Bastille clobbered my root cron file

[dev44]

When it runs through securing the system are backups of files that it replaces stored anywhere?

[Steven E. Protter]

Shalom,

I don't recall Bastille taking a backup.

If it does, the log Bastille takes will tell you where.

You can also pull the single file out of your most recent Ignite backup.

SEP

[James R. Ferguson]

Hi:

See: /var/opt/sec_mgmt/bastille/revert

...and its contents.

Regards!

...JRF...

[dev44]

Nothing in that directory. We will restore from the last backup but I assumed that Bastille would make a backup of the files it clobbers...just in case.

Thanks,

[James R. Ferguson]

Hi (again):

> I assumed that Bastille would make a backup of the files it clobbers...just in case.

It does. Do:

# ls -Rl /var/opt/sec_mgmt/bastille/revert/backup

And, I don't see any reason why Bastille would have clobbered a crontab.

Regards!

...JRF...

[dev44]

Not there, and the log file is empty.

I answered yes to the question ""Would you like to restrict the use of cron to administrative accounts" figuring root would be an administrative account and therefore would be left as is. It blew it away and re-created it with a couple of lines that bastille added.