Add system-auth

data/lukshome/system-auth

@@ -0,0 +1,19 @@
+auth        required                                     pam_env.so
+auth        required                                     pam_faildelay.so delay=2000000
+auth        optional                                     pam_mount.so
+auth        sufficient                                   pam_unix.so
+auth        required                                     pam_deny.so
+
+account     required                                     pam_unix.so
+
+password    optional                                     pam_mount.so
+password    requisite                                    pam_pwquality.so
+password    sufficient                                   pam_unix.so yescrypt shadow use_authtok
+password    required                                     pam_deny.so
+
+session     optional                                     pam_keyinit.so revoke
+session     required                                     pam_limits.so
+session     optional                                     pam_mount.so
+-session    optional                                     pam_systemd.so
+session     [success=1 default=ignore]                   pam_succeed_if.so service in crond quiet use_uid
+session     required                                     pam_unix.so