Owl: tcb: Components (cont.) tcb_convert and tcb_unconvert Easy conversion between /etc/tcb/* and traditional /etc/shadow databases The shadow suite utilities Non-trivial patching has been applied to the sources of most shadow suite utilities The invocation syntax remained unchanged A setting in /etc/login.defs specifies whether the utilities should adhere to the tcb scheme