Path: utzoo!utgpu!water!watmath!clyde!att-cb!osu-cis!tut.cis.ohio-state.edu!mailrus!umix!uunet!vsi!friedl
From: friedl@vsi.UUCP (Stephen J. Friedl)
Newsgroups: comp.bugs.sys5
Subject: Re: A security hole
Summary: SVR2 cron is nicer
Message-ID: <451@vsi.UUCP>
Date: 27 Mar 88 00:21:02 GMT
References: <181@wsccs.UUCP> <722@rivm05.UUCP> <478@minya.UUCP> <7521@ncoast.UUCP> <168@ists>
Organization: V-Systems, Inc. -- Santa Ana, CA
Lines: 17

In article <168@ists>, mike@ists (Mike Clarkson) writes:
> In article <130@heart-of-gold>, jc@heart-of-gold (John M Chambers x7780 1E342) writes:
> > ...  I wouldn't trust news run by root, and I
> > don't trust cron to correctly run things under other ids;  I've had too many
> > surprises there to believe that I can reliably control cron.
> 
> Use su in your crontab:
> 
> 	0 * * * * su news -c "rnews -U"

A reminder that 3B2/3B5 System V Release 2 and 3 have separate
crontabs for each user and they take care of doing the "su"
business for you.

-- 
Steve Friedl     V-Systems, Inc.     *Hi Mom*
friedl@vsi.com   {uunet,ihnp4}!vsi.com!friedl