From owner-cvs-src@FreeBSD.ORG Mon Jun 18 09:18:33 2007 Return-Path: X-Original-To: cvs-src@FreeBSD.org Delivered-To: cvs-src@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 8117016A421; Mon, 18 Jun 2007 09:18:33 +0000 (UTC) (envelope-from yar@comp.chem.msu.su) Received: from comp.chem.msu.su (comp.chem.msu.su [158.250.32.97]) by mx1.freebsd.org (Postfix) with ESMTP id 9CA5913C469; Mon, 18 Jun 2007 09:18:32 +0000 (UTC) (envelope-from yar@comp.chem.msu.su) Received: from comp.chem.msu.su (localhost [127.0.0.1]) by comp.chem.msu.su (8.13.4/8.13.4) with ESMTP id l5I9IUGA007729; Mon, 18 Jun 2007 13:18:30 +0400 (MSD) (envelope-from yar@comp.chem.msu.su) Received: (from yar@localhost) by comp.chem.msu.su (8.13.4/8.13.4/Submit) id l5I9ITOv007728; Mon, 18 Jun 2007 13:18:29 +0400 (MSD) (envelope-from yar) Date: Mon, 18 Jun 2007 13:18:29 +0400 From: Yar Tikhiy To: Robert Watson Message-ID: <20070618091829.GT30493@comp.chem.msu.su> References: <200706171725.l5HHPr2c092609@repoman.freebsd.org> <20070617184206.C2416@fledge.watson.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20070617184206.C2416@fledge.watson.org> User-Agent: Mutt/1.5.9i Cc: cvs-src@FreeBSD.org, src-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/etc/pam.d Makefile cron src/usr.sbin/cron/cron Makefile cron.8 cron.h database.c do_command.c src/usr.sbin/cron/lib Makefile entry.c X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Jun 2007 09:18:33 -0000 On Sun, Jun 17, 2007 at 06:42:40PM +0100, Robert Watson wrote: > > On Sun, 17 Jun 2007, Yar Tikhiy wrote: > > > Add PAM support to cron(8). Now cron(8) will skip commands scheduled > > by unavailable accounts, e.g., those locked, expired, not allowed in at > > the moment by nologin(5), or whatever, depending on cron's pam.conf(5). > > This applies to personal crontabs only, /etc/crontab is unaffected. > > > > In other words, now the account management policy will apply to > > commands scheduled by users via crontab(1) so that a user can no > > longer use cron(8) to set up a delayed backdoor and run commands > > during periods when the admin doesn't want him to. > > Nice work. Have you looked at doing something similar for .forward files > in Sendmail? Not yet. What is Sendmail supposed to do with user's mail if the account is unavailable for running mail filters, assume a temporary failure or just file mail to the default mailbox? -- Yar