diff --git a/build-rootfs.sh b/build-rootfs.sh
index e377363..5852cdb 100755
--- a/build-rootfs.sh
+++ b/build-rootfs.sh
@@ -89,6 +89,11 @@ qemu-${target%%-*} \
     -r /mnt/gentoo \
     -f /mnt/gentoo/etc/ld.so.conf
 
+if [ -d /mnt/gentoo/lib64/security ]; then
+    find /mnt/gentoo/lib64/security -name 'pam_*.so' \
+        -exec mv -t /mnt/gentoo/lib/security {} +
+fi
+
 rm -f /mnt/gentoo/lib/tmpfiles.d/provision.conf
 systemd-tmpfiles --root=/mnt/gentoo -E --exclude-prefix=/var --create