Apr 28 06:18:04 prd-ubuntu2204-docker-8c-8g-8950 passwd[733]: password for 'ubuntu' changed by 'root'
Apr 28 06:18:04 prd-ubuntu2204-docker-8c-8g-8950 systemd-logind[766]: New seat seat0.
Apr 28 06:18:04 prd-ubuntu2204-docker-8c-8g-8950 systemd-logind[766]: Watching system buttons on /dev/input/event0 (Power Button)
Apr 28 06:18:04 prd-ubuntu2204-docker-8c-8g-8950 systemd-logind[766]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Apr 28 06:18:04 prd-ubuntu2204-docker-8c-8g-8950 sshd[820]: Server listening on 0.0.0.0 port 22.
Apr 28 06:18:04 prd-ubuntu2204-docker-8c-8g-8950 sshd[820]: Server listening on :: port 22.
Apr 28 06:18:04 prd-ubuntu2204-docker-8c-8g-8950 sshd[876]: error: kex_exchange_identification: Connection closed by remote host
Apr 28 06:18:04 prd-ubuntu2204-docker-8c-8g-8950 sshd[876]: Connection closed by 10.30.168.15 port 58410
Apr 28 06:18:10 prd-ubuntu2204-docker-8c-8g-8950 sshd[1034]: Invalid user jenkins from 10.30.168.15 port 58416
Apr 28 06:18:10 prd-ubuntu2204-docker-8c-8g-8950 sshd[1034]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 28 06:18:10 prd-ubuntu2204-docker-8c-8g-8950 sshd[1034]: Received disconnect from 10.30.168.15 port 58416:11: Closed due to user request. [preauth]
Apr 28 06:18:10 prd-ubuntu2204-docker-8c-8g-8950 sshd[1034]: Disconnected from invalid user jenkins 10.30.168.15 port 58416 [preauth]
Apr 28 06:18:13 prd-ubuntu2204-docker-8c-8g-8950 sshd[1037]: Invalid user jenkins from 10.30.168.15 port 58432
Apr 28 06:18:13 prd-ubuntu2204-docker-8c-8g-8950 sshd[1037]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 28 06:18:13 prd-ubuntu2204-docker-8c-8g-8950 sshd[1037]: Received disconnect from 10.30.168.15 port 58432:11: Closed due to user request. [preauth]
Apr 28 06:18:13 prd-ubuntu2204-docker-8c-8g-8950 sshd[1037]: Disconnected from invalid user jenkins 10.30.168.15 port 58432 [preauth]
Apr 28 06:18:16 prd-ubuntu2204-docker-8c-8g-8950 sshd[1039]: Invalid user jenkins from 10.30.168.15 port 58444
Apr 28 06:18:16 prd-ubuntu2204-docker-8c-8g-8950 sshd[1039]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 28 06:18:16 prd-ubuntu2204-docker-8c-8g-8950 sshd[1039]: Received disconnect from 10.30.168.15 port 58444:11: Closed due to user request. [preauth]
Apr 28 06:18:16 prd-ubuntu2204-docker-8c-8g-8950 sshd[1039]: Disconnected from invalid user jenkins 10.30.168.15 port 58444 [preauth]
Apr 28 06:18:19 prd-ubuntu2204-docker-8c-8g-8950 sshd[1041]: Invalid user jenkins from 10.30.168.15 port 58452
Apr 28 06:18:19 prd-ubuntu2204-docker-8c-8g-8950 sshd[1041]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 28 06:18:19 prd-ubuntu2204-docker-8c-8g-8950 sshd[1041]: Received disconnect from 10.30.168.15 port 58452:11: Closed due to user request. [preauth]
Apr 28 06:18:19 prd-ubuntu2204-docker-8c-8g-8950 sshd[1041]: Disconnected from invalid user jenkins 10.30.168.15 port 58452 [preauth]
Apr 28 06:18:22 prd-ubuntu2204-docker-8c-8g-8950 sshd[1062]: Invalid user jenkins from 10.30.168.15 port 58462
