Bug 1983683

Description of problem:

pam_pkcs11.so is deprecated in RHEL 8.

But pam_pkcs11 can be still seen in configuration file.

Version-Release number of selected component (if applicable):

RHEL 8.4

How reproducible:


Steps to Reproduce:
1.# sudo rm -f /etc/pam.d/smartcard-auth

2.# sudo yum reinstall pam

3.

# cat /etc/pam.d/smartcard-auth
#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authselect is run.
auth        required      pam_env.so
auth        [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card                                         <=== Module can be seen
auth        required      pam_deny.so

account     required      pam_unix.so
account     sufficient    pam_localuser.so
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     required      pam_permit.so

password    optional      pam_pkcs11.so

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
-session     optional      pam_systemd.so
session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session     required      pam_unix.so

Actual results:

auth        [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card  can be seen in configuration file.

Expected results:
Below should not be seen in /etc/pam.d/smartcard-auth
auth        [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card 

Additional info: