cp /etc/pam.d/crond /etc/pam.d/crond.bak
vim /etc/pam.d/crond

account    sufficient   pam_access.so
account    include    system-auth
session    sufficient   pam_loginuid.so
session    include    system-auth
auth       sufficient pam_rootok.so
auth       required   pam_env.so
auth       include    system-auth