Use pam_options template with bash turned off

Author: alanmcanonical

linux_os/guide/system/accounts/accounts-pam/locking_out_password_attempts/accounts_password_pam_pwhistory_remember/oval/shared.xml

@@ -49,14 +49,20 @@ ocil: |-
 
 platform: package[pam]
 
-{{% if 'ubuntu' not in product or product == 'ubuntu2004' %}}
 template:
     name: pam_options
     vars:
       path: /etc/pam.d/common-password
       type: password
       control_flag: requisite
       module: pam_pwhistory.so
+{{% if 'ubuntu' in product and product != 'ubuntu2004' %}}
+      arguments:
+        - variable: remember
+          operation: greater than or equal
+      backends:
+        - bash: "off"
+{{% else %}}
       arguments:
         - variable: remember
           operation: greater than or equal