1 #%PAM-1.0
  2 auth [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.so
  3 auth       include      system-auth
  4 account    required     pam_nologin.so
  5 account    include      system-auth
  6 password   include      system-auth
  7 # pam_selinux.so close should be the first session rule
  8 session    required     pam_selinux.so close
  9 session    include      system-auth
 10 session    required     pam_loginuid.so
 11 session    optional     pam_console.so
 12 # pam_selinux.so open should only be followed by sessions to be executed in the user context
 13 session    required     pam_selinux.so open
 14 session    optional     pam_keyinit.so force revoke