Bugzilla – Bug 138550
Permissions for cron.daily cron job too restrictive
Last modified: 2006-01-16 15:43:21 UTC
[sh @ snell] /etc/cron.daily 34 % ls -l total 44 -rwxr-xr-x 1 root root 393 Sep 9 18:11 logrotate -rwx------ 1 root root 948 Sep 13 01:58 suse-clean_catman -rwx------ 1 root root 1196 Sep 13 01:58 suse-do_mandb -rwxr-xr-x 1 root root 719 Sep 13 02:12 suse-tetex -rwxr-xr-x 1 root root 1875 Sep 1 2003 suse.de-backup-rc.config -rwxr-xr-x 1 root root 2059 Sep 8 2003 suse.de-backup-rpmdb -rwxr-xr-x 1 root root 566 Jul 23 2004 suse.de-check-battery -rwx------ 1 root root 1761 Sep 9 18:26 suse.de-clean-core -rwxr-xr-x 1 root root 1320 Jul 27 15:28 suse.de-clean-tmp -rwxr-xr-x 1 root root 371 Sep 1 2003 suse.de-cron-local -rwx------ 1 root root 1538 Sep 9 18:26 suse.de-updatedb [sh @ snell] /etc/cron.daily 35 % ls -l | grep '....---' -rwx------ 1 root root 948 Sep 13 01:58 suse-clean_catman -rwx------ 1 root root 1196 Sep 13 01:58 suse-do_mandb -rwx------ 1 root root 1761 Sep 9 18:26 suse.de-clean-core -rwx------ 1 root root 1538 Sep 9 18:26 suse.de-updatedb There is really no reason whatsoever to have permissions for those cron jobs that restrictive. They should all be 755. There is nothing secret in them. suse.de-clean-core and suse.de-updatedb belong to package "findutils-locate" -> schwab@suse.de
There must be some reason, ro did that, see /work/SAVE/oldpackages/stable/findutils/findutils-20020206/findutils.spec
has been 700 from the start: SuSE 6.0: -rwx------ root root 9756 Dec 11 1998 /etc/cron.daily/aaa_base probably, because it came in this way ( <= SuSE 5.3): -rwx------ root root 9508 Jul 27 1998 /root/bin/cron.daily
So it's just a historic leftover and IMHO can be fixed, i.e. set to 755 like all the others in that directory.
Fixed.