Re: Another Devuan annoyance: CLI default apps
On 01-11-17, Reco wrote:
> On Wed, Nov 01, 2017 at 10:00:27AM +0100, Jochen Spieker wrote:
> > deloptes:
> > >
> > > Indeed, thanks for the hint, however OP wanted to edit crontab, which needs
> > > root access.
> > 'crontab -e' works for all users.
> A more correct way to put it is 'crontab utilizes root access'.
> $ ls -al /usr/bin/crontab
> -rwxr-sr-x 1 root crontab 34936 May 3 2015 /usr/bin/crontab
> So, anyone can run crontab, that's true.
> Does not change the fact that crontab runs as root.
That is SGID bit is for group, which is crontab, not root. On Debian,
every user can edit its own crontab file by default, which can be
changed if file /etc/cron.allow exists and user is added there, or if
/etc/cron.deny exists and user is not there.