Debian Patches

Status for cron/3.0pl1-189

Patch Description Author Forwarded Bugs Origin Last update
fixes/Signal-handling-issues.patch Signal handling issues
Move signal handling away from the obsolete API.

Fix provided by Justin Pryzby <justinpryzby@users.sourceforge.net>, as part of
a larger fix, so it has been split out.
Christian Kastner <ckk@kvr.at> no debian 2015-12-22
fixes/Improve-waiting-for-spawned-editor.patch Improve waiting for spawned editor
Refine the process of waiting for the spawned editor. Also, block signals while
waiting.

Fix provided by Steve Greenland <stevegr@debian.org>.
Georges Khaznadar <georgesk@debian.org> no 2015-12-22
fixes/Avoid-predictable-filenames.patch Avoid predictable filenames
Prevent symlink attack by using mkstemp() instead of predictable filenames.

Based on a fix originally provided by Daniel Jacobowitz.
Christian Kastner <ckk@kvr.at> no 2015-12-25
fixes/Cleanup-tmpfiles.patch Cleanup tmpfiles
Install a signal handler that removes a temporarily created file upon exit.

Based on a fix originally provided by Daniel Jacobowitz together with symlink
attack prevention.
Christian Kastner <ckk@kvr.at> no 2015-12-25
fixes/Set-umask-while-editing-crontab.patch Set umask while editing crontab
When editing/replacing a crontab, set the umask to 077.
Christian Kastner <ckk@kvr.at> no 2015-12-25
fixes/crontab-must-be-regular-file.patch crontab must be a regular file
Ensure that the crontab opened in SPOOL_DIR a regular file.

Fix provided by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no 2015-12-25
fixes/Allow-editors-with-tmpfiles.patch Allow editors with tmpfiles
Certain editors such as vi use temporary files for editing. In the past, this
has caused problems with crontab's operation mode.

Fix provided by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2015-12-25
fixes/Improve-retry-prompt.patch Improve retry prompt
Include y/n in the prompt to indicate the expected input.
Christian Kastner <ckk@kvr.at> no 2015-12-25
fixes/Dont-die-on-missing-spool-dir.patch Don't die on missing spool dir
The daemon shouldn't just die when spool dir is missing, for example when
/var/spool is being moved around. This a recoverable situation.

Fix provided by Justin Pryzby <justinpryzby@users.sourceforge.net>.
Christian Kastner <ckk@kvr.at> no debian 2015-12-25
fixes/Improve-mode-checks-for-crontabs.patch Improve mode checks for crontabs
Improve mode checks for crontabs to improve security. Specifically, check for:
* Invalid owner
* Invalid filetype
* Insecure mode
* Hard links

Forwarded: no
Last-Update: 2015-12-26
Christian Kastner <ckk@kvr.at> no 2015-12-26
fixes/Legacy-porting-issues.patch Legacy porting issues
Various fixes, additions or updates regarding portability. These are quite
numerous because the upstream code is from 1993, and does not even assume POSIX
compatibility, which is why we declare it.

Based on the changes originally made by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no 2015-12-20
fixes/Hurd-MAXPATHLEN-workaround.patch Hurd MAXPATHLEN workaround
Hurd does not define MAXPATHLEN.

Fix provided by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2015-12-20
fixes/Miscellaneous-coding-errors.patch Miscellaneous code errors
These are mostly one-line fixes of obvious errors such as running into
undefined behaviour, missing arguments to functions, typos, name mix-ups, etc.
Creating separate patches for them would be overkill.

Originally by Steve Greenland <stevegr@debian.org>, occasionally modified to
match what upstream eventually did for ISC cron v4.1.
Christian Kastner <ckk@kvr.at> no 2015-12-20
fixes/Memory-allocation-issues.patch Memory allocation issues
Check the results of malloc(), strdup(), etc., and don't forget to free memory.

