Attached is a patch for doing this.

This is highly Debian-specific, as I hardcoded the GID of the "shadow"
group. There are maybe cleaner ways to do this.


-- 


--- lib/commonio.c~     2005-10-11 23:22:22.476195984 +0200
+++ lib/commonio.c      2005-10-11 23:32:55.476598445 +0200
@@ -673,9 +673,9 @@
                 * Default permissions for new [g]shadow files.
                 * (passwd and group always exist...)
                 */
-               sb.st_mode = 0400;
+               sb.st_mode = 0440;
                sb.st_uid = 0;
-               sb.st_gid = 0;
+               sb.st_gid = 42;
        }
 
        snprintf (buf, sizeof buf, "%s+", db->filename);

Reply via email to