diff --git a/pam-config.changes b/pam-config.changes
index 8e575f6..b976bd1 100644
--- a/pam-config.changes
+++ b/pam-config.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Apr 11 13:50:25 CEST 2018 - kukuk@suse.de
+
+- Add triggerun script: update config if pam-modules is removed
+  [bsc#1088863]
+
 -------------------------------------------------------------------
 Fri Feb 23 12:36:32 UTC 2018 - kukuk@suse.com
 
diff --git a/pam-config.spec b/pam-config.spec
index 7a9c2d7..49e6296 100644
--- a/pam-config.spec
+++ b/pam-config.spec
@@ -76,6 +76,10 @@ if [ $1 = 0 ]; then
   done
 fi
 
+%triggerpostun -- pam-modules
+[ $2 = 0 ] || exit 0
+pam-config --debug --update ||:
+
 %files -f pam-config.lang
 %license COPYING
 %{_sbindir}/pam-config