auth		sufficient	pam_rootok.so
auth		substack	system-auth
session		required	pam_permit.so
session		optional	pam_xauth.so
account		required	pam_permit.so
