Post #4047360
2026-07-23 22:00 UTC
@fiore@brain.worm.pink @rose@pl.pinkro.se root user can read /etc/shadow, normal users can
pam has a setuid helpers to do that inbehalf of the user
Replies (2)
-
@fiore@brain.worm.pink 2026-07-23 22:00
@navi@social.vlhl.dev @rose@pl.pinkro.se makes sense yea . what about like . display managers ?
-
@lanodan@queer.hacktivis.me 2026-07-23 22:04
@navi@social.vlhl.dev @fiore@brain.worm.pink @rose@pl.pinkro.se Reminds me that musl got tcb shadow support (each entry going to /etc/tcb/$user/shadow instead of one gigantic file, so can have better ACLs). And I got that on my machines but it's a bit of a mess to have stuff like screenlockers support it since suddenly they don't need to be suid or do pam-backdoors anymore.