--- lxdm-0.4.1.orig/pam/lxdm	2011-07-29 15:42:33.000000000 +0200
+++ lxdm-0.4.1/pam/lxdm	2012-03-21 16:19:09.521796770 +0100
@@ -1,9 +1,19 @@
 #%PAM-1.0
-auth       substack	system-auth
-auth       optional	pam_gnome_keyring.so
-account    include	system-auth
-session    optional	pam_keyinit.so force revoke
-session    include	system-auth
-session    required	pam_loginuid.so
-session    optional	pam_console.so
-session    optional	pam_gnome_keyring.so auto_start
+auth     [success=done ignore=ignore default=bad] pam_selinux_permit.so
+auth       required    pam_succeed_if.so user != root quiet
+auth       required    pam_env.so
+auth       substack    system-auth
+auth       optional    pam_gnome_keyring.so
+auth       include     postlogin
+account    required    pam_nologin.so
+account    include     system-auth
+password   include     system-auth
+session    required    pam_selinux.so close
+session    required    pam_loginuid.so
+session    optional    pam_console.so
+session    required    pam_selinux.so open
+session    optional    pam_keyinit.so force revoke
+session    required    pam_namespace.so
+session    optional    pam_gnome_keyring.so auto_start
+session    include     system-auth
+session    include     postlogin