diff --git a/files/2fa/sudo.pam.qa.fedoraproject.org b/files/2fa/sudo.pam.qa.fedoraproject.org
new file mode 100644
index 0000000000..030bb26463
--- /dev/null
+++ b/files/2fa/sudo.pam.qa.fedoraproject.org
@@ -0,0 +1,6 @@
+#%PAM-1.0
+auth       include      system-auth
+account    include      system-auth
+password   include      system-auth
+session    optional     pam_keyinit.so revoke
+session    required     pam_limits.so