Only Root access to CRON subsystem (UNIX)

Module: System Queues

This check verifies whether root is the only user allowed to run the "crontab" command.

The following table lists the error messages for the check.

Table: Error messages for Only Root access to CRON subsystem

Message String ID and Category	Platform and Message Numeric ID	Message Title and Description	Additional Information
String ID: STKU_CRONSUONLY Category: Policy Compliance	UNIX (5935)	Title: Only root can use crontab Description:Your system is set so only the root account can use the crontab command. See the man pages for information about the crontab command. This message provides information but does not require any security action on your part.	Severity: green-0 Correctable: false Snapshot Updatable: false Template Updatable: false Information Field Format: [%s]
String ID: STKU_CRONALLOWWARN Category: Policy Compliance	UNIX (5949)	Title: Non root user allowed to use crontab Description:This user is allowed to use the crontab command. Only Authorised users should be allowed administrative access to crontab.	Severity: red-4 Correctable: false Snapshot Updatable: false Template Updatable: false Information Field Format: [%s]
String ID: STKU_CRONDENYEXISTS Category: Policy Compliance	UNIX (5947)	Title: cron.deny file exists Description:The cron.deny file contains a list of users that cannot access the crontab command.CIS recommended that file be removed.	Severity: red-4 Correctable: false Snapshot Updatable: false Template Updatable: false Information Field Format: [%s]
String ID: STKU_CRONNSUSER Category: Policy Compliance	UNIX (5943)	Title: Non-existent user configured for cron or at Description:This user is listed in one or more of the cron and batch configuration files but do not exist on the system. This can represent a security breach if the named accounts are later recreated and either granted cron or at access without authority or denied cron or at access when they should have authority. You should correct this problem by removing the listed users from the indicated files.	Severity: green-0 Correctable: false Snapshot Updatable: false Template Updatable: false Information Field Format: [%s]

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: STKU_CRONSUONLY

Category: Policy Compliance

UNIX (5935)

Title: Only root can use crontab

Description:Your system is set so only the root account can use the crontab command. See the man pages for information about the crontab command. This message provides information but does not require any security action on your part.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: STKU_CRONALLOWWARN

Category: Policy Compliance

UNIX (5949)

Title: Non root user allowed to use crontab

Description:This user is allowed to use the crontab command. Only Authorised users should be allowed administrative access to crontab.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: STKU_CRONDENYEXISTS

Category: Policy Compliance

UNIX (5947)

Title: cron.deny file exists

Description:The cron.deny file contains a list of users that cannot access the crontab command.CIS recommended that file be removed.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: STKU_CRONNSUSER

Category: Policy Compliance

UNIX (5943)

Title: Non-existent user configured for cron or at

Description:This user is listed in one or more of the cron and batch configuration files but do not exist on the system. This can represent a security breach if the named accounts are later recreated and either granted cron or at access without authority or denied cron or at access when they should have authority. You should correct this problem by removing the listed users from the indicated files.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]