#%PAM-1.0 auth required pam_listfile.so item=user sense=deny file=/etc/security/blacklist.sshd onerr=succeed auth include system-auth auth include postlogin account required pam_shells.so account required pam_nologin.so account required pam_access.so account include system-auth password include system-auth session required pam_loginuid.so session optional pam_keyinit.so force revoke session include system-auth session include postlogin session optional pam_mail.so