Cronjob

[info]

cronjob

[info]

Hello,

i have some problem, in our server with cronjob users can do some commands like: "cat /etc/password" or "ls / > file.txt".

Question:

How can i disable all cronjob functions for users except lynx ?

[iseletsk]

Better yet -- deploy cagefs, and customer will not be able to gain any sensitive information, even though those commands will work.

[info]

> Igor Seletskiy wrote:
> Better yet -- deploy cagefs, and customer will not be able to gain any sensitive information, even though those commands will work.

Hello,

I installed cagefs, enable it for all users, BUT.....anyway the same problem. I can put cronjob with command like:

cat /etc/passwd > /home/user/file

and i will get all information from passwd file...

[iseletsk]

Have you checked content of the file? The file should have only system users and the user for which cron job is executed.
It shouldn have any other end users.