#%PAM-1.0auth include system-remote-loginaccount include system-remote-login# List of users to deny access to Cockpit, by default root is included.account required pam_listfile.so item=user sense=deny file=/etc/cockpit/disallowed-users onerr=succeedpassword include system-remote-loginsession include system-remote-login