gshadow
TLDR
View gshadow (requires root)
$ sudo cat /etc/gshadow
Edit gshadow safely$ sudo vigr -s
Check gshadow consistency$ sudo grpck
DESCRIPTION
/etc/gshadow contains encrypted group passwords and group administrator information. It's the shadow file for /etc/group, restricting access to sensitive group information.
FILE FORMAT
$ groupname:password:admins:members
Fields:- groupname: Group name (matches /etc/group)
- password: Encrypted password (! or * means disabled)
- admins: Comma-separated list of group administrators
- members: Comma-separated list of group members
EXAMPLE ENTRIES
$ root:*::
wheel:!::alice,bob
developers:$6$...:alice:bob,charlie
docker:!:alice:bob,charlie
wheel:!::alice,bob
developers:$6$...:alice:bob,charlie
docker:!:alice:bob,charlie
PASSWORD FIELD
$ * - No password set
! - Password disabled
$6$ - SHA-512 encrypted password
! - Password disabled
$6$ - SHA-512 encrypted password
GROUP ADMINISTRATORS
Administrators can add/remove members and change the group password without root privileges using gpasswd.
CAVEATS
File permissions must be 0640 or stricter. Edit with vigr -s to prevent corruption. Not all systems use gshadow. Group passwords are rarely used.
