Feb 9 14:31:45 prd-ubuntu1804-docker-8c-8g-4069 passwd[998]: password for 'ubuntu' changed by 'root' Feb 9 14:31:45 prd-ubuntu1804-docker-8c-8g-4069 systemd-logind[1027]: Watching system buttons on /dev/input/event0 (Power Button) Feb 9 14:31:45 prd-ubuntu1804-docker-8c-8g-4069 systemd-logind[1027]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Feb 9 14:31:45 prd-ubuntu1804-docker-8c-8g-4069 systemd-logind[1027]: New seat seat0. Feb 9 14:31:45 prd-ubuntu1804-docker-8c-8g-4069 sshd[1112]: Server listening on 0.0.0.0 port 22. Feb 9 14:31:45 prd-ubuntu1804-docker-8c-8g-4069 sshd[1112]: Server listening on :: port 22. Feb 9 14:31:46 prd-ubuntu1804-docker-8c-8g-4069 sshd[1447]: Did not receive identification string from 10.30.104.4 port 57742 Feb 9 14:31:54 prd-ubuntu1804-docker-8c-8g-4069 sshd[1488]: Invalid user jenkins from 10.30.104.4 port 57754 Feb 9 14:31:54 prd-ubuntu1804-docker-8c-8g-4069 sshd[1488]: Received disconnect from 10.30.104.4 port 57754:11: Closed due to user request. [preauth] Feb 9 14:31:54 prd-ubuntu1804-docker-8c-8g-4069 sshd[1488]: Disconnected from invalid user jenkins 10.30.104.4 port 57754 [preauth] Feb 9 14:31:56 prd-ubuntu1804-docker-8c-8g-4069 sshd[1492]: Invalid user jenkins from 10.30.104.4 port 57758 Feb 9 14:31:56 prd-ubuntu1804-docker-8c-8g-4069 sshd[1492]: Received disconnect from 10.30.104.4 port 57758:11: Closed due to user request. [preauth] Feb 9 14:31:56 prd-ubuntu1804-docker-8c-8g-4069 sshd[1492]: Disconnected from invalid user jenkins 10.30.104.4 port 57758 [preauth] Feb 9 14:31:58 prd-ubuntu1804-docker-8c-8g-4069 sshd[1494]: Invalid user jenkins from 10.30.104.4 port 57768 Feb 9 14:31:58 prd-ubuntu1804-docker-8c-8g-4069 sshd[1494]: Received disconnect from 10.30.104.4 port 57768:11: Closed due to user request. [preauth] Feb 9 14:31:58 prd-ubuntu1804-docker-8c-8g-4069 sshd[1494]: Disconnected from invalid user jenkins 10.30.104.4 port 57768 [preauth] Feb 9 14:32:00 prd-ubuntu1804-docker-8c-8g-4069 sshd[1496]: Invalid user jenkins from 10.30.104.4 port 57770 Feb 9 14:32:00 prd-ubuntu1804-docker-8c-8g-4069 sshd[1496]: Received disconnect from 10.30.104.4 port 57770:11: Closed due to user request. [preauth] Feb 9 14:32:00 prd-ubuntu1804-docker-8c-8g-4069 sshd[1496]: Disconnected from invalid user jenkins 10.30.104.4 port 57770 [preauth] Feb 9 14:32:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[1498]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:32:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[1498]: pam_unix(cron:session): session closed for user root Feb 9 14:32:02 prd-ubuntu1804-docker-8c-8g-4069 sshd[1507]: Invalid user jenkins from 10.30.104.4 port 57774 Feb 9 14:32:02 prd-ubuntu1804-docker-8c-8g-4069 sshd[1507]: Received disconnect from 10.30.104.4 port 57774:11: Closed due to user request. [preauth] Feb 9 14:32:02 prd-ubuntu1804-docker-8c-8g-4069 sshd[1507]: Disconnected from invalid user jenkins 10.30.104.4 port 57774 [preauth] Feb 9 14:32:04 prd-ubuntu1804-docker-8c-8g-4069 sshd[1726]: Invalid user jenkins from 10.30.104.4 port 57778 Feb 9 14:32:04 prd-ubuntu1804-docker-8c-8g-4069 sshd[1726]: Received disconnect from 10.30.104.4 port 57778:11: Closed due to user request. [preauth] Feb 9 14:32:04 prd-ubuntu1804-docker-8c-8g-4069 sshd[1726]: Disconnected from invalid user jenkins 10.30.104.4 port 57778 [preauth] Feb 9 14:32:06 prd-ubuntu1804-docker-8c-8g-4069 sshd[1771]: Invalid user jenkins from 10.30.104.4 port 57782 Feb 9 14:32:06 prd-ubuntu1804-docker-8c-8g-4069 sshd[1771]: Received disconnect from 10.30.104.4 port 57782:11: Closed due to user request. [preauth] Feb 9 14:32:06 prd-ubuntu1804-docker-8c-8g-4069 sshd[1771]: Disconnected from invalid user jenkins 10.30.104.4 port 57782 [preauth] Feb 9 14:32:09 prd-ubuntu1804-docker-8c-8g-4069 sshd[1782]: Invalid user jenkins from 10.30.104.4 port 57786 Feb 9 14:32:09 prd-ubuntu1804-docker-8c-8g-4069 sshd[1782]: Received disconnect from 10.30.104.4 port 57786:11: Closed due to user request. [preauth] Feb 9 14:32:09 prd-ubuntu1804-docker-8c-8g-4069 sshd[1782]: Disconnected from invalid user jenkins 10.30.104.4 port 57786 [preauth] Feb 9 14:32:11 prd-ubuntu1804-docker-8c-8g-4069 sshd[1784]: Invalid user jenkins from 10.30.104.4 port 57792 Feb 9 14:32:11 prd-ubuntu1804-docker-8c-8g-4069 sshd[1784]: Received disconnect from 10.30.104.4 port 57792:11: Closed due to user request. [preauth] Feb 9 14:32:11 prd-ubuntu1804-docker-8c-8g-4069 sshd[1784]: Disconnected from invalid user jenkins 10.30.104.4 port 57792 [preauth] Feb 9 14:32:13 prd-ubuntu1804-docker-8c-8g-4069 sshd[1786]: Invalid user jenkins from 10.30.104.4 port 57794 Feb 9 14:32:13 prd-ubuntu1804-docker-8c-8g-4069 sshd[1786]: Received disconnect from 10.30.104.4 port 57794:11: Closed due to user request. [preauth] Feb 9 14:32:13 prd-ubuntu1804-docker-8c-8g-4069 sshd[1786]: Disconnected from invalid user jenkins 10.30.104.4 port 57794 [preauth] Feb 9 14:32:15 prd-ubuntu1804-docker-8c-8g-4069 sshd[1796]: Invalid user jenkins from 10.30.104.4 port 57796 Feb 9 14:32:17 prd-ubuntu1804-docker-8c-8g-4069 sshd[1796]: Received disconnect from 10.30.104.4 port 57796:11: Closed due to user request. [preauth] Feb 9 14:32:17 prd-ubuntu1804-docker-8c-8g-4069 sshd[1796]: Disconnected from invalid user jenkins 10.30.104.4 port 57796 [preauth] Feb 9 14:32:19 prd-ubuntu1804-docker-8c-8g-4069 sshd[1818]: Invalid user jenkins from 