Apr 28 06:18:22 prd-ubuntu2204-docker-8c-8g-8950 sshd[1062]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 28 06:18:22 prd-ubuntu2204-docker-8c-8g-8950 sshd[1062]: Received disconnect from 10.30.168.15 port 58462:11: Closed due to user request. [preauth]
Apr 28 06:18:22 prd-ubuntu2204-docker-8c-8g-8950 sshd[1062]: Disconnected from invalid user jenkins 10.30.168.15 port 58462 [preauth]
Apr 28 06:18:25 prd-ubuntu2204-docker-8c-8g-8950 sshd[1283]: Invalid user jenkins from 10.30.168.15 port 58466
Apr 28 06:18:25 prd-ubuntu2204-docker-8c-8g-8950 sshd[1283]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 28 06:18:25 prd-ubuntu2204-docker-8c-8g-8950 sshd[1283]: Received disconnect from 10.30.168.15 port 58466:11: Closed due to user request. [preauth]
Apr 28 06:18:25 prd-ubuntu2204-docker-8c-8g-8950 sshd[1283]: Disconnected from invalid user jenkins 10.30.168.15 port 58466 [preauth]
Apr 28 06:18:28 prd-ubuntu2204-docker-8c-8g-8950 sshd[1390]: Invalid user jenkins from 10.30.168.15 port 58474
Apr 28 06:18:28 prd-ubuntu2204-docker-8c-8g-8950 sshd[1390]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 28 06:18:28 prd-ubuntu2204-docker-8c-8g-8950 sshd[1390]: Received disconnect from 10.30.168.15 port 58474:11: Closed due to user request. [preauth]
Apr 28 06:18:28 prd-ubuntu2204-docker-8c-8g-8950 sshd[1390]: Disconnected from invalid user jenkins 10.30.168.15 port 58474 [preauth]
Apr 28 06:18:31 prd-ubuntu2204-docker-8c-8g-8950 sshd[1392]: Invalid user jenkins from 10.30.168.15 port 58476
Apr 28 06:18:31 prd-ubuntu2204-docker-8c-8g-8950 sshd[1392]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 28 06:18:31 prd-ubuntu2204-docker-8c-8g-8950 sshd[1392]: Received disconnect from 10.30.168.15 port 58476:11: Closed due to user request. [preauth]
Apr 28 06:18:31 prd-ubuntu2204-docker-8c-8g-8950 sshd[1392]: Disconnected from invalid user jenkins 10.30.168.15 port 58476 [preauth]
Apr 28 06:18:34 prd-ubuntu2204-docker-8c-8g-8950 sshd[1394]: Invalid user jenkins from 10.30.168.15 port 58480
Apr 28 06:18:34 prd-ubuntu2204-docker-8c-8g-8950 useradd[1409]: new group: name=jenkins, GID=1001
Apr 28 06:18:34 prd-ubuntu2204-docker-8c-8g-8950 useradd[1409]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Apr 28 06:18:34 prd-ubuntu2204-docker-8c-8g-8950 sshd[1394]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 28 06:18:34 prd-ubuntu2204-docker-8c-8g-8950 sshd[1394]: Received disconnect from 10.30.168.15 port 58480:11: Closed due to user request. [preauth]
Apr 28 06:18:34 prd-ubuntu2204-docker-8c-8g-8950 sshd[1394]: Disconnected from invalid user jenkins 10.30.168.15 port 58480 [preauth]
Apr 28 06:18:34 prd-ubuntu2204-docker-8c-8g-8950 usermod[1418]: add 'jenkins' to group 'docker'
Apr 28 06:18:34 prd-ubuntu2204-docker-8c-8g-8950 usermod[1418]: add 'jenkins' to shadow group 'docker'
Apr 28 06:18:37 prd-ubuntu2204-docker-8c-8g-8950 sshd[1454]: Accepted publickey for jenkins from 10.30.168.15 port 58486 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs
Apr 28 06:18:37 prd-ubuntu2204-docker-8c-8g-8950 sshd[1454]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0)
Apr 28 06:18:37 prd-ubuntu2204-docker-8c-8g-8950 systemd-logind[766]: New session 1 of user jenkins.
