HardenedBSD/etc/crontab

# /etc/crontab - root's crontab for FreeBSD
#
# $Id: crontab,v 1.10 1995/05/27 01:55:21 ache Exp $
# From: Id: crontab,v 1.6 1993/05/31 02:03:57 cgd Exp
#
SHELL=/bin/sh
PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin
HOME=/var/log
#
#minute	hour	mday	month	wday	who	command
#
*/5     *       *       *       *       root	/usr/libexec/atrun
#
# rotate log files every hour, if necessary
#0	*	*	*	*	root	/usr/bin/newsyslog
#
# remove system	messages older than 21 days
#0	1	*	*	*	daemon	/usr/bin/msgs -c
#
# do daily/weekly/monthly maintenance
0       2       *       *       *       root    /etc/daily 2>&1 | sendmail root
30      3       *       *       6       root    /etc/weekly 2>&1 | sendmail root
30      5       1       *       *       root    /etc/monthly 2>&1 | sendmail root
#
# time zone change adjustment for wall cmos clock,
# does nothing, if you have UTC cmos clock.
# See adjkerntz(8) for details.
1,31	0-4	*	*	*	root	/sbin/adjkerntz	-a
As a result of the distribution crontab, /usr/libexec/atrun was being run only once an hour instead of every five minutes. This was due to a minute specification of 0/5 -- which should have been */5. This has been fixed. Expect your /var/cron/log to grow much faster now. 1994-04-15 18:57:38 +02:00			`# /etc/crontab - root's crontab for FreeBSD`
Cleaned up crontab from NetBSD, adjusted for FreeBSD. 1993-07-19 21:08:04 +02:00			`#`
Add commented out msgs database cleanup to crontab Add -f (silent) flag to msgs call for logins (commented out) 1995-11-19 18:21:13 +01:00			`# $Id: crontab,v 1.10 1995/05/27 01:55:21 ache Exp $`
Cleaned up crontab from NetBSD, adjusted for FreeBSD. 1993-07-19 21:08:04 +02:00			`# From: Id: crontab,v 1.6 1993/05/31 02:03:57 cgd Exp`
			`#`
			`SHELL=/bin/sh`
			`PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin`
			`HOME=/var/log`
			`#`
This is Vixie cron 3.0. This version fixes all known security bugs. Further it implements crontab -e. I moved cron from /usr/libexec to /usr/sbin where most daemons are that are run from rc. That also gets rid of the ugly path crond used to have in ps(1) outputs. Further I renamed it to cron, as Paul Vixie likes it and is done by NetBSD. NOTE VERY WELL THE FOLLOWING: 1) Systems crontab changed. Every users crontab resides in /var/cron EXCEPT root's. This is a special crontab as it resides in /etc. Further it is the ONLY crontab file in which you specify usernames. See /usr/src/etc/crontab. This is also done by BSDI's BSD/386 as far as I know (they provided the patches for it anyway) 2) So you must delete root's crontab and reinstall the copy in /etc from /usr/src/etc. 'Must' is to much: the old installed crontab will work but cron will also try to 'run' /etc/crontab. 3) Last but not least: cron's logging is now done via syslog. Note that logging by cron is done lowercase when it logs about itsself and uppercase when it logs user events, like installing a new crontab. The default logfile file is the same as before: syslog.conf:cron.* /var/cron/log -Guido 1994-01-22 21:44:14 +01:00			`#minute hour mday month wday who command`
Cleaned up crontab from NetBSD, adjusted for FreeBSD. 1993-07-19 21:08:04 +02:00			`#`
As a result of the distribution crontab, /usr/libexec/atrun was being run only once an hour instead of every five minutes. This was due to a minute specification of 0/5 -- which should have been */5. This has been fixed. Expect your /var/cron/log to grow much faster now. 1994-04-15 18:57:38 +02:00			`/5 * * * root /usr/libexec/atrun`
Cleaned up crontab from NetBSD, adjusted for FreeBSD. 1993-07-19 21:08:04 +02:00			`#`
			`# rotate log files every hour, if necessary`
This is Vixie cron 3.0. This version fixes all known security bugs. Further it implements crontab -e. I moved cron from /usr/libexec to /usr/sbin where most daemons are that are run from rc. That also gets rid of the ugly path crond used to have in ps(1) outputs. Further I renamed it to cron, as Paul Vixie likes it and is done by NetBSD. NOTE VERY WELL THE FOLLOWING: 1) Systems crontab changed. Every users crontab resides in /var/cron EXCEPT root's. This is a special crontab as it resides in /etc. Further it is the ONLY crontab file in which you specify usernames. See /usr/src/etc/crontab. This is also done by BSDI's BSD/386 as far as I know (they provided the patches for it anyway) 2) So you must delete root's crontab and reinstall the copy in /etc from /usr/src/etc. 'Must' is to much: the old installed crontab will work but cron will also try to 'run' /etc/crontab. 3) Last but not least: cron's logging is now done via syslog. Note that logging by cron is done lowercase when it logs about itsself and uppercase when it logs user events, like installing a new crontab. The default logfile file is the same as before: syslog.conf:cron.* /var/cron/log -Guido 1994-01-22 21:44:14 +01:00			`#0 * * * * root /usr/bin/newsyslog`
Cleaned up crontab from NetBSD, adjusted for FreeBSD. 1993-07-19 21:08:04 +02:00			`#`
Add commented out msgs database cleanup to crontab Add -f (silent) flag to msgs call for logins (commented out) 1995-11-19 18:21:13 +01:00			`# remove system messages older than 21 days`
			`#0 1 * * * daemon /usr/bin/msgs -c`
			`#`
Cleaned up crontab from NetBSD, adjusted for FreeBSD. 1993-07-19 21:08:04 +02:00			`# do daily/weekly/monthly maintenance`
Eliminate two Subject: from *ly output, call sendmail root directly 1995-05-27 03:55:21 +02:00			`0 2 * * * root /etc/daily 2>&1 \| sendmail root`
			`30 3 * * 6 root /etc/weekly 2>&1 \| sendmail root`
			`30 5 1 * * root /etc/monthly 2>&1 \| sendmail root`
Call adjkerntz -a every half hour from 0 to 4 am 1994-11-02 10:50:11 +01:00			`#`
			`# time zone change adjustment for wall cmos clock,`
			`# does nothing, if you have UTC cmos clock.`
			`# See adjkerntz(8) for details.`
			`1,31 0-4 * * * root /sbin/adjkerntz -a`