[Pkg-shadow-devel] Bug#166793: Confirmed but is it a bug ? pwconv does not create shadow "root.shadow"

[Christian Perrier]

I confirm that pwconv does not indeed create the /etc/shadow file as
root.shadow.

However, the file is also created 0400, so the group owning it is not
really useful.

So, what is the most appropriate for /etc/shadow:

-0400 root.whatever
-0440 root.shadow

I tend to prefer the first solution. The latter would have one only
benefit=A0: allow "setgid shadow" utilities to read shadow....and we
don't seem to have some of these in Debian.

Comments?


--=20