Sponsored Content
Full Discussion: Cron Logs File Permissions
Special Forums Cybersecurity Cron Logs File Permissions Post 302949807 by rbatte1 on Thursday 16th of July 2015 07:40:41 AM
Old 07-16-2015
Some might say that it gives output to read that someone could then try to attack, e.g. you can see the jobs that root runs and you can check to see if you have write privilege to them, effectively allowing to do anything - change passwords, copy SSH keys, delete critical data, copy sensitive data,....... Smilie

The people keeping the restriction might be persuaded to extract the records for the account you are trying to run with. A simple grep would probably do the trick. Smilie

They could even schedule it each day with, um, cron I suppose. Smilie




Robin
This User Gave Thanks to rbatte1 For This Post:
 

10 More Discussions You Might Find Interesting

1. AIX

AIX and cron logs filtering ?: /etc/cronlog.conf, /var/adm/cron/log

Hi, I can use 'crontabs –e' and do all the scheduling I like. However I would like to auto send myself just the cronjobs logs that fail. That is to say the PIDs that fail and the related lines with those PID’s only. (Not the full set of logs) Has anyone done this work? Or does an AIX 5.3 tool... (0 Replies)
Discussion started by: Keith Johnson
0 Replies

2. HP-UX

To give the "unzip" permissions & "create" file permissions

Hi, I am a Unix Admin. I have to give the permissions to a user for creating new file in a directory in HP-Ux 11.11 system since he cannot able to create a new file in the directory. Thanks in advance. Mike (3 Replies)
Discussion started by: Mike1234
3 Replies

3. Shell Programming and Scripting

Grep yesterday logs from weblogic logs

Hi, I am trying to write a script which would go search and get the info from the logs based on yesterday timestamp and write yesterday logs in new file. The log file format is as follows: """"""""""""""""""""""""""... (3 Replies)
Discussion started by: harish.parker
3 Replies

4. Shell Programming and Scripting

Retain file permissions when saving .sh file from internet [OS X]

Hello. I have written a bash script that I am sharing with an OS X community I am a member of. The purpose of the script is to execute a series of commands for members without them having to get involved with Terminal, as it can be daunting for those with no experience of it at all. I have renamed... (4 Replies)
Discussion started by: baza210
4 Replies

5. UNIX for Dummies Questions & Answers

File Permissions conflict with Cron

Our site has a page that creates a jpeg graph everytime you load it. I have written a very simple cron job (rm *.jpeg) to delete the graphs once a day. This doesn't happen because the jpegs are owned by nobody:nobody and are write protected. When I do the job manually I am always asked 'are... (3 Replies)
Discussion started by: RexJacobus
3 Replies

6. Shell Programming and Scripting

ksh; Change file permissions, update file, change permissions back?

Hi, I am creating a ksh script to search for a string of text inside files within a directory tree. Some of these file are going to be read/execute only. I know to use chmod to change the permissions of the file, but I want to preserve the original permissions after writing to the file. How can I... (3 Replies)
Discussion started by: right_coaster
3 Replies

7. Shell Programming and Scripting

Setting default permissions without umask or cron jobs

I've got a number of people sending files to me in different directory structures, and users on many different groups who need access to these incoming paths. My problem is that umask assumes a default of 666 for files. No execute bit, meaning that my users can't even see the incoming folders.... (2 Replies)
Discussion started by: Karunamon
2 Replies

8. Shell Programming and Scripting

Changing file permissions of a file created by another user

Hi, I have used expdp for datapump. The .dmp file is created by the "oracle" user. my requirement is to make a zipped file of this .dmp file. What i am trying to do is change the permissions of this .dmp file from 0640 to 0644 and then do a gzip and zip it. Is there any way i can change... (3 Replies)
Discussion started by: qwertyu
3 Replies

9. Shell Programming and Scripting

How to disable cron emails, but only for logrotate only not for other logs?

Guys, is there a script or command? how to disable cron emails, but only for logrotate only not for other logs (3 Replies)
Discussion started by: kenshinhimura
3 Replies

10. Shell Programming and Scripting

If I ran perl script again,old logs should move with today date and new logs should generate.

Appreciate help for the below issue. Im using below code.....I dont want to attach the logs when I ran the perl twice...I just want to take backup with today date and generate new logs...What I need to do for the below scirpt.............. 1)if logs exist it should move the logs with extention... (1 Reply)
Discussion started by: Sanjeev G
1 Replies
ATRUN(8)						    BSD System Manager's Manual 						  ATRUN(8)

NAME
atrun -- run jobs queued for later execution SYNOPSIS
atrun [-l load_avg] [-d] DESCRIPTION
Atrun runs jobs queued by at(1). Root's crontab(5) file /etc/crontab has to contain the line */5 * * * * root /usr/libexec/atrun so that atrun gets invoked every five minutes. At every invocation, atrun will start all the jobs in the lowercase queues whose start time has elapsed. In addition, if the load average over the last minute was less than the specified limit then a maximum of one batch job (denoted by the uppercase queues) is started. Before starting a job, atrun will check the status of its owner's account with pam(3) and refuse to run the job if the account is unavail- able, e.g., locked out or expired. OPTIONS
-l load_avg Specify a limiting load factor, over which batch jobs should not be run, instead of the default of 1.5 * number of active CPUs. -d Debug; print error messages to standard error instead of using syslog(3). WARNINGS
For atrun to work, you have to start up a cron(8) daemon. FILES
/etc/pam.d/atrun pam.conf(5) configuration file for atrun /var/at/jobs Directory containing job files /var/at/spool Directory containing output spool files SEE ALSO
at(1), crontab(1), pam(3), syslog(3), crontab(5), pam.conf(5), cron(8) BUGS
The functionality of atrun should be merged into cron(8). BSD
October 30, 2012 BSD
All times are GMT -4. The time now is 02:05 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy