#!/bin/sh # force /etc/shadow to be owned by root and not be world readable chown root:shadow /etc/shadow