<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>54200</bug_id>
          
          <creation_ts>2025-05-08 16:22:28 +0300</creation_ts>
          <short_desc>Генерируются зависимости на опциональные PAM-модули</short_desc>
          <delta_ts>2025-05-10 11:34:09 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>4</classification_id>
          <classification>Development</classification>
          <product>Sisyphus</product>
          <component>rpm-build</component>
          <version>unstable</version>
          <rep_platform>all</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>CLOSED</bug_status>
          <resolution>NOTABUG</resolution>
          
          <see_also>https://bugzilla.altlinux.org/show_bug.cgi?id=54211</see_also>
    
    <see_also>https://bugzilla.altlinux.org/show_bug.cgi?id=54212</see_also>
    
    <see_also>https://bugzilla.altlinux.org/show_bug.cgi?id=54214</see_also>
    
    <see_also>https://bugzilla.altlinux.org/show_bug.cgi?id=54215</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P5</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Антон Мидюков">antohami</reporter>
          <assigned_to name="placeholder@altlinux.org">placeholder</assigned_to>
          <cc>arseny</cc>
    
    <cc>glebfm</cc>
    
    <cc>imz</cc>
    
    <cc>ldv</cc>
    
    <cc>placeholder</cc>
    
    <cc>vt</cc>
          
          <qa_contact>qa-sisyphus</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>264376</commentid>
    <comment_count>0</comment_count>
    <who name="Антон Мидюков">antohami</who>
    <bug_when>2025-05-08 16:22:28 +0300</bug_when>
    <thetext>Генерируются зависимости на опциональные PAM-модули.
Например, пакет gdm-data имеет зависимости на:
PAM(pam_console.so)
PAM(pam_gnome_keyring.so)

При том, что они опциональные:
# grep pam_console.so $(rpm -ql gdm-data |grep pam)
/etc/pam.d/gdm-autologin:session		optional	pam_console.so
/etc/pam.d/gdm-fingerprint:session		optional	pam_console.so
/etc/pam.d/gdm-password:session		optional	pam_console.so
/etc/pam.d/gdm-smartcard:session		optional	pam_console.so

# grep pam_gnome_keyring.so $(rpm -ql gdm-data |grep pam)
/etc/pam.d/gdm-autologin:session		optional	pam_gnome_keyring.so auto_start
/etc/pam.d/gdm-fingerprint:auth		optional	pam_gnome_keyring.so
/etc/pam.d/gdm-fingerprint:password	optional	pam_gnome_keyring.so use_authtok
/etc/pam.d/gdm-fingerprint:session		optional	pam_gnome_keyring.so auto_start
/etc/pam.d/gdm-password:auth		optional	pam_gnome_keyring.so
/etc/pam.d/gdm-password:password	optional	pam_gnome_keyring.so use_authtok
/etc/pam.d/gdm-password:session		optional	pam_gnome_keyring.so auto_start
/etc/pam.d/gdm-smartcard:auth		optional	pam_gnome_keyring.so
/etc/pam.d/gdm-smartcard:password	optional	pam_gnome_keyring.so use_authtok
/etc/pam.d/gdm-smartcard:session		optional	pam_gnome_keyring.so auto_start</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>264397</commentid>
    <comment_count>1</comment_count>
    <who name="Dmitry V. Levin">ldv</who>
    <bug_when>2025-05-09 01:45:06 +0300</bug_when>
    <thetext>$ grep ^- /etc/pam.d/common-login
-session	optional	pam_systemd.so

$ man pam.conf
If the type value from the list above is prepended with a - character the PAM library will not log to the system log if it is not possible to load the module because it is missing in the system. This can be useful especially for modules which are not always installed on the system and are not required for correct authentication and authorization of the login session.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>264424</commentid>
    <comment_count>2</comment_count>
    <who name="Антон Мидюков">antohami</who>
    <bug_when>2025-05-10 10:04:50 +0300</bug_when>
    <thetext>(Ответ для Dmitry V. Levin на комментарий #1)
&gt; $ grep ^- /etc/pam.d/common-login
&gt; -session	optional	pam_systemd.so
&gt; 
&gt; $ man pam.conf
&gt; If the type value from the list above is prepended with a - character the
&gt; PAM library will not log to the system log if it is not possible to load the
&gt; module because it is missing in the system. This can be useful especially
&gt; for modules which are not always installed on the system and are not
&gt; required for correct authentication and authorization of the login session.

Спасибо за разъяснение. Нужно исправлять пакеты.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>