Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

IPSConfig runs cron jobs as root. And when adding new cron jobs in ISPconfig it sets them to also be run as root and I don't see any way to change it. Is this safe?

share|improve this question

2 Answers 2

up vote 1 down vote accepted

Is it safe to be running cron jobs as root when they don't need to be? That depends; are your cron jobs 100% secure? If so, then you are 100% safe. If you aren't completely certain of their security, then no, this is not safe.

This software is ultimately manipulating the standard crontab files. You can edit these with crontab -e and vi /etc/crontab . In the former, every entry is assumed to be for user who's crontab it is (for example, to edit apache's crontab, you would use crontab -eu apache). In the latter, the username comes after the time segment ('* * * * * USERNAME COMMAND')

share|improve this answer

ISP Config does execute cron jobs in a jailed environment, as you can see inside the crontab files created in /etc/cron.d/ispc*.

SHELL='/usr/sbin/jk_chrootsh'

So, execute command in that way should not be a problem if your users can not create unsafe executables (which indeed is not a cron problem).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.