auth sufficient pam_rootok.so auth required pam_wheel.so session required pam_env.so readenv=1 session optional pam_mail.so nopen @include common-auth @include common-account @include common-session