Oct 8 14:09:33 prd-ubuntu1804-docker-8c-16g-1329 passwd[1093]: password for 'ubuntu' changed by 'root' Oct 8 14:09:33 prd-ubuntu1804-docker-8c-16g-1329 systemd-logind[1161]: Watching system buttons on /dev/input/event0 (Power Button) Oct 8 14:09:33 prd-ubuntu1804-docker-8c-16g-1329 systemd-logind[1161]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Oct 8 14:09:33 prd-ubuntu1804-docker-8c-16g-1329 systemd-logind[1161]: New seat seat0. Oct 8 14:09:33 prd-ubuntu1804-docker-8c-16g-1329 sshd[1258]: Server listening on 0.0.0.0 port 22. Oct 8 14:09:33 prd-ubuntu1804-docker-8c-16g-1329 sshd[1258]: Server listening on :: port 22. Oct 8 14:09:39 prd-ubuntu1804-docker-8c-16g-1329 sshd[1610]: Did not receive identification string from 10.30.104.4 port 33234 Oct 8 14:09:42 prd-ubuntu1804-docker-8c-16g-1329 sshd[1615]: Invalid user jenkins from 10.30.104.4 port 33238 Oct 8 14:09:42 prd-ubuntu1804-docker-8c-16g-1329 sshd[1615]: Received disconnect from 10.30.104.4 port 33238:11: Closed due to user request. [preauth] Oct 8 14:09:42 prd-ubuntu1804-docker-8c-16g-1329 sshd[1615]: Disconnected from invalid user jenkins 10.30.104.4 port 33238 [preauth] Oct 8 14:09:44 prd-ubuntu1804-docker-8c-16g-1329 sshd[1619]: Invalid user jenkins from 10.30.104.4 port 33250 Oct 8 14:09:44 prd-ubuntu1804-docker-8c-16g-1329 sshd[1619]: Received disconnect from 10.30.104.4 port 33250:11: Closed due to user request. [preauth] Oct 8 14:09:44 prd-ubuntu1804-docker-8c-16g-1329 sshd[1619]: Disconnected from invalid user jenkins 10.30.104.4 port 33250 [preauth] Oct 8 14:09:46 prd-ubuntu1804-docker-8c-16g-1329 sshd[1621]: Invalid user jenkins from 10.30.104.4 port 33266 Oct 8 14:09:46 prd-ubuntu1804-docker-8c-16g-1329 sshd[1621]: Received disconnect from 10.30.104.4 port 33266:11: Closed due to user request. [preauth] Oct 8 14:09:46 prd-ubuntu1804-docker-8c-16g-1329 sshd[1621]: Disconnected from invalid user jenkins 10.30.104.4 port 33266 [preauth] Oct 8 14:09:48 prd-ubuntu1804-docker-8c-16g-1329 sshd[1623]: Invalid user jenkins from 10.30.104.4 port 33268 Oct 8 14:09:48 prd-ubuntu1804-docker-8c-16g-1329 sshd[1623]: Received disconnect from 10.30.104.4 port 33268:11: Closed due to user request. [preauth] Oct 8 14:09:48 prd-ubuntu1804-docker-8c-16g-1329 sshd[1623]: Disconnected from invalid user jenkins 10.30.104.4 port 33268 [preauth] Oct 8 14:09:50 prd-ubuntu1804-docker-8c-16g-1329 sshd[1631]: Invalid user jenkins from 10.30.104.4 port 33270 Oct 8 14:09:50 prd-ubuntu1804-docker-8c-16g-1329 sshd[1631]: Received disconnect from 10.30.104.4 port 33270:11: Closed due to user request. [preauth] Oct 8 14:09:50 prd-ubuntu1804-docker-8c-16g-1329 sshd[1631]: Disconnected from invalid user jenkins 10.30.104.4 port 33270 [preauth] Oct 8 14:09:54 prd-ubuntu1804-docker-8c-16g-1329 sshd[1849]: Invalid user jenkins from 10.30.104.4 port 33278 Oct 8 14:09:54 prd-ubuntu1804-docker-8c-16g-1329 sshd[1849]: Received disconnect from 10.30.104.4 port 33278:11: Closed due to user request. [preauth] Oct 8 14:09:54 prd-ubuntu1804-docker-8c-16g-1329 sshd[1849]: Disconnected from invalid user jenkins 10.30.104.4 port 33278 [preauth] Oct 8 14:09:56 prd-ubuntu1804-docker-8c-16g-1329 sshd[1896]: Invalid user jenkins from 10.30.104.4 port 33292 Oct 8 14:09:56 prd-ubuntu1804-docker-8c-16g-1329 sshd[1896]: Received disconnect from 10.30.104.4 port 33292:11: Closed due to user request. [preauth] Oct 8 14:09:56 prd-ubuntu1804-docker-8c-16g-1329 sshd[1896]: Disconnected from invalid user jenkins 10.30.104.4 port 33292 [preauth] Oct 8 14:09:58 prd-ubuntu1804-docker-8c-16g-1329 sshd[1905]: Invalid user jenkins from 10.30.104.4 port 33294 Oct 8 14:09:58 prd-ubuntu1804-docker-8c-16g-1329 sshd[1905]: Received disconnect from 10.30.104.4 port 33294:11: Closed due to user request. [preauth] Oct 8 14:09:58 prd-ubuntu1804-docker-8c-16g-1329 sshd[1905]: Disconnected from invalid user jenkins 10.30.104.4 port 33294 [preauth] Oct 8 14:10:00 prd-ubuntu1804-docker-8c-16g-1329 sshd[1907]: Invalid user jenkins from 10.30.104.4 port 33296 Oct 8 14:10:00 prd-ubuntu1804-docker-8c-16g-1329 sshd[1907]: Received disconnect from 10.30.104.4 port 33296:11: Closed due to user request. [preauth] Oct 8 14:10:00 prd-ubuntu1804-docker-8c-16g-1329 sshd[1907]: Disconnected from invalid user jenkins 10.30.104.4 port 33296 [preauth] Oct 8 14:10:03 prd-ubuntu1804-docker-8c-16g-1329 sshd[1909]: Invalid user jenkins from 10.30.104.4 port 33306 Oct 8 14:10:03 prd-ubuntu1804-docker-8c-16g-1329 CRON[1911]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 8 14:10:03 prd-ubuntu1804-docker-8c-16g-1329 CRON[1911]: pam_unix(cron:session): session closed for user root Oct 8 14:10:03 prd-ubuntu1804-docker-8c-16g-1329 sshd[1909]: Received disconnect from 10.30.104.4 port 33306:11: Closed due to user request. [preauth] Oct 8 14:10:03 prd-ubuntu1804-docker-8c-16g-1329 sshd[1909]: Disconnected from invalid user jenkins 10.30.104.4 port 33306 [preauth] Oct 8 14:10:04 prd-ubuntu1804-docker-8c-16g-1329 useradd[1937]: new group: name=jenkins, GID=1001 Oct 8 14:10:04 prd-ubuntu1804-docker-8c-16g-1329 useradd[1937]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Oct 8 14:10:04 prd-ubuntu1804-docker-8c-16g-1329 usermod[1944]: add 'jenkins' to group 'docker' Oct 8 14:10:04 prd-ubuntu1804-docker-8c-16g-1329 usermod[1944]: add 'jenkins' to shadow group 'docker' Oct 8 14:10:05 prd-ubuntu1804-docker-8c-16g-1329 sshd[2005]: Accepted publickey for jenkins from 10.30.104.4 port 33316 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Oct 8 14:10:05 prd-ubuntu1804-docker-8c-16g-1329 sshd[2005]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Oct 8 14:10:05 prd-ubuntu1804-docker-8c-16g-1329 systemd-logind[1161]: New session 2 of user jenkins. Oct 8 14:10:05 prd-ubuntu1804-docker-8c-16g-1329 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Oct 8 14:11:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[2636]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 8 14:11:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[2636]: pam_unix(cron:session): session closed for user root Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-17-openjdk-amd64/bin/java 1 Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session closed for user root Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac 1 Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session closed for user root Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 1 Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session closed for user root Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-17-openjdk-amd64/bin/java Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session closed for user root Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-17-openjdk-amd64/bin/javac Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session closed for user root Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-17-openjdk-amd64 Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Oct 8 14:11:24 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session closed for user root Oct 8 14:12:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[3161]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 8 14:12:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[3161]: pam_unix(cron:session): session closed for user root Oct 8 14:13:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[3583]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 8 14:13:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[3583]: pam_unix(cron:session): session closed for user root Oct 8 14:14:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[4304]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 8 14:14:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[4304]: pam_unix(cron:session): session closed for user root Oct 8 14:15:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[4654]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 8 14:15:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[4654]: pam_unix(cron:session): session closed for user root Oct 8 14:16:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[5230]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 8 14:16:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[5230]: pam_unix(cron:session): session closed for user root Oct 8 14:17:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[5734]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 8 14:17:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[5735]: pam_unix(cron:session): session opened for user root by (uid=0) Oct 8 14:17:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[5734]: pam_unix(cron:session): session closed for user root Oct 8 14:17:01 prd-ubuntu1804-docker-8c-16g-1329 CRON[5735]: pam_unix(cron:session): session closed for user root Oct 8 14:17:26 prd-ubuntu1804-docker-8c-16g-1329 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-clamp-master-verify-java ; USER=root ; COMMAND=/bin/cp /var/log/auth.log /tmp Oct 8 14:17:26 prd-ubuntu1804-docker-8c-16g-1329 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)