The bcrontab binary should not be SUID root. It works fine with 0750 permissions and the SUID root bit actually breaks crontab -e for any user other than root. Reproducible: Always Steps to Reproduce: 1.run 'crontab -e' as a non-root user in the cron group 2. 3. Actual Results: You will be dumped into $EDITOR running as you but told to open a file that is owned by root and is 0600. Expected Results: If you chmod 0750 /usr/bin/bcrontab it works fine.
Happens here too with bcron-0.11 Caused by blindly using cron eclass' defaults (which includes suid). This patch fixes this issue: diff --git a/sys-process/bcron/bcron-0.11.ebuild b/sys-process/bcron/bcron-0.11.ebuild index 81b2a47..7603fc1 100644 --- a/sys-process/bcron/bcron-0.11.ebuild +++ b/sys-process/bcron/bcron-0.11.ebuild @@ -37,7 +37,7 @@ src_configure() { src_install() { default - docrontab bcrontab + docrontab bcrontab -m 0750 -o root -g cron docrondir -o cron -g cron docrondir /var/spool/cron/tmp -o cron -g cron
