auth	required							pam_permit.so

account	required							pam_permit.so

session	[success=ok ignore=ignore module_unknown=ignore default=bad]	pam_selinux.so close
session	required							pam_loginuid.so
session	optional							pam_keyinit.so force revoke
session	optional							pam_umask.so
session	optional							pam_motd.so motd=/run/motd.dynamic
session	optional							pam_motd.so noupdate
session	required							pam_limits.so
session	required							pam_env.so
session	required							pam_env.so envfile=/etc/default/locale
session	[success=ok ignore=ignore module_unknown=ignore default=bad]	pam_selinux.so open
session	optional							pam_mkhomedir.so 
session	required							pam_permit.so