ca47f6
#%PAM-1.0
6a5e29
auth	   required	pam_sepermit.so
Jan F. Chadima d3d340
auth       substack     password-auth
Jan F. Chadima 0d4fd5
auth       include      postlogin
ca47f6
account    required     pam_nologin.so
4330e6
account    include      password-auth
4330e6
password   include      password-auth
1961bc
# pam_selinux.so close should be the first session rule
1961bc
session    required     pam_selinux.so close
ca47f6
session    required     pam_loginuid.so
1961bc
# pam_selinux.so open should only be followed by sessions to be executed in the user context
1961bc
session    required     pam_selinux.so open env_params
1961bc
session    optional     pam_keyinit.so force revoke
4330e6
session    include      password-auth
Jan F. Chadima 0d4fd5
session    include      postlogin