Apr 25 13:35:21 prd-ubuntu2204-docker-8c-8g-6013 passwd[730]: password for 'ubuntu' changed by 'root'
Apr 25 13:35:21 prd-ubuntu2204-docker-8c-8g-6013 systemd-logind[762]: New seat seat0.
Apr 25 13:35:21 prd-ubuntu2204-docker-8c-8g-6013 systemd-logind[762]: Watching system buttons on /dev/input/event0 (Power Button)
Apr 25 13:35:21 prd-ubuntu2204-docker-8c-8g-6013 systemd-logind[762]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard)
Apr 25 13:35:21 prd-ubuntu2204-docker-8c-8g-6013 sshd[798]: Server listening on 0.0.0.0 port 22.
Apr 25 13:35:21 prd-ubuntu2204-docker-8c-8g-6013 sshd[798]: Server listening on :: port 22.
Apr 25 13:35:23 prd-ubuntu2204-docker-8c-8g-6013 sshd[952]: error: kex_exchange_identification: Connection closed by remote host
Apr 25 13:35:23 prd-ubuntu2204-docker-8c-8g-6013 sshd[952]: Connection closed by 10.30.104.4 port 45940
Apr 25 13:35:31 prd-ubuntu2204-docker-8c-8g-6013 sshd[1031]: Invalid user jenkins from 10.30.104.4 port 45944
Apr 25 13:35:31 prd-ubuntu2204-docker-8c-8g-6013 sshd[1031]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 25 13:35:31 prd-ubuntu2204-docker-8c-8g-6013 sshd[1031]: Received disconnect from 10.30.104.4 port 45944:11: Closed due to user request. [preauth]
Apr 25 13:35:31 prd-ubuntu2204-docker-8c-8g-6013 sshd[1031]: Disconnected from invalid user jenkins 10.30.104.4 port 45944 [preauth]
Apr 25 13:35:33 prd-ubuntu2204-docker-8c-8g-6013 sshd[1033]: Invalid user jenkins from 10.30.104.4 port 45946
Apr 25 13:35:33 prd-ubuntu2204-docker-8c-8g-6013 sshd[1033]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 25 13:35:33 prd-ubuntu2204-docker-8c-8g-6013 sshd[1033]: Received disconnect from 10.30.104.4 port 45946:11: Closed due to user request. [preauth]
Apr 25 13:35:33 prd-ubuntu2204-docker-8c-8g-6013 sshd[1033]: Disconnected from invalid user jenkins 10.30.104.4 port 45946 [preauth]
Apr 25 13:35:35 prd-ubuntu2204-docker-8c-8g-6013 sshd[1035]: Invalid user jenkins from 10.30.104.4 port 45948
Apr 25 13:35:36 prd-ubuntu2204-docker-8c-8g-6013 sshd[1035]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 25 13:35:36 prd-ubuntu2204-docker-8c-8g-6013 sshd[1035]: Received disconnect from 10.30.104.4 port 45948:11: Closed due to user request. [preauth]
Apr 25 13:35:36 prd-ubuntu2204-docker-8c-8g-6013 sshd[1035]: Disconnected from invalid user jenkins 10.30.104.4 port 45948 [preauth]
Apr 25 13:35:38 prd-ubuntu2204-docker-8c-8g-6013 sshd[1037]: Invalid user jenkins from 10.30.104.4 port 45950
Apr 25 13:35:38 prd-ubuntu2204-docker-8c-8g-6013 sshd[1037]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 25 13:35:38 prd-ubuntu2204-docker-8c-8g-6013 sshd[1037]: Received disconnect from 10.30.104.4 port 45950:11: Closed due to user request. [preauth]
Apr 25 13:35:38 prd-ubuntu2204-docker-8c-8g-6013 sshd[1037]: Disconnected from invalid user jenkins 10.30.104.4 port 45950 [preauth]
Apr 25 13:35:40 prd-ubuntu2204-docker-8c-8g-6013 sshd[1267]: Invalid user jenkins from 10.30.104.4 port 45952
Apr 25 13:35:40 prd-ubuntu2204-docker-8c-8g-6013 sshd[1267]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 25 13:35:40 prd-ubuntu2204-docker-8c-8g-6013 sshd[1267]: Received disconnect from 10.30.104.4 port 45952:11: Closed due to user request. [preauth]
Apr 25 13:35:40 prd-ubuntu2204-docker-8c-8g-6013 sshd[1267]: Disconnected from invalid user jenkins 10.30.104.4 port 45952 [preauth]
Apr 25 13:35:42 prd-ubuntu2204-docker-8c-8g-6013 sshd[1305]: Invalid user jenkins from 10.30.104.4 port 45956
Apr 25 13:35:42 prd-ubuntu2204-docker-8c-8g-6013 sshd[1305]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 25 13:35:42 prd-ubuntu2204-docker-8c-8g-6013 sshd[1305]: Received disconnect from 10.30.104.4 port 45956:11: Closed due to user request. [preauth]
Apr 25 13:35:42 prd-ubuntu2204-docker-8c-8g-6013 sshd[1305]: Disconnected from invalid user jenkins 10.30.104.4 port 45956 [preauth]
Apr 25 13:35:45 prd-ubuntu2204-docker-8c-8g-6013 sshd[1308]: Invalid user jenkins from 10.30.104.4 port 45958
Apr 25 13:35:45 prd-ubuntu2204-docker-8c-8g-6013 sshd[1308]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth]
Apr 25 13:35:45 prd-ubuntu2204-docker-8c-8g-6013 sshd[1308]: Received disconnect from 10.30.104.4 port 45958:11: Closed due to user request. [preauth]
Apr 25 13:35:45 prd-ubuntu2204-docker-8c-8g-6013 sshd[1308]: Disconnected from invalid user jenkins 10.30.104.4 port 45958 [preauth]
Apr 25 13:35:45 prd-ubuntu2204-docker-8c-8g-6013 useradd[1315]: new group: name=jenkins, GID=1001
Apr 25 13:35:45 prd-ubuntu2204-docker-8c-8g-6013 useradd[1315]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none
Apr 25 13:35:45 prd-ubuntu2204-docker-8c-8g-6013 usermod[1324]: add 'jenkins' to group 'docker'
Apr 25 13:35:45 prd-ubuntu2204-docker-8c-8g-6013 usermod[1324]: add 'jenkins' to shadow group 'docker'
Apr 25 13:35:47 prd-ubuntu2204-docker-8c-8g-6013 sshd[1348]: Accepted publickey for jenkins from 10.30.104.4 port 45960 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4
Apr 25 13:35:47 prd-ubuntu2204-docker-8c-8g-6013 sshd[1348]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0)
Apr 25 13:35:47 prd-ubuntu2204-docker-8c-8g-6013 systemd-logind[762]: New session 1 of user jenkins.
Apr 25 13:35:47 prd-ubuntu2204-docker-8c-8g-6013 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0)
Apr 25 13:36:02 prd-ubuntu2204-docker-8c-8g-6013 CRON[1558]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:36:02 prd-ubuntu2204-docker-8c-8g-6013 CRON[1558]: pam_unix(cron:session): session closed for user root
Apr 25 13:37:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1561]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:37:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1561]: pam_unix(cron:session): session closed for user root
Apr 25 13:38:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1565]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:38:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1565]: pam_unix(cron:session): session closed for user root
Apr 25 13:39:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1568]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:39:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1568]: pam_unix(cron:session): session closed for user root
Apr 25 13:40:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1575]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:40:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1575]: pam_unix(cron:session): session closed for user root
Apr 25 13:41:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1587]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:41:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1587]: pam_unix(cron:session): session closed for user root
Apr 25 13:42:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1592]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:42:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1592]: pam_unix(cron:session): session closed for user root
Apr 25 13:43:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1595]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:43:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1595]: pam_unix(cron:session): session closed for user root
Apr 25 13:44:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1602]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:44:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1602]: pam_unix(cron:session): session closed for user root
Apr 25 13:45:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1605]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:45:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1605]: pam_unix(cron:session): session closed for user root
Apr 25 13:46:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1610]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:46:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1610]: pam_unix(cron:session): session closed for user root
Apr 25 13:47:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1613]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:47:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1613]: pam_unix(cron:session): session closed for user root
Apr 25 13:48:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1617]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:48:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1617]: pam_unix(cron:session): session closed for user root
Apr 25 13:49:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1620]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:49:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1620]: pam_unix(cron:session): session closed for user root
Apr 25 13:50:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1624]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:50:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1624]: pam_unix(cron:session): session closed for user root
Apr 25 13:51:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1632]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:51:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1632]: pam_unix(cron:session): session closed for user root
Apr 25 13:52:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1636]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:52:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1636]: pam_unix(cron:session): session closed for user root
Apr 25 13:53:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1639]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:53:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1639]: pam_unix(cron:session): session closed for user root
Apr 25 13:54:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1644]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:54:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1644]: pam_unix(cron:session): session closed for user root
Apr 25 13:55:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1647]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:55:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1647]: pam_unix(cron:session): session closed for user root
Apr 25 13:56:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1656]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:56:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1656]: pam_unix(cron:session): session closed for user root
Apr 25 13:57:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1660]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:57:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1660]: pam_unix(cron:session): session closed for user root
Apr 25 13:58:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1675]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:58:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1675]: pam_unix(cron:session): session closed for user root
Apr 25 13:59:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1678]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 13:59:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1678]: pam_unix(cron:session): session closed for user root
Apr 25 14:00:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1682]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:00:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1682]: pam_unix(cron:session): session closed for user root
Apr 25 14:01:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1687]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:01:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1687]: pam_unix(cron:session): session closed for user root
Apr 25 14:02:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1693]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:02:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1693]: pam_unix(cron:session): session closed for user root
Apr 25 14:03:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1696]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:03:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1696]: pam_unix(cron:session): session closed for user root
Apr 25 14:04:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1738]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:04:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1738]: pam_unix(cron:session): session closed for user root
Apr 25 14:05:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1741]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:05:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1741]: pam_unix(cron:session): session closed for user root
Apr 25 14:06:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1745]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:06:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1745]: pam_unix(cron:session): session closed for user root
Apr 25 14:07:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1749]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:07:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1749]: pam_unix(cron:session): session closed for user root
Apr 25 14:08:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1756]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:08:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1756]: pam_unix(cron:session): session closed for user root
Apr 25 14:09:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1759]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:09:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1759]: pam_unix(cron:session): session closed for user root
Apr 25 14:10:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1777]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:10:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[1777]: pam_unix(cron:session): session closed for user root
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo:  jenkins : PWD=/w/workspace/ccsdk-oran-maven-clm-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session closed for user root
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo:  jenkins : PWD=/w/workspace/ccsdk-oran-maven-clm-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session closed for user root
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo:  jenkins : PWD=/w/workspace/ccsdk-oran-maven-clm-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session closed for user root
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo:  jenkins : PWD=/w/workspace/ccsdk-oran-maven-clm-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session closed for user root
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo:  jenkins : PWD=/w/workspace/ccsdk-oran-maven-clm-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session closed for user root
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo:  jenkins : PWD=/w/workspace/ccsdk-oran-maven-clm-master ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001)
Apr 25 14:10:59 prd-ubuntu2204-docker-8c-8g-6013 sudo: pam_unix(sudo:session): session closed for user root
Apr 25 14:11:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[2388]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:11:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[2388]: pam_unix(cron:session): session closed for user root
Apr 25 14:12:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[2859]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:12:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[2859]: pam_unix(cron:session): session closed for user root
Apr 25 14:13:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[23645]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:13:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[23645]: pam_unix(cron:session): session closed for user root
Apr 25 14:14:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[24219]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0)
Apr 25 14:14:01 prd-ubuntu2204-docker-8c-8g-6013 CRON[24219]: pam_unix(cron:session): session closed for user root
Apr 25 14:14:29 prd-ubuntu2204-docker-8c-8g-6013 sudo:  jenkins : PWD=/w/workspace/ccsdk-oran-maven-clm-master ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp