Sep 15 14:14:36 prd-ubuntu2204-docker-8c-8g-1605 passwd[740]: password for 'ubuntu' changed by 'root' Sep 15 14:14:36 prd-ubuntu2204-docker-8c-8g-1605 systemd-logind[774]: New seat seat0. Sep 15 14:14:36 prd-ubuntu2204-docker-8c-8g-1605 systemd-logind[774]: Watching system buttons on /dev/input/event0 (Power Button) Sep 15 14:14:36 prd-ubuntu2204-docker-8c-8g-1605 systemd-logind[774]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Sep 15 14:14:36 prd-ubuntu2204-docker-8c-8g-1605 sshd[824]: Server listening on 0.0.0.0 port 22. Sep 15 14:14:36 prd-ubuntu2204-docker-8c-8g-1605 sshd[824]: Server listening on :: port 22. Sep 15 14:14:37 prd-ubuntu2204-docker-8c-8g-1605 sshd[957]: error: kex_exchange_identification: Connection closed by remote host Sep 15 14:14:37 prd-ubuntu2204-docker-8c-8g-1605 sshd[957]: Connection closed by 10.30.104.4 port 37508 Sep 15 14:14:42 prd-ubuntu2204-docker-8c-8g-1605 sshd[978]: Invalid user jenkins from 10.30.104.4 port 37514 Sep 15 14:14:42 prd-ubuntu2204-docker-8c-8g-1605 sshd[978]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:14:42 prd-ubuntu2204-docker-8c-8g-1605 sshd[978]: Received disconnect from 10.30.104.4 port 37514:11: Closed due to user request. [preauth] Sep 15 14:14:43 prd-ubuntu2204-docker-8c-8g-1605 sshd[978]: Disconnected from invalid user jenkins 10.30.104.4 port 37514 [preauth] Sep 15 14:14:45 prd-ubuntu2204-docker-8c-8g-1605 sshd[980]: Invalid user jenkins from 10.30.104.4 port 37522 Sep 15 14:14:45 prd-ubuntu2204-docker-8c-8g-1605 sshd[980]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:14:45 prd-ubuntu2204-docker-8c-8g-1605 sshd[980]: Received disconnect from 10.30.104.4 port 37522:11: Closed due to user request. [preauth] Sep 15 14:14:45 prd-ubuntu2204-docker-8c-8g-1605 sshd[980]: Disconnected from invalid user jenkins 10.30.104.4 port 37522 [preauth] Sep 15 14:14:47 prd-ubuntu2204-docker-8c-8g-1605 sshd[982]: Invalid user jenkins from 10.30.104.4 port 37528 Sep 15 14:14:47 prd-ubuntu2204-docker-8c-8g-1605 sshd[982]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:14:47 prd-ubuntu2204-docker-8c-8g-1605 sshd[982]: Received disconnect from 10.30.104.4 port 37528:11: Closed due to user request. [preauth] Sep 15 14:14:47 prd-ubuntu2204-docker-8c-8g-1605 sshd[982]: Disconnected from invalid user jenkins 10.30.104.4 port 37528 [preauth] Sep 15 14:14:49 prd-ubuntu2204-docker-8c-8g-1605 sshd[984]: Invalid user jenkins from 10.30.104.4 port 37534 Sep 15 14:14:49 prd-ubuntu2204-docker-8c-8g-1605 sshd[984]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:14:49 prd-ubuntu2204-docker-8c-8g-1605 sshd[984]: Received disconnect from 10.30.104.4 port 37534:11: Closed due to user request. [preauth] Sep 15 14:14:49 prd-ubuntu2204-docker-8c-8g-1605 sshd[984]: Disconnected from invalid user jenkins 10.30.104.4 port 37534 [preauth] Sep 15 14:14:51 prd-ubuntu2204-docker-8c-8g-1605 sshd[986]: Invalid user jenkins from 10.30.104.4 port 37538 Sep 15 14:14:51 prd-ubuntu2204-docker-8c-8g-1605 sshd[986]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:14:51 prd-ubuntu2204-docker-8c-8g-1605 sshd[986]: Received disconnect from 10.30.104.4 port 37538:11: Closed due to user request. [preauth] Sep 15 14:14:51 prd-ubuntu2204-docker-8c-8g-1605 sshd[986]: Disconnected from invalid user jenkins 10.30.104.4 port 37538 [preauth] Sep 15 14:14:53 prd-ubuntu2204-docker-8c-8g-1605 sshd[990]: Invalid user jenkins from 10.30.104.4 port 37546 Sep 15 14:14:53 prd-ubuntu2204-docker-8c-8g-1605 sshd[990]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:14:53 prd-ubuntu2204-docker-8c-8g-1605 sshd[990]: Received disconnect from 10.30.104.4 port 37546:11: Closed due to user request. [preauth] Sep 15 14:14:53 prd-ubuntu2204-docker-8c-8g-1605 sshd[990]: Disconnected from invalid user jenkins 10.30.104.4 port 37546 [preauth] Sep 15 14:14:56 prd-ubuntu2204-docker-8c-8g-1605 sshd[1203]: Invalid user jenkins from 10.30.104.4 port 37556 Sep 15 14:14:56 prd-ubuntu2204-docker-8c-8g-1605 sshd[1203]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:14:56 prd-ubuntu2204-docker-8c-8g-1605 sshd[1203]: Received