[gentoo-user] fcron

[gentoo-user] fcron

[W.Kenworthy]

Looks like fcron has changed its user group from cron to fcron.  Once I
realised this I have been able to add users to fcron and it works - for
users.

However I have quite a number of system level root jobs that I cant list
or edit using crontab -e or -l on multiple systems

moriah ~ # crontab -e
22:05:13 Could not chdir to /var/spool/cron/fcrontabs: Permission denied
moriah ~ #

BillK
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[Alexis Lahouze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


W.Kenworthy a écrit :
> Looks like fcron has changed its user group from cron to fcron.  Once I
> realised this I have been able to add users to fcron and it works - for
> users.
>
> However I have quite a number of system level root jobs that I cant list
> or edit using crontab -e or -l on multiple systems
>
> moriah ~ # crontab -e 22:05:13 Could not chdir to
> /var/spool/cron/fcrontabs: Permission denied
> moriah ~ #
I think you need to add theses users to the fcron group (as root):
gpasswd -a [user] fcron

You'll also be interested into remove theses users from cron group which
is no more needed:
gpasswd -d [user] cron

and then retry fcrontab -e

- --
Alexis Lahouze - xals@lahouze.org
Gradignan (Bordeaux) - France - Terre
clé pgp : 0x7729E023 (subkeys.pgp.net)
fingerprint : 43F9 589F CDF7 7A21 A43E  048D A45E E8CA 7729 E023

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.3 (GNU/Linux)

iD8DBQFGERYZpF7oyncp4CMRAkVCAJ433iPF2r1YfcHYKbLZ3qCsxRJ5tgCdEdke
epYrpoQWze3sQq7n1EfTtuc=
=x4CI
-----END PGP SIGNATURE-----
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[Alan McKinnon]

On Monday 02 April 2007, W.Kenworthy wrote:
> Looks like fcron has changed its user group from cron to fcron.  Once
> I realised this I have been able to add users to fcron and it works -
> for users.
>
> However I have quite a number of system level root jobs that I cant
> list or edit using crontab -e or -l on multiple systems
>
> moriah ~ # crontab -e
> 22:05:13 Could not chdir to /var/spool/cron/fcrontabs: Permission
> denied moriah ~ #
>
> BillK

You HAVE to do that as root

-- 
Optimists say the glass is half full,
Pessimists say the glass is half empty,
Developers say wtf is the glass twice as big as it needs to be?

Alan McKinnon
alan at linuxholdings dot co dot za
+27 82, double three seven, one nine three five
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[Alexis Lahouze]

gpg: [stdin]: clearsign failed: Bad passphrase
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[Etaoin Shrdlu]

On Monday 2 April 2007 16:49, Alan McKinnon wrote:

> > moriah ~ # crontab -e
> > 22:05:13 Could not chdir to /var/spool/cron/fcrontabs: Permission
> > denied moriah ~ #
> >
> > BillK
>
> You HAVE to do that as root

The # character in the prompt usually indicates a root shell...so I guess 
the OP was already issuing those commands as root.
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[Alan McKinnon]

On Monday 02 April 2007, Etaoin Shrdlu wrote:
> On Monday 2 April 2007 16:49, Alan McKinnon wrote:
> > > moriah ~ # crontab -e
> > > 22:05:13 Could not chdir to /var/spool/cron/fcrontabs: Permission
> > > denied moriah ~ #
> > >
> > > BillK
> >
> > You HAVE to do that as root
>
> The # character in the prompt usually indicates a root shell...so I
> guess the OP was already issuing those commands as root.

doh! /me whacks self on head with a clue by 4 ....

The OP has an interesting problem here, as root can cd into any 
directory even if all permissions are removed.

Bill, a bit of a shot in the dark here, but what's the output 
from 'ls -al  /var/spool/cron/'?

And are you running a hardened profile using selinux?

alan

-- 
Optimists say the glass is half full,
Pessimists say the glass is half empty,
Developers say wtf is the glass twice as big as it needs to be?