Fixes provided by Steve Greenland <stevegr@debian.org> and extended for
CVE-2019-9704.
Christian Kastner <ckk@kvr.at> no debian 2019-03-23
fixes/Use-safe-string-functions.patch Use safe s string functions
Use safe string functions instead of unsafe ones.

Most of these fixes were originally taken from Red Hat's
vixie-cron-3.0.1-24.src.rpm.
Christian Kastner <ckk@kvr.at> no debian 2015-12-20
fixes/Entry-symbolic-name-fixes.patch Correct which/how flags are set for entries
In the entry processing code, either set certain internal flags which are
missing, or correct broken settings.

Fix provided by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2015-12-20
fixes/Limit-number-of-command-arguments.patch Limit number of command arguments
Set an upper limit for the number of arguments in a command, instead of
hardcoding 100 (and not checking for that limit).

Fix provided by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no 2015-12-22
fixes/Manpage-corrections-and-improvements.patch Manpage corrections and improvements
A collection of various corrections, clarifications, and additions to the
manpages cron.8, crontab.1, and crontab.5 which are not specific to Debian's
version of vixie cron.

Fixes mostly provided originally by Steve Greenland <stevegr@debian.org>, with
numerous smaller contributions by others.
Christian Kastner <ckk@kvr.at> no debian 2019-09-15
fixes/cron-report-missing-newline-before-EOF.patch cron: report missing newline before EOF
A missing newline before EOF caused the daemon to silently ignore the last line
of a crontab. Print a warning instead.
Christian Kastner <ckk@kvr.at> no debian 2015-12-20
fixes/crontab-entry-parsing-fixes.patch crontab entry parsing fixes
Handle various entry parsing bugs:
* Steve Greenland <stevegr@debian.org> noticed that whitespace between
@symbolic names and commands weren't all being skipped
* Steve Greenland noticed that get_number() did not detect invalid number
specifications early enough
* Steve Greenland discovered that invalid step sizes weren't being detected
* Justin T. Pryzby <justinpryzby@users.sourceforge.net> discovered that steps
without a range (an invalid specification) weren't detected
Christian Kastner <ckk@kvr.at> no debian 2015-12-21
fixes/crontab-detect-missing-eol.patch crontab: warn about missing newline
Make crontab(1) refuse to add/replace a crontab with a missing newline before
EOF. The daemon will either not execute the last entry, or refuse to execute
the entire crontab (depending on the implementation).
Christian Kastner <ckk@kvr.at> no debian 2015-12-22
fixes/crontab-allow-deny-logic-fix.patch crontab allow/deny logic fix
Looking at config.h and pathnames.h, it is evident that the intention was to
always allow root to execute jobs. Furthermore, the conditional tests for the
ALLOW and DENY files were incorrect.

Fix provided by Steve Grubb as part of another patch, then further improved by
Javier Fernández-Sanguino Peña <jfs@debian.org> and Christian Kastner.
Christian Kastner <ckk@kvr.at> no debian 2019-03-23
fixes/Entry-time-range-check.patch Entry time range check
Explicitly check for sane values in time ranges. Certain invalid combinations
of ranges and steps weren't being detected, eg:

5-64/30 * * * * touch /dev/null

contains an invalid minute "64".
Christian Kastner <ckk@kvr.at> no debian 2015-12-22
fixes/Abort-processing-of-crontabs-with-errors.patch Abort processing of crontabs with errors
Discard crontabs with syntax errors, and log an error.

Discarding the entire crontab might seem harsh, but crontabs can be used as an
attack vector, as evident by the gluck.debian.org compromise in 2006. Granted,
that attack exploited the /etc/cron.d package directory feature, but it would
seem prudent to err on the side of caution in this case.

The initial fix was originally provided by Faidon Liambotis, and has been
slightly extended.
Christian Kastner <ckk@kvr.at> no debian 2015-12-20
fixes/Check-privilege-drop-results-CVE-2006-2607.patch Check privilege drop results (CVE-2006-2607)
Check the results of privilege dropping operations, and bail out if they fail.
Documented as CVE-2006-2607.

Fixes provided by Steve Greenland <stevegr@debian.org>, and extended by Javier
Fernández-Sanguino Peña <jfs@debian.org>.
Christian Kastner <ckk@kvr.at> no debian
fixes/Drop-privileges-when-sending-mail.patch Drop privileges when sending mail
Drop privileges when sending mail. It is unnecessary to send them as root.

Extension of a fix originally provided by Steve Greenland <stevegr@debian.org>
and extended by Javier Fernández-Sanguino Peña <jfs@debian.org>.
Christian Kastner <ckk@kvr.at> no 2015-12-22
fixes/Proper-use-of-error-functions.patch Proper use of error functions
perror is called after library functions besides the one that failed,
and without saving/restoring errno or otherwise referencing the
correct value.

Fix provided by Justin Pryzby <justinpryzby@users.sourceforge.net>.

Last Update: 2015-12-22
Christian Kastner <ckk@kvr.at> no debian 2015-12-22
fixes/Ensure-stdin-is-open.patch Ensure stdin is open
Ensure stdin is open on startup. This is needed by the job execution later on.

Fix originally provided by Mustafa Mahudhawala for Red Hat's vixie cron.
Christian Kastner <ckk@kvr.at> no debian 2015-12-22
fixes/Redirect-daemon-standard-streams-to-dev-null.patch Redirect daemon standard streams to /dev/null
Redirect the daemon's stdin/stdout/stderr from resp. to /dev/null.

Fixes provided by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no 2015-12-22
fixes/Handle-escapes-in-job-input.patch Handle escapes in job input
Certain escape sequences are not handled correctly. Fix supplied by Topi
Miettinen, with OpenBSD indicated as the original source of it.
Christian Kastner <ckk@kvr.at> no debian 2015-12-22
fixes/Tolerate-empty-EDITOR-and-VISUAL-envvars.patch Tolerate empty EDITOR and VISUAL envvars
Treat empty EDITOR and VISUAL environment variables as if they were unset.

Fix provided by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2015-12-22
fixes/Use-strftime-to-print-time.patch Use strftime to print time
Fix provided by Steve Greenland <stevegr@debian.org>, possibly with OpenBSD as
the original source (the subversion history is ambiguous).
Christian Kastner <ckk@kvr.at> no 2015-12-22
fixes/fsync-to-check-for-full-disk.patch fsync to check for full disk
Make sure that writing the crontab actually succeeded.

Based on an initial fix by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2015-12-22
features/Add-MAILFROM-environment-variable.patch Add support for MAILFROM variable
This patch lets cron use the MAILFROM variable to set the sender as which it
will send emails. MAILFROM has the same semantics as the same environment
variable in cronie.

Contributed by Georges Khaznadar <georgesk@debian.org> : a test in
debian/tests/check_mailfrom_mailto
Laurent Combe <laurent.combe@free.fr> no debian https://github.com/cronie-crond/cronie/blob/master/src/do_command.c 2021-02-16
fixes/Missing_bistring_h.patch Missing_bistring_h
[proposed by Stefanos Chaliasos on 2019-12-22]

add bitstring.h as a dependency to CRON_OBJ and CRONTAB_OBJ.
The build can cause incorrect results when the project is incrementally
built. For example, any changes in bitstring.h will not cause the object
files to be rebuilt.
Georges Khaznadar <georgesk@debian.org> no 2023-10-11
features/protect-list.patch protect-list
manage characters \r and \b in a special way, since one could use
them to obfuscate a crontab. This patch should close #585552

A test has been designed for autopkgtest:
file debian/tests/check-listings-protection
Georges Khaznadar <georgesk@debian.org> no 2023-10-11
fixes/Enforce-maximum-crontab-line-count.patch Enforce maximum crontab line count
As any user can create a crontab that is read by the cron daemon, it is
possible for a user to cause a DoS via memory exhaustion by creating an
excessivly large crontab. This was classified as a security issue with
CVE-2019-9705.

