Path: utzoo!utgpu!water!watmath!clyde!att-cb!osu-cis!tut.cis.ohio-state.edu!mailrus!ames!oliveb!sun!gorodish!guy From: guy@gorodish.Sun.COM (Guy Harris) Newsgroups: comp.bugs.sys5 Subject: Re: A security hole Message-ID: <47168@sun.uucp> Date: 26 Mar 88 21:23:10 GMT References: <181@wsccs.UUCP> <722@rivm05.UUCP> <478@minya.UUCP> <7521@ncoast.UUCP> <168@ists> Sender: news@sun.uucp Lines: 9 > Use su in your crontab: > > 0 * * * * su news -c "rnews -U" > > Then rnews (or whatever command you like) will run as news, not root. Or, if you're running an S5R2 or later "cron", just put this entry in "news"'s "crontab" file rather than "root"'s. (Make sure you allow "news" to run "cron" by setting up "cron.allow" and "cron.deny" properly.)