diff --git a/fscrypt.changes b/fscrypt.changes
index 4288560..0d47e52 100644
--- a/fscrypt.changes
+++ b/fscrypt.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Feb 15 13:58:22 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- add fscrypt pam configuration
+- drop pam-specs from main package 
+
 -------------------------------------------------------------------
 Tue Jan 31 07:27:28 UTC 2023 - Marcus Rueckert <mrueckert@suse.de>
 
diff --git a/fscrypt.pam b/fscrypt.pam
new file mode 100644
index 0000000..7f93cf9
--- /dev/null
+++ b/fscrypt.pam
@@ -0,0 +1 @@
+auth	required	pam_unix.so
diff --git a/fscrypt.spec b/fscrypt.spec
index 97a6333..860f8c1 100644
--- a/fscrypt.spec
+++ b/fscrypt.spec
@@ -25,6 +25,7 @@ Group:          System/Base
 URL:            https://github.com/google/fscrypt
 Source:         https://github.com/google/fscrypt/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 Source1:        vendor.tar.xz
+Source2:        %name.pam
 BuildRequires:  golang-packaging
 BuildRequires:  m4
 BuildRequires:  pam-devel
@@ -60,18 +61,19 @@ This package holds the pam module for fscrypt.
 
 %install
 %make_install %{make_args}
-chmod a-x %{buildroot}%{_datadir}/pam-configs/fscrypt
+# not needed on SUSE
+rm -rvf %{buildroot}%{_datadir}/pam-configs
+install -D -m 644 %{SOURCE2} %{buildroot}%{_sysconfdir}/pam.d/%{name}
 
 %files
 %license LICENSE
 %doc README.md
 %{_bindir}/fscrypt
-%dir %{_datadir}/pam-configs/
-%{_datadir}/pam-configs/fscrypt
 %{_datadir}/bash-completion/completions/fscrypt
 
 %files -n pam-fscrypt
 %license LICENSE
 %{_pam_moduledir}/pam_fscrypt.so
+%{_sysconfdir}/pam.d/%{name}
 
 %changelog