As a measure to prevent this, limit the size of individual crontab files
to 1000 lines.

While it is still technically possible for a user to create a larger crontab
(for example, by creating a single, very long comment), this should not affect
the daemon, as it simply skips over comments.

For crontab entries (for which the daemon allocates memory), the maximum
command length is already limited to 998 characters, so these allocations are
already kept in check.
Christian Kastner <ckk@kvr.at> no 2019-03-23
fixes/Swap-both-uid-and-gid.patch Swap both uid and gid
When swapping uid, also swap the gid.

Fix provided by Solar Designer.
Christian Kastner <ckk@kvr.at> no 2015-12-26
fixes/Dont-run-reboot-jobs-on-restart.patch Don't run reboot jobs on restart
Don't run reboot jobs when restarting the cron daemon.

Fix provided by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2015-12-26
fixes/Backport-crontab-envparser-from-v4.1.patch Backport crontab envparser from v4.1
The 3.0 parser is crude and may misparse crontab entries containing equal signs
(=). This patch backports the parser from the 4.1 release.
Christian Kastner <ckk@kvr.at> no debian backport, http://ftp.isc.org/isc/cron/cron_4.1.shar 2015-12-26
fixes/Send-proper-8-bit-emails.patch Send proper 8-bit emails
Cron sends 8-bit emails, so it needs to send these mails as 8BITMIME. This
involves passing -B8BITMIME so that sendmail knows what kind of data to expect,
as well as sending an appropriate MIME-Version and Content-Transfer-Encoding
header.

Without these changes, mail servers that reject non-MIME 8-bit emails will
reject cron's messages.

Fix provided by brian m. carlson <sandals@crustytoothpaste.net>.
Christian Kastner <ckk@kvr.at> no debian 2015-12-26
fixes/Dont-silently-truncate-commands.patch Don't silently truncate commands
Commands have a maximum length. When hitting this maximum, generate an error
instead of silently truncated the command.
Christian Kastner <ckk@kvr.at> no debian 2015-12-26
fixes/Use-basename-for-syslog-tag.patch Use basename for syslog tag
Use basename of argv[0] as syslog tag. This avoids the inclusion of the "/"
character, which is a violation of RFC 3164.

The rule files of package logcheck-database do not have to be updated; they
already considered the dirname of argv[0] to be an optional prefix.
Christian Kastner <ckk@kvr.at> no debian 2015-12-26
fixes/Improve-denied-user-warning.patch Improve denied user warning
Produce a different error message when root invokes -u for a user who was
denied cron access, and don't log a message.

Contributed by Javier Fernández-Sanguino Peña <jfs@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2016-01-15
fixes/Permit-user-to-use--u-option-on-self.patch Permit user to use -u option on self
Instead of entirely prohibiting non-root users to use the -u option, allow them
to use it on themselves, as this should be a null-op.

Fix provided by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no 2015-12-26
fixes/crontab-wo-arguments-reads-from-stdin.patch crontab without arguments reads from stdin
If crontab is run without argument, then POSIX mandates that it should read the
crontab from stdin. See

http://pubs.opengroup.org/onlinepubs/9699919799/utilities/crontab.html

Fix provided by TANIGUCHI Takaki <takaki@asis.media-as.org>.
Christian Kastner <ckk@kvr.at> no debian 2016-01-15
fixes/Pam-group-after-fork.patch Runs PAM_REINITIALIZE_CRED after fork to apply correct rights to child process.


The feature provided by this patch is tested with the script
debian/tests/check-messages-sent-by-cron (second part of the script)
Jorge Rocha Gualtieri <jorge@jrg.com.br> no debian 2021-03-01
features/Debian-build-process-customizations.patch Debian build process customizations
Build process customizations for building under Debian. Most notably, disable
upstream's optimization and stripping; our build process does that.
Christian Kastner <ckk@kvr.at> not-needed 2015-12-26
features/Debian-manpage-and-doc-updates.patch Debian manpage and doc updates
A collection of various corrections, clarifications, and additions to the
manpages cron.8, crontab.1, and crontab.5 which are not specific to Debian's
version of vixie cron.

