[OCLUG-Tech] can one hack PAM to reuse a password that's not supposed to be reused?

["Robert P. J. Day" <rpjday [ at ] crashcourse [ dot ] ca>]

  i note from the docs that PAM supports preventing the reuse of a
configurable number of old passwords with the use of the

  remember=n

however, where does PAM "remember" these passwords such that, if one
had root access and could hack files, could one manually reset the
list of remembered passwords? just curious.

rday

-- 

========================================================================
Robert P. J. Day                                 Ottawa, Ontario, CANADA
                        http://crashcourse.ca

Twitter:                                       http://twitter.com/rpjday
LinkedIn:                               http://ca.linkedin.com/in/rpjday
========================================================================