A library server runs a root cron job that executes a script writable by unprivileged users. What misconfiguration class is this?
Select an answer to reveal the explanation.
Short Explanation
If root's nightly chores run a script anyone can rewrite, that is a loaded gift. Writable cron content plus root execution is a textbook Linux misconfig class. Cron absolutely cares who owns and can edit what it runs.
Full Explanation
Scheduled tasks that run as root while invoking writable scripts or binaries allow lower-privileged users to influence privileged execution — a classic Linux privilege-escalation misconfiguration. Testers should report the combination of privileged scheduler context and weak file permissions. Cron does not ignore permissions, nor is it limited to desktop-user context on servers. Remediation includes hardening script ownership, modes, and job definitions.