Fixes mostly provided originally by Steve Greenland <stevegr@debian.org>, with
numerous smaller contributions by others.
Christian Kastner <ckk@kvr.at> not-needed 2016-01-16
features/Debian-paths-and-commands.patch Debian paths and commands
User pathnames and commands specific to Debian.
Christian Kastner <ckk@kvr.at> not-needed debian 2016-01-15
features/Debian-sendmail-options.patch Debian sendmail options
Modify the options passed to sendmail:
* Drop -odi option (don't force immediate delivery)
* Drop -or0s option (don't override read timeout)
* Add -i option (Don't terminate on "." by itself)
Christian Kastner <ckk@kvr.at> no debian 2016-01-07
features/Improved-debugging-options-handling.patch Improved debugging options handling
When building cron with debugging support, include the ability to print the
debug options. When building without support, drop the debugging option
from option parsing.
Christian Kastner <ckk@kvr.at> no 2016-01-07
features/PAM-support-for-jobs.patch PAM support for jobs
Add support for PAM for job execution.

Contributed by Topi Miettinen <Topi.Miettinen@nic.fi>.
Christian Kastner <ckk@kvr.at> no debian 2016-01-07
features/PAM-pam_env-support-for-jobs.patch PAM pam_env support for jobs
Add support for pam_env for job execution.

Contributed by Steve Greenland <stevegr@debian.org>.

IMPORTANT NOTE: This currently only (or mostly) affects commands launched by
crontab entries. Other commands run (such as mail notification via MAILTO) do
not use this code. This is not really that big of an issue (eg. why would
anyone force MAILTO via /etc/environment), but it should be documented
somewhere.
Christian Kastner <ckk@kvr.at> no debian 2016-01-07
features/SELinux-support.patch SELinux support
Add SELinux support.

Patch contributed by Manoj Srivastava <srivasta@debian.org>, with additional
fixes by Russell Coker <russell@coker.com.au> and Laurent Bigonville
<bigon@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2019-09-15
features/Linux-Audit-support.patch Linux Audit support
Add support for logging using the Linux Auditing System.

Contributed by Steve Grubb.
Christian Kastner <ckk@kvr.at> no debian 2015-01-07
features/Drop-in-drop.d-directory-support.patch Drop-in cron.d directory support
Add support for /etc/cron.d, a drop-in directory for packages. This involves
numerous features, such as:
* Efficiently detecting changes
* LSB-conform naming convention
* Security concerns

Contributed by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no 2016-01-09
features/Better-timeskip-handling.patch Better timeskip handling
Better handling of time skips (when the clock jumps either forwards or
backwards), in particular with regards to/from daylight savings time.

Originally from OpenBSD patches supplied by Topi Miettinen.
Christian Kastner <ckk@kvr.at> no debian 2016-01-09
features/Logging-enhancements.patch Logging enhancements
Minor enhancements to logging, namely:
* Log to syslog exclusively
* Log the location of the PID file
* Log broken system crontabs (user crontabs are checked by crontab(1))

Contributed by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2016-01-09
features/Make-crontab-SGID-crontab.patch Make crontab SGID crontab
Improve security by making crontab(1) SGID crontab instead of SUID root.

Specifically:
* Drop the call to set_cron_uid(), which is just a wrapper to seteuid()
* setgid() to the real group ID before exec'ing the editor
* Create spool dir with the expected permissions

Nevertheless, Tomi Miettinen's advice in #18333 of not SETing at all, and
using sockets instead should be taken into consideration.
Christian Kastner <ckk@kvr.at> no debian 2016-01-10
features/Enable-setting-content-headers-in-email.patch Enable setting content headers in email
Set the ContentType: header based on the system locale or cron's environment,
if available.

