make sure PAM config is only touched on initial install and final deinstall

openssh/openssh.spec

@@ -265,12 +265,16 @@ AutoReqProv:  no
 
     #   add PAM configuration entry
 %if "%{with_pam}" == "yes"
-    $RPM_INSTALL_PREFIX/sbin/pamtool --add --smart --name=openssh
+    if [ $1 -eq 1 ]; then
+        $RPM_INSTALL_PREFIX/sbin/pamtool --add --smart --name=openssh
+    fi
 %endif
 
 %preun
     #   remove PAM configuration entry
 %if "%{with_pam}" == "yes"
-    $RPM_INSTALL_PREFIX/sbin/pamtool --remove --smart --name=openssh
+    if [ $1 -eq 0 ]; then
+        $RPM_INSTALL_PREFIX/sbin/pamtool --remove --smart --name=openssh
+    fi
 %endif