include:audit.conf
include:selinux.conf

--enable-chfn-chsh
--disable-chfn-chsh-password
--without-user