Генерируются зависимости на опциональные PAM-модули. Например, пакет gdm-data имеет зависимости на: PAM(pam_console.so) PAM(pam_gnome_keyring.so) При том, что они опциональные: # grep pam_console.so $(rpm -ql gdm-data |grep pam) /etc/pam.d/gdm-autologin:session optional pam_console.so /etc/pam.d/gdm-fingerprint:session optional pam_console.so /etc/pam.d/gdm-password:session optional pam_console.so /etc/pam.d/gdm-smartcard:session optional pam_console.so # grep pam_gnome_keyring.so $(rpm -ql gdm-data |grep pam) /etc/pam.d/gdm-autologin:session optional pam_gnome_keyring.so auto_start /etc/pam.d/gdm-fingerprint:auth optional pam_gnome_keyring.so /etc/pam.d/gdm-fingerprint:password optional pam_gnome_keyring.so use_authtok /etc/pam.d/gdm-fingerprint:session optional pam_gnome_keyring.so auto_start /etc/pam.d/gdm-password:auth optional pam_gnome_keyring.so /etc/pam.d/gdm-password:password optional pam_gnome_keyring.so use_authtok /etc/pam.d/gdm-password:session optional pam_gnome_keyring.so auto_start /etc/pam.d/gdm-smartcard:auth optional pam_gnome_keyring.so /etc/pam.d/gdm-smartcard:password optional pam_gnome_keyring.so use_authtok /etc/pam.d/gdm-smartcard:session optional pam_gnome_keyring.so auto_start
$ grep ^- /etc/pam.d/common-login -session optional pam_systemd.so $ man pam.conf If the type value from the list above is prepended with a - character the PAM library will not log to the system log if it is not possible to load the module because it is missing in the system. This can be useful especially for modules which are not always installed on the system and are not required for correct authentication and authorization of the login session.
