#%PAM-1.0

auth     required   pam_faillock.so           preauth
auth     required   pam_shells.so
auth     requisite  pam_nologin.so
auth     required   pam_env.so
auth     substack   gdm-fingerprint-substack
auth     optional   pam_permit.so
auth     required   pam_faillock.so           authsucc

account  include    system-local-login

password required   pam_fprintd.so
password optional   pam_permit.so

session  optional   pam_keyinit.so            force revoke
session  include    system-local-login