1 2
# yes, we know it's sgid, that's the whole point... libpam-modules-bin: setgid-binary *sbin/unix_chkpwd* 2755 root/shadow