#%PAM-1.0 # Note that runuser requires only "session" setting (and for example "auth sufficient pam_rootok.so" dummy line). auth sufficient pam_rootok.so session optional pam_keyinit.so revoke session include common-session session optional pam_xauth.so