Opened as a task for the Security WG
Is your feature request related to a problem? Please describe.
As part of the work to implement SEP19 we need to be able to run the salt-master process as a non-root user. In order to allow the pam external_auth module to still function, the user that the salt-master process is running as must be able to read /etc/shadow. A number of Linux distros enable this by having a "shadow" group that has read permissions on /etc/shadow.
Describe the solution you'd like
Gather list of Linux distributions the project builds packages for and document which of those support the "shadow" group.
Additional context
SEP19