/etc/pam.d/system-auth-ldap:#%PAM-1.0 /etc/pam.d/system-auth-ldap: /etc/pam.d/system-auth-ldap:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-ldap:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-ldap:auth [default=1] pam_permit.so /etc/pam.d/system-auth-ldap:auth substack system-auth-ldap-only /etc/pam.d/system-auth-ldap:auth [default=1] pam_permit.so /etc/pam.d/system-auth-ldap:auth substack system-auth-local-only /etc/pam.d/system-auth-ldap:auth substack system-auth-common /etc/pam.d/system-auth-ldap: /etc/pam.d/system-auth-ldap:account [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-ldap:account [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-ldap:account [default=1] pam_permit.so /etc/pam.d/system-auth-ldap:account substack system-auth-ldap-only /etc/pam.d/system-auth-ldap:account [default=1] pam_permit.so /etc/pam.d/system-auth-ldap:account substack system-auth-local-only /etc/pam.d/system-auth-ldap:account substack system-auth-common /etc/pam.d/system-auth-ldap: /etc/pam.d/system-auth-ldap:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-ldap:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-ldap:password [default=1] pam_permit.so /etc/pam.d/system-auth-ldap:password substack system-auth-ldap-only /etc/pam.d/system-auth-ldap:password [default=1] pam_permit.so /etc/pam.d/system-auth-ldap:password substack system-auth-local-only /etc/pam.d/system-auth-ldap:password substack system-auth-common /etc/pam.d/system-auth-ldap: /etc/pam.d/system-auth-ldap:session [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-ldap:session [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-ldap:session [default=1] pam_permit.so /etc/pam.d/system-auth-ldap:session substack system-auth-ldap-only /etc/pam.d/system-auth-ldap:session [default=1] pam_permit.so /etc/pam.d/system-auth-ldap:session substack system-auth-local-only /etc/pam.d/system-auth-ldap:session substack system-auth-common /etc/pam.d/system-auth-use_first_pass-ldap-only:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-ldap-only:auth required pam_ldap.so use_first_pass /etc/pam.d/system-auth-use_first_pass-ldap-only:password required pam_ldap.so use_authtok /etc/pam.d/system-auth-use_first_pass-winbind-only:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-winbind-only:auth required pam_winbind.so use_first_pass /etc/pam.d/system-auth-use_first_pass-winbind-only:password required pam_winbind.so use_authtok /etc/pam.d/roleadd:#%PAM-1.0 /etc/pam.d/roleadd:auth required pam_rootok.so /etc/pam.d/roleadd:account required pam_permit.so /etc/pam.d/roleadd:password required pam_permit.so /etc/pam.d/roleadd:session required pam_deny.so /etc/pam.d/system-auth-local-only:#%PAM-1.0 /etc/pam.d/system-auth-local-only:auth required pam_tcb.so shadow fork nullok /etc/pam.d/system-auth-local-only:account required pam_tcb.so shadow fork /etc/pam.d/system-auth-local-only:password required pam_passwdqc.so config=/etc/passwdqc.conf /etc/pam.d/system-auth-local-only:password required pam_tcb.so use_authtok shadow fork nullok write_to=tcb /etc/pam.d/system-auth-local-only:session required pam_tcb.so /etc/pam.d/systemd-user:# This file is part of systemd. /etc/pam.d/systemd-user:# /etc/pam.d/systemd-user:# Used by systemd --user instances. /etc/pam.d/systemd-user: /etc/pam.d/systemd-user:account include common-login /etc/pam.d/systemd-user:-account sufficient pam_systemd_home.so /etc/pam.d/systemd-user:-session optional pam_selinux.so close /etc/pam.d/systemd-user:-session optional pam_selinux.so nottys open /etc/pam.d/systemd-user:session include common-login /etc/pam.d/systemd-user:session required pam_loginuid.so /etc/pam.d/systemd-user:session optional pam_keyinit.so force revoke /etc/pam.d/systemd-user:-session optional pam_systemd_home.so /etc/pam.d/system-auth-use_first_pass-multi:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-multi:auth [success=4 default=ignore] pam_tcb.so shadow fork nullok use_first_pass /etc/pam.d/system-auth-use_first_pass-multi:auth requisite pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-multi:-auth [success=2 default=ignore] pam_krb5.so use_first_pass /etc/pam.d/system-auth-use_first_pass-multi:-auth [success=1 default=ignore] pam_ldap.so use_first_pass /etc/pam.d/system-auth-use_first_pass-multi:auth required pam_deny.so /etc/pam.d/system-auth-use_first_pass-multi:auth required pam_permit.so /etc/pam.d/system-auth-use_first_pass-multi: /etc/pam.d/system-auth-use_first_pass-multi:password [success=4 default=ignore] pam_tcb.so use_authtok shadow fork nullok write_to=tcb /etc/pam.d/system-auth-use_first_pass-multi:password requisite pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-multi:-password [success=2 default=ignore] pam_krb5.so use_authtok /etc/pam.d/system-auth-use_first_pass-multi:-password [success=1 default=ignore] pam_ldap.so use_authtok /etc/pam.d/system-auth-use_first_pass-multi:password required pam_deny.so /etc/pam.d/system-auth-use_first_pass-multi:password required pam_permit.so /etc/pam.d/alterator-standalone:#%PAM-1.0 /etc/pam.d/alterator-standalone:auth sufficient pam_rootok.so /etc/pam.d/alterator-standalone:auth substack system-auth /etc/pam.d/alterator-standalone:account required pam_permit.so /etc/pam.d/alterator-standalone:password required pam_deny.so /etc/pam.d/alterator-standalone:session optional pam_xauth.so /etc/pam.d/other:#%PAM-1.0 /etc/pam.d/other:auth required pam_deny.so /etc/pam.d/other:account required pam_deny.so /etc/pam.d/other:password required pam_deny.so /etc/pam.d/other:session required pam_deny.so /etc/pam.d/passwd:#%PAM-1.0 /etc/pam.d/passwd:auth include system-auth /etc/pam.d/passwd:account include system-auth /etc/pam.d/passwd:password include system-auth /etc/pam.d/passwd:session required pam_deny.so /etc/pam.d/sssd-shadowutils:#%PAM-1.0 /etc/pam.d/sssd-shadowutils:auth [success=done ignore=ignore default=die] pam_unix.so nullok try_first_pass /etc/pam.d/sssd-shadowutils:auth required pam_deny.so /etc/pam.d/sssd-shadowutils: /etc/pam.d/sssd-shadowutils:account required pam_unix.so /etc/pam.d/sssd-shadowutils:account required pam_permit.so /etc/pam.d/system-auth-krb5:#%PAM-1.0 /etc/pam.d/system-auth-krb5: /etc/pam.d/system-auth-krb5:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-krb5:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-krb5:auth [default=1] pam_permit.so /etc/pam.d/system-auth-krb5:auth substack system-auth-krb5-only /etc/pam.d/system-auth-krb5:auth [default=1] pam_permit.so /etc/pam.d/system-auth-krb5:auth substack system-auth-local-only /etc/pam.d/system-auth-krb5:auth substack system-auth-common /etc/pam.d/system-auth-krb5: /etc/pam.d/system-auth-krb5:account [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-krb5:account [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-krb5:account [default=1] pam_permit.so /etc/pam.d/system-auth-krb5:account substack system-auth-krb5-only /etc/pam.d/system-auth-krb5:account [default=1] pam_permit.so /etc/pam.d/system-auth-krb5:account substack system-auth-local-only /etc/pam.d/system-auth-krb5:account substack system-auth-common /etc/pam.d/system-auth-krb5: /etc/pam.d/system-auth-krb5:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-krb5:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-krb5:password [default=1] pam_permit.so /etc/pam.d/system-auth-krb5:password substack system-auth-krb5-only /etc/pam.d/system-auth-krb5:password [default=1] pam_permit.so /etc/pam.d/system-auth-krb5:password substack system-auth-local-only /etc/pam.d/system-auth-krb5:password substack system-auth-common /etc/pam.d/system-auth-krb5: /etc/pam.d/system-auth-krb5:session [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-krb5:session [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-krb5:session [default=1] pam_permit.so /etc/pam.d/system-auth-krb5:session substack system-auth-krb5-only /etc/pam.d/system-auth-krb5:session [default=1] pam_permit.so /etc/pam.d/system-auth-krb5:session substack system-auth-local-only /etc/pam.d/system-auth-krb5:session substack system-auth-common /etc/pam.d/system-auth-use_first_pass-sss-only:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-sss-only:auth required pam_sss.so use_first_pass /etc/pam.d/system-auth-use_first_pass-sss-only:password required pam_sss.so use_authtok /etc/pam.d/system-auth-multi:#%PAM-1.0 /etc/pam.d/system-auth-multi:auth [success=4 default=ignore] pam_tcb.so shadow fork nullok /etc/pam.d/system-auth-multi:auth requisite pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-multi:-auth [success=2 default=ignore] pam_krb5.so use_first_pass /etc/pam.d/system-auth-multi:-auth [success=1 default=ignore] pam_ldap.so use_first_pass /etc/pam.d/system-auth-multi:auth required pam_deny.so /etc/pam.d/system-auth-multi:auth required pam_permit.so /etc/pam.d/system-auth-multi: /etc/pam.d/system-auth-multi:account [success=4 default=ignore] pam_tcb.so shadow fork /etc/pam.d/system-auth-multi:account requisite pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-multi:-account [success=2 default=ignore] pam_krb5.so /etc/pam.d/system-auth-multi:-account [success=1 default=ignore] pam_ldap.so /etc/pam.d/system-auth-multi:account required pam_deny.so /etc/pam.d/system-auth-multi:account required pam_permit.so /etc/pam.d/system-auth-multi: /etc/pam.d/system-auth-multi:password required pam_passwdqc.so config=/etc/passwdqc.conf /etc/pam.d/system-auth-multi:password [success=4 default=ignore] pam_tcb.so use_authtok shadow fork nullok write_to=tcb /etc/pam.d/system-auth-multi:password requisite pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-multi:-password [success=2 default=ignore] pam_krb5.so use_authtok /etc/pam.d/system-auth-multi:-password [success=1 default=ignore] pam_ldap.so use_authtok /etc/pam.d/system-auth-multi:password required pam_deny.so /etc/pam.d/system-auth-multi: /etc/pam.d/system-auth-multi:session [success=4 default=ignore] pam_tcb.so /etc/pam.d/system-auth-multi:session requisite pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-multi:-session [success=2 default=ignore] pam_krb5.so /etc/pam.d/system-auth-multi:-session [success=1 default=ignore] pam_ldap.so /etc/pam.d/system-auth-multi:session required pam_deny.so /etc/pam.d/system-auth-multi:session substack system-auth-common /etc/pam.d/common-login:#%PAM-1.0 /etc/pam.d/common-login:auth substack system-auth /etc/pam.d/common-login:auth substack system-policy /etc/pam.d/common-login:auth required pam_nologin.so /etc/pam.d/common-login:account substack system-auth /etc/pam.d/common-login:account substack system-policy /etc/pam.d/common-login:account required pam_nologin.so /etc/pam.d/common-login:password include system-auth /etc/pam.d/common-login:password include system-policy /etc/pam.d/common-login:session substack system-auth /etc/pam.d/common-login:session required pam_loginuid.so /etc/pam.d/common-login:-session optional pam_systemd.so /etc/pam.d/common-login:session substack system-policy /etc/pam.d/system-auth-use_first_pass-ldap:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-ldap: /etc/pam.d/system-auth-use_first_pass-ldap:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-ldap:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-ldap:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-ldap:auth substack system-auth-use_first_pass-ldap-only /etc/pam.d/system-auth-use_first_pass-ldap:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-ldap:auth substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-ldap:auth substack system-auth-common /etc/pam.d/system-auth-use_first_pass-ldap: /etc/pam.d/system-auth-use_first_pass-ldap:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-ldap:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-ldap:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-ldap:password substack system-auth-use_first_pass-ldap-only /etc/pam.d/system-auth-use_first_pass-ldap:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-ldap:password substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-ldap:password substack system-auth-common /etc/pam.d/sddm-greeter:#%PAM-1.0 /etc/pam.d/sddm-greeter: /etc/pam.d/sddm-greeter:# Load environment from /etc/environment and ~/.pam_environment /etc/pam.d/sddm-greeter:auth required pam_env.so /etc/pam.d/sddm-greeter: /etc/pam.d/sddm-greeter:# Always let the greeter start without authentication /etc/pam.d/sddm-greeter:auth required pam_permit.so /etc/pam.d/sddm-greeter: /etc/pam.d/sddm-greeter:# No action required for account management /etc/pam.d/sddm-greeter:account required pam_permit.so /etc/pam.d/sddm-greeter: /etc/pam.d/sddm-greeter:# Can't change password /etc/pam.d/sddm-greeter:password required pam_deny.so /etc/pam.d/sddm-greeter: /etc/pam.d/sddm-greeter:# Setup session /etc/pam.d/sddm-greeter:session required pam_unix.so /etc/pam.d/sddm-greeter:session optional pam_systemd.so /etc/pam.d/sddm-autologin:#%PAM-1.0 /etc/pam.d/sddm-autologin:auth required pam_nologin.so /etc/pam.d/sddm-autologin:auth required pam_permit.so /etc/pam.d/sddm-autologin:account include common-login /etc/pam.d/sddm-autologin:password include common-login /etc/pam.d/sddm-autologin:session substack common-login /etc/pam.d/sddm-autologin:session optional pam_console.so /etc/pam.d/sddm-autologin:session required pam_namespace.so /etc/pam.d/system-auth-use_first_pass-local-only:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-local-only:auth required pam_tcb.so shadow fork nullok use_first_pass /etc/pam.d/system-auth-use_first_pass-local-only:password required pam_tcb.so use_authtok shadow fork nullok write_to=tcb /etc/pam.d/samba:#%PAM-1.0 /etc/pam.d/samba:auth include common-login /etc/pam.d/samba:account include common-login /etc/pam.d/samba:password include common-login /etc/pam.d/samba:session include common-login /etc/pam.d/login:#%PAM-1.0 /etc/pam.d/login:auth required pam_securetty.so /etc/pam.d/login:auth include common-login /etc/pam.d/login:account include common-login /etc/pam.d/login:password include common-login /etc/pam.d/login:session substack common-login /etc/pam.d/login:session optional pam_lastlog.so nowtmp /etc/pam.d/login:session optional pam_motd.so /etc/pam.d/login:session optional pam_mail.so /etc/pam.d/login:-session optional pam_console.so /etc/pam.d/login:-session optional pam_ck_connector.so /etc/pam.d/common-login-use_first_pass:#%PAM-1.0 /etc/pam.d/common-login-use_first_pass:auth substack system-auth-use_first_pass /etc/pam.d/common-login-use_first_pass:auth required pam_nologin.so /etc/pam.d/system-auth-common:#%PAM-1.0 /etc/pam.d/system-auth-common:#account required pam_access.so /etc/pam.d/system-auth-common:session required pam_mktemp.so /etc/pam.d/system-auth-common:session required pam_limits.so /etc/pam.d/lightdm:#%PAM-1.0 /etc/pam.d/lightdm:auth required pam_shells.so /etc/pam.d/lightdm:auth required pam_succeed_if.so quiet uid ne 0 /etc/pam.d/lightdm:auth sufficient pam_succeed_if.so user ingroup nopasswdlogin /etc/pam.d/lightdm:auth substack common-login /etc/pam.d/lightdm:-auth optional pam_gnome_keyring.so /etc/pam.d/lightdm:-auth optional pam_mate_keyring.so /etc/pam.d/lightdm:-auth optional pam_kwallet.so /etc/pam.d/lightdm:-auth optional pam_kwallet5.so /etc/pam.d/lightdm:account include common-login /etc/pam.d/lightdm:password include common-login /etc/pam.d/lightdm:session substack common-login /etc/pam.d/lightdm:session optional pam_console.so /etc/pam.d/lightdm:-session optional pam_ck_connector.so /etc/pam.d/lightdm:session required pam_namespace.so /etc/pam.d/lightdm:-session optional pam_gnome_keyring.so auto_start /etc/pam.d/lightdm:-session optional pam_mate_keyring.so auto_start /etc/pam.d/lightdm:-session optional pam_kwallet.so auto_start /etc/pam.d/lightdm:-session optional pam_kwallet5.so auto_start /etc/pam.d/system-auth-use_first_pass-pkcs11:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-pkcs11:auth [success=1 default=ignore] pam_pkcs11.so use_first_pass /etc/pam.d/system-auth-use_first_pass-pkcs11:auth substack system-auth-use_first_pass-local /etc/pam.d/system-auth-use_first_pass-pkcs11:auth required pam_permit.so /etc/pam.d/system-auth-use_first_pass-pkcs11: /etc/pam.d/system-auth-use_first_pass-pkcs11:password include system-auth-use_first_pass-local /etc/pam.d/crond:#%PAM-1.0 /etc/pam.d/crond:auth required pam_rootok.so /etc/pam.d/crond:account include common-login /etc/pam.d/crond:session include common-login /etc/pam.d/polkit-1:#%PAM-1.0 /etc/pam.d/polkit-1: /etc/pam.d/polkit-1:auth include system-auth /etc/pam.d/polkit-1:account include system-auth /etc/pam.d/polkit-1:password include system-auth /etc/pam.d/polkit-1:session include system-auth /etc/pam.d/system-auth-use_first_pass-winbind:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-winbind: /etc/pam.d/system-auth-use_first_pass-winbind:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-winbind:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-winbind:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-winbind:auth substack system-auth-use_first_pass-winbind-only /etc/pam.d/system-auth-use_first_pass-winbind:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-winbind:auth substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-winbind:auth substack system-auth-common /etc/pam.d/system-auth-use_first_pass-winbind: /etc/pam.d/system-auth-use_first_pass-winbind:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-winbind:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-winbind:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-winbind:password substack system-auth-use_first_pass-winbind-only /etc/pam.d/system-auth-use_first_pass-winbind:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-winbind:password substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-winbind:password substack system-auth-common /etc/pam.d/system-auth-winbind-only:#%PAM-1.0 /etc/pam.d/system-auth-winbind-only:auth required pam_winbind.so krb5_auth /etc/pam.d/system-auth-winbind-only:account required pam_winbind.so /etc/pam.d/system-auth-winbind-only:password required pam_winbind.so /etc/pam.d/system-auth-winbind-only:session required pam_winbind.so /etc/pam.d/system-auth-ldap-only:#%PAM-1.0 /etc/pam.d/system-auth-ldap-only:auth required pam_ldap.so /etc/pam.d/system-auth-ldap-only:account required pam_ldap.so /etc/pam.d/system-auth-ldap-only:password required pam_ldap.so /etc/pam.d/system-auth-ldap-only:session required pam_ldap.so /etc/pam.d/system-auth-sss-only:#%PAM-1.0 /etc/pam.d/system-auth-sss-only:auth required pam_sss.so forward_pass /etc/pam.d/system-auth-sss-only:account required pam_sss.so /etc/pam.d/system-auth-sss-only:password required pam_sss.so /etc/pam.d/system-auth-sss-only:session required pam_sss.so /etc/pam.d/system-auth-krb5_ccreds-only:#%PAM-1.0 /etc/pam.d/system-auth-krb5_ccreds-only:auth [success=1 service_err=reset default=ignore] pam_krb5.so ccache=/tmp/krb5cc_%u /etc/pam.d/system-auth-krb5_ccreds-only:auth [success=2 default=1] pam_ccreds.so action=validate use_first_pass /etc/pam.d/system-auth-krb5_ccreds-only:auth [default=1] pam_ccreds.so action=store use_first_pass /etc/pam.d/system-auth-krb5_ccreds-only:auth required