diff --git a/srcpkgs/fscrypt/files/pam_config b/srcpkgs/fscrypt/files/pam_config
new file mode 100644
index 00000000000..7e5d75ae45d
--- /dev/null
+++ b/srcpkgs/fscrypt/files/pam_config
@@ -0,0 +1 @@
+auth required pam_unix.so
diff --git a/srcpkgs/fscrypt/template b/srcpkgs/fscrypt/template
index 2d81e8f4eee..23f8112dd6c 100644
--- a/srcpkgs/fscrypt/template
+++ b/srcpkgs/fscrypt/template
@@ -1,14 +1,30 @@
 # Template file for 'fscrypt'
 pkgname=fscrypt
-version=0.2.6
+version=0.2.7
 revision=1
 build_style=go
 go_import_path=github.com/google/fscrypt
 go_package="${go_import_path}/cmd/fscrypt"
+hostmakedepends="m4"
 makedepends="pam-devel"
 short_desc="Tool for managing Linux filesystem encryption"
 maintainer="Andrea Brancaleoni <abc@pomel.me>"
 license="Apache-2.0"
 homepage="https://github.com/google/fscrypt"
 distfiles="https://github.com/google/fscrypt/archive/v${version}.tar.gz"
-checksum=bce54ebb716706150b759052665a29d01963d8df334ad9beb34105ce62d2de94
+checksum=08e7f1bb5481f5ee76a90d79b9d9e2632f167d43100438ba08bd637e2dfb0f22
+conf_files="/etc/pam.d/fscrypt"
+
+if [ "$XBPS_TARGET_WORDSIZE" = "32" ];
+then
+	broken="fscrypt can't be built for 32-bit targets"
+fi
+
+post_install() {
+	# build and install the PAM module
+	LDFLAGS= make PREFIX=/usr DESTDIR=${DESTDIR} install-pam
+	# remove Ubuntu specific pam-config files
+	rm -rf ${DESTDIR}/usr/share/pam-configs/
+	# add PAM config file
+	vinstall ${FILESDIR}/pam_config 644 etc/pam.d fscrypt
+}