diff --git a/lxcfs.changes b/lxcfs.changes
index 597d53a..14f3eae 100644
--- a/lxcfs.changes
+++ b/lxcfs.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Jul 11 11:22:24 UTC 2016 - cbrauner@suse.de
+
+- install pam_cgfs.so with the pam_cgfs subpackage
+
 -------------------------------------------------------------------
 Sun Jul 10 09:34:39 UTC 2016 - cbrauner@suse.com
 
diff --git a/lxcfs.spec b/lxcfs.spec
index 8ec9da8..1155f29 100644
--- a/lxcfs.spec
+++ b/lxcfs.spec
@@ -105,7 +105,6 @@ rm -f %{buildroot}%{_libdir}/liblxcfs.la
 %{_datadir}/%{name}
 %{_mandir}/man1/*
 %{_unitdir}/*
-/%{_lib}/security/*
 %dir %{_localstatedir}/lib/%{name}
 
 # The lxcfs executable requires liblxcfs.so be installed. It calls dlopen() to
@@ -115,3 +114,7 @@ rm -f %{buildroot}%{_libdir}/liblxcfs.la
 # restart it which is good when you have important system containers running!)
 %dir /usr/lib/%{name}
 /usr/lib/%{name}/liblxcfs.so
+
+%files -n pam_cgfs
+%defattr(-,root,root)
+/%{_lib}/security/pam_cgfs.so