OK, I think libaudit.so
is coming from pam
:
$ ldd /usr/lib/libpam.so
linux-gate.so.1 (0xb7f60000)
libaudit.so.1 => /usr/lib/libaudit.so.1 (0xb7f00000)
libdl.so.2 => /usr/lib/libdl.so.2 (0xb7efa000)
libc.so.6 => /usr/lib/libc.so.6 (0xb7d18000)
libcap-ng.so.0 => /usr/lib/libcap-ng.so.0 (0xb7d11000)
/usr/lib/ld-linux.so.2 (0xb7f62000)
Let me rebuild pam
and see if libaudit
remains.