| #%PAM-1.0 |
| # This file is auto-generated. |
| # User changes will be destroyed the next time authselect is run. |
| auth required pam_env.so |
| auth [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card |
| auth required pam_deny.so |
| |
| account required pam_unix.so |
| account sufficient pam_localuser.so |
| account sufficient pam_succeed_if.so uid < 500 quiet |
| account required pam_permit.so |
| |
| password optional pam_pkcs11.so |
| |
| session optional pam_keyinit.so revoke |
| session required pam_limits.so |
| -session optional pam_systemd.so |
| session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid |
| session required pam_unix.so |