I am not sure if this is a PAM or a login (util-linux) bug, but I suspect that it's a PAM one. Logins (console or telnet) are logged in a very strange and I think broken way on Rawhide at the moment (versions pam-0.66-8 and util-linux-2.9o-6). They produce things like: Apr 7 19:22:00 bevm -- root [650]: ROOT LOGIN ON tty1 and Apr 7 19:22:55 bevm -- cks [703]: LOGIN ON 0 BY cks FROM localhost (yes, that's all one line in each case) Possibly this is a bug in syslog (sysklogd-1.3.31-3), so I mention its version for completeness. (All of this is on an i386 platform)
Fixed in util-linux-2.9.o-10