I've found out, that the problem lies in the permissions of /etc/shadow, which were wrong in my system for some reason, as I explained it in #279560. So if this gets fixed (I assume in base-passwd), the permissions of kcheckpass can be set the following way:
It doesn't need the SUID bit, GUID bit and the appropriate group is enough, when /etc/shadow has the right permissions (owned and readable by group 'shadow')
I've found out, that the problem lies in the permissions of /etc/shadow, which were wrong in my system for some reason, as I explained it in #279560. So if this gets fixed (I assume in base-passwd), the permissions of kcheckpass can be set the following way:
$ sudo chgrp /usr/lib/ kde4/libexec/ kcheckpass kde4/libexec/ kcheckpass
$ sudo chmod 2755 /usr/lib/
It doesn't need the SUID bit, GUID bit and the appropriate group is enough, when /etc/shadow has the right permissions (owned and readable by group 'shadow')
regards,
tom