[EDIT] FILE: runuser-l

#%PAM-1.0 auth include runuser session optional pam_keyinit.so force revoke -session optional pam_systemd.so session include runuser
SAVE CANCEL