add the following to /etc/pam.d/sshd and /etc/pam.d/login:
session		optional	pam_grsec_rbac.so

uncomment the following line in /etc/ssh/sshd_config:
#UseLogin yes

run /etc/init.d/ssh restart
