Bug#766053: Cannot edit user crontabs

[Alexandre Detiste]

Le lundi 20 octobre 2014, 14:58:47 Yuri D'Elia a écrit :
> I was just giving systemd-cron a try and it seems that there are issues when
> using /usr/bin/crontab.
> 
> /var/spool/cron/crontabs is not created with the correct permissions (my guess
> is that it should likely be chmod 1730, chown root:crontab).
I'll have a look at this.
 
> The second issue is that crontab is not running as setgid, since it's a script.

Hi, 

I have already discussed this bug with the two other upstreams:
https://github.com/systemd-cron/systemd-cron/issues/15

They don't really want to mess with a setuid C program that is a potential security hole.

The easiest to fix this on Debian would be to kindly as the 'cron' maintainers
to generate an extra 'crontab' binary package with only '/usr/bin/crontab' & the manpage included.
https://github.com/a-detiste/crontab/commit/37ce687a58187d3cce610b28c1fad47854576584


I have documented this bug + a workaround in the manpage of the next release:
https://github.com/systemd-cron/systemd-cron/commit/b9f8bc86eb361515089ebbad187aba8a6553033d

Alexandre Detiste