Date: Sun, 17 Jun 2007 18:42:40 +0100 (BST) From: Robert Watson <rwatson@FreeBSD.org> To: Yar Tikhiy <yar@FreeBSD.org> Cc: cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/etc/pam.d Makefile cron src/usr.sbin/cron/cron Makefile cron.8 cron.h database.c do_command.c src/usr.sbin/cron/lib Makefile entry.c Message-ID: <20070617184206.C2416@fledge.watson.org> In-Reply-To: <200706171725.l5HHPr2c092609@repoman.freebsd.org> References: <200706171725.l5HHPr2c092609@repoman.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, 17 Jun 2007, Yar Tikhiy wrote: > Add PAM support to cron(8). Now cron(8) will skip commands scheduled > by unavailable accounts, e.g., those locked, expired, not allowed in at > the moment by nologin(5), or whatever, depending on cron's pam.conf(5). > This applies to personal crontabs only, /etc/crontab is unaffected. > > In other words, now the account management policy will apply to > commands scheduled by users via crontab(1) so that a user can no > longer use cron(8) to set up a delayed backdoor and run commands > during periods when the admin doesn't want him to. Nice work. Have you looked at doing something similar for .forward files in Sendmail? Robert N M Watson Computer Laboratory University of Cambridge
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070617184206.C2416>