cron restrictions

The cron command is disabled and will not run any jobs when the system is in configuration mode. If the system is in operational mode, the cron command runs jobs at the sensitivity label at which the job was submitted and the user's default integrity label.

There are restrictions such as the user's minimum clearance and maximum clearance. Depending on which is more recent, the clearance is taken from either the settings of the time that the job was submitted or the last time the cron command restarted. Only an SA user can administer the cron command.