Bug 138550

Summary: Permissions for cron.daily cron job too restrictive
Product: [openSUSE] SUSE LINUX 10.0 Reporter: Stefan Hundhammer <shundhammer>
Component: BasesystemAssignee: Andreas Schwab <schwab>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Minor    
Priority: P5 - None    
Version: RC 4   
Target Milestone: ---   
Hardware: All   
OS: Other   
Whiteboard:
Found By: Development Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Stefan Hundhammer 2005-12-14 14:05:51 UTC 
[sh @ snell] /etc/cron.daily 34 % ls -l
total 44
-rwxr-xr-x  1 root root  393 Sep  9 18:11 logrotate
-rwx------  1 root root  948 Sep 13 01:58 suse-clean_catman
-rwx------  1 root root 1196 Sep 13 01:58 suse-do_mandb
-rwxr-xr-x  1 root root  719 Sep 13 02:12 suse-tetex
-rwxr-xr-x  1 root root 1875 Sep  1  2003 suse.de-backup-rc.config
-rwxr-xr-x  1 root root 2059 Sep  8  2003 suse.de-backup-rpmdb
-rwxr-xr-x  1 root root  566 Jul 23  2004 suse.de-check-battery
-rwx------  1 root root 1761 Sep  9 18:26 suse.de-clean-core
-rwxr-xr-x  1 root root 1320 Jul 27 15:28 suse.de-clean-tmp
-rwxr-xr-x  1 root root  371 Sep  1  2003 suse.de-cron-local
-rwx------  1 root root 1538 Sep  9 18:26 suse.de-updatedb


[sh @ snell] /etc/cron.daily 35 % ls -l | grep '....---'
-rwx------  1 root root  948 Sep 13 01:58 suse-clean_catman
-rwx------  1 root root 1196 Sep 13 01:58 suse-do_mandb
-rwx------  1 root root 1761 Sep  9 18:26 suse.de-clean-core
-rwx------  1 root root 1538 Sep  9 18:26 suse.de-updatedb

There is really no reason whatsoever to have permissions for those cron jobs that restrictive. They should all be 755. There is nothing secret in them.

suse.de-clean-core and suse.de-updatedb belong to package "findutils-locate" -> schwab@suse.de
Comment 1 Andreas Schwab 2005-12-14 15:02:35 UTC 
There must be some reason, ro did that, see /work/SAVE/oldpackages/stable/findutils/findutils-20020206/findutils.spec
Comment 2 Ruediger Oertel 2005-12-14 15:17:16 UTC 
has been 700 from the start:
 SuSE 6.0:
-rwx------ root root  9756 Dec 11 1998 /etc/cron.daily/aaa_base

probably, because it came in this way  ( <= SuSE 5.3):
-rwx------  root  root  9508 Jul 27  1998 /root/bin/cron.daily
Comment 3 Stefan Hundhammer 2005-12-14 15:23:04 UTC 
So it's just a historic leftover and IMHO can be fixed, i.e. set to 755 like all the others in that directory.
Comment 4 Andreas Schwab 2006-01-16 15:43:21 UTC 
Fixed.