diff --git a/openssh.changes b/openssh.changes
index 6504eea..5613d19 100644
--- a/openssh.changes
+++ b/openssh.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Thu Nov 18 12:20:59 UTC 2010 - lnussel@suse.de
+
+- add pam_lastlog to show failed login attempts
+- remove permissions handling, no special handling needed
+
 -------------------------------------------------------------------
 Tue Nov 16 14:45:14 UTC 2010 - cristian.rodriguez@opensuse.org
 
diff --git a/openssh.spec b/openssh.spec
index ad589a7..9f930af 100644
--- a/openssh.spec
+++ b/openssh.spec
@@ -26,7 +26,7 @@ BuildRequires:  libselinux-devel
 License:        BSD3c(or similar) ; MIT License (or similar)
 Group:          Productivity/Networking/SSH
 Requires:       /bin/netstat
-PreReq:         pwdutils %insserv_prereq  %fillup_prereq coreutils permissions
+PreReq:         pwdutils %insserv_prereq  %fillup_prereq coreutils
 Conflicts:      nonfreessh
 AutoReqProv:    on
 Version:        5.6p1
@@ -192,9 +192,6 @@ getent passwd sshd >/dev/null || /usr/sbin/useradd -r -g sshd -d /var/lib/sshd -
 
 %post
 %{fillup_and_insserv -n ssh sshd}
-%run_permissions
-%verifyscript
-%verify_permissions -e /etc/ssh/sshd_config -e /etc/ssh/ssh_config -e /usr/bin/ssh
 
 %preun
 %stop_on_removal sshd
@@ -212,8 +209,8 @@ rm -rf $RPM_BUILD_ROOT
 %doc README.SuSE README.kerberos ChangeLog OVERVIEW README TODO LICENCE CREDITS
 %attr(0755,root,root) %dir /etc/ssh
 %attr(0600,root,root) %config(noreplace) /etc/ssh/moduli
-%verify(not mode) %attr(0644,root,root) %config(noreplace) /etc/ssh/ssh_config
-%verify(not mode) %attr(0640,root,root) %config(noreplace) /etc/ssh/sshd_config
+%attr(0644,root,root) %config(noreplace) /etc/ssh/ssh_config
+%attr(0640,root,root) %config(noreplace) /etc/ssh/sshd_config
 %attr(0644,root,root) %config /etc/pam.d/sshd
 %attr(0755,root,root) %config /etc/init.d/sshd
 %attr(0755,root,root) /usr/bin/ssh
diff --git a/sshd.pamd b/sshd.pamd
index cf8b0a8..6ad6712 100644
--- a/sshd.pamd
+++ b/sshd.pamd
@@ -6,3 +6,4 @@ account  include        common-account
 password include        common-password
 session	 required	pam_loginuid.so
 session  include        common-session
+session  optional       pam_lastlog.so   silent noupdate showfailed