I forgot, that should be always an empty file "root" in /var/cron/tabs and files of all users if we don't want to gives attacker their rights.
But I think the best way is to change cron(8) that it will be check file owner. -- Pawel Jakub Dawidek UNIX Systems Administrator http://garage.freebsd.pl Am I Evil? Yes, I Am. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-hackers" in the body of the message
