/usr/sbin/cron oX {
        /etc/environment
        /var/spool/cron/crontabs
        /var/mail
        /usr/sbin/sendmail x
        /root
	/lib rx
        /etc r
	/etc/grsec h
        /dev/log rw
        /bin/bash x
	/usr/sbin/cron x
	/ h

	-CAP_ALL
	+CAP_SETGID
	+CAP_SETUID

	RES_CRASH 1 10m

	connect {
		disabled
	}

	bind {
		disabled
	}
}
