diff --git a/etc/default.nix b/etc/default.nix
index 305012020b5..0286517927a 100644
--- a/etc/default.nix
+++ b/etc/default.nix
@@ -227,6 +227,7 @@ import ../helpers/make-etc.nix {
       "shadow"
       "sshd"
       "lshd"
+      "lsh-pam-checkpw"
       "useradd"
       "chsh"
       "xlock"
diff --git a/etc/pam.d/lsh-pam-checkpw b/etc/pam.d/lsh-pam-checkpw
new file mode 100644
index 00000000000..50f3cc5ce60
--- /dev/null
+++ b/etc/pam.d/lsh-pam-checkpw
@@ -0,0 +1,4 @@
+auth     include        common
+account  include        common
+password include        common
+session  include        common