diff --git a/xrdp-pam.patch b/xrdp-pam.patch
index 2bb7f82..7ed4177 100644
--- a/xrdp-pam.patch
+++ b/xrdp-pam.patch
@@ -1,9 +1,11 @@
-diff --git a/instfiles/pam.d/xrdp-sesman.suse b/instfiles/pam.d/xrdp-sesman.suse
-index a7c7836c..8868613d 100644
---- a/instfiles/pam.d/xrdp-sesman.suse
-+++ b/instfiles/pam.d/xrdp-sesman.suse
-@@ -3,3 +3,4 @@ auth        include     common-auth
+Index: b/instfiles/pam.d/xrdp-sesman.suse
+===================================================================
+--- a/instfiles/pam.d/xrdp-sesman.suse	2019-04-18 13:38:26.000000000 +0800
++++ b/instfiles/pam.d/xrdp-sesman.suse	2019-08-05 12:10:27.492234081 +0800
+@@ -2,4 +2,6 @@
+ auth        include     common-auth
  account     include     common-account
  session     include     common-session
- password    include     common-password
++session     optional    pam_keyinit.so force revoke
 +session     required    pam_loginuid.so
+ password    include     common-password
diff --git a/xrdp.changes b/xrdp.changes
index 197217a..7554542 100644
--- a/xrdp.changes
+++ b/xrdp.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Aug  5 03:42:13 UTC 2019 - Felix Zhang <fezhang@suse.com>
+
+- Update xrdp-pam.patch: Include the pam_keyinit.so module in
+  /etc/pam.d/xrdp-sesman to support the kernel keyrings
+  (boo#1144064).
+
 -------------------------------------------------------------------
 Fri Jul 26 12:31:01 UTC 2019 - matthias.gerstner@suse.com