/etc/pam.d/kde should be marked as a %config file in the spec so not to overwrite the original version.
Thanks, fixed.