Nov 27 10:02:21 prd-centos7-docker-2c-1g-15790 polkitd[709]: Loading rules from directory /etc/polkit-1/rules.d Nov 27 10:02:21 prd-centos7-docker-2c-1g-15790 polkitd[709]: Loading rules from directory /usr/share/polkit-1/rules.d Nov 27 10:02:21 prd-centos7-docker-2c-1g-15790 polkitd[709]: Finished loading, compiling and executing 2 rules Nov 27 10:02:21 prd-centos7-docker-2c-1g-15790 polkitd[709]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Nov 27 10:02:38 prd-centos7-docker-2c-1g-15790 sshd[1427]: Server listening on 0.0.0.0 port 22. Nov 27 10:02:38 prd-centos7-docker-2c-1g-15790 sshd[1427]: Server listening on :: port 22. Nov 27 10:02:38 prd-centos7-docker-2c-1g-15790 sshd[1689]: Did not receive identification string from 10.30.104.4 port 48982 Nov 27 10:02:42 prd-centos7-docker-2c-1g-15790 sshd[3261]: Invalid user jenkins from 10.30.104.4 port 49002 Nov 27 10:02:42 prd-centos7-docker-2c-1g-15790 sshd[3261]: input_userauth_request: invalid user jenkins [preauth] Nov 27 10:02:42 prd-centos7-docker-2c-1g-15790 sshd[3261]: Received disconnect from 10.30.104.4 port 49002:11: Closed due to user request. [preauth] Nov 27 10:02:42 prd-centos7-docker-2c-1g-15790 sshd[3261]: Disconnected from 10.30.104.4 port 49002 [preauth] Nov 27 10:02:44 prd-centos7-docker-2c-1g-15790 sshd[4804]: Invalid user jenkins from 10.30.104.4 port 49014 Nov 27 10:02:44 prd-centos7-docker-2c-1g-15790 sshd[4804]: input_userauth_request: invalid user jenkins [preauth] Nov 27 10:02:44 prd-centos7-docker-2c-1g-15790 sshd[4804]: Received disconnect from 10.30.104.4 port 49014:11: Closed due to user request. [preauth] Nov 27 10:02:44 prd-centos7-docker-2c-1g-15790 sshd[4804]: Disconnected from 10.30.104.4 port 49014 [preauth] Nov 27 10:02:46 prd-centos7-docker-2c-1g-15790 sshd[5174]: Invalid user jenkins from 10.30.104.4 port 49024 Nov 27 10:02:46 prd-centos7-docker-2c-1g-15790 sshd[5174]: input_userauth_request: invalid user jenkins [preauth] Nov 27 10:02:46 prd-centos7-docker-2c-1g-15790 sshd[5174]: Received disconnect from 10.30.104.4 port 49024:11: Closed due to user request. [preauth] Nov 27 10:02:46 prd-centos7-docker-2c-1g-15790 sshd[5174]: Disconnected from 10.30.104.4 port 49024 [preauth] Nov 27 10:02:49 prd-centos7-docker-2c-1g-15790 sshd[5192]: Invalid user jenkins from 10.30.104.4 port 49034 Nov 27 10:02:49 prd-centos7-docker-2c-1g-15790 sshd[5192]: input_userauth_request: invalid user jenkins [preauth] Nov 27 10:02:49 prd-centos7-docker-2c-1g-15790 sshd[5192]: Received disconnect from 10.30.104.4 port 49034:11: Closed due to user request. [preauth] Nov 27 10:02:49 prd-centos7-docker-2c-1g-15790 sshd[5192]: Disconnected from 10.30.104.4 port 49034 [preauth] Nov 27 10:02:51 prd-centos7-docker-2c-1g-15790 sshd[5214]: Invalid user jenkins from 10.30.104.4 port 49052 Nov 27 10:02:51 prd-centos7-docker-2c-1g-15790 sshd[5214]: input_userauth_request: invalid user jenkins [preauth] Nov 27 10:02:51 prd-centos7-docker-2c-1g-15790 sshd[5214]: Received disconnect from 10.30.104.4 port 49052:11: Closed due to user request. [preauth] Nov 27 10:02:51 prd-centos7-docker-2c-1g-15790 sshd[5214]: Disconnected from 10.30.104.4 port 49052 [preauth] Nov 27 10:02:53 prd-centos7-docker-2c-1g-15790 sshd[5232]: Invalid user jenkins from 10.30.104.4 port 49060 Nov 27 10:02:53 prd-centos7-docker-2c-1g-15790 sshd[5232]: input_userauth_request: invalid user jenkins [preauth] Nov 27 10:02:53 prd-centos7-docker-2c-1g-15790 sshd[5232]: Received disconnect from 10.30.104.4 port 49060:11: Closed due to user request. [preauth] Nov 27 10:02:53 prd-centos7-docker-2c-1g-15790 sshd[5232]: Disconnected from 10.30.104.4 port 49060 [preauth] Nov 27 10:02:56 prd-centos7-docker-2c-1g-15790 sshd[5416]: Invalid user jenkins from 10.30.104.4 port 49066 Nov 27 10:02:56 prd-centos7-docker-2c-1g-15790 sshd[5416]: input_userauth_request: invalid user jenkins [preauth] Nov 27 10:02:57 prd-centos7-docker-2c-1g-15790 sshd[5416]: Received disconnect from 10.30.104.4 port 49066:11: Closed due to user request. [preauth] Nov 27 10:02:57 prd-centos7-docker-2c-1g-15790 sshd[5416]: Disconnected from 10.30.104.4 port 49066 [preauth] Nov 27 10:02:57 prd-centos7-docker-2c-1g-15790 useradd[5817]: new group: name=jenkins, GID=1001 Nov 27 10:02:57 prd-centos7-docker-2c-1g-15790 useradd[5817]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Nov 27 10:02:57 prd-centos7-docker-2c-1g-15790 usermod[5878]: add 'jenkins' to group 'docker' Nov 27 10:02:57 prd-centos7-docker-2c-1g-15790 usermod[5878]: add 'jenkins' to shadow group 'docker' Nov 27 10:02:57 prd-centos7-docker-2c-1g-15790 usermod[5904]: add 'jenkins' to group 'mock' Nov 27 10:02:57 prd-centos7-docker-2c-1g-15790 usermod[5904]: add 'jenkins' to shadow group 'mock' Nov 27 10:02:59 prd-centos7-docker-2c-1g-15790 sshd[7118]: Accepted publickey for jenkins from 10.30.104.4 port 49072 ssh2: RSA SHA256:V0799BjlU//1ruj1g81rY7MeNIJkwAJ0Kr3lNX3XaN4 Nov 27 10:02:59 prd-centos7-docker-2c-1g-15790 sshd[7118]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 27 10:02:59 prd-centos7-docker-2c-1g-15790 sshd[7118]: pam_lastlog(sshd:session): unable to open /var/log/lastlog: No such file or directory Nov 27 10:04:39 prd-centos7-docker-2c-1g-15790 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-xacml-pdp-release-merge-master ; USER=root ; COMMAND=/bin/mv cosign-linux-amd64 /usr/local/bin/cosign Nov 27 10:04:39 prd-centos7-docker-2c-1g-15790 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 27 10:04:39 prd-centos7-docker-2c-1g-15790 sudo: pam_unix(sudo:session): session closed for user root Nov 27 10:04:39 prd-centos7-docker-2c-1g-15790 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-xacml-pdp-release-merge-master ; USER=root ; COMMAND=/bin/chmod +x /usr/local/bin/cosign Nov 27 10:04:39 prd-centos7-docker-2c-1g-15790 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Nov 27 10:04:39 prd-centos7-docker-2c-1g-15790 sudo: pam_unix(sudo:session): session closed for user root Nov 27 10:05:09 prd-centos7-docker-2c-1g-15790 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/policy-xacml-pdp-release-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/secure /tmp Nov 27 10:05:09 prd-centos7-docker-2c-1g-15790 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)