Question

A shared application server allows any local user to schedule cron jobs, but security policy now requires that only the users 'deploy' and 'backup' be permitted to create personal crontabs. All other users must be denied. Which action correctly enforces this policy?

Accepted Answer

Create /etc/cron.allow containing the lines 'deploy' and 'backup', with no /etc/cron.deny present

Answer

Create /etc/cron.deny containing 'deploy' and 'backup' so only those users are recognized

Answer

Add 'deploy' and 'backup' to the 'crontab' group and remove all other users from it

Answer

Set the sticky bit on /var/spool/cron so only file owners can modify their crontabs