cron.allow, cron.deny: what's the big deal?

[Norman Diamond]

In article <DANJ1.91Mar23195339 at cbnewse.ATT.COM> Dan_Jacobson at ATT.COM writes:

>So what's the big security increase gained by having to ask root to
>let you use crontab?  The only cron related problem I can see is
>forgetting to remove a user's crontab and at(1) jobs when her/his
>account is deleted, e.g., at the end of the semester.  Am I just dim?

Well, when cron is denied, it is only necessary to remember to kill the
user's executing processes when his/her account is deleted.  And change
the owner of their controlling ttys or other accessed devices, etc.
--
Norman Diamond       diamond at tkov50.enet.dec.com
If this were the company's opinion, I wouldn't be allowed to post it.