Convert tallylog to tmpfiles.d

This will make it compatible with the rpm-ostree model, which
has `/var` start out empty (or supports doing so).

More information in https://bugzilla.redhat.com/show_bug.cgi?id=1352154

pam.spec

@@ -241,11 +241,7 @@ for module in $RPM_BUILD_ROOT%{_moduledir}/pam*.so ; do
 	fi
 done
 
-%post
-/sbin/ldconfig
-if [ ! -e /var/log/tallylog ] ; then
-	/usr/bin/install -m 600 /dev/null /var/log/tallylog || :
-fi
+%post -p /sbin/ldconfig
 
 %postun -p /sbin/ldconfig
 

pamtmp.conf

@@ -1,3 +1,4 @@
 d /run/console 0755 root root -
 d /run/faillock 0755 root root -
 d /run/sepermit 0755 root root -
+f /var/log/tallylog 0600 root root -