[lug] Why cron.allow and cron.deny?

[Chris Ernst]

On 01/13/2014 09:16 AM, Rob Nagler wrote:
> I still don't get it.  What's the difference between cron and this?
> 
> while true; do
>     sleep 60
>     do_something
> done
> 
> Or, for the more abusive:
> 
> while true do
>     sleep 60
>     ssh some-target.com do_something
> done

Not much.  But the point is that there are many different mechanisms to
prevent many different vectors of abuse.  No one mechanism can address
them all.

cron.allow and cron.deny are just a simple mechanism to control cron
access.  That's it.

	- Chris