A good explanation of why /etc/shadow on Ubuntu Linux boxen is owned by group 'shadow' and is set 0640 rather than 0600.