10.30.104.4 port 57798 Feb 9 14:32:19 prd-ubuntu1804-docker-8c-8g-4069 sshd[1818]: Received disconnect from 10.30.104.4 port 57798:11: Closed due to user request. [preauth] Feb 9 14:32:19 prd-ubuntu1804-docker-8c-8g-4069 sshd[1818]: Disconnected from invalid user jenkins 10.30.104.4 port 57798 [preauth] Feb 9 14:32:19 prd-ubuntu1804-docker-8c-8g-4069 useradd[1828]: new group: name=jenkins, GID=1001 Feb 9 14:32:19 prd-ubuntu1804-docker-8c-8g-4069 useradd[1828]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Feb 9 14:32:19 prd-ubuntu1804-docker-8c-8g-4069 usermod[1835]: add 'jenkins' to group 'docker' Feb 9 14:32:19 prd-ubuntu1804-docker-8c-8g-4069 usermod[1835]: add 'jenkins' to shadow group 'docker' Feb 9 14:32:21 prd-ubuntu1804-docker-8c-8g-4069 sshd[1896]: Accepted publickey for jenkins from 10.30.104.4 port 57800 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Feb 9 14:32:21 prd-ubuntu1804-docker-8c-8g-4069 sshd[1896]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Feb 9 14:32:21 prd-ubuntu1804-docker-8c-8g-4069 systemd-logind[1027]: New session 2 of user jenkins. Feb 9 14:32:21 prd-ubuntu1804-docker-8c-8g-4069 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Feb 9 14:33:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[2119]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:33:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[2119]: pam_unix(cron:session): session closed for user root Feb 9 14:34:02 prd-ubuntu1804-docker-8c-8g-4069 CRON[2123]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:34:02 prd-ubuntu1804-docker-8c-8g-4069 CRON[2123]: pam_unix(cron:session): session closed for user root Feb 9 14:35:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[2126]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:35:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[2126]: pam_unix(cron:session): session closed for user root Feb 9 14:36:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[2473]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:36:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[2473]: pam_unix(cron:session): session closed for user root Feb 9 14:37:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[2713]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:37:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[2713]: pam_unix(cron:session): session closed for user root Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-project-csit-clamp ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1 Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session closed for user root Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-project-csit-clamp ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1 Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session closed for user root Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-project-csit-clamp ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1 Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session closed for user root Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-project-csit-clamp ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session closed for user root Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-project-csit-clamp ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session closed for user root Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-project-csit-clamp ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 9 14:37:06 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session closed for user root Feb 9 14:37:42 prd-ubuntu1804-docker-8c-8g-4069 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-project-csit-clamp ; USER=root ; COMMAND=/usr/bin/apt-get -y -qq install libxml2-utils Feb 9 14:37:42 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Feb 9 14:37:42 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session closed for user root Feb 9 14:38:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[3440]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:38:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[3440]: pam_unix(cron:session): session closed for user root Feb 9 14:39:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[4403]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:39:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[4403]: pam_unix(cron:session): session closed for user root Feb 9 14:40:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[8278]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:40:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[8278]: pam_unix(cron:session): session closed for user root Feb 9 14:41:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[8662]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:41:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[8662]: pam_unix(cron:session): session closed for user root Feb 9 14:42:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[9605]: pam_unix(cron:session): session opened for user root by (uid=0) Feb 9 14:42:01 prd-ubuntu1804-docker-8c-8g-4069 CRON[9605]: pam_unix(cron:session): session closed for user root Feb 9 14:42:31 prd-ubuntu1804-docker-8c-8g-4069 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-project-csit-clamp ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Feb 9 14:42:31 prd-ubuntu1804-docker-8c-8g-4069 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)