#%PAM-1.0
auth		include		su
account		include		su
password	include		su
session		optional	pam_keyinit.so force revoke
session		include		su

• [F] atd
  Delete
• [F] chfn
  Delete
• [F] chsh
  Delete
• [F] config-util
  Delete
• [F] crond
  Delete
• [F] dovecot
  Delete
• [F] exim
  Delete
• [F] fingerprint-auth
  Delete
• [F] login
  Delete
• [F] other
  Delete
• [F] passwd
  Delete
• [F] password-auth
  Delete
• [F] polkit-1
  Delete
• [F] postgresql
  Delete
• [F] postgresql_cpses
  Delete
• [F] postlogin
  Delete
• [F] pure-ftpd
  Delete
• [F] remote
  Delete
• [F] runuser
  Delete
• [F] runuser-l
  Delete
• [F] screen
  Delete
• [F] smartcard-auth
  Delete
• [F] sshd
  Delete
• [F] sssd-shadowutils
  Delete
• [F] su
  Delete
• [F] su-l
  Delete
• [F] sudo
  Delete
• [F] sudo-i
  Delete
• [F] system-auth
  Delete
• [F] systemd-user
  Delete
• [F] vlock
  Delete