configurations/pam/etc/pam.d/rocky-linux/su-l

#%PAM-1.0
auth            include         su
account         include         su
password        include         su
session         optional        pam_keyinit.so force revoke
session         include         su
auth            required        pam_wheel.so use_uid