#%PAM-1.0

auth    requisite       pam_nologin.so
auth    required        pam_succeed_if.so user != root quiet_success
auth    [success=1 default=ignore] pam_unix.so nullok
auth    requisite       pam_deny.so
auth    required        pam_permit.so
-auth   optional        pam_kwallet5.so

@include common-account

session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so close
session optional        pam_keyinit.so force revoke
session required        pam_limits.so
session required        pam_loginuid.so
session required        pam_systemd.so
@include common-session
session [success=ok ignore=ignore module_unknown=ignore default=bad] pam_selinux.so open
-session optional       pam_kwallet5.so auto_start

@include common-password

session required        pam_env.so
session required        pam_env.so envfile=/etc/default/locale user_readenv=1
