gshadow
shadow group password file format
TLDR
View gshadow (requires root)
DESCRIPTION
/etc/gshadow contains encrypted group passwords and group administrator information. It is the shadow file for /etc/group, restricting access to sensitive group information.
Each line follows the format: groupname:password:admins:members. The password field uses * for no password set, ! for password disabled, or an encrypted hash like $6$ for SHA-512.
Group administrators listed in the admins field can add/remove members and change the group password without root privileges using gpasswd.
FILE FORMAT
- groupname: Group name (matches /etc/group)
- password: Encrypted password (! or * means disabled)
- admins: Comma-separated list of group administrators
- members: Comma-separated list of group members
PASSWORD FIELD
! - Password disabled
$6$ - SHA-512 encrypted password
GROUP ADMINISTRATORS
Administrators can add/remove members and change the group password without root privileges using gpasswd.
CAVEATS
File permissions must be 0640 or stricter. Edit with vigr -s to prevent corruption. Not all systems use gshadow. Group passwords are rarely used.
