#%PAM-1.0

# Block login if they are globally disabled
auth      required pam_nologin.so

# Load environment from /etc/environment and ~/.pam_environment
auth      required pam_env.so

# Allow login without password
auth      required pam_permit.so

# Stop autologin if account requires action
account   required pam_unix.so

# Can't change password
password  required pam_deny.so

# Setup session
session   required pam_unix.so

# To set ACLs correctly with systemd
session   required pam_systemd.so

# To get apps needing consolehelper working
session   optional pam_console.so
