#%PAM-1.0 auth required pam_listfile.so item=user sense=deny file=/etc/cron/cron.deny onerr=succeed auth required pam_listfile.so item=group sense=allow file=/etc/cron/cron.allow onerr=fail auth include system-auth account include system-auth session include system-auth