diff --git a/apparmor.changes b/apparmor.changes
index 5374cbf..4ef333c 100644
--- a/apparmor.changes
+++ b/apparmor.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Sep 25 14:07:39 UTC 2023 - David Disseldorp <ddiss@suse.com>
+
+- Fix pam_apparmor %post and %postun scripts to handle pam-config errors
+  (bsc#1215596)
+
 -------------------------------------------------------------------
 Tue Jul 25 09:28:33 UTC 2023 - David Disseldorp <ddiss@suse.com>
 
diff --git a/apparmor.spec b/apparmor.spec
index 0f2930e..2110c5a 100644
--- a/apparmor.spec
+++ b/apparmor.spec
@@ -760,12 +760,14 @@ systemctl is-active -q apparmor && systemctl reload apparmor ||:
 %if %{with pam}
 
 %post -n pam_apparmor
-pam-config -a --apparmor
-pam-config --update
+if [ $1 -eq 1 ]; then
+        pam-config --add --apparmor || :
+fi
 
 %postun -n pam_apparmor
-pam-config -d --apparmor
-pam-config --update
+if [ $1 -eq 0 ]; then
+        pam-config --delete --apparmor || :
+fi
 %endif
 
 %changelog