#!/bin/bash
# Copyright 2021 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

## Section: 5.3.3 Ensure password reuse is limited (Not Scored) ##
sed -i '0,/password/s//password        required        pam_pwhistory.so remember=5\n&/' \
  /etc/pam.d/system-auth
sed -i 's/password.*pam_unix.so/& remember=5/' /etc/pam.d/system-auth