session required                   pam_permit.so
session [success=1 default=ignore] pam_succeed_if.so service in sudo quiet use_uid
session required                   pam_unix.so
session optional                   pam_umask.so