Alan McKinnon
alan at linuxholdings dot co dot za
+27 82, double three seven, one nine three five
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[W.Kenworthy]

Cant believe I am the only one who has this - 3 systems I have checked
so far are all the same - root cant access its crontab.  Ive tried
rebuilding one without pam (fcron only), but no change.

bunyip ~ # esearch fcron
[ Results for search key : fcron ]
[ Applications found : 1 ]

*  sys-process/fcron
      Latest version available: 3.0.2-r1
      Latest version installed: 3.0.2-r1
      Size of downloaded files: [no/bad digest]
      Homepage:    http://fcron.free.fr/
      Description: A command scheduler with extended capabilities over
cron and anacron
      License:     GPL-2


bunyip ~ # ls -al  /var/spool/cron/
total 0
drwxr-x--- 5 root  cron  176 Dec 10 00:01 .
drwxr-xr-x 9 root  root  240 Jun  8  2006 ..
-rw-r--r-- 1 root  root    0 Dec 10 00:01 .keep_sys-process_cronbase-0
drwxr-x--- 2 root  cron   72 Feb 18  2005 crontabs
drwsrws--- 2 fcron fcron 200 Apr  3 06:46 fcrontabs
drwxr-x--- 2 root  root  224 Apr  2 22:26 lastrun
bunyip ~ # 

bunyip ~ # ls -al  /var/spool/cron/fcrontabs/
total 16
drwsrws--- 2 fcron fcron  200 Apr  3 06:46 .
drwxr-x--- 5 root  cron   176 Dec 10 00:01 ..
-rw-r--r-- 1 root  fcron    0 Apr  3 06:46 .keep_sys-process_fcron-0
-rw------- 1 root  root  1681 Apr  3 06:21 root
-rw-r----- 1 fcron fcron 1132 Feb 17 14:24 root.orig
-rw------- 1 root  root   184 Apr  3 06:21 wdk
-rw-r----- 1 fcron fcron  173 Nov 22 14:14 wdk.orig
bunyip ~ #



On Mon, 2007-04-02 at 17:20 +0200, Alan McKinnon wrote:
> On Monday 02 April 2007, Etaoin Shrdlu wrote:
> > On Monday 2 April 2007 16:49, Alan McKinnon wrote:
> > > > moriah ~ # crontab -e
> > > > 22:05:13 Could not chdir to /var/spool/cron/fcrontabs: Permission
> > > > denied moriah ~ #
> > > >
> > > > BillK
> > >
> > > You HAVE to do that as root
> >
> > The # character in the prompt usually indicates a root shell...so I
> > guess the OP was already issuing those commands as root.
> 
> doh! /me whacks self on head with a clue by 4 ....
> 
> The OP has an interesting problem here, as root can cd into any 
> directory even if all permissions are removed.
> 
> Bill, a bit of a shot in the dark here, but what's the output 
> from 'ls -al  /var/spool/cron/'?
> 
> And are you running a hardened profile using selinux?
> 
> alan
> 
> -- 
> Optimists say the glass is half full,
> Pessimists say the glass is half empty,
> Developers say wtf is the glass twice as big as it needs to be?
> 
> Alan McKinnon
> alan at linuxholdings dot co dot za
> +27 82, double three seven, one nine three five
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[Trevor Forbes]

W.Kenworthy wrote:
> Cant believe I am the only one who has this - 3 systems I have checked
> so far are all the same - root cant access its crontab.  Ive tried
> rebuilding one without pam (fcron only), but no change.
>
>   
[Bug 171998] sys-process/fcron-3.0.2-r1 - root can't list/edit cronjobs.


Trevor
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[Alan McKinnon]

On Tuesday 03 April 2007, Trevor Forbes wrote:
> W.Kenworthy wrote:
> > Cant believe I am the only one who has this - 3 systems I have
> > checked so far are all the same - root cant access its crontab. 
> > Ive tried rebuilding one without pam (fcron only), but no change.
>
> [Bug 171998] sys-process/fcron-3.0.2-r1 - root can't list/edit
> cronjobs.

Getting a little OT here, but I find that a very interesting bug report. 
It seems sensible that adding root to the fcron group would fix the 
problem, but this raises an interesting question:

Permissions are enforced by the kernel, which suspends all permission 
checks when the user is uid 0. This bug implies that a userspace 
program is altering root's level of access, which is fundamentally not 
allowed in *nix. It's not pam doing it, as one of the respondents 
states he does not use pam.

So what's going on?


alan


-- 
Optimists say the glass is half full,
Pessimists say the glass is half empty,
Developers say wtf is the glass twice as big as it needs to be?

Alan McKinnon
alan at linuxholdings dot co dot za
+27 82, double three seven, one nine three five
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[W.Kenworthy]

On Tue, 2007-04-03 at 10:06 +0200, Alan McKinnon wrote:
> On Tuesday 03 April 2007, Trevor Forbes wrote:
> > W.Kenworthy wrote:
...
> > [Bug 171998] sys-process/fcron-3.0.2-r1 - root can't list/edit
> > cronjobs.
> 
> Getting a little OT here, but I find that a very interesting bug report. 
> It seems sensible that adding root to the fcron group would fix the 
> problem, but this raises an interesting question:
> 
...

didnt work for me - root was added, cron stopped an restarted.  Logged
in as root at another console - no change.  Havnt rebooted though.

