Nov 24 07:46:17 prd-ubuntu2204-docker-4c-4g-13099 sshd[923]: error: kex_exchange_identification: Connection closed by remote host
Nov 24 07:46:17 prd-ubuntu2204-docker-4c-4g-13099 sshd[923]: Connection closed by 10.30.168.15 port 42638
Nov 24 07:46:20 prd-ubuntu2204-docker-4c-4g-13099 sshd[930]: Invalid user jenkins from 10.30.168.15 port 42642
Nov 24 07:46:20 prd-ubuntu2204-docker-4c-4g-13099 sshd[930]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:20 prd-ubuntu2204-docker-4c-4g-13099 sshd[930]: Received disconnect from 10.30.168.15 port 42642:11: Closed due to user request. [preauth]
Nov 24 07:46:20 prd-ubuntu2204-docker-4c-4g-13099 sshd[930]: Disconnected from invalid user jenkins 10.30.168.15 port 42642 [preauth]
Nov 24 07:46:23 prd-ubuntu2204-docker-4c-4g-13099 sshd[935]: Invalid user jenkins from 10.30.168.15 port 42652
Nov 24 07:46:23 prd-ubuntu2204-docker-4c-4g-13099 sshd[935]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:23 prd-ubuntu2204-docker-4c-4g-13099 sshd[935]: Received disconnect from 10.30.168.15 port 42652:11: Closed due to user request. [preauth]
Nov 24 07:46:23 prd-ubuntu2204-docker-4c-4g-13099 sshd[935]: Disconnected from invalid user jenkins 10.30.168.15 port 42652 [preauth]
Nov 24 07:46:26 prd-ubuntu2204-docker-4c-4g-13099 sshd[937]: Invalid user jenkins from 10.30.168.15 port 42654
Nov 24 07:46:26 prd-ubuntu2204-docker-4c-4g-13099 sshd[937]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:26 prd-ubuntu2204-docker-4c-4g-13099 sshd[937]: Received disconnect from 10.30.168.15 port 42654:11: Closed due to user request. [preauth]
Nov 24 07:46:26 prd-ubuntu2204-docker-4c-4g-13099 sshd[937]: Disconnected from invalid user jenkins 10.30.168.15 port 42654 [preauth]
Nov 24 07:46:29 prd-ubuntu2204-docker-4c-4g-13099 sshd[939]: Invalid user jenkins from 10.30.168.15 port 42656
Nov 24 07:46:29 prd-ubuntu2204-docker-4c-4g-13099 sshd[939]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:29 prd-ubuntu2204-docker-4c-4g-13099 sshd[939]: Received disconnect from 10.30.168.15 port 42656:11: Closed due to user request. [preauth]
Nov 24 07:46:29 prd-ubuntu2204-docker-4c-4g-13099 sshd[939]: Disconnected from invalid user jenkins 10.30.168.15 port 42656 [preauth]
Nov 24 07:46:32 prd-ubuntu2204-docker-4c-4g-13099 sshd[941]: Invalid user jenkins from 10.30.168.15 port 42660
Nov 24 07:46:32 prd-ubuntu2204-docker-4c-4g-13099 sshd[941]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:32 prd-ubuntu2204-docker-4c-4g-13099 sshd[941]: Received disconnect from 10.30.168.15 port 42660:11: Closed due to user request. [preauth]
Nov 24 07:46:32 prd-ubuntu2204-docker-4c-4g-13099 sshd[941]: Disconnected from invalid user jenkins 10.30.168.15 port 42660 [preauth]
Nov 24 07:46:35 prd-ubuntu2204-docker-4c-4g-13099 sshd[943]: Invalid user jenkins from 10.30.168.15 port 42662
Nov 24 07:46:35 prd-ubuntu2204-docker-4c-4g-13099 sshd[943]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:35 prd-ubuntu2204-docker-4c-4g-13099 sshd[943]: Received disconnect from 10.30.168.15 port 42662:11: Closed due to user request. [preauth]
Nov 24 07:46:35 prd-ubuntu2204-docker-4c-4g-13099 sshd[943]: Disconnected from invalid user jenkins 10.30.168.15 port 42662 [preauth]
Nov 24 07:46:38 prd-ubuntu2204-docker-4c-4g-13099 sshd[962]: Invalid user jenkins from 10.30.168.15 port 42666
Nov 24 07:46:39 prd-ubuntu2204-docker-4c-4g-13099 sshd[962]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:39 prd-ubuntu2204-docker-4c-4g-13099 sshd[962]: Received disconnect from 10.30.168.15 port 42666:11: Closed due to user request. [preauth]
Nov 24 07:46:39 prd-ubuntu2204-docker-4c-4g-13099 sshd[962]: Disconnected from invalid user jenkins 10.30.168.15 port 42666 [preauth]
Nov 24 07:46:44 prd-ubuntu2204-docker-4c-4g-13099 sshd[1211]: Invalid user jenkins from 10.30.168.15 port 42670
