diff --git a/qrexec/Makefile b/qrexec/Makefile
index 40ddc3a..0732c46 100644
--- a/qrexec/Makefile
+++ b/qrexec/Makefile
@@ -19,5 +19,9 @@ install:
 	ln -s ../../bin/qrexec-client-vm $(DESTDIR)/usr/lib/qubes/qrexec_client_vm
 	install qrexec-fork-server $(DESTDIR)/usr/bin
 	install qubes-rpc-multiplexer $(DESTDIR)/usr/lib/qubes
+ifeq ($(shell lsb_release -is), Debian)
+	install -D -m 0644 qrexec.pam.debian $(DESTDIR)/etc/pam.d/qrexec
+else
 	install -D -m 0644 qrexec.pam $(DESTDIR)/etc/pam.d/qrexec
+endif
 
diff --git a/qrexec/qrexec.pam.debian b/qrexec/qrexec.pam.debian
new file mode 100644
index 0000000..7ca3b20
--- /dev/null
+++ b/qrexec/qrexec.pam.debian
@@ -0,0 +1,11 @@
+#%PAM-1.0
+#
+# based on /etc/pam.d/su
+auth		sufficient	pam_rootok.so
+session     required    pam_env.so readenv=1
+session     required    pam_env.so readenv=1 envfile=/etc/default/locale
+session     required    pam_limits.so
+
+@include common-auth
+@include common-account
+@include common-session