cvs commit: src/etc/pam.d Makefile cron src/usr.sbin/cron/cron Makefile cron.8 cron.h database.c do_command.c src/usr.sbin/cron/lib Makefile entry.c

[Robert Watson]

On Sun, 17 Jun 2007, Yar Tikhiy wrote:

>  Add PAM support to cron(8).  Now cron(8) will skip commands scheduled
>  by unavailable accounts, e.g., those locked, expired, not allowed in at
>  the moment by nologin(5), or whatever, depending on cron's pam.conf(5).
>  This applies to personal crontabs only, /etc/crontab is unaffected.
>
>  In other words, now the account management policy will apply to
>  commands scheduled by users via crontab(1) so that a user can no
>  longer use cron(8) to set up a delayed backdoor and run commands
>  during periods when the admin doesn't want him to.

Nice work.  Have you looked at doing something similar for .forward files in 
Sendmail?

Robert N M Watson
Computer Laboratory
University of Cambridge