#!/bin/sh
# stdin: default config
# stdout: modified config
set -e

# Enforce a 10s delay after a failed login attempt
# - https://wiki.archlinux.org/title/Security#Enforce_a_delay_after_a_failed_login_attempt
# - Has to be the first line of the file!
#   - https://askubuntu.com/a/877390
echo 'auth optional pam_faildelay.so delay=10000000'

cat