Which statement best describes how cron access is controlled on a Linux system?

• A. The system checks /etc/cron.allow and /etc/cron.deny
• B. Only /etc/cron.allow matters
• C. Only /etc/cron.deny matters
• D. PAM policy governs cron access

Answer: (A)

Cron access is controlled by two files that act as allow/deny lists. If the file that explicitly lists allowed users exists, only those users can run crontab. If that file isn’t present, the system checks the deny file and blocks any user listed there; everyone else is permitted to use cron. This two-file approach is why describing cron access as being governed by both /etc/cron.allow and /etc/cron.deny is most accurate—the allow file sets the allowed set when present, and the deny file provides the fallback when the allow file is absent. PAM isn’t the primary mechanism controlling who can use cron in this standard setup.