I believe it should be setgid auth (mode 2755 or 2555).

-- 
  Sent from a phone, apologies for poor formatting.

On 8 July 2024 10:43:47 Manuel Giraud <manuel@ledu-giraud.fr> wrote:

> Hi,
>
> I'm trying to make a patch to XScreenSaver to support bsdauth (hopefully
> to have it upstream).
>
> So far so good but at one point I'm calling auth_userokay(3) and I
> always get the following error:
>
> xscreensaver-auth: /usr/libexec/auth/login_passwd: Permission denied
>
> AFAIU, this call to auth_userokay(3) is done from the
> 'xscreensaver-auth' executable which was forked from the 'xscreensaver'
> executable.  I have tried many combination of ownership and setuid bit
> on both 'xscreensaver' and 'xscreensaver-auth' but I always end up with
> this same error message.  Do you have any idea?
> --
> Manuel Giraud