I think in case of PAM, FAILLOG_ENAB is NOT SUPPORTED, but "login" is using /var/log/faillog when system is up. When turn to init=1, /var can't unmount. Any definition of FAILLOG_ENAB make errors. Reproducible: Always Actual Results: /var/log/faillog is opend and in use every time. Expected Results: Close /var/log/faillog when autherntication is finished OR not use /var/log/faillog. Checked sys-apps/shadow-4.0.18.2 and sys-apps/shadow-4.1.2.2
*** This bug has been marked as a duplicate of bug 250475 ***