pam_deny.so /etc/pam.d/system-auth-krb5_ccreds-only:auth required pam_permit.so /etc/pam.d/system-auth-krb5_ccreds-only:account include system-auth-krb5-only /etc/pam.d/system-auth-krb5_ccreds-only:password include system-auth-krb5-only /etc/pam.d/system-auth-krb5_ccreds-only:session include system-auth-krb5-only /etc/pam.d/vmtoolsd:#%PAM-1.0 /etc/pam.d/vmtoolsd: /etc/pam.d/vmtoolsd:auth include common-login /etc/pam.d/vmtoolsd:account include common-login /etc/pam.d/vmtoolsd: /etc/pam.d/su:#%PAM-1.0 /etc/pam.d/su:auth sufficient pam_rootok.so /etc/pam.d/su:# Uncomment the following line to implicitly trust users in the "wheel" group. /etc/pam.d/su:#auth sufficient pam_wheel.so debug use_uid group=wheel trust /etc/pam.d/su:# Uncomment the following line to require a user to be in the "wheel" group. /etc/pam.d/su:#auth required pam_wheel.so debug use_uid group=wheel /etc/pam.d/su:# Uncomment the following line to implicitly trust users with same user id. /etc/pam.d/su:#auth sufficient pam_sameuid.so debug /etc/pam.d/su:auth include system-auth /etc/pam.d/su:account include system-auth /etc/pam.d/su:password required pam_deny.so /etc/pam.d/su:session include system-auth /etc/pam.d/su:session optional pam_xauth.so /etc/pam.d/kf5-screenlocker:#%PAM-1.0 /etc/pam.d/kf5-screenlocker:auth sufficient pam_succeed_if.so user ingroup nopasswdlogin /etc/pam.d/kf5-screenlocker:auth include system-auth /etc/pam.d/sshd:#%PAM-1.0 /etc/pam.d/sshd:auth required pam_userpass.so /etc/pam.d/sshd:auth include common-login-use_first_pass /etc/pam.d/sshd:account include common-login /etc/pam.d/sshd:password include common-login /etc/pam.d/sshd:session include common-login /etc/pam.d/screen:#%PAM-1.0 /etc/pam.d/screen:auth required pam_userpass.so /etc/pam.d/screen:auth required pam_tcb.so use_first_pass shadow fork nodelay nullok helper=/usr/lib/screen/tcb_chkpwd /etc/pam.d/screen:account required pam_deny.so /etc/pam.d/screen:password required pam_deny.so /etc/pam.d/screen:session required pam_deny.so /etc/pam.d/groupmems:#%PAM-1.0 /etc/pam.d/groupmems:auth sufficient pam_rootok.so /etc/pam.d/groupmems:auth include system-auth /etc/pam.d/groupmems:account include system-auth /etc/pam.d/groupmems:password required pam_permit.so /etc/pam.d/groupmems:session required pam_deny.so /etc/pam.d/ppp:#%PAM-1.0 /etc/pam.d/ppp:auth include common-login /etc/pam.d/ppp:account include common-login /etc/pam.d/ppp:session include common-login /etc/pam.d/system-auth-sss:#%PAM-1.0 /etc/pam.d/system-auth-sss: /etc/pam.d/system-auth-sss:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-sss:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-sss:auth [default=1] pam_permit.so /etc/pam.d/system-auth-sss:auth substack system-auth-sss-only /etc/pam.d/system-auth-sss:auth [default=1] pam_permit.so /etc/pam.d/system-auth-sss:auth substack system-auth-local-only /etc/pam.d/system-auth-sss:auth substack system-auth-common /etc/pam.d/system-auth-sss: /etc/pam.d/system-auth-sss:account [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-sss:account [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-sss:account [default=1] pam_permit.so /etc/pam.d/system-auth-sss:account substack system-auth-sss-only /etc/pam.d/system-auth-sss:account [default=1] pam_permit.so /etc/pam.d/system-auth-sss:account substack system-auth-local-only /etc/pam.d/system-auth-sss:account substack system-auth-common /etc/pam.d/system-auth-sss: /etc/pam.d/system-auth-sss:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-sss:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-sss:password [default=1] pam_permit.so /etc/pam.d/system-auth-sss:password substack system-auth-sss-only /etc/pam.d/system-auth-sss:password [default=1] pam_permit.so /etc/pam.d/system-auth-sss:password substack system-auth-local-only /etc/pam.d/system-auth-sss:password substack system-auth-common /etc/pam.d/system-auth-sss: /etc/pam.d/system-auth-sss:session [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-sss:session [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-sss:session [default=1] pam_permit.so /etc/pam.d/system-auth-sss:session substack system-auth-sss-only /etc/pam.d/system-auth-sss:session [default=1] pam_permit.so /etc/pam.d/system-auth-sss:session substack system-auth-local-only /etc/pam.d/system-auth-sss:session substack system-auth-common /etc/pam.d/system-auth-pkcs11:#%PAM-1.0 /etc/pam.d/system-auth-pkcs11:auth [success=1 default=ignore] pam_pkcs11.so /etc/pam.d/system-auth-pkcs11:auth substack system-auth-local /etc/pam.d/system-auth-pkcs11:auth required pam_permit.so /etc/pam.d/system-auth-pkcs11: /etc/pam.d/system-auth-pkcs11:account include system-auth-local /etc/pam.d/system-auth-pkcs11: /etc/pam.d/system-auth-pkcs11:password include system-auth-local /etc/pam.d/system-auth-pkcs11: /etc/pam.d/system-auth-pkcs11:session include system-auth-local /etc/pam.d/lightdm-autologin:#%PAM-1.0 /etc/pam.d/lightdm-autologin:auth required pam_nologin.so /etc/pam.d/lightdm-autologin:auth required pam_permit.so /etc/pam.d/lightdm-autologin:account include common-login /etc/pam.d/lightdm-autologin:password include common-login /etc/pam.d/lightdm-autologin:session substack common-login /etc/pam.d/lightdm-autologin:session optional pam_console.so /etc/pam.d/lightdm-autologin:-session optional pam_ck_connector.so /etc/pam.d/lightdm-autologin:session required pam_namespace.so /etc/pam.d/lightdm-greeter:#%PAM-1.0 /etc/pam.d/lightdm-greeter: /etc/pam.d/lightdm-greeter:account required pam_nologin.so /etc/pam.d/lightdm-greeter:account required pam_succeed_if.so audit quiet_success user = _ldm /etc/pam.d/lightdm-greeter:account required pam_permit.so /etc/pam.d/lightdm-greeter:auth required pam_env.so /etc/pam.d/lightdm-greeter:auth required pam_succeed_if.so audit quiet_success user = _ldm /etc/pam.d/lightdm-greeter:auth required pam_permit.so /etc/pam.d/lightdm-greeter:password required pam_deny.so /etc/pam.d/lightdm-greeter:session required pam_loginuid.so /etc/pam.d/lightdm-greeter:-session required pam_systemd.so class=greeter /etc/pam.d/lightdm-greeter:session required pam_succeed_if.so audit quiet_success user = _ldm /etc/pam.d/lightdm-greeter:session required pam_env.so user_readenv=1 /etc/pam.d/lightdm-greeter:session required pam_permit.so /etc/pam.d/system-auth-krb5-only:#%PAM-1.0 /etc/pam.d/system-auth-krb5-only:auth required pam_krb5.so /etc/pam.d/system-auth-krb5-only:account required pam_krb5.so /etc/pam.d/system-auth-krb5-only:password required pam_krb5.so /etc/pam.d/system-auth-krb5-only:session required pam_krb5.so /etc/pam.d/system-auth-use_first_pass-krb5_ccreds-only:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-krb5_ccreds-only:auth [success=1 service_err=reset default=ignore] pam_krb5.so use_first_pass ccache=/tmp/krb5cc_%u /etc/pam.d/system-auth-use_first_pass-krb5_ccreds-only:auth [success=2 default=1] pam_ccreds.so action=validate use_first_pass /etc/pam.d/system-auth-use_first_pass-krb5_ccreds-only:auth [default=1] pam_ccreds.so action=store use_first_pass /etc/pam.d/system-auth-use_first_pass-krb5_ccreds-only:auth required pam_deny.so /etc/pam.d/system-auth-use_first_pass-krb5_ccreds-only:auth required pam_permit.so /etc/pam.d/system-auth-use_first_pass-krb5_ccreds-only:password include system-auth-use_first_pass-krb5-only /etc/pam.d/system-auth-krb5_ccreds:#%PAM-1.0 /etc/pam.d/system-auth-krb5_ccreds: /etc/pam.d/system-auth-krb5_ccreds:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-krb5_ccreds:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-krb5_ccreds:auth [default=1] pam_permit.so /etc/pam.d/system-auth-krb5_ccreds:auth substack system-auth-krb5_ccreds-only /etc/pam.d/system-auth-krb5_ccreds:auth [default=1] pam_permit.so /etc/pam.d/system-auth-krb5_ccreds:auth substack system-auth-local-only /etc/pam.d/system-auth-krb5_ccreds:auth substack system-auth-common /etc/pam.d/system-auth-krb5_ccreds: /etc/pam.d/system-auth-krb5_ccreds:account [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-krb5_ccreds:account [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-krb5_ccreds:account [default=1] pam_permit.so /etc/pam.d/system-auth-krb5_ccreds:account substack system-auth-krb5_ccreds-only /etc/pam.d/system-auth-krb5_ccreds:account [default=1] pam_permit.so /etc/pam.d/system-auth-krb5_ccreds:account substack system-auth-local-only /etc/pam.d/system-auth-krb5_ccreds:account substack system-auth-common /etc/pam.d/system-auth-krb5_ccreds: /etc/pam.d/system-auth-krb5_ccreds:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-krb5_ccreds:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-krb5_ccreds:password [default=1] pam_permit.so /etc/pam.d/system-auth-krb5_ccreds:password substack system-auth-krb5_ccreds-only /etc/pam.d/system-auth-krb5_ccreds:password [default=1] pam_permit.so /etc/pam.d/system-auth-krb5_ccreds:password substack system-auth-local-only /etc/pam.d/system-auth-krb5_ccreds:password substack system-auth-common /etc/pam.d/system-auth-krb5_ccreds: /etc/pam.d/system-auth-krb5_ccreds:session [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-krb5_ccreds:session [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-krb5_ccreds:session [default=1] pam_permit.so /etc/pam.d/system-auth-krb5_ccreds:session substack system-auth-krb5_ccreds-only /etc/pam.d/system-auth-krb5_ccreds:session [default=1] pam_permit.so /etc/pam.d/system-auth-krb5_ccreds:session substack system-auth-local-only /etc/pam.d/system-auth-krb5_ccreds:session substack system-auth-common /etc/pam.d/xserver:#%PAM-1.0 /etc/pam.d/xserver:auth sufficient pam_rootok.so /etc/pam.d/xserver:auth required pam_console.so /etc/pam.d/xserver:account required pam_permit.so /etc/pam.d/system-auth-local:#%PAM-1.0 /etc/pam.d/system-auth-local:auth include system-auth-local-only /etc/pam.d/system-auth-local:auth include system-auth-common /etc/pam.d/system-auth-local:account include system-auth-local-only /etc/pam.d/system-auth-local:account include system-auth-common /etc/pam.d/system-auth-local:password include system-auth-local-only /etc/pam.d/system-auth-local:password include system-auth-common /etc/pam.d/system-auth-local:session include system-auth-local-only /etc/pam.d/system-auth-local:session include system-auth-common /etc/pam.d/system-policy-remote:#%PAM-1.0 /etc/pam.d/system-policy-remote:session required pam_mkhomedir.so silent /etc/pam.d/roledel:#%PAM-1.0 /etc/pam.d/roledel:auth required pam_rootok.so /etc/pam.d/roledel:account required pam_permit.so /etc/pam.d/roledel:password required pam_permit.so /etc/pam.d/roledel:session required pam_deny.so /etc/pam.d/system-auth-use_first_pass-local:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-local:auth include system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-local:auth include system-auth-common /etc/pam.d/system-auth-use_first_pass-local:password include system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-local:password include system-auth-common /etc/pam.d/chpasswd-newusers:#%PAM-1.0 /etc/pam.d/chpasswd-newusers:auth required pam_rootok.so /etc/pam.d/chpasswd-newusers:account required pam_permit.so /etc/pam.d/chpasswd-newusers:password required pam_userpass.so /etc/pam.d/chpasswd-newusers:password include system-auth-use_first_pass-local /etc/pam.d/chpasswd-newusers:session required pam_deny.so /etc/pam.d/sddm:#%PAM-1.0 /etc/pam.d/sddm:auth required pam_shells.so /etc/pam.d/sddm:auth required pam_succeed_if.so quiet uid ne 0 /etc/pam.d/sddm:auth sufficient pam_succeed_if.so user ingroup nopasswdlogin /etc/pam.d/sddm:auth substack common-login /etc/pam.d/sddm:-auth optional pam_kwallet.so /etc/pam.d/sddm:-auth optional pam_kwallet5.so /etc/pam.d/sddm:account include common-login /etc/pam.d/sddm:password include common-login /etc/pam.d/sddm:session substack common-login /etc/pam.d/sddm:session optional pam_console.so /etc/pam.d/sddm:session required pam_namespace.so /etc/pam.d/sddm:-session optional pam_kwallet.so auto_start /etc/pam.d/sddm:-session optional pam_kwallet5.so auto_start /etc/pam.d/system-policy-local:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-krb5_ccreds: /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:auth substack system-auth-use_first_pass-krb5_ccreds-only /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:auth substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:auth substack system-auth-common /etc/pam.d/system-auth-use_first_pass-krb5_ccreds: /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:password substack system-auth-use_first_pass-krb5_ccreds-only /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:password substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-krb5_ccreds:password substack system-auth-common /etc/pam.d/user-group-mod:#%PAM-1.0 /etc/pam.d/user-group-mod:# $Id: user-group-mod.pam,v 1.1 2001/11/12 01:47:45 solar Exp $ /etc/pam.d/user-group-mod:auth required pam_rootok.so /etc/pam.d/user-group-mod:account required pam_permit.so /etc/pam.d/user-group-mod:password required pam_permit.so /etc/pam.d/user-group-mod:session required pam_deny.so /etc/pam.d/system-auth-use_first_pass-krb5-only:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-krb5-only:auth required pam_krb5.so use_first_pass /etc/pam.d/system-auth-use_first_pass-krb5-only:password required pam_krb5.so use_authtok /etc/pam.d/system-auth-use_first_pass-sss:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-sss: /etc/pam.d/system-auth-use_first_pass-sss:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-sss:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-sss:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-sss:auth substack system-auth-use_first_pass-sss-only /etc/pam.d/system-auth-use_first_pass-sss:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-sss:auth substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-sss:auth substack system-auth-common /etc/pam.d/system-auth-use_first_pass-sss: /etc/pam.d/system-auth-use_first_pass-sss:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-sss:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-sss:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-sss:password substack system-auth-use_first_pass-sss-only /etc/pam.d/system-auth-use_first_pass-sss:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-sss:password substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-sss:password substack