Добрый день, LOR. Заглянул сегодня в auth.log на своем VDS и увидел следующее:
Sep 10 09:09:01 v9031 CRON[7249]: pam_unix(cron:session): session closed for user root
Sep 10 09:17:01 v9031 CRON[7279]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep 10 09:17:01 v9031 CRON[7279]: pam_unix(cron:session): session closed for user root
Sep 10 09:30:01 v9031 CRON[7308]: pam_unix(cron:session): session opened for user www-data by (uid=0)
Sep 10 09:30:01 v9031 CRON[7308]: pam_unix(cron:session): session closed for user www-data
Sep 10 09:39:01 v9031 CRON[7330]: pam_unix(cron:session): session opened for user root by (uid=0)
Sep 10 09:39:01 v9031 CRON[7330]: pam_unix(cron:session): session closed for user root
Sep 10 10:00:01 v9031 CRON[7386]: pam_unix(cron:session): session opened for user www-data by (uid=0)
Sep 10 10:00:10 v9031 CRON[7386]: pam_unix(cron:session): session closed for user www-data
Sep 10 10:09:01 v9031 CRON[7408]: pam_unix(cron:session): session opened for user root by (uid=0)
cat /etc/crontab
17 * * * * root cd / && run-parts --report /etc/cron.hourly
25 6 * * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.daily )
47 6 * * 7 root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.weekly )
52 6 1 * * root test -x /usr/sbin/anacron || ( cd / && run-parts --report /etc/cron.monthly )
*/30 * * * * www-data /usr/bin/php /usr/share/nginx/ttrss/update.php --feeds --quiet
#