Apr 28 06:18:37 prd-ubuntu2204-docker-8c-8g-8950 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0)
Apr 28 06:19:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[1919]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:19:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[1919]: pam_unix(cron:session): session closed for user root
Apr 28 06:19:55 prd-ubuntu2204-docker-8c-8g-8950 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Apr 28 06:19:55 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session closed for user root
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session closed for user root
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session closed for user root
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session closed for user root
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session closed for user root
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 28 06:19:56 prd-ubuntu2204-docker-8c-8g-8950 sudo: pam_unix(sudo:session): session closed for user root
Apr 28 06:20:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[2241]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:20:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[2241]: pam_unix(cron:session): session closed for user root
Apr 28 06:21:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[2877]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:21:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[2877]: pam_unix(cron:session): session closed for user root
Apr 28 06:22:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[4785]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:22:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[4785]: pam_unix(cron:session): session closed for user root
Apr 28 06:23:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[5585]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:23:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[5585]: pam_unix(cron:session): session closed for user root
Apr 28 06:24:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[7122]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:24:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[7122]: pam_unix(cron:session): session closed for user root
Apr 28 06:25:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[8256]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:25:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[8257]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:25:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[8257]: pam_unix(cron:session): session closed for user root
Apr 28 06:25:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[8256]: pam_unix(cron:session): session closed for user root
Apr 28 06:26:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[8948]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:26:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[8948]: pam_unix(cron:session): session closed for user root
Apr 28 06:27:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[9467]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:27:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[9467]: pam_unix(cron:session): session closed for user root
Apr 28 06:28:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[10094]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:28:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[10094]: pam_unix(cron:session): session closed for user root
Apr 28 06:29:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[10813]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:29:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[10813]: pam_unix(cron:session): session closed for user root
Apr 28 06:30:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[12374]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:30:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[12374]: pam_unix(cron:session): session closed for user root
Apr 28 06:31:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[14355]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:31:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[14355]: pam_unix(cron:session): session closed for user root
Apr 28 06:32:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[16114]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:32:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[16114]: pam_unix(cron:session): session closed for user root
Apr 28 06:33:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[17276]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:33:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[17276]: pam_unix(cron:session): session closed for user root
Apr 28 06:34:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[17298]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:34:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[17298]: pam_unix(cron:session): session closed for user root
Apr 28 06:35:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[19329]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:35:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[19329]: pam_unix(cron:session): session closed for user root
Apr 28 06:36:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[20585]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:36:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[20585]: pam_unix(cron:session): session closed for user root
Apr 28 06:37:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[21631]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:37:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[21631]: pam_unix(cron:session): session closed for user root
Apr 28 06:38:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[22722]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:38:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[22722]: pam_unix(cron:session): session closed for user root
Apr 28 06:39:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[24742]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:39:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[24742]: pam_unix(cron:session): session closed for user root
Apr 28 06:40:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[26606]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:40:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[26606]: pam_unix(cron:session): session closed for user root
Apr 28 06:41:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[27793]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:41:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[27793]: pam_unix(cron:session): session closed for user root
Apr 28 06:42:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[29176]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:42:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[29176]: pam_unix(cron:session): session closed for user root
Apr 28 06:43:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[30718]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:43:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[30718]: pam_unix(cron:session): session closed for user root
Apr 28 06:44:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[32073]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:44:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[32073]: pam_unix(cron:session): session closed for user root
Apr 28 06:45:02 prd-ubuntu2204-docker-8c-8g-8950 CRON[33117]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:45:02 prd-ubuntu2204-docker-8c-8g-8950 CRON[33117]: pam_unix(cron:session): session closed for user root
Apr 28 06:46:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[34030]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:46:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[34030]: pam_unix(cron:session): session closed for user root
Apr 28 06:47:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[35444]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:47:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[35444]: pam_unix(cron:session): session closed for user root
Apr 28 06:48:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[37096]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:48:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[37096]: pam_unix(cron:session): session closed for user root
Apr 28 06:49:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[38414]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:49:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[38414]: pam_unix(cron:session): session closed for user root
Apr 28 06:50:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[39495]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:50:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[39495]: pam_unix(cron:session): session closed for user root
Apr 28 06:51:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[39773]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 28 06:51:01 prd-ubuntu2204-docker-8c-8g-8950 CRON[39773]: pam_unix(cron:session): session closed for user root
Apr 28 06:51:53 prd-ubuntu2204-docker-8c-8g-8950 sudo:  jenkins : PWD=/w/workspace/bgpcep-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp