topic Re: cron permissions in Operating System - HP-UX

cron permissions

TMcB — Tue, 31 Jul 2007 05:32:50 GMT

Hi everone

is it possible to set the permissions of the cron files so that only root can write to them.

We have been asked to set this up - so that the users can read their cron, and it will still run under their own accounts, but any changes to it will have to be done by the system administrators root account.

Thanks for any advice

Re: cron permissions

BrianDoyle — Tue, 31 Jul 2007 05:44:43 GMT

Hi,
You can add users in cron.allow and cron.deny to assign access.

Have a look at this thread:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=1069663

Re: cron permissions

TMcB — Tue, 31 Jul 2007 05:56:07 GMT

Hi
The users are in cron.allow - so their cron file exists.
But can I change the permissions so they cannot edit their own cron files ??

Cheers

Re: cron permissions

Ivan Krastev — Tue, 31 Jul 2007 06:00:21 GMT

You can remove WRITE permissions from files, but keep READ.

Note if the user is still owner of the file(s) he can change the permissions.

regards,
ivan

Re: cron permissions

BrianDoyle — Tue, 31 Jul 2007 06:04:44 GMT

You must be the owner of the crontab file, then chmod the access to limit control to yourself

Re: cron permissions

Yogeeraj_1 — Tue, 31 Jul 2007 06:48:20 GMT

hi,

this is quite difficult to implement, one solution would be to create surrogate users for each current user and use sudo to limit the access.

good luck!

kind regards
yogeeraj

Re: cron permissions

Oviwan — Tue, 31 Jul 2007 06:57:34 GMT

Hey

You can entry every job in root's crontab and execute the job with su - username -c "command". the users can't read the roots crontab but must they be able to read it?...

Regards

Re: cron permissions

TMcB — Tue, 31 Jul 2007 07:53:36 GMT

thanks everyone for replying - i'll do some testing