diff --git a/kismet.spec b/kismet.spec
index b99c1a5..f97e6e1 100644
--- a/kismet.spec
+++ b/kismet.spec
@@ -10,7 +10,7 @@
 Summary:	WLAN detector, sniffer and IDS
 Name:		kismet
 Version:	%_rpmversion
-Release:	%release_func 1
+Release:	%release_func 2
 License:	GPLv2+
 Group:		Applications/Internet
 URL:		http://www.kismetwireless.net/
@@ -142,7 +142,7 @@ rm -rf $RPM_BUILD_ROOT
 %dir %_libdir/kismet
 %dir %_libdir/kismet_client
 
-%_sysconfdir/pam.d/*
+%config(noreplace) %_sysconfdir/pam.d/*
 %_sysconfdir/security/console.apps/*
 %_libexecdir/*
 
@@ -154,6 +154,9 @@ rm -rf $RPM_BUILD_ROOT
 
 
 %changelog
+* Sun Aug  9 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de>
+- enhanced kismet_capture's pam configuration file
+
 * Sun Aug  9 2009 Enrico Scholz <enrico.scholz@informatik.tu-chemnitz.de> - 0.0.2009.06.R1-1
 - added Obsoletes: entry for old -extras subpackage
 
diff --git a/kismet_capture.pam b/kismet_capture.pam
index 68f4214..ed2680e 100644
--- a/kismet_capture.pam
+++ b/kismet_capture.pam
@@ -1,8 +1,13 @@
 #%PAM-1.0
+
 auth		sufficient	pam_rootok.so
+# Uncomment the following line to implicitly trust users in the "wheel" group.
+#auth		sufficient	pam_wheel.so trust use_uid
+# Uncomment the following line to use cached succesful authentication attempts
 #auth		sufficient	pam_timestamp.so
 auth		include		system-auth
+
 account		required	pam_permit.so
+
 session		required	pam_permit.so
-session		optional	pam_xauth.so
 #session	optional	pam_timestamp.so