How do you enable the logging of PAM messages for the login service?

A.
update /etc/syslog.conf to enable logging for auth

B.
update /etc/policy.conf to enable logging for auth

C.
update /etc/default/login to enable logging for auth

D.
update /etc/pam.conf to add the logging option for each auth statement