diff --git a/introduction/welcome/changelog.xml b/introduction/welcome/changelog.xml
index 1a7531f5a5..4f7c86dcc8 100644
--- a/introduction/welcome/changelog.xml
+++ b/introduction/welcome/changelog.xml
@@ -48,6 +48,9 @@
           <para>[ken] - Updated to Gimp-2.6.8. Fixes ticket
           <ulink url="&blfs-ticket-root;2619">#2619</ulink></para>
         </listitem>
+        <listitem>
+          <para>[dj] - Added system-auth to /etc/pam.d/su.</para>
+        </listitem>
       </itemizedlist>
     </listitem>
 
diff --git a/postlfs/security/shadow.xml b/postlfs/security/shadow.xml
index cd15e14d1f..1a0af6e548 100644
--- a/postlfs/security/shadow.xml
+++ b/postlfs/security/shadow.xml
@@ -452,6 +452,7 @@ EOF</userinput></screen>
 
 # always allow root
 auth      sufficient  pam_rootok.so
+auto      include     system-auth
 
 # include the default account settings
 account   include     system-account