Package: cron
Version: 3.0pl1-97
Severity: normal
Tags: patch

The included cronjobs, especially the run-parts from /etc/crontab
shouldn't be run with the starting directory of /root

perl -npi~ -e 's%run-parts% cd / && run-parts%' /etc/crontab

should be sufficient for /etc/crontab; the other included cronjobs can
be modified accordingly.

Rationale: SELinux logs unallowed access attempts to /root for security
reasons. Since these scripts don't need access there they shouldn't
accidentially access it. Maybe setting HOME=/tmp/cron or something like
that is even better.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.17.7
Locale: [EMAIL PROTECTED], [EMAIL PROTECTED] (charmap=UTF-8)

Versions of packages cron depends on:
ii  adduser                      3.97        Add and remove users and groups
ii  debianutils                  2.17        Miscellaneous utilities specific t
ii  libc6                        2.3.6.ds1-2 GNU C Library: Shared libraries
ii  libpam0g                     0.79-3.2    Pluggable Authentication Modules l
ii  libselinux1                  1.30.26-2   SELinux shared libraries
ii  lsb-base                     3.1-14      Linux Standard Base 3.1 init scrip

Versions of packages cron recommends:
ii  postfix [mail-transport-agent 2.3.2-1    A high-performance mail transport 

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to