed due to user request. [preauth] Mar 14 11:41:23 prd-ubuntu2204-docker-8c-8g-471409 sshd[1039]: Disconnected from invalid user jenkins 10.30.168.15 port 37656 [preauth] Mar 14 11:41:27 prd-ubuntu2204-docker-8c-8g-471409 sshd[1210]: Invalid user jenkins from 10.30.168.15 port 37662 Mar 14 11:41:27 prd-ubuntu2204-docker-8c-8g-471409 sshd[1210]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 14 11:41:27 prd-ubuntu2204-docker-8c-8g-471409 sshd[1210]: Received disconnect from 10.30.168.15 port 37662:11: Closed due to user request. [preauth] Mar 14 11:41:27 prd-ubuntu2204-docker-8c-8g-471409 sshd[1210]: Disconnected from invalid user jenkins 10.30.168.15 port 37662 [preauth] Mar 14 11:41:30 prd-ubuntu2204-docker-8c-8g-471409 sshd[1380]: Invalid user jenkins from 10.30.168.15 port 37674 Mar 14 11:41:30 prd-ubuntu2204-docker-8c-8g-471409 sshd[1380]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 14 11:41:30 prd-ubuntu2204-docker-8c-8g-471409 sshd[1380]: Received disconnect from 10.30.168.15 port 37674:11: Closed due to user request. [preauth] Mar 14 11:41:30 prd-ubuntu2204-docker-8c-8g-471409 sshd[1380]: Disconnected from invalid user jenkins 10.30.168.15 port 37674 [preauth] Mar 14 11:41:33 prd-ubuntu2204-docker-8c-8g-471409 useradd[1415]: new group: name=jenkins, GID=1001 Mar 14 11:41:33 prd-ubuntu2204-docker-8c-8g-471409 useradd[1415]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Mar 14 11:41:33 prd-ubuntu2204-docker-8c-8g-471409 usermod[1426]: add 'jenkins' to group 'docker' Mar 14 11:41:33 prd-ubuntu2204-docker-8c-8g-471409 usermod[1426]: add 'jenkins' to shadow group 'docker' Mar 14 11:41:33 prd-ubuntu2204-docker-8c-8g-471409 sshd[1416]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Mar 14 11:41:33 prd-ubuntu2204-docker-8c-8g-471409 sshd[1416]: Received disconnect from 10.30.168.15 port 37696:11: Closed due to user request. [preauth] Mar 14 11:41:33 prd-ubuntu2204-docker-8c-8g-471409 sshd[1416]: Disconnected from authenticating user jenkins 10.30.168.15 port 37696 [preauth] Mar 14 11:41:36 prd-ubuntu2204-docker-8c-8g-471409 sshd[1460]: Accepted publickey for jenkins from 10.30.168.15 port 37702 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Mar 14 11:41:36 prd-ubuntu2204-docker-8c-8g-471409 sshd[1460]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Mar 14 11:41:36 prd-ubuntu2204-docker-8c-8g-471409 systemd-logind[766]: New session 1 of user jenkins. Mar 14 11:41:36 prd-ubuntu2204-docker-8c-8g-471409 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Mar 14 11:42:02 prd-ubuntu2204-docker-8c-8g-471409 CRON[1907]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:42:02 prd-ubuntu2204-docker-8c-8g-471409 CRON[1907]: pam_unix(cron:session): session closed for user root Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-stage-0.23.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session closed for user root Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-stage-0.23.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session closed for user root Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-stage-0.23.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session closed for user root Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-stage-0.23.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session closed for user root Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-stage-0.23.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session closed for user root Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-stage-0.23.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 14 11:42:46 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session closed for user root Mar 14 11:43:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[2325]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:43:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[2325]: pam_unix(cron:session): session closed for user root Mar 14 11:44:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[2943]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:44:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[2943]: pam_unix(cron:session): session closed for user root Mar 14 11:45:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[4925]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:45:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[4925]: pam_unix(cron:session): session closed for user root Mar 14 11:46:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[5869]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:46:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[5869]: pam_unix(cron:session): session closed for user root Mar 14 11:47:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[7458]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:47:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[7458]: pam_unix(cron:session): session closed for user root Mar 14 11:48:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[8762]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:48:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[8762]: pam_unix(cron:session): session closed for user root Mar 14 11:49:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[9392]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:49:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[9392]: pam_unix(cron:session): session closed for user root Mar 14 11:50:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[10206]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:50:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[10206]: pam_unix(cron:session): session closed for user root Mar 14 11:51:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[10876]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:51:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[10876]: pam_unix(cron:session): session closed for user root Mar 14 11:52:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[11867]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:52:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[11867]: pam_unix(cron:session): session closed for user root Mar 14 11:53:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[13930]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:53:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[13930]: pam_unix(cron:session): session closed for user root Mar 14 11:54:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[16184]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:54:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[16184]: pam_unix(cron:session): session closed for user root Mar 14 11:55:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[17671]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:55:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[17671]: pam_unix(cron:session): session closed for user root Mar 14 11:56:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[17894]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:56:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[17894]: pam_unix(cron:session): session closed for user root Mar 14 11:57:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[19162]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:57:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[19162]: pam_unix(cron:session): session closed for user root Mar 14 11:58:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[21110]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:58:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[21110]: pam_unix(cron:session): session closed for user root Mar 14 11:59:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[22240]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 11:59:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[22240]: pam_unix(cron:session): session closed for user root Mar 14 12:00:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[23354]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:00:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[23354]: pam_unix(cron:session): session closed for user root Mar 14 12:01:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[25034]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:01:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[25034]: pam_unix(cron:session): session closed for user root Mar 14 12:02:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[27065]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:02:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[27065]: pam_unix(cron:session): session closed for user root Mar 14 12:03:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[28508]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:03:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[28508]: pam_unix(cron:session): session closed for user root Mar 14 12:04:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[29999]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:04:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[29999]: pam_unix(cron:session): session closed for user root Mar 14 12:05:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[31654]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:05:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[31654]: pam_unix(cron:session): session closed for user root Mar 14 12:06:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[33128]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:06:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[33128]: pam_unix(cron:session): session closed for user root Mar 14 12:07:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[34754]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:07:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[34754]: pam_unix(cron:session): session closed for user root Mar 14 12:08:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[35812]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:08:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[35812]: pam_unix(cron:session): session closed for user root Mar 14 12:09:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[37145]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:09:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[37145]: pam_unix(cron:session): session closed for user root Mar 14 12:10:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[38740]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:10:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[38740]: pam_unix(cron:session): session closed for user root Mar 14 12:11:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[40421]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:11:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[40421]: pam_unix(cron:session): session closed for user root Mar 14 12:12:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[41905]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:12:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[41905]: pam_unix(cron:session): session closed for user root Mar 14 12:13:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[43359]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:13:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[43359]: pam_unix(cron:session): session closed for user root Mar 14 12:14:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[43879]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:14:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[43879]: pam_unix(cron:session): session closed for user root Mar 14 12:15:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[44353]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:15:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[44353]: pam_unix(cron:session): session closed for user root Mar 14 12:16:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[45376]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:16:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[45376]: pam_unix(cron:session): session closed for user root Mar 14 12:17:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[45741]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:17:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[45742]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:17:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[45742]: pam_unix(cron:session): session closed for user root Mar 14 12:17:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[45741]: pam_unix(cron:session): session closed for user root Mar 14 12:18:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[46122]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:18:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[46122]: pam_unix(cron:session): session closed for user root Mar 14 12:19:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[46495]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:19:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[46495]: pam_unix(cron:session): session closed for user root Mar 14 12:20:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[46809]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:20:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[46809]: pam_unix(cron:session): session closed for user root Mar 14 12:20:27 prd-ubuntu2204-docker-8c-8g-471409 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-stage-0.23.x ; USER=root ; COMMAND=/usr/bin/chown -R jenkins:jenkins /w/workspace/bgpcep-maven-stage-0.23.x/m2repo Mar 14 12:20:27 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Mar 14 12:20:27 prd-ubuntu2204-docker-8c-8g-471409 sudo: pam_unix(sudo:session): session closed for user root Mar 14 12:21:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[47185]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:21:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[47185]: pam_unix(cron:session): session closed for user root Mar 14 12:22:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[47192]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:22:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[47192]: pam_unix(cron:session): session closed for user root Mar 14 12:23:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[47197]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Mar 14 12:23:01 prd-ubuntu2204-docker-8c-8g-471409 CRON[47197]: pam_unix(cron:session): session closed for user root Mar 14 12:23:50 prd-ubuntu2204-docker-8c-8g-471409 sudo: jenkins : PWD=/w/workspace/bgpcep-maven-stage-0.23.x ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp