What were you trying to do that didn't work?

After executing pwconv/grpconv, permission mode in /etc/shadow changes from 0000 to 0400.

Unshadow with pwunconv/grpunconv, and recreate with pwconv/grpconv:

1. pwunconv
2. pwconv
3. grpunconv
4. grpconv

Check it's permissions

1. ls -l /etc/shadow
   r-------. 1 root root 1734 4月 24 10:44 /etc/shadow
   r-------. 1 root root 829 4月 24 10:52 /etc/gshadow

This is different from the default by the setup package.

https://access.redhat.com/solutions/2048573

1. rpm -V setup
   .M....... c /etc/gshadow
   .M....... c /etc/shadow

Please provide the package NVR for which bug is seen:

• shadow-utils-4.6-19.el8.x86_64 (RHEL8)
• shadow-utils-4.9-8.el9.x86_64 (RHEL9)

How reproducible:

Always

Steps to reproduce

Check /etc/shadow permissions:

1. ls -l /etc/shadow

Unshadow with pwunconv, recreate with pwconv:

1. pwunconv
2. pwconv

Check it's permissions again:

1. ls -l /etc/shadow /etc/gshadow

Expected results

Keep default 0000 after recreation.

1. ls -l /etc/shadow /etc/gshadow
   ----------. 1 root root 1505 10月 12 2023 /etc/shadow

Actual results

1. ls -l /etc/shadow
   r-------. 1 root root 829 4月 24 10:52 /etc/gshadow
   r-------. 1 root root 1734 4月 24 10:55 /etc/shadow