# SPDX-License-Identifier: LGPL-2.1-or-later
# This file is part of systemd.
#
# Used by run0 sessions

auth sufficient pam_fprintd.so delay=500000 max-tries=5
# auth [success=ignore default=1] pam_fprintd.so delay=500000 max-tries=5
# auth [success=done default=ignore] /lib/security/pam_howdy.so

-account [success=done authtok_expired=bad new_authtok_reqd=bad maxtries=bad acct_expired=bad default=ignore] pam_systemd_home.so
account  required   pam_unix.so

session  required   pam_loginuid.so
session  optional   pam_keyinit.so force revoke
session  required   pam_namespace.so
-session optional   pam_systemd_home.so
session  optional   pam_umask.so silent
session  optional   pam_systemd.so
session  required   pam_unix.so
