Bug#767894: More permission issues

[Yuri D'Elia]

On 11/03/2014 12:43 PM, Alexandre Detiste wrote:
> The current status of /var/spool/cron/crontabs is undetermined ...
> users either inherit what was setup up by the previosu cron daemon or
> get a vanilla 0755 folder
> on fresh install.
> 
> e.g.: http://anonscm.debian.org/cgit/pkg-cron/pkg-cron.git/tree/debian/postinst
> 
> Having crontab translate on the fly user crontabs into ~/.config/systemd/user
> service & timers (systemd --user) would avoid all these security problems.
> 
> This need a refactor of the generator to turn it into a module that
> can be called from crontab.
> 
> crontab -l & -e would just parse back the "Description=[cron] " records

FIY, systemd does not currently save timer stamps when run under --user:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=767086q

I would recommend waiting for this to be fixed before moving jobs to
~/.config/systemd/user.

After this is fixed, then yes, it would actually be much better.