Jan 15 20:24:19 prd-ubuntu2204-docker-4c-4g-530 passwd[687]: password for 'ubuntu' changed by 'root' Jan 15 20:24:19 prd-ubuntu2204-docker-4c-4g-530 sshd[747]: Server listening on 0.0.0.0 port 22. Jan 15 20:24:19 prd-ubuntu2204-docker-4c-4g-530 sshd[747]: Server listening on :: port 22. Jan 15 20:24:19 prd-ubuntu2204-docker-4c-4g-530 systemd-logind[719]: New seat seat0. Jan 15 20:24:19 prd-ubuntu2204-docker-4c-4g-530 systemd-logind[719]: Watching system buttons on /dev/input/event0 (Power Button) Jan 15 20:24:19 prd-ubuntu2204-docker-4c-4g-530 systemd-logind[719]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 15 20:24:22 prd-ubuntu2204-docker-4c-4g-530 sshd[961]: error: kex_exchange_identification: Connection closed by remote host Jan 15 20:24:22 prd-ubuntu2204-docker-4c-4g-530 sshd[961]: Connection closed by 10.30.168.15 port 55776 Jan 15 20:24:29 prd-ubuntu2204-docker-4c-4g-530 sshd[969]: Invalid user jenkins from 10.30.168.15 port 55782 Jan 15 20:24:29 prd-ubuntu2204-docker-4c-4g-530 sshd[969]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jan 15 20:24:29 prd-ubuntu2204-docker-4c-4g-530 sshd[969]: Received disconnect from 10.30.168.15 port 55782:11: Closed due to user request. [preauth] Jan 15 20:24:29 prd-ubuntu2204-docker-4c-4g-530 sshd[969]: Disconnected from invalid user jenkins 10.30.168.15 port 55782 [preauth] Jan 15 20:24:32 prd-ubuntu2204-docker-4c-4g-530 sshd[971]: Invalid user jenkins from 10.30.168.15 port 55784 Jan 15 20:24:32 prd-ubuntu2204-docker-4c-4g-530 sshd[971]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jan 15 20:24:32 prd-ubuntu2204-docker-4c-4g-530 sshd[971]: Received disconnect from 10.30.168.15 port 55784:11: Closed due to user request. [preauth] Jan 15 20:24:32 prd-ubuntu2204-docker-4c-4g-530 sshd[971]: Disconnected from invalid user jenkins 10.30.168.15 port 55784 [preauth] Jan 15 20:24:36 prd-ubuntu2204-docker-4c-4g-530 sshd[973]: Invalid user jenkins from 10.30.168.15 port 55786 Jan 15 20:24:36 prd-ubuntu2204-docker-4c-4g-530 sshd[973]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jan 15 20:24:36 prd-ubuntu2204-docker-4c-4g-530 sshd[973]: Received disconnect from 10.30.168.15 port 55786:11: Closed due to user request. [preauth] Jan 15 20:24:36 prd-ubuntu2204-docker-4c-4g-530 sshd[973]: Disconnected from invalid user jenkins 10.30.168.15 port 55786 [preauth] Jan 15 20:24:39 prd-ubuntu2204-docker-4c-4g-530 sshd[1204]: Invalid user jenkins from 10.30.168.15 port 55790 Jan 15 20:24:39 prd-ubuntu2204-docker-4c-4g-530 sshd[1204]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jan 15 20:24:39 prd-ubuntu2204-docker-4c-4g-530 sshd[1204]: Received disconnect from 10.30.168.15 port 55790:11: Closed due to user request. [preauth] Jan 15 20:24:39 prd-ubuntu2204-docker-4c-4g-530 sshd[1204]: Disconnected from invalid user jenkins 10.30.168.15 port 55790 [preauth] Jan 15 20:24:42 prd-ubuntu2204-docker-4c-4g-530 sshd[1206]: Invalid user jenkins from 10.30.168.15 port 55792 Jan 15 20:24:42 prd-ubuntu2204-docker-4c-4g-530 sshd[1206]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jan 15 20:24:42 prd-ubuntu2204-docker-4c-4g-530 sshd[1206]: Received disconnect from 10.30.168.15 port 55792:11: Closed due to user request. [preauth] Jan 15 20:24:42 prd-ubuntu2204-docker-4c-4g-530 sshd[1206]: Disconnected from invalid user jenkins 10.30.168.15 port 55792 [preauth] Jan 15 20:24:44 prd-ubuntu2204-docker-4c-4g-530 sshd[1208]: Invalid user jenkins from 10.30.168.15 port 55800 Jan 15 20:24:44 prd-ubuntu2204-docker-4c-4g-530 sshd[1208]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jan 15 20:24:44 prd-ubuntu2204-docker-4c-4g-530 sshd[1208]: Received disconnect from 10.30.168.15 port 55800:11: Closed due to user request. [preauth] Jan 15 20:24:44 prd-ubuntu2204-docker-4c-4g-530 sshd[1208]: Disconnected from invalid user jenkins 