[SOLVED] What accounts to add to cron.deny?

JockVSJock · 05-18-2016, 03:18 PM

How do I know what user/service accounts to add to cron.deny?

TenTenths · 05-19-2016, 05:58 AM

Add the user/service accounts that you don't want to be able to run cron jobs. How you work that out depends on what your system is used for.

Also, you'll find that if cron.allow exists then only users in cron.allow will be allowed to run cron jobs. So you may want to only ALLOW specific accounts rather than try to identify and disable many accounts.

JockVSJock · 05-19-2016, 08:28 AM

Ya, I'm not totally sure on service accounts like bin or sys to add to cron.deny.

So...I think I will only use cron.allow.

You can't use both cron.allow and cron.deny, correct? I believe using both will cancel each other out.

TenTenths · 05-19-2016, 08:46 AM

If cron.allow exists then cron.deny is ignored and only users in cron.allow will be allowed to run cron jobs.

You can also see /var/log/cron to see what jobs have been run and by who