Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 60086 - vixie-cron installs /usr/bin/crontab with mode 4750; should be 4755
Summary: vixie-cron installs /usr/bin/crontab with mode 4750; should be 4755
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-08-11 13:15 UTC by Steven Patrick
Modified: 2004-08-11 21:23 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Steven Patrick 2004-08-11 13:15:38 UTC
The crontab executable gets installed such that 
normal users cannot run it.

Reproducible: Always
Steps to Reproduce:
1. emerge vixie-cron
2. as a normal user, execute "crontab"
3.

Actual Results:  
heliotrope:~ 501 ? crontab
-bash: /usr/bin/crontab: Permission denied


Expected Results:  
heliotrope:~ 502 ? crontab
crontab: usage error: file name must be specified for replace
usage:	crontab [-u user] file
	crontab [-u user] { -e | -l | -r }
		(default operation is replace, per 1003.2)
	-e	(edit user's crontab)
	-l	(list user's crontab)
	-r	(delete user's crontab)


Just change this line of the ebuild:
    insopts -o root -g cron -m 4755 ; doins crontab
Comment 1 Mr. Bones. (RETIRED) gentoo-dev 2004-08-11 18:47:19 UTC
Hmmmmm, I'm pretty sure the intent is that only people in the "cron" group are allowed to have crontabs and thus are the only ones allowed to run crontab.  Maybe I'm wrong and someone in base-system can correct me.
Comment 2 Aron Griffis (RETIRED) gentoo-dev 2004-08-11 18:53:46 UTC
Mr_Bones_ is correct
Comment 3 Steven Patrick 2004-08-11 21:23:12 UTC
  Something I read earlier today said that vixie-cron
was intended to be like the System V cron which does
allow anyone to use it (i.e. not just cron group members).
However, my recollection or the web page might be 
incorrect.

  To support my contention about the permission, I'd
like to point you to the fact that vixie-cron's
"/etc/cron.deny" and "/etc/cron.allow" feature.
(From the man page.)  It doesn't make sense to me that
this feature would be there just to further restrict cron 
group members.