Implementation taken from Fedora Core's version of cron.
Christian Kastner <ckk@kvr.at> no debian 2016-01-10
features/Open-close-syslog-on-every-call.patch Open/close syslog on every call
Open and close syslog on every call to log_it().

This ancient change seems to stem from a time when there were various conflicts
with PAM -- for example PAM apparently changed the facility from LOG_CRON to
LOG_AUTH.

I could not reproduce this and other issues alluded to, and this fix is not
present in other Vixie cron derivatives. However, those other derivatives are
based on 4.1, so it might be possible that this fix is still needed for 3.0,
which is why I'm keeping it for now.

Contributed by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no 2019-03-07
features/Enable-running-daemon-in-foreground.patch Enable running daemon in foreground
Enable running the daemon in the foreground by specifying -f as an option.

Contributed by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2016-01-10
features/Suppress-crontab-header-by-default.patch Suppress crontab header by default
Change the default behaviour including a warning header when editing a crontab
to not doing so. This makes `crontab -l | crontab -` idempotent.

Adding the header can be fored by exporting CRONTAB_NOHEADER=N.

Contributed by Steve Greenland <stevegr@debian.org>.
Christian Kastner <ckk@kvr.at> no 2016-01-15
features/Prompt-on-crontab-deletion.patch Prompt on crontab deletion
Add an option -i that modifies the -r option to prompt the user for a y/n
response before actually deleting the crontab.

Contributed by Javier Fernández-Sanguino Peña <jfs@debian.org>.
Christian Kastner <ckk@kvr.at> no debian 2016-01-15
features/Add-helpful-header-to-new-crontab.patch Add helpful header to new crontab
When creating a new crontab, prepend a header with a helpful description of the
crontab(5) syntax.

Contributed by Javier Fernández-Sanguino Peña <jfs@debian.org>.

Contributed by Georges Khaznadar <georgesk@debian.org> : this patch's
feature is tested by debian/tests/check_significant_header
Christian Kastner <ckk@kvr.at> no 2016-01-15
features/Avoid-a-mailcmd-timeout.patch Avoid a mailcmd timeout
Long running cron jobs can cause sendmail (or whatever compatible mailer is
installed) to time out. By writing children's output to a temporary file
and waiting for them to terminate instead, this situation can be avoided.

Contributed by Justin Pryzby <justinpryzby@users.sourceforge.net>.
Christian Kastner <ckk@kvr.at> no debian 2016-01-15
features/Dont-fail-on-missing-MTA.patch Don't fail on missing MTA

Don't fail silently when MTA is not installed. When this is the case (MAILCMD
is not available), the attempted piping of job output to the MTA fails fatally
as soon as the pipe's buffer is full.

This adds a check to see if MAILCMD is available before proceeding to pipe
output to it.
Christian Kastner <debian@kvr.at> no debian 2016-01-15
fixes/Check_for_timezone_changes.patch Check_for_timezone_changes
if the timezone for a system is changed while cron is running,
and the timezone change is _not_ due to a DST event, cron is unaware of
the change and will continue using the old `GMToff` value until it is
restarted.

This patch checks for the timezone unconditionnaly

See bug #1019716: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1019716
Georges Khaznadar <georgesk@debian.org> no 2023-10-11
features/No-multiple-timezones.patch No-multiple-timezones
This patch adds an example for people who wish to address the multiple
timezone issue, without adding any new feature inside crontabs or cron
itself.

It modifies only the file crontab.5
Georges Khaznadar <georgesk@debian.org> no 2023-10-11
fixes/crontab_5_manpage.patch crontab_5_manpage
Fixed the phrasing of the manual page, tanks to Reuben Thomas, and
included 積丹尼 Dan Jacobson's nice example into crontab.5
Georges Khaznadar <georgesk@debian.org> no 2023-10-11
features/dry-run.patch dry-run
Implement two switches:

Implement two switches:
-n to make a "dry run" (syntax crontab -n foo)
-h to display a help message
Georges Khaznadar <georgesk@debian.org> no 2023-10-11
features/cron_now.patch cron_now
This patch provides a way to create a new command: cron_now