system-auth-common /etc/pam.d/system-auth-use_first_pass-krb5:#%PAM-1.0 /etc/pam.d/system-auth-use_first_pass-krb5: /etc/pam.d/system-auth-use_first_pass-krb5:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-krb5:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-krb5:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-krb5:auth substack system-auth-use_first_pass-krb5-only /etc/pam.d/system-auth-use_first_pass-krb5:auth [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-krb5:auth substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-krb5:auth substack system-auth-common /etc/pam.d/system-auth-use_first_pass-krb5: /etc/pam.d/system-auth-use_first_pass-krb5:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-use_first_pass-krb5:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-use_first_pass-krb5:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-krb5:password substack system-auth-use_first_pass-krb5-only /etc/pam.d/system-auth-use_first_pass-krb5:password [default=1] pam_permit.so /etc/pam.d/system-auth-use_first_pass-krb5:password substack system-auth-use_first_pass-local-only /etc/pam.d/system-auth-use_first_pass-krb5:password substack system-auth-common /etc/pam.d/runuser:#%PAM-1.0 /etc/pam.d/runuser:auth sufficient pam_rootok.so /etc/pam.d/runuser:session optional pam_keyinit.so revoke /etc/pam.d/runuser:session required pam_limits.so /etc/pam.d/runuser:session required pam_unix.so /etc/pam.d/system-auth-winbind:#%PAM-1.0 /etc/pam.d/system-auth-winbind: /etc/pam.d/system-auth-winbind:auth [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-winbind:auth [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-winbind:auth [default=1] pam_permit.so /etc/pam.d/system-auth-winbind:auth substack system-auth-winbind-only /etc/pam.d/system-auth-winbind:auth [default=1] pam_permit.so /etc/pam.d/system-auth-winbind:auth substack system-auth-local-only /etc/pam.d/system-auth-winbind:auth substack system-auth-common /etc/pam.d/system-auth-winbind: /etc/pam.d/system-auth-winbind:account [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-winbind:account [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-winbind:account [default=1] pam_permit.so /etc/pam.d/system-auth-winbind:account substack system-auth-winbind-only /etc/pam.d/system-auth-winbind:account [default=1] pam_permit.so /etc/pam.d/system-auth-winbind:account substack system-auth-local-only /etc/pam.d/system-auth-winbind:account substack system-auth-common /etc/pam.d/system-auth-winbind: /etc/pam.d/system-auth-winbind:password [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-winbind:password [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-winbind:password [default=1] pam_permit.so /etc/pam.d/system-auth-winbind:password substack system-auth-winbind-only /etc/pam.d/system-auth-winbind:password [default=1] pam_permit.so /etc/pam.d/system-auth-winbind:password substack system-auth-local-only /etc/pam.d/system-auth-winbind:password substack system-auth-common /etc/pam.d/system-auth-winbind: /etc/pam.d/system-auth-winbind:session [success=4 perm_denied=ignore default=die] pam_localuser.so /etc/pam.d/system-auth-winbind:session [success=1 default=bad] pam_succeed_if.so uid >= 500 quiet /etc/pam.d/system-auth-winbind:session [default=1] pam_permit.so /etc/pam.d/system-auth-winbind:session substack system-auth-winbind-only /etc/pam.d/system-auth-winbind:session [default=1] pam_permit.so /etc/pam.d/system-auth-winbind:session substack system-auth-local-only /etc/pam.d/system-auth-winbind:session substack system-auth-common /etc/pam.d/alterator-chkpwd:#%PAM-1.0 /etc/pam.d/alterator-chkpwd:auth required pam_userpass.so /etc/pam.d/alterator-chkpwd:auth include system-auth-use_first_pass /etc/pam.d/alterator-chkpwd:account include system-auth /etc/pam.d/packageinstall:#%PAM-1.0 /etc/pam.d/packageinstall:auth sufficient pam_rootok.so /etc/pam.d/packageinstall:auth include system-auth /etc/pam.d/packageinstall:account required pam_permit.so /etc/pam.d/packageinstall:password required pam_deny.so /etc/pam.d/packageinstall:session optional pam_xauth.so /etc/pam.d/sudo:#%PAM-1.0 /etc/pam.d/sudo:auth include system-auth /etc/pam.d/sudo:account include system-auth /etc/pam.d/sudo:password required pam_deny.so /etc/pam.d/sudo:session include system-auth /etc/pam.d/acc:#%PAM-1.0 /etc/pam.d/acc:auth sufficient pam_rootok.so /etc/pam.d/acc:auth substack system-auth /etc/pam.d/acc:account required pam_permit.so /etc/pam.d/acc:password required pam_deny.so /etc/pam.d/acc:session optional pam_xauth.so /etc/pam.d/runuser-l:#%PAM-1.0 /etc/pam.d/runuser-l:auth include runuser /etc/pam.d/runuser-l:session optional pam_keyinit.so force revoke /etc/pam.d/runuser-l:-session optional pam_systemd.so /etc/pam.d/runuser-l:session include runuser