# Omarchy override of /etc/security/faillock.conf (upstream owned by `pam`).
# The only behavioural change vs upstream defaults is raising `deny` from 3 to
# 10 so users get more attempts before lockout.
#
# All other settings remain at upstream defaults (commented out). See
# faillock.conf(5) for the full option list.
deny = 10