Sep 16 15:06:01 prd-ubuntu2204-docker-4c-4g-52932 passwd[696]: password for 'ubuntu' changed by 'root'
Sep 16 15:06:01 prd-ubuntu2204-docker-4c-4g-52932 sshd[771]: Server listening on 0.0.0.0 port 22.
Sep 16 15:06:01 prd-ubuntu2204-docker-4c-4g-52932 sshd[771]: Server listening on :: port 22.
Sep 16 15:06:01 prd-ubuntu2204-docker-4c-4g-52932 systemd-logind[728]: New seat seat0.
Sep 16 15:06:01 prd-ubuntu2204-docker-4c-4g-52932 systemd-logind[728]: Watching system buttons on /dev/input/event0 (Power Button)
Sep 16 15:06:01 prd-ubuntu2204-docker-4c-4g-52932 systemd-logind[728]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Sep 16 15:06:06 prd-ubuntu2204-docker-4c-4g-52932 sshd[954]: error: kex_exchange_identification: Connection closed by remote host
Sep 16 15:06:06 prd-ubuntu2204-docker-4c-4g-52932 sshd[954]: Connection closed by 10.30.168.15 port 43162
Sep 16 15:06:08 prd-ubuntu2204-docker-4c-4g-52932 sshd[955]: Invalid user jenkins from 10.30.168.15 port 43170
Sep 16 15:06:08 prd-ubuntu2204-docker-4c-4g-52932 sshd[955]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep 16 15:06:08 prd-ubuntu2204-docker-4c-4g-52932 sshd[955]: Received disconnect from 10.30.168.15 port 43170:11: Closed due to user request. [preauth]
Sep 16 15:06:08 prd-ubuntu2204-docker-4c-4g-52932 sshd[955]: Disconnected from invalid user jenkins 10.30.168.15 port 43170 [preauth]
Sep 16 15:06:12 prd-ubuntu2204-docker-4c-4g-52932 sshd[957]: Invalid user jenkins from 10.30.168.15 port 43190
Sep 16 15:06:12 prd-ubuntu2204-docker-4c-4g-52932 sshd[957]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep 16 15:06:12 prd-ubuntu2204-docker-4c-4g-52932 sshd[957]: Received disconnect from 10.30.168.15 port 43190:11: Closed due to user request. [preauth]
Sep 16 15:06:12 prd-ubuntu2204-docker-4c-4g-52932 sshd[957]: Disconnected from invalid user jenkins 10.30.168.15 port 43190 [preauth]
Sep 16 15:06:15 prd-ubuntu2204-docker-4c-4g-52932 sshd[959]: Invalid user jenkins from 10.30.168.15 port 43198
Sep 16 15:06:15 prd-ubuntu2204-docker-4c-4g-52932 sshd[959]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep 16 15:06:15 prd-ubuntu2204-docker-4c-4g-52932 sshd[959]: Received disconnect from 10.30.168.15 port 43198:11: Closed due to user request. [preauth]
Sep 16 15:06:15 prd-ubuntu2204-docker-4c-4g-52932 sshd[959]: Disconnected from invalid user jenkins 10.30.168.15 port 43198 [preauth]
Sep 16 15:06:20 prd-ubuntu2204-docker-4c-4g-52932 sshd[1186]: Invalid user jenkins from 10.30.168.15 port 43212
Sep 16 15:06:20 prd-ubuntu2204-docker-4c-4g-52932 sshd[1186]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep 16 15:06:20 prd-ubuntu2204-docker-4c-4g-52932 sshd[1186]: Received disconnect from 10.30.168.15 port 43212:11: Closed due to user request. [preauth]
Sep 16 15:06:20 prd-ubuntu2204-docker-4c-4g-52932 sshd[1186]: Disconnected from invalid user jenkins 10.30.168.15 port 43212 [preauth]
