sys-auth/pambase-20201020 started to propose the use of pam_cap.so (https://bugs.gentoo.org/750524) and error messages started to appear in logs upon any login, like these: sshd[12345]: PAM unable to resolve symbol: pam_sm_open_session sshd[12345]: PAM unable to resolve symbol: pam_sm_close_session The underlying reason is that libcap's pam_cap.so doesn't provide functions pam looks for. Reproducible: Always
Created attachment 669428 [details, diff] libcap-ignore-non-relevant-functions.patch Proposed patch to silence the log messages about missing symbols. Libcap currently implements pam_sm_authenticate and pam_sm_setcred. The patch adds the others (pam_sm_acct_mgmt, pam_sm_chauthtok, pam_sm_close_session and pam_sm_open_session) returning PAM_IGNORE. Handy until libcap would start implementing other functions.
I'll mark this as a duplicate of the other because I think (not had a chance to check yet), changing the realm in pambase for libcap was a regression but I need to investigate. Thank you for the patch, we may end up using it depending on what the actual issue is! *** This bug has been marked as a duplicate of bug 751946 ***
