# Begin /etc/pam.d/system-password

# use yescrypt hash for encryption, use shadow, and try to use any previously
# defined authentication token (chosen password) set by any prior module
password  requisite   pam_pwquality.so
password  requisite   pam_pwhistory.so
password  required    pam_unix.so       yescrypt shadow use_authtok

# End /etc/pam.d/system-password