The text a304345ea87b, as Debian 10 (Buster) shipped it.
query the SELinux policy database in the kernel
checkPasswdAccess(3) on Linux now