diff --git a/libpwquality.changes b/libpwquality.changes
index 75ced7c..1b332d4 100644
--- a/libpwquality.changes
+++ b/libpwquality.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Sep 28 13:41:10 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
+
+- Use %_pam_moduledir instead of hardcoding %{_lib}/security
+  (boo#1191042).
+
 -------------------------------------------------------------------
 Tue Jan  5 16:27:27 UTC 2021 - Josef Möllers <josef.moellers@suse.com>
 
diff --git a/libpwquality.spec b/libpwquality.spec
index 52ba599..471fa2b 100644
--- a/libpwquality.spec
+++ b/libpwquality.spec
@@ -16,7 +16,6 @@
 #
 
 
-%define _pammoduledir /%{_lib}/security
 %define _secconfdir %{_sysconfdir}/security
 %define libname libpwquality1
 %bcond_without python2
@@ -86,7 +85,7 @@ Summary:        PAM module to disallow weak new passwords
 Group:          System/Libraries
 Requires:       pam
 Requires(post): pam-config
-Requires(postun): pam-config
+Requires(postun):pam-config
 
 %description -n pam_pwquality
 The pam_pwquality PAM module can be used instead of pam_cracklib to
@@ -122,7 +121,7 @@ This package provides Python 3 bindings for the libpwquality library.
 %build
 %configure \
 	--disable-static \
-	--with-securedir=%{_pammoduledir} \
+	--with-securedir=%{_pam_moduledir} \
 	--with-python-binary=%{_bindir}/python3 \
 	--with-pythonsitedir=%{python3_sitearch} \
 	%{nil}
@@ -181,7 +180,7 @@ fi
 %{_libdir}/pkgconfig/pwquality.pc
 
 %files -n pam_pwquality
-%{_pammoduledir}/pam_pwquality.so
+%{_pam_moduledir}/pam_pwquality.so
 %{_mandir}/man8/pam_pwquality.8%{?ext_man}
 
 %if %{with python2}