At present, xscreensaver needs to be setuid root to read /etc/shadow to handle login verification for screen locking. By having xscreensaver check if linux-pam is enabled and adding --with-pam to ./configure, screen locking can be enabled without setuid. Note: the relevant utility from linux-pam, unix_chkpwd *DOES* need to be setuid root
Thank you for your report. The issue tracker for the Buildroot project has been moved to the Gitlab.com issue tracker: https://gitlab.com/buildroot.org/buildroot/-/issues We are taking this opportunity to close old issues in this old tracker. If you believe your issue is still relevant, please open one in the new issue tracker. Thank you!