diff --git a/Dockerfile b/Dockerfile
index 411b428..3edac90 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -42,8 +42,9 @@ RUN echo "python3 /usr/local/bin/systemd-hdtob.py &" >> /home/crime5/.profile \
 # SSH
 RUN sed -i 's/#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config
 RUN sed -i 's/#PermitEmptyPasswords no/PermitEmptyPasswords no/' /etc/ssh/sshd_config
-RUN sed -i 's/.*pam_lastlog.so.*/#&/' /etc/pam.d/sshd \
- && sed -i 's/.*pam_lastlog.so.*/#&/' /etc/pam.d/login
+RUN sed -i 's/^session.*pam_lastlog.so/#&/' /etc/pam.d/sshd \
+ && sed -i 's/^session.*pam_lastlog.so/#&/' /etc/pam.d/login
+
 
 
 # Level1