%PAM-1.0

This file is auto-generated.

User changes will be destroyed the next time authselect is run.

auth requisite pam_faillock.so preauth even_deny_root deny=5 unlock_time=600

auth required pam_env.so
auth sufficient pam_unix.so try_first_pass nullok
auth required pam_deny.so

auth [default=die] pam_faillock.so authfail even_deny_root deny=5 unlock_time=600
auth sufficient pam_faillock.so authsucc even_deny_root deny=5 unlock_time=600

account required pam_unix.so

password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type=
password sufficient pam_unix.so try_first_pass use_authtok nullok sha512 shadow
password required pam_deny.so

session optional pam_keyinit.so revoke
session required pam_limits.so
-session optional pam_systemd.so
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session required pam_unix.so