3e8b5b
#%PAM-1.0
3e8b5b
auth       substack     password-auth
3e8b5b
auth       include      postlogin
3e8b5b
account    required     pam_sepermit.so
3e8b5b
account    required     pam_nologin.so
3e8b5b
account    include      password-auth
3e8b5b
password   include      password-auth
3e8b5b
# pam_selinux.so close should be the first session rule
3e8b5b
session    required     pam_selinux.so close
3e8b5b
session    required     pam_loginuid.so
3e8b5b
# pam_selinux.so open should only be followed by sessions to be executed in the user context
3e8b5b
session    required     pam_selinux.so open env_params
3e8b5b
session    required     pam_namespace.so
3e8b5b
session    optional     pam_keyinit.so force revoke
3e8b5b
session    optional     pam_motd.so
3e8b5b
session    include      password-auth
3e8b5b
session    include      postlogin