if passwords are in nss 'db', gnome-screensaver requires world read access to shadow.db

Binary package hint: gnome-screensaver

If /etc/nsswitch.conf has 'shadow: files db', then passwords are in /var/lib/misc/shadow.db, which is mode 640 root:shadow.

gnome-screensaver refuses to unlock until the file is made mode 644. Changing gnome-screensaver to be setgid shadow is of no help (even of we're doing mode blank), since gnome-screensaver politely throws away it's ability to read the shadow.db.

Could we please make it so that libnss-db and gnome-screensaver can co-exist?

thanks,