topic Re: root cron in Operating System - HP-UX

root cron

Nobody's Hero — Tue, 04 Dec 2007 13:26:37 GMT

I have a need to give an application user access to roots crontab. Is this possible?
Yes I know its a bad idea, but we have a need.

Re: root cron

Jeeshan — Tue, 04 Dec 2007 13:30:57 GMT

Hi

It's a very much worst idea.

If it's badly need, please ask user what kind of access he/she needs. Do change according to their need.

Re: root cron

Robert-Jan Goossens — Tue, 04 Dec 2007 13:31:21 GMT

Hi,

Yes this a bad idear! :-)

If there is no other solution I would install and configure sudo ( # sudo crontab -e root ).

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.8p12/

Regards,
Robert-Jan

Re: root cron

F Verschuren — Tue, 04 Dec 2007 13:31:37 GMT

if you use sudo you have two options:
1
give user the right to to sudo his comand:

he can create his cron like:
5 0 * * * /appl/tsu/bin/sudo /bin/script.sh 1>/dev/null 2>&1

ore give the user the rights to do sudo crontab -e root
be aware you are giving away full root acces whit this!

Re: root cron

Geoff Wild — Tue, 04 Dec 2007 14:30:17 GMT

Why would an application user need continuous access to root's cron?

Instead, if they need something run as root - then ask them to give you the command they want - then you add it to root's cron.

If it is a script - then make sure it is no longer writable by them - ie chown it to root:sys.

Rgds...Geoff