on several machines: rajiv@xxxxx pam.d $ ls -l /etc/pam.d/cron -rwsr-x--- 1 root cron 123 Nov 8 23:56 /etc/pam.d/cron this file should not be suid. it should not even be +x. running vixie-cron-4.1-r3.
Ah I see, insopts isn't called to reset the perms after installing crontab with suid bit. Fixed in r4, which I'll probably mark stable in a couple days for such a minor fix. Thanks Rajiv.