Nov 24 07:46:47 prd-ubuntu2204-docker-4c-4g-13099 sshd[1211]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:47 prd-ubuntu2204-docker-4c-4g-13099 sshd[1211]: Received disconnect from 10.30.168.15 port 42670:11: Closed due to user request. [preauth]
Nov 24 07:46:47 prd-ubuntu2204-docker-4c-4g-13099 sshd[1211]: Disconnected from invalid user jenkins 10.30.168.15 port 42670 [preauth]
Nov 24 07:46:50 prd-ubuntu2204-docker-4c-4g-13099 sshd[1223]: Invalid user jenkins from 10.30.168.15 port 42672
Nov 24 07:46:50 prd-ubuntu2204-docker-4c-4g-13099 sshd[1223]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:50 prd-ubuntu2204-docker-4c-4g-13099 sshd[1223]: Received disconnect from 10.30.168.15 port 42672:11: Closed due to user request. [preauth]
Nov 24 07:46:50 prd-ubuntu2204-docker-4c-4g-13099 sshd[1223]: Disconnected from invalid user jenkins 10.30.168.15 port 42672 [preauth]
Nov 24 07:46:53 prd-ubuntu2204-docker-4c-4g-13099 sshd[1261]: Invalid user jenkins from 10.30.168.15 port 42678
Nov 24 07:46:53 prd-ubuntu2204-docker-4c-4g-13099 sshd[1261]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:53 prd-ubuntu2204-docker-4c-4g-13099 sshd[1261]: Received disconnect from 10.30.168.15 port 42678:11: Closed due to user request. [preauth]
Nov 24 07:46:53 prd-ubuntu2204-docker-4c-4g-13099 sshd[1261]: Disconnected from invalid user jenkins 10.30.168.15 port 42678 [preauth]
Nov 24 07:46:56 prd-ubuntu2204-docker-4c-4g-13099 sshd[1263]: Invalid user jenkins from 10.30.168.15 port 42686
Nov 24 07:46:56 prd-ubuntu2204-docker-4c-4g-13099 sshd[1263]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:56 prd-ubuntu2204-docker-4c-4g-13099 sshd[1263]: Received disconnect from 10.30.168.15 port 42686:11: Closed due to user request. [preauth]
Nov 24 07:46:56 prd-ubuntu2204-docker-4c-4g-13099 sshd[1263]: Disconnected from invalid user jenkins 10.30.168.15 port 42686 [preauth]
Nov 24 07:46:59 prd-ubuntu2204-docker-4c-4g-13099 sshd[1285]: Invalid user jenkins from 10.30.168.15 port 42688
Nov 24 07:46:59 prd-ubuntu2204-docker-4c-4g-13099 sshd[1285]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:46:59 prd-ubuntu2204-docker-4c-4g-13099 sshd[1285]: Received disconnect from 10.30.168.15 port 42688:11: Closed due to user request. [preauth]
Nov 24 07:46:59 prd-ubuntu2204-docker-4c-4g-13099 sshd[1285]: Disconnected from invalid user jenkins 10.30.168.15 port 42688 [preauth]
Nov 24 07:47:02 prd-ubuntu2204-docker-4c-4g-13099 CRON[1339]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:47:02 prd-ubuntu2204-docker-4c-4g-13099 sshd[1340]: Invalid user jenkins from 10.30.168.15 port 42694
Nov 24 07:47:02 prd-ubuntu2204-docker-4c-4g-13099 CRON[1339]: pam_unix(cron:session): session closed for user root
Nov 24 07:47:02 prd-ubuntu2204-docker-4c-4g-13099 sshd[1340]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Nov 24 07:47:02 prd-ubuntu2204-docker-4c-4g-13099 sshd[1340]: Received disconnect from 10.30.168.15 port 42694:11: Closed due to user request. [preauth]
Nov 24 07:47:02 prd-ubuntu2204-docker-4c-4g-13099 sshd[1340]: Disconnected from invalid user jenkins 10.30.168.15 port 42694 [preauth]
Nov 24 07:47:04 prd-ubuntu2204-docker-4c-4g-13099 useradd[1371]: new group: name=jenkins, GID=1001
Nov 24 07:47:04 prd-ubuntu2204-docker-4c-4g-13099 useradd[1371]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Nov 24 07:47:04 prd-ubuntu2204-docker-4c-4g-13099 usermod[1380]: add 'jenkins' to group 'docker'
Nov 24 07:47:04 prd-ubuntu2204-docker-4c-4g-13099 usermod[1380]: add 'jenkins' to shadow group 'docker'
Nov 24 07:47:05 prd-ubuntu2204-docker-4c-4g-13099 sshd[1414]: Accepted publickey for jenkins from 10.30.168.15 port 42696 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs
Nov 24 07:47:05 prd-ubuntu2204-docker-4c-4g-13099 sshd[1414]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0)
Nov 24 07:47:05 prd-ubuntu2204-docker-4c-4g-13099 systemd-logind[724]: New session 2 of user jenkins.
