View source for Vuln general suspicious cronjob

== Recommendations ==

In general, we recommend that you not grant cronjob access to the same users used to run daemons, such a nobody, apache, www-data, sshd, and others.  We recommend you use a different user or users from your daemon users to run your cronjobs, and restrict cronjob access by these "publicly facing" users.  This creates compartmentalization, thus ensuring that if an attacker were to gain access to the system through on of these "publicly facing" users that they would be limited in what they can do on the system.  This principle of defense in depth is vital to protecting a modern system.