10.30.168.15 port 55800 [preauth] Jan 15 20:24:47 prd-ubuntu2204-docker-4c-4g-530 sshd[1320]: Invalid user jenkins from 10.30.168.15 port 55802 Jan 15 20:24:47 prd-ubuntu2204-docker-4c-4g-530 sshd[1320]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jan 15 20:24:47 prd-ubuntu2204-docker-4c-4g-530 sshd[1320]: Received disconnect from 10.30.168.15 port 55802:11: Closed due to user request. [preauth] Jan 15 20:24:47 prd-ubuntu2204-docker-4c-4g-530 sshd[1320]: Disconnected from invalid user jenkins 10.30.168.15 port 55802 [preauth] Jan 15 20:24:50 prd-ubuntu2204-docker-4c-4g-530 sshd[1326]: Invalid user jenkins from 10.30.168.15 port 55804 Jan 15 20:24:50 prd-ubuntu2204-docker-4c-4g-530 sshd[1326]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Jan 15 20:24:50 prd-ubuntu2204-docker-4c-4g-530 sshd[1326]: Received disconnect from 10.30.168.15 port 55804:11: Closed due to user request. [preauth] Jan 15 20:24:50 prd-ubuntu2204-docker-4c-4g-530 sshd[1326]: Disconnected from invalid user jenkins 10.30.168.15 port 55804 [preauth] Jan 15 20:24:51 prd-ubuntu2204-docker-4c-4g-530 useradd[1355]: new group: name=jenkins, GID=1001 Jan 15 20:24:51 prd-ubuntu2204-docker-4c-4g-530 useradd[1355]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Jan 15 20:24:51 prd-ubuntu2204-docker-4c-4g-530 usermod[1364]: add 'jenkins' to group 'docker' Jan 15 20:24:51 prd-ubuntu2204-docker-4c-4g-530 usermod[1364]: add 'jenkins' to shadow group 'docker' Jan 15 20:24:53 prd-ubuntu2204-docker-4c-4g-530 sshd[1400]: Accepted publickey for jenkins from 10.30.168.15 port 55808 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Jan 15 20:24:53 prd-ubuntu2204-docker-4c-4g-530 sshd[1400]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Jan 15 20:24:53 prd-ubuntu2204-docker-4c-4g-530 systemd-logind[719]: New session 1 of user jenkins. Jan 15 20:24:53 prd-ubuntu2204-docker-4c-4g-530 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Jan 15 20:25:01 prd-ubuntu2204-docker-4c-4g-530 CRON[1598]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:25:01 prd-ubuntu2204-docker-4c-4g-530 CRON[1598]: pam_unix(cron:session): session closed for user root Jan 15 20:26:01 prd-ubuntu2204-docker-4c-4g-530 CRON[1890]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:26:01 prd-ubuntu2204-docker-4c-4g-530 CRON[1890]: pam_unix(cron:session): session closed for user root Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session closed for user root Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session closed for user root Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session closed for user root Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session closed for user root Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jan 15 20:26:09 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session closed for user root Jan 15 20:26:10 prd-ubuntu2204-docker-4c-4g-530 sudo: jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Jan 15 20:26:10 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Jan 15 20:26:10 prd-ubuntu2204-docker-4c-4g-530 sudo: pam_unix(sudo:session): session closed for user root Jan 15 20:27:01 prd-ubuntu2204-docker-4c-4g-530 CRON[2017]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:27:01 prd-ubuntu2204-docker-4c-4g-530 CRON[2017]: pam_unix(cron:session): session closed for user root Jan 15 20:28:01 prd-ubuntu2204-docker-4c-4g-530 CRON[2020]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:28:01 prd-ubuntu2204-docker-4c-4g-530 CRON[2020]: pam_unix(cron:session): session closed for user root Jan 15 20:29:01 prd-ubuntu2204-docker-4c-4g-530 CRON[2024]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:29:01 prd-ubuntu2204-docker-4c-4g-530 CRON[2024]: pam_unix(cron:session): session closed for user root Jan 15 20:30:01 prd-ubuntu2204-docker-4c-4g-530 