postinst-setup: do not trash shadow group

diff --git a/postinst-setup b/postinst-setup
index 238bc6e528a25ae241080994ea80d70e147f23fd..6c06516babf7d29d56909f33daaff7022f4130aa 100755 (executable)
--- a/postinst-setup
+++ b/postinst-setup
@@ -47,6 +47,8 @@ if [ ! -d /etc/.bzr ]; then
     # only restore some passwords from shadow
     egrep 'martin|netti|joe' shadow >> shadow.originst
     mv shadow.originst shadow
+    chown root:shadow shadow
+    chmod 640 shadow
 fi
 
 # update postfix for new configuration