libpam: Move to a new "pam" package

OpenPAM is a discrete, largely self-contained system component.
Users may not need PAM for many use-cases (e.g. jails, containers),
so move it to its own package.

Use LIB_PACKAGE to create a separate pam-lib package for libpam,
so that applications that support PAM don't need to bring in all
the PAM modules if PAM isn't actually in use.

Add pam to the minimal sets, since this is a core system component that
people expect to be installed.  This means all supported installation
methods will install the PAM modules by default, so don't add explicit
dependencies on the PAM modules from things that use PAM (e.g. runtime),
allowing custom/embedded systems to omit these easily.

This change adds a new package to the system so, until we have a proper
policy on how to handle this in release/stable branches, it should not
be MFC'd.

[stable/15: MFC under the re@ pkgbase policy for 15.1]

MFC after:	never
Reviewed by:	des, bapt
Sponsored by:	https://www.patreon.com/bsdivy
Differential Revision:	https://reviews.freebsd.org/D53602

(cherry picked from commit 560af6b43e2a86e591e94bea99777630cd5f84fd)

1 files changed, 12 insertions, 0 deletions

diff --git a/UPDATING b/UPDATING
index 749f59a30101..3515623bdfb0 100644
--- a/UPDATING
+++ b/UPDATING
@@ -13,6 +13,18 @@ Items affecting the ports and packages system can be found in
 and/or ports.
 
 20260407:
+	OpenPAM (including libpam and the PAM modules) has moved to the new
+	"pam" package.  The pam-lib subpackage, which includes libpam, will
+	be automatically installed when required.
+
+	If you have set-minimal(-jail) installed, the pam base package which
+	contains the PAM modules will also be automatically installed.
+	If you don't, you MUST manually install the FreeBSD-pam package if you
+	need to authenticate users, otherwise you won't be able to log in.
+
+	This change only affects pkgbase users.
+
+20260407:
 	Zstd has moved to the new "zstd" package.  If you have set-minimal
 	installed, this package will be installed automatically, otherwise
 	you might want to install it manually.  This change only affects