diff --git a/pam.changes b/pam.changes
index 96b4404..94fe450 100644
--- a/pam.changes
+++ b/pam.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Jan 30 15:17:57 UTC 2024 - Thorsten Kukuk <kukuk@suse.com>
+
+- Enable pam_canonicalize_user.so
+
 -------------------------------------------------------------------
 Fri Jan 19 09:11:30 UTC 2024 - Thorsten Kukuk <kukuk@suse.com>
 
diff --git a/pam.spec b/pam.spec
index 423401a..f86e357 100644
--- a/pam.spec
+++ b/pam.spec
@@ -294,13 +294,9 @@ mkdir -p -m 755 %{buildroot}%{_libdir}
 mkdir -p %{buildroot}%{_distconfdir}/pam.d
 
 %make_install
-# XXX remove for now until we have a security review of the new module
-rm -f %{buildroot}%{_libdir}/security/pam_canonicalize_user.so
 /sbin/ldconfig -n %{buildroot}%{_libdir}
 # Install documentation
 %make_install -C doc
-# XXX remove for now until we have a security review, see above
-rm -f %{buildroot}%{_mandir}/man8/pam_canonicalize_user.8*
 # install /etc/security/namespace.d used by pam_namespace.so for namespace.conf iscript
 install -d %{buildroot}%{_pam_secconfdir}/namespace.d
 # install other.pamd and common-*.pamd
@@ -431,6 +427,7 @@ done
 %{_libdir}/libpam_misc.so.%{libpam_misc_so_version}
 %dir %{_pam_moduledir}
 %{_pam_moduledir}/pam_access.so
+%{_pam_moduledir}/pam_canonicalize_user.so
 %{_pam_moduledir}/pam_debug.so
 %{_pam_moduledir}/pam_deny.so
 %{_pam_moduledir}/pam_echo.so
@@ -532,6 +529,7 @@ done
 %{_mandir}/man8/mkhomedir_helper.8%{?ext_man}
 %{_mandir}/man8/pam.8%{?ext_man}
 %{_mandir}/man8/pam_access.8%{?ext_man}
+%{_mandir}/man8/pam_canonicalize_user.8%{?ext_man}
 %{_mandir}/man8/pam_debug.8%{?ext_man}
 %{_mandir}/man8/pam_deny.8%{?ext_man}
 %{_mandir}/man8/pam_echo.8%{?ext_man}