Jan 26 14:07:22 prd-ubuntu1804-docker-8c-8g-3204 passwd[980]: password for 'ubuntu' changed by 'root' Jan 26 14:07:22 prd-ubuntu1804-docker-8c-8g-3204 systemd-logind[1037]: Watching system buttons on /dev/input/event0 (Power Button) Jan 26 14:07:22 prd-ubuntu1804-docker-8c-8g-3204 systemd-logind[1037]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Jan 26 14:07:22 prd-ubuntu1804-docker-8c-8g-3204 systemd-logind[1037]: New seat seat0. Jan 26 14:07:22 prd-ubuntu1804-docker-8c-8g-3204 sshd[1177]: Server listening on 0.0.0.0 port 22. Jan 26 14:07:22 prd-ubuntu1804-docker-8c-8g-3204 sshd[1177]: Server listening on :: port 22. Jan 26 14:07:23 prd-ubuntu1804-docker-8c-8g-3204 sshd[1441]: Did not receive identification string from 10.30.104.4 port 43674 Jan 26 14:07:32 prd-ubuntu1804-docker-8c-8g-3204 sshd[1473]: Invalid user jenkins from 10.30.104.4 port 43704 Jan 26 14:07:32 prd-ubuntu1804-docker-8c-8g-3204 sshd[1473]: Received disconnect from 10.30.104.4 port 43704:11: Closed due to user request. [preauth] Jan 26 14:07:32 prd-ubuntu1804-docker-8c-8g-3204 sshd[1473]: Disconnected from invalid user jenkins 10.30.104.4 port 43704 [preauth] Jan 26 14:07:34 prd-ubuntu1804-docker-8c-8g-3204 sshd[1477]: Invalid user jenkins from 10.30.104.4 port 43710 Jan 26 14:07:35 prd-ubuntu1804-docker-8c-8g-3204 sshd[1477]: Received disconnect from 10.30.104.4 port 43710:11: Closed due to user request. [preauth] Jan 26 14:07:35 prd-ubuntu1804-docker-8c-8g-3204 sshd[1477]: Disconnected from invalid user jenkins 10.30.104.4 port 43710 [preauth] Jan 26 14:07:37 prd-ubuntu1804-docker-8c-8g-3204 sshd[1479]: Invalid user jenkins from 10.30.104.4 port 43716 Jan 26 14:07:37 prd-ubuntu1804-docker-8c-8g-3204 sshd[1479]: Received disconnect from 10.30.104.4 port 43716:11: Closed due to user request. [preauth] Jan 26 14:07:37 prd-ubuntu1804-docker-8c-8g-3204 sshd[1479]: Disconnected from invalid user jenkins 10.30.104.4 port 43716 [preauth] Jan 26 14:07:50 prd-ubuntu1804-docker-8c-8g-3204 useradd[1767]: new group: name=jenkins, GID=1001 Jan 26 14:07:50 prd-ubuntu1804-docker-8c-8g-3204 useradd[1767]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jan 26 14:07:50 prd-ubuntu1804-docker-8c-8g-3204 usermod[1774]: add 'jenkins' to group 'docker' Jan 26 14:07:50 prd-ubuntu1804-docker-8c-8g-3204 usermod[1774]: add 'jenkins' to shadow group 'docker' Jan 26 14:07:51 prd-ubuntu1804-docker-8c-8g-3204 sshd[1814]: Accepted publickey for jenkins from 10.30.104.4 port 43740 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Jan 26 14:07:51 prd-ubuntu1804-docker-8c-8g-3204 sshd[1814]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jan 26 14:07:51 prd-ubuntu1804-docker-8c-8g-3204 systemd-logind[1037]: New session 1 of user jenkins. Jan 26 14:07:51 prd-ubuntu1804-docker-8c-8g-3204 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Jan 26 14:08:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2067]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:08:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2067]: pam_unix(cron:session): session closed for user root Jan 26 14:09:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2076]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:09:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2076]: pam_unix(cron:session): session closed for user root Jan 26 14:10:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2081]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:10:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2081]: pam_unix(cron:session): session closed for user root Jan 26 14:11:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2086]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:11:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2086]: pam_unix(cron:session): session closed for user root Jan 26 14:12:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2090]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:12:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2090]: pam_unix(cron:session): session closed for user root Jan 26 14:13:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2103]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:13:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2103]: pam_unix(cron:session): session closed for user root Jan 26 14:14:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2107]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:14:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2107]: pam_unix(cron:session): session closed for user root Jan 26 14:15:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2110]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:15:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2110]: pam_unix(cron:session): session closed for user root Jan 26 14:16:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2114]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:16:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2114]: pam_unix(cron:session): session closed for user root Jan 26 14:17:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2117]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:17:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2118]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:17:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2117]: pam_unix(cron:session): session closed for user root Jan 26 14:17:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2118]: pam_unix(cron:session): session closed for user root Jan 26 14:18:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2126]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:18:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2126]: pam_unix(cron:session): session closed for user root Jan 26 14:19:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2129]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:19:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2129]: pam_unix(cron:session): session closed for user root Jan 26 14:20:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2133]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:20:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2133]: pam_unix(cron:session): session closed for user root Jan 26 14:21:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2136]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:21:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2136]: pam_unix(cron:session): session closed for user root Jan 26 14:22:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2143]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:22:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2143]: pam_unix(cron:session): session closed for user root Jan 26 14:23:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2160]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:23:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2160]: pam_unix(cron:session): session closed for user root Jan 26 14:24:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2164]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:24:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2164]: pam_unix(cron:session): session closed for user root Jan 26 14:25:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2167]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:25:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2167]: pam_unix(cron:session): session closed for user root Jan 26 14:26:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2171]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:26:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2171]: pam_unix(cron:session): session closed for user root Jan 26 14:27:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2174]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:27:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2174]: pam_unix(cron:session): session closed for user root Jan 26 14:28:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2210]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:28:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2210]: pam_unix(cron:session): session closed for user root Jan 26 14:29:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2214]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:29:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2214]: pam_unix(cron:session): session closed for user root Jan 26 14:30:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2218]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:30:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2218]: pam_unix(cron:session): session closed for user root Jan 26 14:31:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2221]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:31:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2221]: pam_unix(cron:session): session closed for user root Jan 26 14:32:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2225]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:32:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2225]: pam_unix(cron:session): session closed for user root Jan 26 14:33:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2228]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:33:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2228]: pam_unix(cron:session): session closed for user root Jan 26 14:34:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2234]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:34:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2234]: