/var/spool/cron/tmp directory permission

[Dewa Negara_4]

Hi All,

Because of some security reasons, I plan to change the permission of directory /var/spool/cron/tmp to 1775 instead of 1777.

# ll -d /var/spool/cron/tmp
drwxrwxrwt 2 root root 1024 Oct 4 22:47 /var/spool/cron/tmp

Can anyone help to to clarify what is the impact of the change? Can we do that? If not what is the reason? Please help. High score will be given.

Thanks and Best Regards,
Negara

[Michael Tully · Accepted solution]

I see nothing wrong with the change you intend making. I have checked a few of my servers, and they have what you propose.

# ll -ld /var/spool/cron/tmp
drwxrwxrwt 2 root root 69632 Oct 5 13:38 /var/spool/cron/tmp

[Dewa Negara_4]

Hi Michael,

Thanks alot.

Is there any impact if we change it to 1775?

Thanks and Best Regards,
Negara

[Muthukumar_5]

We can separate file permission as,



d rwx rwx rwt

/var/spool/cron/tmp file can be executed by every one. But can be deleted / renamed only by super user or owner of the file. If you change the permission 1777 to 1775 then other users can not write in that specific file there. IF you don't want to write that directory by others then change that permission.

( See on chmod+1 man page for sticky bit informations )

But keep default permission there. It will not be going to make any issues there.

HTH.