#%PAM-1.0
auth            requisite       pam_nologin.so
auth            [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.so
auth            include         system-auth
account         required        pam_nologin.so
account         include         system-auth
password        include         system-auth

session         include         system-auth
session         required        pam_systemd.so
session         required        pam_loginuid.so
session         required        pam_namespace.so
session         optional        pam_keyinit.so force revoke
session         required        pam_smack.so