1 2 3 4
#%PAM-1.0 session optional pam_keyinit.so force revoke session include system-auth session required pam_loginuid.so