Viewing All Users Cron Tabs / Cron Jobs (Linux)

I have looked at cron before, but what if someone else has gained access to your Linux system and added a cron job without your knowledge? Linux systems such as Raspbian store the crontabs as files (named for each user).

A user’s crontab can be found under the /var/spool/cron/crontabs directory. You may need to escalate your account privileges to access the crontabs directory.

geektechstuff_cronjobs_1
/var/spool/cron/crontabs

The directory /var/spool/cron/crontabs contains text files for each user that has a crontab. In this example the root user has a crontab, which can be viewed using the less or cat command, or edited using a text editor such as nano.

geektechstuff_cronjobs_2
crontabs directory

So if you are running a command such as top and see unusual activity from cron, make sure to check out the crontabs directory.

a crontab
a crontab

Thanks for reading, and also welcome to the GeekTechStuff “Linux” category. In the past I have posted most of my Linux findings to the “Raspberry Pi” category of my site but as my Linux learnings are growing I have decided to expand and create a Linux category.

Leave a Reply

Please log in using one of these methods to post your comment:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.