Hiding /etc/shadow from psql

psql Debian wrapper of psql (see this update ), at least in version 15.12, really likes /etc/shadow file. To such a degree that it tries to read it upon each invocation: $ strace psql 2>&1 | grep /etc/shadow openat(AT_FDCWD, '/etc/shadow', O_RDONLY|O_CLOEXEC) = -1 EACCES (Permission denied) On this particular host, such event is logged by auditd (output edited for brevity): type=SYSCALL…