BillK


-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[Alan McKinnon]

On Tuesday 03 April 2007, W.Kenworthy wrote:
> Havnt rebooted though

Most unlikely to make any difference whatsoever. You'll probably sit 
with exactly the same situation after the reboot as before, this ain't 
windows....

alan

-- 
Optimists say the glass is half full,
Pessimists say the glass is half empty,
Developers say wtf is the glass twice as big as it needs to be?

Alan McKinnon
alan at linuxholdings dot co dot za
+27 82, double three seven, one nine three five
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[W.Kenworthy]

On Tue, 2007-04-03 at 14:49 +0200, Alan McKinnon wrote:
> On Tuesday 03 April 2007, W.Kenworthy wrote:
> > Havnt rebooted though
> 
> Most unlikely to make any difference whatsoever. You'll probably sit 
> with exactly the same situation after the reboot as before, this ain't 
> windows....
> 
> alan
> 
ah knows - what can a user do that root cant.  I tried it without PAM
compiled in - whats left?

weird!
BillK

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[W.Kenworthy]

Thanks - I searched before this was raised.  At least I dont feel so
lonely now :)

BillK

On Tue, 2007-04-03 at 17:01 +0930, Trevor Forbes wrote:
> W.Kenworthy wrote:
> > Cant believe I am the only one who has this - 3 systems I have checked
> > so far are all the same - root cant access its crontab.  Ive tried
> > rebuilding one without pam (fcron only), but no change.
> >
> >  
> [Bug 171998] sys-process/fcron-3.0.2-r1 - root can't list/edit cronjobs.
> 
> 
> Trevor
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[Dirk Heinrichs]

[-- Attachment #1: Type: text/plain, Size: 940 bytes --]

Am Montag, 2. April 2007 schrieb ext Alan McKinnon:

> The OP has an interesting problem here, as root can cd into any
> directory even if all permissions are removed.

root can, but user "fcron" can't:

# ll /usr/bin/fcrontab
-rwsr-sr-x 1 fcron fcron 47612 19. Mär 14:15 /usr/bin/fcrontab*

> Bill, a bit of a shot in the dark here, but what's the output
> from 'ls -al  /var/spool/cron/'?

On my system, this directory was owned by group "cron", and a quick check 
showed that I had the same problem as Bill. Changing group to fcron for 
this directory fixed the problem.

bye...

	Dirk
-- 
Dirk Heinrichs          | Tel:  +49 (0)162 234 3408
Configuration Manager   | Fax:  +49 (0)211 47068 111
Capgemini Deutschland   | Mail: dirk.heinrichs@capgemini.com
Hambornerstraße 55      | Web:  http://www.capgemini.com
D-40472 Düsseldorf      | ICQ#: 110037733
GPG Public Key C2E467BB | Keyserver: www.keyserver.net

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-user] fcron

[Alan McKinnon]

On Tuesday 03 April 2007, Dirk Heinrichs wrote:
> # ll /usr/bin/fcrontab
> -rwsr-sr-x 1 fcron fcron 47612 19. Mär 14:15 /usr/bin/fcrontab*

Ah, there's the problem. I saw earlier that the fcron directory is suid 
root, which is redundant as it has no effect. I didn't check the actual 
binary though which is suid fcron. I would have thought that suid is 
ignored if the binary is run by root, but apparently not.

And why is fcrontab not suid root anyway like crontab is:

nazgul system32 # ll /usr/bin/crontab
-rws--x--- 1 root cron 30888 Sep  4  2006 /usr/bin/crontab*

alan

-- 
Optimists say the glass is half full,
Pessimists say the glass is half empty,
Developers say wtf is the glass twice as big as it needs to be?

Alan McKinnon
alan at linuxholdings dot co dot za
+27 82, double three seven, one nine three five
--
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] fcron

[W.Kenworthy]

On Tue, 2007-04-03 at 15:26 +0200, Dirk Heinrichs wrote:
> Am Montag, 2. April 2007 schrieb ext Alan McKinnon:
> 
> > The OP has an interesting problem here, as root can cd into any
> > directory even if all permissions are removed.
> 
> root can, but user "fcron" can't:
> 
well spotted - I missed that.

BillK


-- 
gentoo-user@gentoo.org mailing list

[gentoo-user] fcron

[jens wefer]

hey..
I wonder about the last update of fcron.It is an update to 3.1.1, there
is a new /etc/crontab file, which is mixed
with /etc/fcronfcrontab, without update notice. The latest stable
version is 3.0.6 on the fcron homepage.
bye, jens.