Jun 25 14:15:20 prd-centos7-docker-2c-8g-3749 polkitd[738]: Loading rules from directory /etc/polkit-1/rules.d Jun 25 14:15:20 prd-centos7-docker-2c-8g-3749 polkitd[738]: Loading rules from directory /usr/share/polkit-1/rules.d Jun 25 14:15:20 prd-centos7-docker-2c-8g-3749 polkitd[738]: Finished loading, compiling and executing 2 rules Jun 25 14:15:20 prd-centos7-docker-2c-8g-3749 polkitd[738]: Acquired the name org.freedesktop.PolicyKit1 on the system bus Jun 25 14:15:29 prd-centos7-docker-2c-8g-3749 sshd[1393]: Server listening on 0.0.0.0 port 22. Jun 25 14:15:29 prd-centos7-docker-2c-8g-3749 sshd[1393]: Server listening on :: port 22. Jun 25 14:15:32 prd-centos7-docker-2c-8g-3749 sshd[2356]: Did not receive identification string from 10.32.4.5 port 45504 Jun 25 14:15:36 prd-centos7-docker-2c-8g-3749 sshd[3063]: Invalid user jenkins from 10.32.4.5 port 45538 Jun 25 14:15:36 prd-centos7-docker-2c-8g-3749 sshd[3063]: input_userauth_request: invalid user jenkins [preauth] Jun 25 14:15:36 prd-centos7-docker-2c-8g-3749 sshd[3063]: Received disconnect from 10.32.4.5 port 45538:11: Closed due to user request. [preauth] Jun 25 14:15:36 prd-centos7-docker-2c-8g-3749 sshd[3063]: Disconnected from 10.32.4.5 port 45538 [preauth] Jun 25 14:15:38 prd-centos7-docker-2c-8g-3749 sshd[3739]: Invalid user jenkins from 10.32.4.5 port 45568 Jun 25 14:15:38 prd-centos7-docker-2c-8g-3749 sshd[3739]: input_userauth_request: invalid user jenkins [preauth] Jun 25 14:15:38 prd-centos7-docker-2c-8g-3749 sshd[3739]: Received disconnect from 10.32.4.5 port 45568:11: Closed due to user request. [preauth] Jun 25 14:15:38 prd-centos7-docker-2c-8g-3749 sshd[3739]: Disconnected from 10.32.4.5 port 45568 [preauth] Jun 25 14:15:40 prd-centos7-docker-2c-8g-3749 sshd[4695]: Invalid user jenkins from 10.32.4.5 port 45588 Jun 25 14:15:40 prd-centos7-docker-2c-8g-3749 sshd[4695]: input_userauth_request: invalid user jenkins [preauth] Jun 25 14:15:40 prd-centos7-docker-2c-8g-3749 sshd[4695]: Received disconnect from 10.32.4.5 port 45588:11: Closed due to user request. [preauth] Jun 25 14:15:40 prd-centos7-docker-2c-8g-3749 sshd[4695]: Disconnected from 10.32.4.5 port 45588 [preauth] Jun 25 14:15:42 prd-centos7-docker-2c-8g-3749 sshd[5577]: Invalid user jenkins from 10.32.4.5 port 45618 Jun 25 14:15:42 prd-centos7-docker-2c-8g-3749 sshd[5577]: input_userauth_request: invalid user jenkins [preauth] Jun 25 14:15:42 prd-centos7-docker-2c-8g-3749 sshd[5577]: Received disconnect from 10.32.4.5 port 45618:11: Closed due to user request. [preauth] Jun 25 14:15:42 prd-centos7-docker-2c-8g-3749 sshd[5577]: Disconnected from 10.32.4.5 port 45618 [preauth] Jun 25 14:15:44 prd-centos7-docker-2c-8g-3749 sshd[6068]: Invalid user jenkins from 10.32.4.5 port 45640 Jun 25 14:15:44 prd-centos7-docker-2c-8g-3749 sshd[6068]: input_userauth_request: invalid user jenkins [preauth] Jun 25 14:15:44 prd-centos7-docker-2c-8g-3749 sshd[6068]: Received disconnect from 10.32.4.5 port 45640:11: Closed due to user request. [preauth] Jun 25 14:15:44 prd-centos7-docker-2c-8g-3749 sshd[6068]: Disconnected from 10.32.4.5 port 45640 [preauth] Jun 25 14:15:46 prd-centos7-docker-2c-8g-3749 sshd[6513]: Invalid user jenkins from 10.32.4.5 port 45668 Jun 25 14:15:46 prd-centos7-docker-2c-8g-3749 sshd[6513]: input_userauth_request: invalid user jenkins [preauth] Jun 25 14:15:47 prd-centos7-docker-2c-8g-3749 sshd[6513]: Received disconnect from 10.32.4.5 port 45668:11: Closed due to user request. [preauth] Jun 25 14:15:47 prd-centos7-docker-2c-8g-3749 sshd[6513]: Disconnected from 10.32.4.5 port 45668 [preauth] Jun 25 14:15:49 prd-centos7-docker-2c-8g-3749 sshd[6691]: Invalid user jenkins from 10.32.4.5 port 45692 Jun 25 14:15:49 prd-centos7-docker-2c-8g-3749 sshd[6691]: input_userauth_request: invalid user jenkins [preauth] Jun 25 14:15:49 prd-centos7-docker-2c-8g-3749 sshd[6691]: Received disconnect from 10.32.4.5 port 45692:11: Closed due to user request. [preauth] Jun 25 14:15:49 prd-centos7-docker-2c-8g-3749 sshd[6691]: Disconnected from 10.32.4.5 port 45692 [preauth] Jun 25 14:15:50 prd-centos7-docker-2c-8g-3749 useradd[7187]: new group: name=jenkins, GID=1001 Jun 25 14:15:50 prd-centos7-docker-2c-8g-3749 useradd[7187]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash Jun 25 14:15:50 prd-centos7-docker-2c-8g-3749 usermod[7273]: add 'jenkins' to group 'docker' Jun 25 14:15:50 prd-centos7-docker-2c-8g-3749 usermod[7273]: add 'jenkins' to shadow group 'docker' Jun 25 14:15:50 prd-centos7-docker-2c-8g-3749 usermod[7315]: add 'jenkins' to group 'mock' Jun 25 14:15:50 prd-centos7-docker-2c-8g-3749 usermod[7315]: add 'jenkins' to shadow group 'mock' Jun 25 14:15:51 prd-centos7-docker-2c-8g-3749 sshd[7523]: Accepted publickey for jenkins from 10.32.4.5 port 45712 ssh2: RSA SHA256:MwkAMVxCcf5mjE3h3rXSsWkdX5TtX0v/kuPsZexJ1qI Jun 25 14:15:51 prd-centos7-docker-2c-8g-3749 sshd[7523]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Jun 25 14:15:51 prd-centos7-docker-2c-8g-3749 sshd[7523]: pam_lastlog(sshd:session): unable to open /var/log/lastlog: No such file or directory Jun 25 14:20:29 prd-centos7-docker-2c-8g-3749 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-athp-data-extraction-release-merge-master ; USER=root ; COMMAND=/bin/mv cosign-linux-amd64 /usr/local/bin/cosign Jun 25 14:20:29 prd-centos7-docker-2c-8g-3749 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 25 14:20:29 prd-centos7-docker-2c-8g-3749 sudo: pam_unix(sudo:session): session closed for user root Jun 25 14:20:29 prd-centos7-docker-2c-8g-3749 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-athp-data-extraction-release-merge-master ; USER=root ; COMMAND=/bin/chmod +x /usr/local/bin/cosign Jun 25 14:20:29 prd-centos7-docker-2c-8g-3749 sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Jun 25 14:20:29 prd-centos7-docker-2c-8g-3749 sudo: pam_unix(sudo:session): session closed for user root Jun 25 14:23:47 prd-centos7-docker-2c-8g-3749 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/aiml-fw-athp-data-extraction-release-merge-master ; USER=root ; COMMAND=/bin/cp /var/log/secure /tmp Jun 25 14:23:47 prd-centos7-docker-2c-8g-3749 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)