The cron.allow and cron.deny files in /etc control which users can create cron jobs. If cron.allow exists, only listed users can use cron. If cron.allow doesn't exist but cron.deny does, users NOT in cron.deny can use cron. The files use the standard naming convention with dots, not underscores.