| The cron facility allows users to execute recurring jobs on a regular and unattended basis. The cron.allow file designates accounts that are allowed to enter and execute jobs using the cron facility. If neither cron.allow nor cron.deny exists, then any account may use the cron facility. This may open the facility up for abuse by system intruders and malicious users. Applicable, but permanent not-a-finding - Root is the only user local to the host. root (name) is the default administrator w/full access. Additional AD accounts are also administrator accounts with full access, read-only access, or no access. allow and/or deny files are therefore Applicable, but permanent not-a-finding. |
