selinux-openssh/sshd.pam

   1 #%PAM-1.0
   2 #auth           required        pam_securetty.so        #Disable remote root
   3 auth            required        pam_unix.so
   4 auth            required        pam_env.so
   5 account         required        pam_nologin.so
   6 account         required        pam_unix.so
   7 account         required        pam_time.so
   8 password        required        pam_unix.so
   9 # pam_selinux.so close should be the first session rule
  10 session         required        pam_selinux.so close
  11 # pam_selinux.so open should only be followed by sessions to be executed in the user context
  12 session         required        pam_selinux.so open env_params
  13 session         required        pam_unix_session.so
  14 session         required        pam_limits.so
  15 -session        optional        pam_ck_connector.so nox11
  16 -session        optional        pam_systemd.so