#%PAM-1.0
-auth required pam_listfile.so item=user sense=deny file=/etc/cron/cron.deny onerr=succeed
-auth required pam_listfile.so item=group sense=allow file=/etc/cron/cron.allow onerr=fail
auth include system-auth
account include system-auth
session include system-auth
+session optional pam_loginuid.so