# PAM policy for a person changing their own password in Settings or the
# Control Panel (sg-password-change, started by sg-admind).
#
# The same stack as passwd(1): pam_unix asks for the current password, checks
# it and applies the password rules to the new one; pam_gnome_keyring (added
# to common-password by its pam-auth-update profile) re-encrypts the login
# keyring with the new password, so the keyring still opens at the next
# sign-in. An administrator resetting someone's password (chpasswd) cannot do
# that: there is no current password to open the keyring with.
@include common-password
