FM / pam.d

/etc/pam.d

Name	Size	Mode	Actions
config-util	232	0644	edit dl rm
fingerprint-auth	701	0644	edit dl rm
login	715	0644	edit dl rm
other	154	0644	edit dl rm
password-auth	760	0644	edit dl rm
postlogin	398	0644	edit dl rm
remote	640	0644	edit dl rm
runuser	143	0644	edit dl rm
runuser-l	138	0644	edit dl rm
smartcard-auth	153	0644	edit dl rm
su	657	0644	edit dl rm
su-l	137	0644	edit dl rm
system-auth	760	0644	edit dl rm

Edit: /etc/pam.d/su-l (137B)

#%PAM-1.0 auth include su account include su password include su session optional pam_keyinit.so force revoke session include su