FM / pam.d

/etc/pam.d

Name	Size	Mode	Actions
atd	272	0644	edit dl rm
chfn	342	0644	edit dl rm
chsh	342	0644	edit dl rm
config-util	232	0644	edit dl rm
crond	322	0644	edit dl rm
dovecot	157	0644	edit dl rm
exim	116	0644	edit dl rm
fingerprint-auth	701	0644	edit dl rm
login	715	0644	edit dl rm
other	154	0644	edit dl rm
passwd	168	0644	edit dl rm
password-auth	786	0644	edit dl rm
polkit-1	155	0644	edit dl rm
postgresql_cpses	70	0644	edit dl rm
postlogin	398	0644	edit dl rm
pure-ftpd	466	0644	edit dl rm
qemu-ga	46	0644	edit dl rm
remote	640	0644	edit dl rm
runuser	143	0644	edit dl rm
runuser-l	138	0644	edit dl rm
smartcard-auth	153	0644	edit dl rm
sshd	766	0644	edit dl rm
sssd-shadowutils	240	0644	edit dl rm
su	566	0644	edit dl rm
su-l	137	0644	edit dl rm
sudo	154	0644	edit dl rm
sudo-i	178	0644	edit dl rm
system-auth	786	0644	edit dl rm
systemd-user	368	0644	edit dl rm
vlock	84	0644	edit dl rm

Edit: /etc/pam.d/su (566B)

#%PAM-1.0 auth required pam_env.so auth sufficient pam_rootok.so # Uncomment the following line to implicitly trust users in the "wheel" group. #auth sufficient pam_wheel.so trust use_uid # Uncomment the following line to require a user to be in the "wheel" group. #auth required pam_wheel.so use_uid auth substack system-auth auth include postlogin account sufficient pam_succeed_if.so uid = 0 use_uid quiet account include system-auth password include system-auth session include system-auth session include postlogin session optional pam_xauth.so