auth [success=done ignore=ignore default=bad] pam_selinux_permit.so auth substack password-auth auth required pam_succeed_if.so user != root quiet auth optional pam_gnome_keyring.so account required pam_nologin.so account include password-auth password include password-auth session required pam_selinux.so close session required pam_loginuid.so session optional pam_console.so session required pam_selinux.so open session optional pam_keyinit.so force revoke session required pam_namespace.so session optional pam_gnome_keyring.so auto_start session include password-auth