Nov 24 07:47:05 prd-ubuntu2204-docker-4c-4g-13099 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0)
Nov 24 07:48:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[1900]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:48:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[1900]: pam_unix(cron:session): session closed for user root
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo:  jenkins : PWD=/w/workspace/netconf-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session closed for user root
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo:  jenkins : PWD=/w/workspace/netconf-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session closed for user root
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo:  jenkins : PWD=/w/workspace/netconf-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session closed for user root
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo:  jenkins : PWD=/w/workspace/netconf-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session closed for user root
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo:  jenkins : PWD=/w/workspace/netconf-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session closed for user root
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo:  jenkins : PWD=/w/workspace/netconf-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Nov 24 07:48:44 prd-ubuntu2204-docker-4c-4g-13099 sudo: pam_unix(sudo:session): session closed for user root
Nov 24 07:49:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[2141]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:49:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[2141]: pam_unix(cron:session): session closed for user root
Nov 24 07:50:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[2915]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:50:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[2915]: pam_unix(cron:session): session closed for user root
Nov 24 07:51:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[3789]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:51:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[3789]: pam_unix(cron:session): session closed for user root
Nov 24 07:52:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[5275]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:52:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[5275]: pam_unix(cron:session): session closed for user root
Nov 24 07:53:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[5958]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:53:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[5958]: pam_unix(cron:session): session closed for user root
Nov 24 07:54:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[6462]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:54:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[6462]: pam_unix(cron:session): session closed for user root
Nov 24 07:55:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[7332]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:55:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[7332]: pam_unix(cron:session): session closed for user root
Nov 24 07:56:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[8472]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:56:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[8472]: pam_unix(cron:session): session closed for user root
Nov 24 07:57:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[9196]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:57:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[9196]: pam_unix(cron:session): session closed for user root
Nov 24 07:58:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[9840]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:58:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[9840]: pam_unix(cron:session): session closed for user root
Nov 24 07:59:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[10092]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 07:59:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[10092]: pam_unix(cron:session): session closed for user root
Nov 24 08:00:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[10790]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:00:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[10790]: pam_unix(cron:session): session closed for user root
Nov 24 08:01:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[11727]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:01:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[11727]: pam_unix(cron:session): session closed for user root
Nov 24 08:02:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[12665]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:02:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[12665]: pam_unix(cron:session): session closed for user root
Nov 24 08:03:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[13709]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:03:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[13709]: pam_unix(cron:session): session closed for user root
Nov 24 08:04:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[14452]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:04:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[14452]: pam_unix(cron:session): session closed for user root
Nov 24 08:05:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[15078]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:05:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[15078]: pam_unix(cron:session): session closed for user root
Nov 24 08:06:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[16005]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:06:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[16005]: pam_unix(cron:session): session closed for user root
Nov 24 08:07:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[17196]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:07:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[17196]: pam_unix(cron:session): session closed for user root
Nov 24 08:08:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[17956]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:08:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[17956]: pam_unix(cron:session): session closed for user root
Nov 24 08:09:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[18652]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:09:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[18652]: pam_unix(cron:session): session closed for user root
Nov 24 08:10:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[19315]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:10:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[19315]: pam_unix(cron:session): session closed for user root
Nov 24 08:11:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[19811]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:11:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[19811]: pam_unix(cron:session): session closed for user root
Nov 24 08:12:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[19924]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:12:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[19924]: pam_unix(cron:session): session closed for user root
Nov 24 08:13:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[20050]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:13:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[20050]: pam_unix(cron:session): session closed for user root
Nov 24 08:14:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[20260]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Nov 24 08:14:01 prd-ubuntu2204-docker-4c-4g-13099 CRON[20260]: pam_unix(cron:session): session closed for user root
Nov 24 08:14:58 prd-ubuntu2204-docker-4c-4g-13099 sudo:  jenkins : PWD=/w/workspace/netconf-maven-verify-master-mvn39-openjdk21 ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp