Bug 554689 - Cron jobs failing for some users with NFS mounted home directories
Summary: Cron jobs failing for some users with NFS mounted home directories
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: cronie
Version: 12
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Marcela Mašláňová
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-01-12 12:20 UTC by Michael Young
Modified: 2010-01-22 07:12 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2010-01-22 07:12:03 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Michael Young 2010-01-12 12:20:33 UTC
We have just updated to Fedora 12 and have noticed that some cron jobs are failing to run with errors like
Jan 10 04:30:02 myhost crond[15769]: (CRON) ERROR chdir failed (/home/filehost/misc/username): Permission denied
Jan 10 04:30:02 myhost crond[15769]: (username) ERROR (failed to change user)
This user has a home directory mounted via NFS from a file server with permissions drwx------. What I think is happening is that cron is trying to change to the user's home directory as root, which fails because root doesn't have permissions to access that directory. It does however work if the permissions are drwx-----x. but changing these permissions potentially reduces the security of the directory.
So what should be happening is that cron should be running as the user before it tries to access the home directory.

Comment 1 Marcela Mašláňová 2010-01-13 13:01:21 UTC
Right, thank you for thorough report. The fix will be available in next update.

Comment 2 Fedora Update System 2010-01-20 14:26:10 UTC
cronie-1.4.3-3.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/cronie-1.4.3-3.fc12

Comment 3 Michael Young 2010-01-21 17:07:21 UTC
The problem looks to be fixed in cronie-1.4.3-3.fc12 from koji.


Note You need to log in before you can comment on or make changes to this bug.