pam_sepermit
controls SELinux user access
TLDR
Check SELinux permits
$ auth required pam_sepermit.so
With exclusive login$ auth required pam_sepermit.so exclusive
Configure in sepermit.conf$ echo "user:seuser" >> /etc/security/sepermit.conf
SYNOPSIS
pam_sepermit.so [options]
DESCRIPTION
pam_sepermit controls SELinux user access. Permit/deny based on SELinux user.
The module restricts logins. Based on sepermit.conf rules.
PARAMETERS
exclusive
Exclusive login required.conf=FILE
Configuration file.Configuration in /etc/security/sepermit.conf.
CAVEATS
SELinux required. Configuration file based. Auth module.
HISTORY
pam_sepermit provides SELinux user login control via permit configuration.
SEE ALSO
pam(8), pam_selinux(8), selinux(8)