>> and makes a new entry. > > IOW it remembers it by logging it. How else would it do it except by > recording it in a file? > > poc > It is an suid program - it doesn't need a password unless the policy chooses to ask for one.