#%PAM-1.0
auth        required      pam_unix.so

account     required      pam_unix.so

-session     required      pam_selinux.so close
-session    optional      pam_systemd.so
session     required      pam_unix.so
-session     required      pam_selinux.so open
session     optional      pam_keyinit.so force revoke
