# su: auth account session
auth       sufficient     pam_rootok.so
auth       sufficient     pam_unix.so
auth       required       pam_deny.so
account    required       pam_permit.so
session    required       pam_permit.so
