Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

IPSConfig runs cron jobs as root. And when adding new cron jobs in ISPconfig it sets them to also be run as root and I don't see any way to change it. Is this safe?

share|improve this question

closed as off-topic by HopelessN00b Mar 8 at 21:31

  • This question does not appear to be about server, networking, or related infrastructure administration within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

2 Answers 2

up vote 1 down vote accepted

Is it safe to be running cron jobs as root when they don't need to be? That depends; are your cron jobs 100% secure? If so, then you are 100% safe. If you aren't completely certain of their security, then no, this is not safe.

This software is ultimately manipulating the standard crontab files. You can edit these with crontab -e and vi /etc/crontab . In the former, every entry is assumed to be for user who's crontab it is (for example, to edit apache's crontab, you would use crontab -eu apache). In the latter, the username comes after the time segment ('* * * * * USERNAME COMMAND')

share|improve this answer

ISP Config does execute cron jobs in a jailed environment, as you can see inside the crontab files created in /etc/cron.d/ispc*.

SHELL='/usr/sbin/jk_chrootsh'

So, execute command in that way should not be a problem if your users can not create unsafe executables (which indeed is not a cron problem).

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.