#%PAM-1.0
auth     sufficient	pam_rootok.so
auth     include	system-auth
account  include	system-auth
password required	pam_permit.so
session  required	pam_deny.so
