head	1.2;
access;
symbols
	RELENG_8_4:1.2.0.2
	RELENG_9_1_0_RELEASE:1.1.16.1.4.2
	RELENG_9_1:1.1.16.1.0.4
	RELENG_9_1_BP:1.1.16.1
	RELENG_8_3_0_RELEASE:1.1.10.1.8.1
	RELENG_8_3:1.1.10.1.0.8
	RELENG_8_3_BP:1.1.10.1
	RELENG_9_0_0_RELEASE:1.1.16.1.2.1
	RELENG_9_0:1.1.16.1.0.2
	RELENG_9_0_BP:1.1.16.1
	RELENG_9:1.1.0.16
	RELENG_9_BP:1.1
	RELENG_7_4_0_RELEASE:1.1.14.1
	RELENG_8_2_0_RELEASE:1.1.10.1.6.1
	RELENG_7_4:1.1.0.14
	RELENG_7_4_BP:1.1
	RELENG_8_2:1.1.10.1.0.6
	RELENG_8_2_BP:1.1.10.1
	RELENG_8_1_0_RELEASE:1.1.10.1.4.1
	RELENG_8_1:1.1.10.1.0.4
	RELENG_8_1_BP:1.1.10.1
	RELENG_7_3_0_RELEASE:1.1.12.1
	RELENG_7_3:1.1.0.12
	RELENG_7_3_BP:1.1
	RELENG_8_0_0_RELEASE:1.1.10.1.2.1
	RELENG_8_0:1.1.10.1.0.2
	RELENG_8_0_BP:1.1.10.1
	RELENG_8:1.1.0.10
	RELENG_8_BP:1.1
	RELENG_7_2_0_RELEASE:1.1.8.1
	RELENG_7_2:1.1.0.8
	RELENG_7_2_BP:1.1
	RELENG_7_1_0_RELEASE:1.1.6.1
	RELENG_7_1:1.1.0.6
	RELENG_7_1_BP:1.1
	RELENG_7_0_0_RELEASE:1.1
	RELENG_7_0:1.1.0.4
	RELENG_7_0_BP:1.1
	RELENG_7:1.1.0.2
	RELENG_7_BP:1.1;
locks; strict;
comment	@# @;


1.2
date	2012.11.17.01.49.03;	author svnexp;	state Exp;
branches
	1.2.2.1;
next	1.1;

1.1
date	2007.06.17.17.25.52;	author yar;	state Exp;
branches
	1.1.2.1
	1.1.6.1
	1.1.8.1
	1.1.10.1
	1.1.12.1
	1.1.14.1
	1.1.16.1;
next	;

1.2.2.1
date	2012.11.17.01.49.03;	author svnexp;	state dead;
branches;
next	1.2.2.2;

1.2.2.2
date	2013.03.28.13.02.42;	author svnexp;	state Exp;
branches;
next	;

1.1.2.1
date	2012.11.17.08.01.18;	author svnexp;	state Exp;
branches;
next	;

1.1.6.1
date	2008.11.25.02.59.29;	author kensmith;	state Exp;
branches;
next	;

1.1.8.1
date	2009.04.15.03.14.26;	author kensmith;	state Exp;
branches;
next	;

1.1.10.1
date	2009.08.03.08.13.06;	author kensmith;	state Exp;
branches
	1.1.10.1.2.1
	1.1.10.1.4.1
	1.1.10.1.6.1
	1.1.10.1.8.1;
next	1.1.10.2;

1.1.10.2
date	2012.11.17.10.35.56;	author svnexp;	state Exp;
branches;
next	;

1.1.10.1.2.1
date	2009.10.25.01.10.29;	author kensmith;	state Exp;
branches;
next	;

1.1.10.1.4.1
date	2010.06.14.02.09.06;	author kensmith;	state Exp;
branches;
next	;

1.1.10.1.6.1
date	2010.12.21.17.09.25;	author kensmith;	state Exp;
branches;
next	;

1.1.10.1.8.1
date	2012.03.03.06.15.13;	author kensmith;	state Exp;
branches;
next	1.1.10.1.8.2;

1.1.10.1.8.2
date	2012.11.17.08.24.38;	author svnexp;	state Exp;
branches;
next	;

1.1.12.1
date	2010.02.10.00.26.20;	author kensmith;	state Exp;
branches;
next	;