CRON[2990]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:30:01 prd-ubuntu2204-docker-4c-4g-530 CRON[2990]: pam_unix(cron:session): session closed for user root Jan 15 20:31:01 prd-ubuntu2204-docker-4c-4g-530 CRON[3656]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:31:01 prd-ubuntu2204-docker-4c-4g-530 CRON[3656]: pam_unix(cron:session): session closed for user root Jan 15 20:32:01 prd-ubuntu2204-docker-4c-4g-530 CRON[4310]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:32:01 prd-ubuntu2204-docker-4c-4g-530 CRON[4310]: pam_unix(cron:session): session closed for user root Jan 15 20:33:01 prd-ubuntu2204-docker-4c-4g-530 CRON[4945]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:33:01 prd-ubuntu2204-docker-4c-4g-530 CRON[4945]: pam_unix(cron:session): session closed for user root Jan 15 20:34:01 prd-ubuntu2204-docker-4c-4g-530 CRON[6096]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:34:01 prd-ubuntu2204-docker-4c-4g-530 CRON[6096]: pam_unix(cron:session): session closed for user root Jan 15 20:35:01 prd-ubuntu2204-docker-4c-4g-530 CRON[7149]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:35:01 prd-ubuntu2204-docker-4c-4g-530 CRON[7149]: pam_unix(cron:session): session closed for user root Jan 15 20:36:01 prd-ubuntu2204-docker-4c-4g-530 CRON[7722]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:36:01 prd-ubuntu2204-docker-4c-4g-530 CRON[7722]: pam_unix(cron:session): session closed for user root Jan 15 20:37:01 prd-ubuntu2204-docker-4c-4g-530 CRON[8675]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:37:01 prd-ubuntu2204-docker-4c-4g-530 CRON[8675]: pam_unix(cron:session): session closed for user root Jan 15 20:38:01 prd-ubuntu2204-docker-4c-4g-530 CRON[9583]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:38:01 prd-ubuntu2204-docker-4c-4g-530 CRON[9583]: pam_unix(cron:session): session closed for user root Jan 15 20:39:01 prd-ubuntu2204-docker-4c-4g-530 CRON[10355]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:39:01 prd-ubuntu2204-docker-4c-4g-530 CRON[10355]: pam_unix(cron:session): session closed for user root Jan 15 20:40:01 prd-ubuntu2204-docker-4c-4g-530 CRON[10879]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:40:01 prd-ubuntu2204-docker-4c-4g-530 CRON[10879]: pam_unix(cron:session): session closed for user root Jan 15 20:41:01 prd-ubuntu2204-docker-4c-4g-530 CRON[12014]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:41:01 prd-ubuntu2204-docker-4c-4g-530 CRON[12014]: pam_unix(cron:session): session closed for user root Jan 15 20:42:01 prd-ubuntu2204-docker-4c-4g-530 CRON[13395]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:42:01 prd-ubuntu2204-docker-4c-4g-530 CRON[13395]: pam_unix(cron:session): session closed for user root Jan 15 20:43:01 prd-ubuntu2204-docker-4c-4g-530 CRON[14683]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:43:01 prd-ubuntu2204-docker-4c-4g-530 CRON[14683]: pam_unix(cron:session): session closed for user root Jan 15 20:44:01 prd-ubuntu2204-docker-4c-4g-530 CRON[15872]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:44:01 prd-ubuntu2204-docker-4c-4g-530 CRON[15872]: pam_unix(cron:session): session closed for user root Jan 15 20:45:01 prd-ubuntu2204-docker-4c-4g-530 CRON[17067]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:45:01 prd-ubuntu2204-docker-4c-4g-530 CRON[17067]: pam_unix(cron:session): session closed for user root Jan 15 20:46:01 prd-ubuntu2204-docker-4c-4g-530 CRON[18123]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:46:01 prd-ubuntu2204-docker-4c-4g-530 CRON[18123]: pam_unix(cron:session): session closed for user root Jan 15 20:47:01 prd-ubuntu2204-docker-4c-4g-530 CRON[19262]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:47:01 prd-ubuntu2204-docker-4c-4g-530 CRON[19262]: pam_unix(cron:session): session closed for user root Jan 15 20:48:01 