--- debian/gdm.pam-orig	2009-11-17 17:15:10.866369008 +0000
+++ debian/gdm.pam	2009-11-17 17:15:22.974365971 +0000
@@ -1,4 +1,5 @@
 #%PAM-1.0
+auth    required        pam_succeed_if.so user != root quiet
 auth    requisite       pam_nologin.so
 auth    required        pam_env.so readenv=1
 auth    required        pam_env.so readenv=1 envfile=/etc/default/locale