1.1.14.1
date	2010.12.21.17.10.29;	author kensmith;	state Exp;
branches;
next	1.1.14.2;

1.1.14.2
date	2012.11.17.08.16.37;	author svnexp;	state Exp;
branches;
next	;

1.1.16.1
date	2011.09.23.00.51.37;	author kensmith;	state Exp;
branches
	1.1.16.1.2.1
	1.1.16.1.4.1;
next	1.1.16.2;

1.1.16.2
date	2012.11.17.11.36.11;	author svnexp;	state Exp;
branches;
next	;

1.1.16.1.2.1
date	2011.11.11.04.20.22;	author kensmith;	state Exp;
branches;
next	1.1.16.1.2.2;

1.1.16.1.2.2
date	2012.11.17.08.36.11;	author svnexp;	state Exp;
branches;
next	;

1.1.16.1.4.1
date	2012.08.05.23.54.33;	author kensmith;	state Exp;
branches;
next	1.1.16.1.4.2;

1.1.16.1.4.2
date	2012.11.17.08.47.00;	author svnexp;	state Exp;
branches;
next	;


desc
@@


1.2
log
@Switching exporter and resync
@
text
@#
# $FreeBSD: head/etc/pam.d/cron 170890 2007-06-17 17:25:53Z yar $
#
# PAM configuration for the "cron" service
#

# account
account		required	pam_nologin.so
account		required	pam_unix.so
@


1.2.2.1
log
@file cron was added on branch RELENG_8_4 on 2013-03-28 13:02:42 +0000
@
text
@d1 9
@


1.2.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 9
#
# $FreeBSD: releng/8.4/etc/pam.d/cron 170890 2007-06-17 17:25:53Z yar $
#
# PAM configuration for the "cron" service
#

# account
account		required	pam_nologin.so
account		required	pam_unix.so
@


1.1
log
@Add PAM support to cron(8).  Now cron(8) will skip commands scheduled
by unavailable accounts, e.g., those locked, expired, not allowed in at
the moment by nologin(5), or whatever, depending on cron's pam.conf(5).
This applies to personal crontabs only, /etc/crontab is unaffected.

In other words, now the account management policy will apply to
commands scheduled by users via crontab(1) so that a user can no
longer use cron(8) to set up a delayed backdoor and run commands
during periods when the admin doesn't want him to.

The PAM check is done just before running a command, not when loading
a crontab, because accounts can get locked, expired, and re-enabled
any time with no changes to their crontabs.  E.g., imagine that you
provide a system with payed access, or better a cluster of such
systems with centralized account management via PAM.  When a user
pays for some days of access, you set his expire field respectively.
If the account expires before its owner pays more, its crontab
commands won't run until the next payment is made.  Then it'll be
enough to set the expire field in future for the commands to run
again.  And so on.

Document this change in the cron(8) manpage, which includes adding
a FILES section and touching the document date.

X-Security: should benefit as users have access to cron(8) by default
@
text
@d2 1
a2 1
# $FreeBSD$
@


1.1.2.1
log
@Switch importer
@
text
@d2 1
a2 1
# $FreeBSD: stable/7/etc/pam.d/cron 170890 2007-06-17 17:25:53Z yar $
@


1.1.16.1
log
@SVN rev 225736 on 2011-09-23 00:51:37Z by kensmith

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.1.16.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242902
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242902 | dteske | 2012-11-11 23:29:45 +0000 (Sun, 11 Nov 2012) | 10 lines
## SVN ##
## SVN ## Fix a regression introduced by SVN r211417 that saw the breakage of a feature
## SVN ## documented in usr.sbin/sysinstall/help/shortcuts.hlp (reproduced below):
## SVN ##
## SVN ## If /usr/sbin/sysinstall is linked to another filename, say
## SVN ## `/usr/local/bin/configPackages', then the basename will be used
## SVN ## as an implicit command name.
## SVN ##
## SVN ## Reviewed by:	adrian (co-mentor)
## SVN ## Approved by:	adrian (co-mentor)
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d2 1
a2 1
# $FreeBSD: stable/9/etc/pam.d/cron 170890 2007-06-17 17:25:53Z yar $
@


1.1.16.1.4.1
log
@SVN rev 239080 on 2012-08-05 23:54:33Z by kensmith

Copy stable/9 to releng/9.1 as part of the 9.1-RELEASE release process.

Approved by:	re (implicit)
@
text
@@


1.1.16.1.4.2
log
@Switch importer
@
text
@d2 1
a2 1
# $FreeBSD: releng/9.1/etc/pam.d/cron 170890 2007-06-17 17:25:53Z yar $
@


1.1.16.1.2.1
log
@SVN rev 227445 on 2011-11-11 04:20:22Z by kensmith

Copy stable/9 to releng/9.0 as part of the FreeBSD 9.0-RELEASE release
cycle.

Approved by:	re (implicit)
@
text
@@


1.1.16.1.2.2
log
@Switch importer
@
text
@d2 1
a2 1
# $FreeBSD: releng/9.0/etc/pam.d/cron 170890 2007-06-17 17:25:53Z yar $
@


1.1.14.1
log
@SVN rev 216618 on 2010-12-21 17:10:29Z by kensmith

Copy stable/7 to releng/7.4 in preparation for FreeBSD-7.4 release.

Approved by:	re (implicit)
@
text
@@


1.1.14.2
log
@Switch importer
@
text
@d2 1
a2 1
# $FreeBSD: releng/7.4/etc/pam.d/cron 170890 2007-06-17 17:25:53Z yar $
@


1.1.12.1
log
@SVN rev 203736 on 2010-02-10 00:26:20Z by kensmith

Copy stable/7 to releng/7.3 as part of the 7.3-RELEASE process.

Approved by:	re (implicit)
@
text
@@


1.1.10.1
log
@SVN rev 196045 on 2009-08-03 08:13:06Z by kensmith

Copy head to stable/8 as part of 8.0 Release cycle.

Approved by:	re (Implicit)
@
text
@@


1.1.10.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242909
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242909 | dim | 2012-11-12 07:47:19 +0000 (Mon, 12 Nov 2012) | 20 lines
## SVN ##
## SVN ## MFC r242625:
## SVN ##
## SVN ## Remove duplicate const specifiers in many drivers (I hope I got all of
## SVN ## them, please let me know if not).  Most of these are of the form:
## SVN ##
## SVN ## static const struct bzzt_type {
## SVN ##       [...list of members...]
## SVN ## } const bzzt_devs[] = {
## SVN ##       [...list of initializers...]
## SVN ## };
## SVN ##
## SVN ## The second const is unnecessary, as arrays cannot be modified anyway,
## SVN ## and if the elements are const, the whole thing is const automatically
## SVN ## (e.g. it is placed in .rodata).
## SVN ##
## SVN ## I have verified this does not change the binary output of a full kernel
## SVN ## build (except for build timestamps embedded in the object files).
## SVN ##
## SVN ## Reviewed by:	yongari, marius
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d2 1
a2 1
# $FreeBSD: stable/8/etc/pam.d/cron 170890 2007-06-17 17:25:53Z yar $
@


1.1.10.1.8.1
log
@SVN rev 232438 on 2012-03-03 06:15:13Z by kensmith

Copy stable/8 to releng/8.3 as part of 8.3-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.1.10.1.8.2
log
@Switch importer
@
text
@d2 1
a2 1
# $FreeBSD: releng/8.3/etc/pam.d/cron 170890 2007-06-17 17:25:53Z yar $
@


1.1.10.1.6.1
log
@SVN rev 216617 on 2010-12-21 17:09:25Z by kensmith

Copy stable/8 to releng/8.2 in preparation for FreeBSD-8.2 release.

Approved by:	re (implicit)
@
text
@@


1.1.10.1.4.1
log
@SVN rev 209145 on 2010-06-14 02:09:06Z by kensmith

Copy stable/8 to releng/8.1 in preparation for 8.1-RC1.

Approved by:	re (implicit)
@
text
@@


1.1.10.1.2.1
log
@SVN rev 198460 on 2009-10-25 01:10:29Z by kensmith

Copy stable/8 to releng/8.0 as part of 8.0-RELEASE release procedure.

Approved by:	re (implicit)
@
text
@@


1.1.8.1
log
@SVN rev 191087 on 2009-04-15 03:14:26Z by kensmith

Create releng/7.2 from stable/7 in preparation for 7.2-RELEASE.

Approved by:	re (implicit)
@
text
@@


1.1.6.1
log
@SVN rev 185281 on 2008-11-25 02:59:29Z by kensmith

Create releng/7.1 in preparation for moving into RC phase of 7.1 release
cycle.

Approved by:	re (implicit)
@
text
@@

