dcron ships with modes that don't allow anyone but 'root' or people in group 'cron' to *run* crontab ('other' mode is blank). crontab is meant to be run by all normal users, as the manpage states. install -o root -g cron -m 4750 crontab ${D}/usr/bin The mode should be 4755.
hhm, it's on purpose that only root and cron group members can access /usr/bin/crontab see the section about cron in the install instructions as well as http://lists.gentoo.org/pipermail/gentoo-announce/2002-April/000151.html IIRC drobbins started this with the dcron ebuild, and when i rewrote the cron stuff i made this the default behavior for all crons... if this behavior should be revised, then we better take this to gentoo-core or ven -dev or we may want to change the crontab man page... regards Thilo
I'm not sure which way I feel. I guess I feel it should be up to the admin to change the mode, as nearly all other distros ship with crontab usable by the general populace.
bangert@kniffel bangert $ id bangert uid=500(bangert) gid=100(users) groups=100(users),10(wheel),16(cron),18(audio),20(dialout),80(cdrw) thats because i want to be able to su to root, access cron, have access to audio, be able to dialout and use my cdwriter... if you think this needs changed, then take it to gentoo-core - i was merely implementing what i thought was gentoo policy. i am sure one can argue that the cron group stuff is only of little use... and i will change the cron's to whatever is agreed upon... personally i like the idea, that Gentoo does stuff differently then other distro - but in this case the effect is minimal.
I can accept that! Good enough for me. If it annoys me again, I'll just take it to -devel and let the populace decide, but I'm good for now!
