diff --git a/pam.changes b/pam.changes
index 81194c3..3e620d5 100644
--- a/pam.changes
+++ b/pam.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Jan 25 13:49:36 UTC 2013 - kukuk@suse.com
+
+- Remove deprecated pam_tally.so module, it's too buggy and can
+  destroy config and log files.
+
 -------------------------------------------------------------------
 Mon Nov 12 14:42:53 CET 2012 - kukuk@suse.de
 
diff --git a/pam.spec b/pam.spec
index 7a48c3a..ba9c688 100644
--- a/pam.spec
+++ b/pam.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package pam
 #
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -168,6 +168,12 @@ for x in pam_unix_auth pam_unix_acct pam_unix_passwd pam_unix_session; do
   ln -f $RPM_BUILD_ROOT/%{_lib}/security/pam_unix.so $RPM_BUILD_ROOT/%{_lib}/security/$x.so
 done
 #
+# pam_tally is deprecated since ages
+#
+rm -f $RPM_BUILD_ROOT/%{_lib}/security/pam_tally.so
+rm -f $RPM_BUILD_ROOT/sbin/pam_tally
+rm -f $RPM_BUILD_ROOT%{_mandir}/man8/pam_tally.8*
+#
 # Install READMEs of PAM modules
 #
 DOC=$RPM_BUILD_ROOT%{_defaultdocdir}/pam
@@ -259,7 +265,6 @@ install -m 644 NEWS COPYING $DOC
 /%{_lib}/security/pam_shells.so
 /%{_lib}/security/pam_stress.so
 /%{_lib}/security/pam_succeed_if.so
-/%{_lib}/security/pam_tally.so
 /%{_lib}/security/pam_tally2.so
 /%{_lib}/security/pam_time.so
 /%{_lib}/security/pam_timestamp.so
@@ -275,7 +280,6 @@ install -m 644 NEWS COPYING $DOC
 /%{_lib}/security/pam_wheel.so
 /%{_lib}/security/pam_xauth.so
 /sbin/mkhomedir_helper
-/sbin/pam_tally
 /sbin/pam_tally2
 /sbin/pam_timestamp_check
 %verify(not mode) %attr(4755,root,shadow) /sbin/unix_chkpwd