diff --git a/etc/pam.d/su b/etc/pam.d/su
index a1e42dc409b0..834c27e08b8e 100644
--- a/etc/pam.d/su
+++ b/etc/pam.d/su
@@ -14,4 +14,4 @@ auth		include		system
 account		include		system
 
 # session
-session		include		system
+session		required	pam_permit.so