auth            required        pam_unix.so nullok

account         required        pam_unix.so

password        required        pam_unix.so nullok

# session       required        pam_selinux.so close
session         required        pam_limits.so
session         required        pam_env.so
session         required        pam_unix.so
# session       required        pam_selinux.so open
-session   optional   pam_systemd.so