Viewing All Users Cron Tabs / Cron Jobs (Linux)

I have looked at cron before, but what if someone else has gained access to your Linux system and added a cron job without your knowledge? Linux systems such as Raspbian store the crontabs as files (named for each user).

A user’s crontab can be found under the /var/spool/cron/crontabs directory. You may need to escalate your account privileges to access the crontabs directory.


The directory /var/spool/cron/crontabs contains text files for each user that has a crontab. In this example the root user has a crontab, which can be viewed using the less or cat command, or edited using a text editor such as nano.

crontabs directory

So if you are running a command such as top and see unusual activity from cron, make sure to check out the crontabs directory.

a crontab
a crontab

Thanks for reading, and also welcome to the GeekTechStuff “Linux” category. In the past I have posted most of my Linux findings to the “Raspberry Pi” category of my site but as my Linux learnings are growing I have decided to expand and create a Linux category.