On 26/07/13 14:58 -0400, Colin Walters wrote:
> On Fri, 2013-07-26 at 13:57 -0400, Stephen Gallagher wrote:
> One kind of nontrivial approach, but at least worth thinking about, is
> changing cron to keep a zygote process around (with a session) for users
> with active cron jobs.
>
> Futhermore if this zygote is terminated, then no cron jobs for the user
> will be run.
>
> A nice advantage of this is is say you have an abusive user and do
> "killall -u baduser" - they can't "escape" this by scheduling cron jobs.
Good (side)note; just recently I've noticed there is no single
step solution to prevent selected user from cron without removing
this user or disabling cron altogether or perhaps applying some SELinux
magic (plus there are possibly more related issues like bypassing
cron.{allow,deny} through another user, but haven't checked it).
--
Jan
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