disconnect from 10.30.104.4 port 37556:11: Closed due to user request. [preauth] Sep 15 14:14:56 prd-ubuntu2204-docker-8c-8g-1605 sshd[1203]: Disconnected from invalid user jenkins 10.30.104.4 port 37556 [preauth] Sep 15 14:14:58 prd-ubuntu2204-docker-8c-8g-1605 sshd[1205]: Invalid user jenkins from 10.30.104.4 port 37560 Sep 15 14:14:58 prd-ubuntu2204-docker-8c-8g-1605 sshd[1205]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:14:58 prd-ubuntu2204-docker-8c-8g-1605 sshd[1205]: Received disconnect from 10.30.104.4 port 37560:11: Closed due to user request. [preauth] Sep 15 14:14:58 prd-ubuntu2204-docker-8c-8g-1605 sshd[1205]: Disconnected from invalid user jenkins 10.30.104.4 port 37560 [preauth] Sep 15 14:15:00 prd-ubuntu2204-docker-8c-8g-1605 sshd[1207]: Invalid user jenkins from 10.30.104.4 port 37562 Sep 15 14:15:01 prd-ubuntu2204-docker-8c-8g-1605 sshd[1207]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:01 prd-ubuntu2204-docker-8c-8g-1605 sshd[1207]: Received disconnect from 10.30.104.4 port 37562:11: Closed due to user request. [preauth] Sep 15 14:15:01 prd-ubuntu2204-docker-8c-8g-1605 sshd[1207]: Disconnected from invalid user jenkins 10.30.104.4 port 37562 [preauth] Sep 15 14:15:02 prd-ubuntu2204-docker-8c-8g-1605 CRON[1209]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:15:02 prd-ubuntu2204-docker-8c-8g-1605 CRON[1209]: pam_unix(cron:session): session closed for user root Sep 15 14:15:03 prd-ubuntu2204-docker-8c-8g-1605 sshd[1212]: Invalid user jenkins from 10.30.104.4 port 37582 Sep 15 14:15:03 prd-ubuntu2204-docker-8c-8g-1605 sshd[1212]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:03 prd-ubuntu2204-docker-8c-8g-1605 sshd[1212]: Received disconnect from 10.30.104.4 port 37582:11: Closed due to user request. [preauth] Sep 15 14:15:03 prd-ubuntu2204-docker-8c-8g-1605 sshd[1212]: Disconnected from invalid user jenkins 10.30.104.4 port 37582 [preauth] Sep 15 14:15:05 prd-ubuntu2204-docker-8c-8g-1605 sshd[1214]: Invalid user jenkins from 10.30.104.4 port 37584 Sep 15 14:15:05 prd-ubuntu2204-docker-8c-8g-1605 sshd[1214]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:05 prd-ubuntu2204-docker-8c-8g-1605 sshd[1214]: Received disconnect from 10.30.104.4 port 37584:11: Closed due to user request. [preauth] Sep 15 14:15:05 prd-ubuntu2204-docker-8c-8g-1605 sshd[1214]: Disconnected from invalid user jenkins 10.30.104.4 port 37584 [preauth] Sep 15 14:15:07 prd-ubuntu2204-docker-8c-8g-1605 sshd[1218]: Invalid user jenkins from 10.30.104.4 port 37586 Sep 15 14:15:07 prd-ubuntu2204-docker-8c-8g-1605 sshd[1218]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:07 prd-ubuntu2204-docker-8c-8g-1605 sshd[1218]: Received disconnect from 10.30.104.4 port 37586:11: Closed due to user request. [preauth] Sep 15 14:15:07 prd-ubuntu2204-docker-8c-8g-1605 sshd[1218]: Disconnected from invalid user jenkins 10.30.104.4 port 37586 [preauth] Sep 15 14:15:09 prd-ubuntu2204-docker-8c-8g-1605 sshd[1224]: Invalid user jenkins from 10.30.104.4 port 37592 Sep 15 14:15:09 prd-ubuntu2204-docker-8c-8g-1605 sshd[1224]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:09 prd-ubuntu2204-docker-8c-8g-1605 sshd[1224]: Received disconnect from 10.30.104.4 port 37592:11: Closed due to user request. [preauth] Sep 15 14:15:09 prd-ubuntu2204-docker-8c-8g-1605 sshd[1224]: Disconnected from invalid user jenkins 10.30.104.4 port 37592 [preauth] Sep 15 14:15:11 prd-ubuntu2204-docker-8c-8g-1605 sshd[1226]: Invalid user jenkins from 10.30.104.4 port 37596 Sep 15 14:15:11 prd-ubuntu2204-docker-8c-8g-1605 sshd[1226]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:11 prd-ubuntu2204-docker-8c-8g-1605 sshd[1226]: Received disconnect from 10.30.104.4 port 37596:11: Closed due to user request. [preauth] Sep 15 14:15:11 prd-ubuntu2204-docker-8c-8g-1605 sshd[1226]: Disconnected from invalid user jenkins 10.30.104.4 port 37596 [preauth] Sep 15 14:15:14 prd-ubuntu2204-docker-8c-8g-1605 sshd[1228]: Invalid user jenkins from 10.30.104.4 port 37604 Sep 15 14:15:14 prd-ubuntu2204-docker-8c-8g-1605 sshd[1228]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:14 prd-ubuntu2204-docker-8c-8g-1605 sshd[1228]: Received disconnect from 10.30.104.4 port 37604:11: Closed due to user request. [preauth] Sep 15 14:15:14 prd-ubuntu2204-docker-8c-8g-1605 sshd[1228]: Disconnected from invalid user jenkins 10.30.104.4 port 37604 [preauth] Sep 15 14:15:16 prd-ubuntu2204-docker-8c-8g-1605 sshd[1230]: Invalid user jenkins from 10.30.104.4 port 37614 Sep 15 14:15:16 prd-ubuntu2204-docker-8c-8g-1605 sshd[1230]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:16 prd-ubuntu2204-docker-8c-8g-1605 sshd[1230]: Received disconnect from 10.30.104.4 port 37614:11: Closed due to user request. [preauth] Sep 15 14:15:16 prd-ubuntu2204-docker-8c-8g-1605 sshd[1230]: Disconnected from invalid user jenkins 10.30.104.4 port 37614 [preauth] Sep 15 14:15:18 prd-ubuntu2204-docker-8c-8g-1605 sshd[1253]: Invalid user jenkins from 10.30.104.4 port 37622 Sep 15 14:15:18 prd-ubuntu2204-docker-8c-8g-1605 sshd[1253]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:18 prd-ubuntu2204-docker-8c-8g-1605 sshd[1253]: Received disconnect from 10.30.104.4 port 37622:11: Closed due to user request. [preauth] Sep 15 14:15:18 prd-ubuntu2204-docker-8c-8g-1605 sshd[1253]: Disconnected from invalid user jenkins 10.30.104.4 port 37622 [preauth] Sep 15 14:15:20 prd-ubuntu2204-docker-8c-8g-1605 sshd[1319]: Invalid user jenkins from 10.30.104.4 port 37630 Sep 15 14:15:20 prd-ubuntu2204-docker-8c-8g-1605 sshd[1319]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:20 prd-ubuntu2204-docker-8c-8g-1605 sshd[1319]: Received disconnect from 10.30.104.4 port 37630:11: Closed due to user request. [preauth] Sep 15 14:15:20 prd-ubuntu2204-docker-8c-8g-1605 sshd[1319]: Disconnected from invalid user jenkins 10.30.104.4 port 37630 [preauth] Sep 15 14:15:22 prd-ubuntu2204-docker-8c-8g-1605 sshd[1350]: Invalid user jenkins from 10.30.104.4 port 37644 Sep 15 14:15:22 prd-ubuntu2204-docker-8c-8g-1605 sshd[1350]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:22 prd-ubuntu2204-docker-8c-8g-1605 sshd[1350]: Received disconnect from 10.30.104.4 port 37644:11: Closed due to user request. [preauth] Sep 15 14:15:22 prd-ubuntu2204-docker-8c-8g-1605 sshd[1350]: Disconnected from invalid user jenkins 10.30.104.4 port 37644 [preauth] Sep 15 14:15:24 prd-ubuntu2204-docker-8c-8g-1605 useradd[1357]: new group: name=jenkins, GID=1001 Sep 15 14:15:24 prd-ubuntu2204-docker-8c-8g-1605 useradd[1357]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Sep 15 14:15:24 prd-ubuntu2204-docker-8c-8g-1605 usermod[1366]: add 'jenkins' to group 'docker' Sep 15 14:15:24 prd-ubuntu2204-docker-8c-8g-1605 usermod[1366]: add 'jenkins' to shadow group 'docker' Sep 15 14:15:24 prd-ubuntu2204-docker-8c-8g-1605 sshd[1379]: userauth_pubkey: key type ssh-rsa not in PubkeyAcceptedAlgorithms [preauth] Sep 15 14:15:24 prd-ubuntu2204-docker-8c-8g-1605 sshd[1379]: Received disconnect from 10.30.104.4 port 37648:11: Closed due to user request. [preauth] Sep 15 14:15:24 prd-ubuntu2204-docker-8c-8g-1605 sshd[1379]: Disconnected from authenticating user jenkins 10.30.104.4 port 37648 [preauth] Sep 15 14:15:27 prd-ubuntu2204-docker-8c-8g-1605 sshd[1407]: Accepted publickey for jenkins from 10.30.104.4 port 37654 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Sep 15 14:15:27 prd-ubuntu2204-docker-8c-8g-1605 sshd[1407]: pam_unix(sshd:session): session opened for user jenkins(uid=1001) by (uid=0) Sep 15 14:15:27 prd-ubuntu2204-docker-8c-8g-1605 systemd-logind[774]: New session 2 of user jenkins. Sep 15 14:15:27 prd-ubuntu2204-docker-8c-8g-1605 systemd: pam_unix(systemd-user:session): session opened for user jenkins(uid=1001) by (uid=0) Sep 15 14:16:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[1908]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:16:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[1908]: pam_unix(cron:session): session closed for user root Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: jenkins : PWD=/w/workspace/policy-clamp-sonar-verify ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/java java /usr/lib/jvm/java-21-openjdk-amd64/bin/java 1 Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session closed for user root Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: jenkins : PWD=/w/workspace/policy-clamp-sonar-verify ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/bin/javac javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac 1 Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session closed for user root Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: jenkins : PWD=/w/workspace/policy-clamp-sonar-verify ; USER=root ; COMMAND=/usr/bin/update-alternatives --install /usr/lib/jvm/java-openjdk java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 1 Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session closed for user root Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: jenkins : PWD=/w/workspace/policy-clamp-sonar-verify ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java /usr/lib/jvm/java-21-openjdk-amd64/bin/java Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session closed for user root Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: jenkins : PWD=/w/workspace/policy-clamp-sonar-verify ; USER=root ; COMMAND=/usr/bin/update-alternatives --set javac /usr/lib/jvm/java-21-openjdk-amd64/bin/javac Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session closed for user root Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: jenkins : PWD=/w/workspace/policy-clamp-sonar-verify ; USER=root ; COMMAND=/usr/bin/update-alternatives --set java_sdk_openjdk /usr/lib/jvm/java-21-openjdk-amd64 Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=1001) Sep 15 14:16:36 prd-ubuntu2204-docker-8c-8g-1605 sudo: pam_unix(sudo:session): session closed for user root Sep 15 14:17:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[2581]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:17:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[2582]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:17:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[2581]: pam_unix(cron:session): session closed for user root Sep 15 14:17:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[2582]: pam_unix(cron:session): session closed for user root Sep 15 14:18:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[3568]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:18:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[3568]: pam_unix(cron:session): session closed for user root Sep 15 14:19:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[5004]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:19:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[5004]: pam_unix(cron:session): session closed for user root Sep 15 14:20:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[8360]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:20:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[8360]: pam_unix(cron:session): session closed for user root Sep 15 14:21:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[9138]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:21:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[9138]: pam_unix(cron:session): session closed for user root Sep 15 14:22:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[10035]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:22:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[10035]: pam_unix(cron:session): session closed for user root Sep 15 14:23:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[10803]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:23:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[10803]: pam_unix(cron:session): session closed for user root Sep 15 14:24:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[10913]: pam_unix(cron:session): session opened for user root(uid=0) by (uid=0) Sep 15 14:24:01 prd-ubuntu2204-docker-8c-8g-1605 CRON[10913]: pam_unix(cron:session): session closed for user root Sep 15 14:24:53 prd-ubuntu2204-docker-8c-8g-1605 sudo: jenkins : PWD=/w/workspace/policy-clamp-sonar-verify ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp