bump @tmraz

This is superfluous paragraph. Should not be there as it is in the pam_faillock manpage. On the other hand there should be a simple sentence saying something about the faillock.conf configuration file.

This section should not be here at all. Or there should be at most some reference to the pam_faillock page.

Again, this section is not needed or at most there should be example of the faillock.conf file and reference to the pam_faillock manpage.

I'd probably use something like: The support for faillock.conf was written by Brian Ward.

You should not drop the options from the manual page. At least not from here.

You can drop the option description from here and you can also write here something about using the options on module command line is not recommended and faillock.conf should be used instead.

Do not drop this paragraph from here. You can adjust it to mention faillock.conf. I.E. "...using the module in preauth without the silent option specified in faillock.conf or with....."

Please keep the support for the options on module command line. This is absolutely necessary for backwards compatibility.

@tmraz updated the PR with your suggestions. Also, added a commit that adds faillock.conf.

Copy & paste error from pwquality.conf documentation.

Better would be: "configure the default settings for locking the user after multiple failed authentication attempts."
Or something similar.

Copy & paste error from pwquality.conf documentation.

sigh.... definitely was a brain copy/paste

Better would be: "configure the default settings for locking the user after multiple failed authentication attempts."

@tmraz this is definitely better. Fixed.

A spurious character here?

A spurious character here?

Unfortunately yes. Fixed.

Merged, thank you.