/etc/shadow is shadow. Some programs that need to be able to access the file are setgid shadow. $PATH variable: # ( IFS=:
for path in $PATH; do
find $path -type f -group shadow -perm -g=s
done
)
/usr/sbin/unix_chkpwd
/usr/bin/chage
/usr/bin/expiry