#%PAM-1.0
auth            [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.so
auth            required        pam_permit.so
account         include         system-auth
password        include         system-auth

session         include         system-auth
session         required        pam_loginuid.so
session         required        pam_namespace.so
session         optional        pam_keyinit.so force revoke
session         required        pam_smack.so