Comment # 10 on bug 1081947 from Josef M�llers

(In reply to Franck Bui from comment #9)

> Perhaps you should have a look at how other distros made it ?

BTDT! Other distributions have two sets of common-* and module-specific files:
one set *with* "force" and one set *without* "force" and the commands need to
load the appropriate module-specific file: i.e. if run with "-i", "sudo" must
load "/etc/pam.d/sudo-i" which includes "common-session-force" and if run
without "-i" it must load "/etc/pam.d/sudo" which includes "common-session".
Then "pam" would ship with both sets of common-* files.

This requires a number of packages to be modified: gdm, util-linux,
xorg-x11-server, sudo, openssh, to name but a few. I have found no way to
automagically detect the requirement of "force".