account sufficient pam_list.so.1 allow=/etc/security/access.confIf the access.conf file has only '*' which means all users have access, or you can just list users, netgroups or unixgroups.
To achieve the '*' before one had to modify the PAM configuration or use a different module (for example compile pam_access from Linux).
This is a good example of one of the small but very useful changes.