|
1
|
#%PAM-1.0
|
|
2
|
auth required pam_sepermit.so
|
|
3
|
auth include password-auth
|
|
4
|
account required pam_nologin.so
|
|
5
|
account include password-auth
|
|
6
|
password include password-auth
|
|
7
|
# pam_selinux.so close should be the first session rule
|
|
8
|
session required pam_selinux.so close
|
|
9
|
session required pam_loginuid.so
|
|
10
|
# pam_selinux.so open should only be followed by sessions to be executed in the user context
|
|
11
|
session required pam_selinux.so open env_params
|
|
12
|
session optional pam_keyinit.so force revoke
|
|
13
|
session include password-auth
|