diff --git a/pam.spec b/pam.spec
index 1003ab7..c0db7a4 100644
--- a/pam.spec
+++ b/pam.spec
@@ -241,11 +241,7 @@ for module in $RPM_BUILD_ROOT%{_moduledir}/pam*.so ; do
 	fi
 done
 
-%post
-/sbin/ldconfig
-if [ ! -e /var/log/tallylog ] ; then
-	/usr/bin/install -m 600 /dev/null /var/log/tallylog || :
-fi
+%post -p /sbin/ldconfig
 
 %postun -p /sbin/ldconfig
 
diff --git a/pamtmp.conf b/pamtmp.conf
index e94a860..f980a4a 100644
--- a/pamtmp.conf
+++ b/pamtmp.conf
@@ -1,3 +1,4 @@
 d /run/console 0755 root root -
 d /run/faillock 0755 root root -
 d /run/sepermit 0755 root root -
+f /var/log/tallylog 0600 root root -