auth       sufficient pam_rootok.so
session       required   pam_env.so readenv=1
session       required   pam_env.so readenv=1   envfile=/etc/default/locale
 session    optional   pam_mail.so nopen
 session    required   pam_limits.so
 auth           [success=2 default=ignore] pam_succeed_if.so use_uid user   notingroup loggedin
  auth           required pam_wheel.so use_uid group=loggedin
  auth           required pam_listfile.so item=user sense=allow onerr=fail   file=/etc/security/su-loggedin-access
 auth           include        system-auth
 account        sufficient     pam_succeed_if.so uid = 0 use_uid quiet
account        include        system-auth
password       include        system-auth
session        include        system-auth
session        optional       pam_xauth.so
@include common-auth
@include common-account
@include common-session