Sep 16 15:06:23 prd-ubuntu2204-docker-4c-4g-52932 sshd[1296]: Invalid user jenkins from 10.30.168.15 port 43228
Sep 16 15:06:23 prd-ubuntu2204-docker-4c-4g-52932 sshd[1296]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep 16 15:06:23 prd-ubuntu2204-docker-4c-4g-52932 sshd[1296]: Received disconnect from 10.30.168.15 port 43228:11: Closed due to user request. [preauth]
Sep 16 15:06:23 prd-ubuntu2204-docker-4c-4g-52932 sshd[1296]: Disconnected from invalid user jenkins 10.30.168.15 port 43228 [preauth]
Sep 16 15:06:27 prd-ubuntu2204-docker-4c-4g-52932 sshd[1316]: Invalid user jenkins from 10.30.168.15 port 43240
Sep 16 15:06:27 prd-ubuntu2204-docker-4c-4g-52932 sshd[1316]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep 16 15:06:27 prd-ubuntu2204-docker-4c-4g-52932 sshd[1316]: Received disconnect from 10.30.168.15 port 43240:11: Closed due to user request. [preauth]
Sep 16 15:06:27 prd-ubuntu2204-docker-4c-4g-52932 sshd[1316]: Disconnected from invalid user jenkins 10.30.168.15 port 43240 [preauth]
Sep 16 15:06:29 prd-ubuntu2204-docker-4c-4g-52932 sshd[1318]: Invalid user jenkins from 10.30.168.15 port 43254
Sep 16 15:06:29 prd-ubuntu2204-docker-4c-4g-52932 sshd[1318]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep 16 15:06:29 prd-ubuntu2204-docker-4c-4g-52932 sshd[1318]: Received disconnect from 10.30.168.15 port 43254:11: Closed due to user request. [preauth]
Sep 16 15:06:29 prd-ubuntu2204-docker-4c-4g-52932 sshd[1318]: Disconnected from invalid user jenkins 10.30.168.15 port 43254 [preauth]
Sep 16 15:06:32 prd-ubuntu2204-docker-4c-4g-52932 sshd[1322]: Invalid user jenkins from 10.30.168.15 port 43264
Sep 16 15:06:32 prd-ubuntu2204-docker-4c-4g-52932 sshd[1322]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Sep 16 15:06:32 prd-ubuntu2204-docker-4c-4g-52932 sshd[1322]: Received disconnect from 10.30.168.15 port 43264:11: Closed due to user request. [preauth]
Sep 16 15:06:32 prd-ubuntu2204-docker-4c-4g-52932 sshd[1322]: Disconnected from invalid user jenkins 10.30.168.15 port 43264 [preauth]
Sep 16 15:06:33 prd-ubuntu2204-docker-4c-4g-52932 useradd[1351]: new group: name=jenkins, GID=1001
Sep 16 15:06:33 prd-ubuntu2204-docker-4c-4g-52932 useradd[1351]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Sep 16 15:06:33 prd-ubuntu2204-docker-4c-4g-52932 usermod[1360]: add 'jenkins' to group 'docker'
Sep 16 15:06:33 prd-ubuntu2204-docker-4c-4g-52932 usermod[1360]: add 'jenkins' to shadow group 'docker'
Sep 16 15:06:35 prd-ubuntu2204-docker-4c-4g-52932 sshd[1396]: Accepted publickey for jenkins from 10.30.168.15 port 43280 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs
Sep 16 15:06:35 prd-ubuntu2204-docker-4c-4g-52932 sshd[1396]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0)
Sep 16 15:06:35 prd-ubuntu2204-docker-4c-4g-52932 systemd-logind[728]: New session 1 of user jenkins.