pam_unix(cron:session): session closed for user root Jan 26 14:35:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2238]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:35:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2238]: pam_unix(cron:session): session closed for user root Jan 26 14:36:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2243]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:36:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2243]: pam_unix(cron:session): session closed for user root Jan 26 14:37:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2246]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:37:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2246]: pam_unix(cron:session): session closed for user root Jan 26 14:38:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2251]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:38:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2251]: pam_unix(cron:session): session closed for user root Jan 26 14:39:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2254]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:39:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2254]: pam_unix(cron:session): session closed for user root Jan 26 14:40:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2258]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:40:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2258]: pam_unix(cron:session): session closed for user root Jan 26 14:41:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2266]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:41:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2266]: pam_unix(cron:session): session closed for user root Jan 26 14:42:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2270]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:42:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2270]: pam_unix(cron:session): session closed for user root Jan 26 14:43:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2274]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:43:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2274]: pam_unix(cron:session): session closed for user root Jan 26 14:44:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2279]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:44:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2279]: pam_unix(cron:session): session closed for user root Jan 26 14:45:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2282]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:45:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2282]: pam_unix(cron:session): session closed for user root Jan 26 14:46:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2286]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:46:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2286]: pam_unix(cron:session): session closed for user root Jan 26 14:47:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2289]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:47:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2289]: pam_unix(cron:session): session closed for user root Jan 26 14:48:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2293]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:48:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2293]: pam_unix(cron:session): session closed for user root Jan 26 14:49:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2297]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:49:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2297]: pam_unix(cron:session): session closed for user root Jan 26 14:50:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2301]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:50:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2301]: pam_unix(cron:session): session closed for user root Jan 26 14:51:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2304]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:51:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2304]: pam_unix(cron:session): session closed for user root Jan 26 14:52:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2308]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:52:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2308]: pam_unix(cron:session): session closed for user root Jan 26 14:53:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2315]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:53:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2315]: pam_unix(cron:session): session closed for user root Jan 26 14:54:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2319]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:54:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2319]: pam_unix(cron:session): session closed for user root Jan 26 14:55:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2322]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:55:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2322]: pam_unix(cron:session): session closed for user root Jan 26 14:56:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2326]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:56:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2326]: pam_unix(cron:session): session closed for user root Jan 26 14:57:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2351]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:57:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2351]: pam_unix(cron:session): session closed for user root Jan 26 14:58:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2355]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:58:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2355]: pam_unix(cron:session): session closed for user root Jan 26 14:59:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2359]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 14:59:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2359]: pam_unix(cron:session): session closed for user root Jan 26 15:00:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2363]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:00:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2363]: pam_unix(cron:session): session closed for user root Jan 26 15:01:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2366]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:01:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2366]: pam_unix(cron:session): session closed for user root Jan 26 15:02:02 prd-ubuntu1804-docker-8c-8g-3204 CRON[2370]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:02:02 prd-ubuntu1804-docker-8c-8g-3204 CRON[2370]: pam_unix(cron:session): session closed for user root Jan 26 15:03:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2374]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:03:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2374]: pam_unix(cron:session): session closed for user root Jan 26 15:04:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2382]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:04:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2382]: pam_unix(cron:session): session closed for user root Jan 26 15:05:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2385]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:05:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2385]: pam_unix(cron:session): session closed for user root Jan 26 15:06:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2389]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:06:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2389]: pam_unix(cron:session): session closed for user root Jan 26 15:07:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2392]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:07:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2392]: pam_unix(cron:session): session closed for user root Jan 26 15:08:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2696]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:08:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[2696]: pam_unix(cron:session): session closed for user root Jan 26 15:09:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[3257]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:09:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[3257]: pam_unix(cron:session): session closed for user root Jan 26 15:10:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[6327]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:10:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[6327]: pam_unix(cron:session): session closed for user root Jan 26 15:11:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[10035]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:11:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[10035]: pam_unix(cron:session): session closed for user root Jan 26 15:12:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[10191]: pam_unix(cron:session): session opened for user root by (uid=0) Jan 26 15:12:01 prd-ubuntu1804-docker-8c-8g-3204 CRON[10191]: pam_unix(cron:session): session closed for user root Jan 26 15:12:43 prd-ubuntu1804-docker-8c-8g-3204 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/integration-xtesting-security-docker-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Jan 26 15:12:43 prd-ubuntu1804-docker-8c-8g-3204 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)