File unix-chkpwd-add-read-capability.path of Package apparmor.39233
--- ./profiles/apparmor.d/unix-chkpwd.orig 2025-04-22 16:25:45.502540282 +0200
+++ ./profiles/apparmor.d/unix-chkpwd 2025-05-05 17:44:05.292446725 +0200
@@ -17,6 +17,8 @@ profile unix-chkpwd /{,usr/}{,s}bin/unix
# To write records to the kernel auditing log.
capability audit_write,
+ # To read shadow with 000 permissions.
+ capability dac_read_search,
network netlink raw,