Merge pull request #12750 from alanmcanonical/ubt24_53321

Ubuntu 24.04: Implement rule 5.3.3.2.1 Ensure password number of changed characters is configured

controls/cis_ubuntu2404.yml

@@ -1102,7 +1102,7 @@ controls:
     status: automated
     notes: file_owner_at_deny and file_owner_at_allow currently require root as owner
            and don't accept daemon
-    
+
   - id: 3.1.1
     title: Ensure IPv6 status is identified (Manual)
     levels:
@@ -1871,7 +1871,7 @@ controls:
     levels:
       - l1_server
       - l1_workstation
-    rules: 
+    rules:
       - accounts_password_pam_pwquality_enabled
     status: automated
 
@@ -1920,8 +1920,10 @@ controls:
     levels:
       - l1_server
       - l1_workstation
-    status: planned
-    notes: TODO. Rule does not seem to be implemented, nor does it map to any rules in ubuntu2204 profile.
+    rules:
+      - var_password_pam_difok=2
+      - accounts_password_pam_difok
+    status: automated
 
   - id: 5.3.3.2.2
     title: Ensure minimum password length is configured (Automated)