Re: [SLUG] Crond message in logs

[Jamie Wilkinson <jaq@xxxxxxxxxxxxxx>]

This one time, at band camp, Simon wrote:
>Hi all,
>I get heaps of these in the logs on a FC server and I have no idea what
>they mean!
>
>crond[28991]: pam_succeed_if: requirement "uid < 100" was met by user
>"root"

In /etc/pam.d/system-auth, or somewhere else in cron's pam chain, you've got
the pam_succeed_if module, which is granting access to users with a uid less
than 100.  Also looks like it's got the logging option turned on :)

In this case, cron runs as root, so it's allowed to do stuff.

This is part of the default install on RHEL4 and FC3 upwards, iirc.