File runuser-l.pamd of Package util-linux

#%PAM-1.0
# Note that runuser requires only "session" setting (and for example
# "auth sufficient pam_rootok.so" dummy line).
auth     sufficient  pam_rootok.so
session  optional    pam_keyinit.so force revoke
session  include     common-session
session  optional    pam_xauth.so