---

# faillock
sed -i '/# deny = 3/a deny = 10' /etc/security/faillock.conf
sed -i '/# fail_interval = 900/a fail_interval = 600' /etc/security/faillock.conf
sed -i '/# unlock_time = 600/a unlock_time = 600' /etc/security/faillock.conf

# pwhistory
sed -i '/# remember = 10/a remember = 5' /etc/security/pwhistory.conf

# pwquality
sed -i '/# minlen = 8/a minlen = 15' /etc/security/pwquality.conf
sed -i '/# dcredit = 0/a dcredit = -1' /etc/security/pwquality.conf
sed -i '/# ucredit = 0/a ucredit = -1' /etc/security/pwquality.conf
sed -i '/# lcredit = 0/a lcredit = -1' /etc/security/pwquality.conf
sed -i '/# ocredit = 0/a ocredit = -1' /etc/security/pwquality.conf
sed -i '/# minclass = 0/a minclass = 4' /etc/security/pwquality.conf

# login.defs
sed -i 's/PASS_MIN_LEN.*14/PASS_MIN_LEN    15/g' /etc/login.defs
sed -i 's/PASS_MIN_DAYS.*14/PASS_MIN_DAYS    0/g' /etc/login.defs

# authselect settings
authselect enable-feature with-mkhomedir
authselect enable-feature with-faillock
authselect enable-feature with-pwhistory