#%PAM-1.0
session    required     pam_loginuid.so
-session   required     pam_selinux.so open
session    required     pam_namespace.so
session    optional     pam_keyinit.so force revoke
session    required     pam_limits.so
session    optional     pam_elogind.so
session    required     pam_unix.so
