Index: introduction/welcome/changelog.xml
===================================================================
--- introduction/welcome/changelog.xml	(revision 9efe5ae3d9760463bcb0acae7d6c60117d549810)
+++ introduction/welcome/changelog.xml	(revision 5ae7a99e77b0dcc80faed062d22bff01c3b973aa)
@@ -48,4 +48,10 @@
       <itemizedlist>
         <listitem>
+          <para>[fernando] - Some fixes. Mainly to fix shared library shebang
+          where unversioned so files are installed in /lib (see ticket 4426)
+          and simplification to iptables instructions.
+          Patch received, thanks.</para>
+        </listitem>
+        <listitem>
           <para>[igor] - Update to dovecot-2.2.10. Fixes
           <ulink url="&blfs-ticket-root;4469">#4469</ulink>.</para>
Index: postlfs/security/iptables.xml
===================================================================
--- postlfs/security/iptables.xml	(revision 9efe5ae3d9760463bcb0acae7d6c60117d549810)
+++ postlfs/security/iptables.xml	(revision 5ae7a99e77b0dcc80faed062d22bff01c3b973aa)
@@ -125,11 +125,8 @@
     </para>
 
-<screen><userinput>./configure --prefix=/usr                          \
-            --exec-prefix=                         \
-            --bindir=/usr/bin                      \
-            --with-xtlibdir=/lib/xtables           \
-            --with-pkgconfigdir=/usr/lib/pkgconfig \
-            --enable-libipq                        \
-            --enable-devel &amp;&amp;
+<screen><userinput>./configure --prefix=/usr                \
+            --sbindir=/sbin              \
+            --with-xtlibdir=/lib/xtables \
+            --enable-libipq &amp;&amp; <!-- enable-devel is enabled by default now -->
 make</userinput></screen>
 
@@ -140,10 +137,8 @@
 <screen role="root"><userinput>make install &amp;&amp;
 ln -sfv ../../sbin/xtables-multi /usr/bin/iptables-xml &amp;&amp;
-for file in libip4tc libip6tc libipq libiptc libxtables
+for file in ip4tc ip6tc ipq iptc xtables
 do
-  ln -sfv ../../lib/`readlink /lib/${file}.so` /usr/lib/${file}.so &amp;&amp;
-  rm -v /lib/${file}.so &amp;&amp;
-  mv -v /lib/${file}.la /usr/lib &amp;&amp;
-  sed -i "s@libdir='@&amp;/usr@g" /usr/lib/${file}.la
+  mv -v /usr/lib/lib${file}.so.* /lib &amp;&amp;
+  ln -sfv ../../lib/$(readlink /usr/lib/lib${file}.so) /usr/lib/lib${file}.so
 done</userinput></screen>
 
@@ -152,10 +147,4 @@
   <sect2 role="commands">
     <title>Command Explanations</title>
-
-    <para>
-      <parameter>--exec-prefix=</parameter>: Ensure all binaries and
-      libraries end up in <filename class="directory">/</filename>
-      directory tree.
-    </para>
 
     <para>
@@ -166,9 +155,4 @@
 
     <para>
-      <parameter>--with-pkgconfigdir=/usr/lib/pkgconfig</parameter>:
-      Ensure all the pkgconfig files are in the standard location.
-    </para>
-
-    <para>
       <option>--enable-libipq</option>: This switch enables building
       of <filename class="libraryfile">libipq.so</filename> which
@@ -177,10 +161,4 @@
 
     <para>
-      <option>--enable-devel</option>: This switch enables installation
-      of <application>Iptables</application> development headers that
-      can be used by some packages outside of BLFS.
-    </para>
-
-    <para>
       <option>--enable-nfsynproxy</option>: This switch enables installation
       of <application>nfsynproxy</application> SYNPROXY configuration tool.
@@ -189,5 +167,5 @@
     <para>
       <command>ln -sfv ../../sbin/xtables-multi /usr/bin/iptables-xml</command>:
-      Ensure  the symbolic link for <command>iptables-xml</command> is relative.
+      Ensure the symbolic link for <command>iptables-xml</command> is relative.
     </para>
 
Index: postlfs/security/libcap.xml
===================================================================
--- postlfs/security/libcap.xml	(revision 9efe5ae3d9760463bcb0acae7d6c60117d549810)
+++ postlfs/security/libcap.xml	(revision 5ae7a99e77b0dcc80faed062d22bff01c3b973aa)
@@ -91,6 +91,8 @@
     <para>Now, as the <systemitem class="username">root</systemitem> user:</para>
 
-<screen role="root"><userinput>make RAISE_SETFCAP=no install &amp;&amp;
-chmod -v 755 /lib/libcap.so</userinput></screen>
+<screen role="root"><userinput>make RAISE_SETFCAP=no prefix=/usr install &amp;&amp;
+chmod -v 755 /usr/lib/libcap.so &amp;&amp;
+mv -v /usr/lib/libcap.so.* /lib &amp;&amp;
+ln -sfv ../../lib/libcap.so.2 /usr/lib/libcap.so</userinput></screen>
 
   </sect2>
Index: postlfs/security/linux-pam.xml
===================================================================
--- postlfs/security/linux-pam.xml	(revision 9efe5ae3d9760463bcb0acae7d6c60117d549810)
+++ postlfs/security/linux-pam.xml	(revision 5ae7a99e77b0dcc80faed062d22bff01c3b973aa)
@@ -139,4 +139,6 @@
 <screen><userinput>./configure --prefix=/usr \
             --sysconfdir=/etc \
+            --libdir=/usr/lib \
+            --enable-securedir=/lib/security \
             --docdir=/usr/share/doc/Linux-PAM-&linux-pam-version; \
             --disable-nis &amp;&amp;
@@ -178,9 +180,22 @@
 
 <screen role="root"><userinput>make install &amp;&amp;
-chmod -v 4755 /sbin/unix_chkpwd</userinput></screen>
+chmod -v 4755 /sbin/unix_chkpwd &amp;&amp;
+
+for file in pam pam_misc pamc
+do
+  mv -v /usr/lib/lib${file}.so.* /lib &amp;&amp;
+  ln -sfv ../../lib/$(readlink /usr/lib/lib${file}.so) /usr/lib/lib${file}.so
+done</userinput></screen>
+
   </sect2>
 
   <sect2 role="commands">
     <title>Command Explanations</title>
+
+    <para>
+      <parameter>--enable-securedir=/lib/security</parameter>:
+      This switch sets install location for the
+      <application>PAM</application> modules.
+    </para>
 
     <para>
