login.pamd

   1 #%PAM-1.0
   2 auth            required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist.login onerr=succeed
   3 auth            required        pam_securetty.so
   4 auth            include         system-auth
   5 account         required        pam_shells.so
   6 account         required        pam_nologin.so
   7 account         required        pam_access.so
   8 account         include         system-auth
   9 password        include         system-auth
  10 # pam_selinux.so close should be the first session rule
  11 # session               required        pam_selinux.so close
  12 session         required        pam_loginuid.so
  13 session         include         system-auth
  14 session         optional        pam_console.so
  15 session         optional        pam_mail.so
  16 # pam_selinux.so open should only be followed by sessions to be executed in the user context
  17 #session                required        pam_selinux.so open
  18 #session                optional        pam_keyinit.so force revoke
  19 -session                optional        pam_ck_connector.so