diff --git a/pam-0.99.8.1-console-mfd-scanners.patch b/pam-0.99.8.1-console-mfd-scanners.patch
new file mode 100644
index 0000000..dfab9e8
--- /dev/null
+++ b/pam-0.99.8.1-console-mfd-scanners.patch
@@ -0,0 +1,12 @@
+diff -up Linux-PAM-0.99.8.1/modules/pam_console/50-default.perms.multifunc Linux-PAM-0.99.8.1/modules/pam_console/50-default.perms
+--- Linux-PAM-0.99.8.1/modules/pam_console/50-default.perms.multifunc	2007-08-22 18:45:17.000000000 +0200
++++ Linux-PAM-0.99.8.1/modules/pam_console/50-default.perms	2007-08-22 21:26:16.000000000 +0200
+@@ -16,7 +16,7 @@
+ 
+ # permission definitions
+ <console>  0600 <pilot>      0660 root.uucp
+-<console>  0600 <scanner>    0600 root
++<console>  0660 <scanner>    0660 root.lp
+ <console>  0600 <fb>         0600 root
+ <console>  0600 <kbd>        0600 root
+ <console>  0600 <joystick>   0600 root
diff --git a/pam.spec b/pam.spec
index f9570bb..836a49c 100644
--- a/pam.spec
+++ b/pam.spec
@@ -38,6 +38,7 @@ Patch32: pam-0.99.3.0-tally-fail-close.patch
 Patch40: pam-0.99.7.1-namespace-temp-logon.patch
 Patch41: pam-0.99.8.1-namespace-init.patch
 Patch42: pam-0.99.8.1-console-hal-handled.patch
+Patch43: pam-0.99.8.1-console-mfd-scanners.patch
 
 BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 Requires: cracklib, cracklib-dicts >= 2.8
@@ -101,6 +102,7 @@ cp %{SOURCE7} .
 %patch40 -p1 -b .temp-logon
 %patch41 -p1 -b .ns-init
 %patch42 -p1 -b .hal-handled
+%patch43 -p1 -b .mfd-scanners
 
 autoreconf
 
@@ -394,6 +396,7 @@ fi
 * Wed Aug 22 2007 Tomas Mraz <tmraz@redhat.com> 0.99.8.1-5
 - most devices are now handled by HAL and not pam_console (patch by davidz)
 - license tag fix
+- multifunction scanner device support (#251468)
 
 * Mon Aug 13 2007 Tomas Mraz <tmraz@redhat.com> 0.99.8.1-4
 - fix auth regression when uid != 0 from previous build (#251804)