Sep 16 15:06:35 prd-ubuntu2204-docker-4c-4g-52932 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0)
Sep 16 15:07:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1569]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:07:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1569]: pam_unix(cron:session): session closed for user root
Sep 16 15:08:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1572]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:08:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1572]: pam_unix(cron:session): session closed for user root
Sep 16 15:09:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1576]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:09:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1576]: pam_unix(cron:session): session closed for user root
Sep 16 15:10:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1583]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:10:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1583]: pam_unix(cron:session): session closed for user root
Sep 16 15:11:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1590]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:11:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[1590]: pam_unix(cron:session): session closed for user root
Sep 16 15:12:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2486]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:12:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2486]: pam_unix(cron:session): session closed for user root
Sep 16 15:13:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2490]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:13:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2490]: pam_unix(cron:session): session closed for user root
Sep 16 15:14:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2493]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:14:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2493]: pam_unix(cron:session): session closed for user root
Sep 16 15:15:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2497]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:15:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2497]: pam_unix(cron:session): session closed for user root
Sep 16 15:16:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2500]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:16:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2500]: pam_unix(cron:session): session closed for user root
Sep 16 15:17:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2506]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:17:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2507]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:17:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2507]: pam_unix(cron:session): session closed for user root
Sep 16 15:17:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2506]: pam_unix(cron:session): session closed for user root
Sep 16 15:18:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2512]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:18:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2512]: pam_unix(cron:session): session closed for user root
Sep 16 15:19:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2516]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:19:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2516]: pam_unix(cron:session): session closed for user root
Sep 16 15:20:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2522]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:20:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2522]: pam_unix(cron:session): session closed for user root
Sep 16 15:21:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2528]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:21:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2528]: pam_unix(cron:session): session closed for user root
Sep 16 15:22:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2533]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:22:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2533]: pam_unix(cron:session): session closed for user root
Sep 16 15:23:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2568]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:23:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2568]: pam_unix(cron:session): session closed for user root
Sep 16 15:24:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2881]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:24:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[2881]: pam_unix(cron:session): session closed for user root
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo:  jenkins : PWD=/w/workspace/controller-maven-stage-11.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session closed for user root
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo:  jenkins : PWD=/w/workspace/controller-maven-stage-11.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session closed for user root
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo:  jenkins : PWD=/w/workspace/controller-maven-stage-11.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session closed for user root
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo:  jenkins : PWD=/w/workspace/controller-maven-stage-11.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session closed for user root
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo:  jenkins : PWD=/w/workspace/controller-maven-stage-11.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session closed for user root
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo:  jenkins : PWD=/w/workspace/controller-maven-stage-11.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Sep 16 15:24:15 prd-ubuntu2204-docker-4c-4g-52932 sudo: pam_unix(sudo:session): session closed for user root
Sep 16 15:25:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[3472]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:25:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[3472]: pam_unix(cron:session): session closed for user root
Sep 16 15:26:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[3976]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:26:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[3976]: pam_unix(cron:session): session closed for user root
Sep 16 15:27:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[4316]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:27:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[4316]: pam_unix(cron:session): session closed for user root
Sep 16 15:28:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[4799]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:28:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[4799]: pam_unix(cron:session): session closed for user root
Sep 16 15:29:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[5860]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:29:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[5860]: pam_unix(cron:session): session closed for user root
Sep 16 15:30:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[6259]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:30:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[6259]: pam_unix(cron:session): session closed for user root
Sep 16 15:31:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[7598]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:31:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[7598]: pam_unix(cron:session): session closed for user root
Sep 16 15:32:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[9152]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:32:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[9152]: pam_unix(cron:session): session closed for user root
Sep 16 15:33:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[9894]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:33:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[9894]: pam_unix(cron:session): session closed for user root
Sep 16 15:34:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[12827]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:34:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[12827]: pam_unix(cron:session): session closed for user root
Sep 16 15:35:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[13703]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:35:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[13703]: pam_unix(cron:session): session closed for user root
Sep 16 15:36:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[13997]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:36:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[13997]: pam_unix(cron:session): session closed for user root
Sep 16 15:37:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[14396]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:37:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[14396]: pam_unix(cron:session): session closed for user root
Sep 16 15:38:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[14841]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:38:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[14841]: pam_unix(cron:session): session closed for user root
Sep 16 15:39:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[15135]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:39:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[15135]: pam_unix(cron:session): session closed for user root
Sep 16 15:40:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[15389]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:40:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[15389]: pam_unix(cron:session): session closed for user root
Sep 16 15:41:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[16020]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:41:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[16020]: pam_unix(cron:session): session closed for user root
Sep 16 15:42:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[16939]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Sep 16 15:42:01 prd-ubuntu2204-docker-4c-4g-52932 CRON[16939]: pam_unix(cron:session): session closed for user root
Sep 16 15:42:50 prd-ubuntu2204-docker-4c-4g-52932 sudo:  jenkins : PWD=/w/workspace/controller-maven-stage-11.0.x ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp