# yes, we know it's suid, that's the whole point...
libpam-modules: setuid-binary sbin/unix_chkpwd 4755 root/root