#%PAM-1.0

auth		[success=1 default=ignore]	pam_succeed_if.so user ingroup users
auth		sufficient	pam_permit.so

account		substack	system-auth
account		substack	system-policy
account		required	pam_nologin.so

password	include		system-auth
password	include		system-policy

session		substack	system-auth
session		required	pam_loginuid.so
# Read environment variables from /etc/environment and /etc/security/pam_env.conf
session		required	pam_env.so
# Create a new session keyring.
session		optional	pam_keyinit.so force revoke
session		optional	pam_systemd.so
session		substack	system-policy
