It seems like this would only allow reading memory resident for some other reason. Still bad, but I do not think it would allow directly reading files that were

It seems like this would only allow reading memory resident for some other reason. Still bad, but I do not think it would allow directly reading files that weren't already in memory. As for /etc/shadow, it would be loaded any time someone attempts to login, and might even stick around in the page cache...