>In the case of shadow, it's because sysidtool updates it with the root >password setting. passwd is probably also updated as a byproduct of the >underlying implementation, even though it doesn't actually change.
Why is that updated *in* the miniroot? That just doesn't make any sense. Casper
