normal user no longer can create at jobs 2009

[m0loch]

at worked fine in 2008.1 broken, broken after upgrade to 2009:

 

[m0loch@pokin ~]$ at 09:30

warning: commands will be executed using (in order) a) $SHELL c) login shell c) /bin/sh

Cannot create atjob file /var/spool/at/a0001a01375f0e: Permission denied

 

 

[m0loch@pokin ~]$ sudo ls -lah /var/spool/at

total 16K

drwx------ 3 daemon daemon 4.0K 2008-10-18 09:01 .

drwxr-xr-x 11 root root 4.0K 2008-10-15 23:33 ..

-rw------- 1 daemon daemon 6 2008-10-18 09:55 .SEQ

drwx------ 2 daemon daemon 4.0K 2008-10-18 09:01 spool

[m0loch@pokin ~]$

 

anyone know a fix?

root can create at jobs, and normal user can sudo

[pindakoe]

Does a file /etc/at.allow exist and have your name in it? the at.allow and at.deny files can be used to lock down access to at

[m0loch]

Does a file /etc/at.allow exist and have your name in it? the at.allow and at.deny files can be used to lock down access to at

 

no, /etc/at.allow does not exist /etc/at.deny does exist and is an empty file - according to the man page this should allow access to all users

[pindakoe]

This may be related to your default security settings which you can set in draksec. For level 4 and 5 (higher & paranoid), users will not have access to cron & at, unless you grant access via at.allow (or override the default for enable_at_crontab for that level in /usr/share/msec/level.4 or level.5.

 

If that doesn't explain it then I am out of options..