Is there any risk keeping open world-read access to passwd file? Why is by default passwd file world-readable
It is for all users to be able to read their usernames and other data in this file. Sensitive data in modern UNIX systems is kept in /etc/shadow
file.