This patch provides a way to create a new command: cron_now
This command is meant to be used only during automated tests, as it
allows one to run cron jobs immediately, without the need to wait a minute
Georges Khaznadar <georgesk@debian.org> no 2023-10-11
fixes/Usr-bin-sbin.patch Usr-bin-sbin
Modernize paths, to coply with Debian Merged Usr
Georges Khaznadar <georgesk@debian.org> no 2023-10-11
features/Enabling_debug_by_default.patch Enabling_debug_by_default
As debugging is not enabled at compile time, adding a documentation
of the -x switch in cron.8 manpage
Georges Khaznadar <georgesk@debian.org> no 2023-10-11
fixes/Step-size_out_of_bound_handling.patch step-size out of bound handling
This work comes from Alexander Schwinn <alexander.schwinn@gmx.de>, it is about
checking steps in crontabs, to prevent insane divisions, like dividing
one hour in more than 60 steps for example
Georges Khaznadar <georgesk@debian.org> no 2023-10-15
features/Wrap-long-lines.patch Wrap long lines
To avoid loosing cronjob mails with a "line too long" error
(exim4, for example) cron will wrap very long lines. The default encoding is
set to QUOTED-PRINTABLE

A new test is provided for autopkgtests

Contributed by Frank Heckenbach <f.heckenbach@fh-soft.de>
Georges Khaznadar <georgesk@debian.org> no debian 2023-11-22
docs/more_examples_for_crontab.patch This patch modifies crontab.5 in order to give useful
information about:
- using eval command, which makes easier to express
environment assignments inside commands to call with
cron.
- using leading zeroes instead of spaces to line up
columns

===================================================================
no
features/check_e_mails.patch Check for forbidden characters, like spaces. Example:
MAILTO=a@example.con, b@example.com
is wrong, since there is a space after the comma
Georges Khaznadar no debian 2024-02-28
features/accept_empty_var.patch =================================================================== no
features/Recover-from-crontab-errors.patch Recover from crontab errors
The way the current change detection logic notices changes to crontabs, files
with mode or syntax errors, and broken symlinks do not automatically get added
back once the problem is resolved.

This solution forces a rescan at next-wakeup. The symlink recovery is only
relevant to /etc/cron.d because SPOOL_DIR does not allow symlinks.

This solution originally contained an error that was classified as a
security issue with CVE-2019-9706.
Christian Kastner <ckk@kvr.at> no debian 2019-03-23
features/Selective-logging.patch Selective logging
This implements a fine-grained control over what the cron daemon logs when it
executes jobs. This is driven via the '-L' command line option, which accepts a
bitmask of values for logging the start, end, failure and PID of jobs. The
following things can be logged:
* Start of cron jobs
* End of cron jobs
* Failed jobs
* Include PID of cron job in messages

The default is to log the start of jobs.

Initially contributed by Steve Fosdick <dbugs@pelvoux.nildram.co.uk>.
Christian Kastner <ckk@kvr.at> no debian 2016-01-15
features/Check-orphaned-crontabs-for-adoption.patch Check orphaned crontabs for adoption.
Change the default behaviour of permanently ignoring crontabs with an invalid
owner (ie, getpwnam() fails) to checking for adoption every time cron wakes up.
This makes more sense as nowadays such failures are often traced back to
temporary issues, especially in the context of LDAP lookups and name-caching
daemons.
Tomas Mraz <tmraz@fedoraproject.org> no debian https://git.fedorahosted.org/cgit/cronie.git/commit/?id=8b407876f276f96914111bd9954f21f627db7b11 2016-01-15
features/Add-option-to-include-FQDN-in-email.patch Add option to include FQDN in email
Add an option -n to with which the daemon can be instructed to include the FQDN
in the subject when sending mails.
Christian Kastner <ckk@kvr.at> no debian 2015-01-16

All known versions for source package 'cron'

Links