Petr Šabata 81d24c
#%PAM-1.0
Petr Šabata 81d24c
# pam_selinux.so close should be the first session rule
Petr Šabata 81d24c
session    required     pam_selinux.so close
Petr Šabata 81d24c
session    required     pam_loginuid.so
Petr Šabata 81d24c
# pam_selinux.so open should only be followed by sessions to be executed in the user context
Petr Šabata 81d24c
session    required     pam_selinux.so open env_params
Petr Šabata 81d24c
session    required     pam_namespace.so
Petr Šabata 81d24c