This section will discuss good practices for constructing a secure /etc/pam.conf file. It is currently sadly lacking...
/etc/pam.conf
It is not a good thing to have a weak default (OTHER) entry.
OTHER