prd-ubuntu2204-docker-4c-4g-530 CRON[20546]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:48:01 prd-ubuntu2204-docker-4c-4g-530 CRON[20546]: pam_unix(cron:session): session closed for user root Jan 15 20:49:01 prd-ubuntu2204-docker-4c-4g-530 CRON[21822]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:49:01 prd-ubuntu2204-docker-4c-4g-530 CRON[21822]: pam_unix(cron:session): session closed for user root Jan 15 20:50:01 prd-ubuntu2204-docker-4c-4g-530 CRON[22838]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:50:01 prd-ubuntu2204-docker-4c-4g-530 CRON[22838]: pam_unix(cron:session): session closed for user root Jan 15 20:51:01 prd-ubuntu2204-docker-4c-4g-530 CRON[24082]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:51:01 prd-ubuntu2204-docker-4c-4g-530 CRON[24082]: pam_unix(cron:session): session closed for user root Jan 15 20:52:01 prd-ubuntu2204-docker-4c-4g-530 CRON[24992]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:52:01 prd-ubuntu2204-docker-4c-4g-530 CRON[24992]: pam_unix(cron:session): session closed for user root Jan 15 20:53:01 prd-ubuntu2204-docker-4c-4g-530 CRON[26163]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:53:01 prd-ubuntu2204-docker-4c-4g-530 CRON[26163]: pam_unix(cron:session): session closed for user root Jan 15 20:54:02 prd-ubuntu2204-docker-4c-4g-530 CRON[27182]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:54:02 prd-ubuntu2204-docker-4c-4g-530 CRON[27182]: pam_unix(cron:session): session closed for user root Jan 15 20:55:01 prd-ubuntu2204-docker-4c-4g-530 CRON[28154]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:55:01 prd-ubuntu2204-docker-4c-4g-530 CRON[28154]: pam_unix(cron:session): session closed for user root Jan 15 20:56:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29175]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:56:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29175]: pam_unix(cron:session): session closed for user root Jan 15 20:57:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29483]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:57:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29483]: pam_unix(cron:session): session closed for user root Jan 15 20:58:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29486]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:58:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29486]: pam_unix(cron:session): session closed for user root Jan 15 20:59:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29490]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 20:59:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29490]: pam_unix(cron:session): session closed for user root Jan 15 21:00:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29494]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 21:00:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29494]: pam_unix(cron:session): session closed for user root Jan 15 21:01:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29501]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 21:01:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29501]: pam_unix(cron:session): session closed for user root Jan 15 21:02:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29505]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 21:02:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29505]: pam_unix(cron:session): session closed for user root Jan 15 21:03:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29689]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Jan 15 21:03:01 prd-ubuntu2204-docker-4c-4g-530 CRON[29689]: pam_unix(cron:session): session closed for user root Jan 15 21:03:29 prd-ubuntu2204-docker-4c-4g-530 sudo: jenkins : PWD=/w/workspace/mdsal-maven-merge-14.0.x ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp