diff --git a/GIDs b/GIDs
index cf53657bdd4f..a2e872ae22ab 100644
--- a/GIDs
+++ b/GIDs
@@ -1,946 +1,946 @@
 # Please keep this file sorted by GID!
 # Please pick an empty slot when available and also consider base values from
 # /usr/src/etc/group
 daemon:*:1:
 operator:*:5:amanda
 mail:*:6:postfix,clamav
 ftp:*:14:
 smmsp:*:25:
 video:*:44:lightdm
 bind:*:53:
 rdfdb:*:55:
 spamd:*:58:
 unbound:*:59:
 cyrus:*:60:
 proxy:*:62:
 authpf:*:63:
 uucp:*:66:
 xten:*:67:
 dialer:*:68:aprsd
 network:*:69:
 pgsql:*:70:
 ircd:*:72:
 ircservices:*:73:
 simscan:*:74:
 hybserv:*:76:
 audit:*:77:
 virtuoso:*:79:
 www:*:80:
 qnofiles:*:81:
 qmail:*:82:
 mysql:*:88:
 vchkpw:*:89:
 firebird:*:90:
 mailman:*:91:
 gdm:*:92:
 jabber:*:93:
 p4admin:*:94:
 interch:*:95:
 squeuer:*:96:
 mud:*:97:
 msql:*:98:
 rscsi:*:99:
 squid:*:100:
 quagga:*:101:
 ganglia:*:102:
 sgeadmin:*:103:
 slimserv:*:104:
 dnetc:*:105:
 clamav:*:106:
 cacti:*:107:
 webkit:*:108:
 quickml:*:109:
 vscan:*:110:
 fido:*:111:
 dcc:*:112:
 amavis:*:113:
 dhis:*:114:
 _symon:*:115:
 u2f:*:116:
 smokeping:*:117:
 ircproxyd:*:118:
 mythtv:*:119:
 pdns:*:120:
 otrs:*:121:
 zabbix:*:122:
 ntpd:*:123:
 fetchmail:*:124:
 postfix:*:125:
 maildrop:*:126:
 nav:*:127:
 sd-agent:*:128:
 vlock:*:129:
 _bgpd:*:130:
 _ospfd:*:131:
 _spamd:*:132:
 freeradius:*:133:
 undernet:*:134:
 rabbitmq:*:135:
 dhcpd:*:136:
 mpd:*:137:
 wolfpack:*:138:
 shellinabox:*:139:
 amanda:*:140:
 synapse:*:141:
 ladvd:*:142:
 dovecot:*:143:
 dovenull:*:144:
 webcamd:*:145:
 ventrilo:*:146:
 kdm:*:147:
 ipv6mon:*:148:
 avenger:*:149:
 cbsd:*:150:
 nixbld:*:151:
 frrvty:*:152:frr
 rbldns:*:153:
 trircd:*:154:
 xorp:*:155:
 monetdb:*:156:
 barman:*:157:
 pootle:*:158:
 nocat:*:159:
 _ypldap:*:160:
 solr:*:161:
 octoprint:*:162:
 _iked:*:163:
 lightdm:*:164:
 uwsgi:*:165:
 yule:*:166:
 ceph:*:167:
 frr:*:168:
 acme:*:169:
 tile38:*:170:
 sfs:*:171:
 agk:*:172:
 polipo:*:173:
 flowtools:*:174:
 twms:*:175:
 mlvpn:*:176:
 _mdnsd:*:177:
 otpw:*:178:
 gdnsd:*:179:
 rt:*:180:
 nagios:*:181:
 noc:*:182:
 icinga:*:183:
 dnscache:*:184:
 tinydns:*:185:
 dnslog:*:186:
 swift:*:187:
 netxms:*:188:
 leofs:*:189:
 keystone:*:190:
 glance:*:191:
 moinmoin:*:192:
 cups:*:193:
 saned:*:194:
 radns:*:195:
 nova:*:196:
 dq:*:197:
 horizon:*:198:
 mcserver:*:199:
 sympa:*:200:
 privoxy:*:201:
 dspam:*:202:
 cinder:*:203:
 yate:*:204:
 gnugk:*:205:
 gini:*:206:
 _mixminion:*:207:
 _dnsdist:*:208:
 gotosocial:*:209:
 shoutcast:*:210:
 git:*:211:
 hg:*:212:
 drizzle:*:213:
 kyototycoon:*:214:
 opendnssec:*:215:
 nsd:*:216:
 anvil:*:217:
 zap:*:218:
 sddm:*:219:
 bs:*:220:
 opensips:*:221:
 rtpproxy:*:222:
 mqttwarn:*:223:
 payara:*:224:
 postgrey:*:225:
 sqlgrey:*:226:
 _hfm:*:227:
 osrm:*:228:
 kismet:*:229:
 carbon:*:230:
 foundationdb:*:231:
 archiva:*:232:
 _ntp:*:233:
 kafka:*:234:
 openhab:*:235:
 rspamd:*:236:
 paperless:*:237:
 sonic:*:238:
 restserver:*:239:
 aprsd:*:240:
 tnc:*:241:
 prosody:*:242:
 ot-recorder:*:243:
 mastodon:*:244:
 routinator:*:245:
 fahclient:*:246:fahclient
 fcron:*:247:
 signal-cli:*:248:
 sonarqube:*:249:
 sems:*:250:
 irrd:*:251:
 gonic:*:252:
 _adsuck:*:253:
 imds:*:254:
 _i2pd:*:255:
 _tor:*:256:
 _smtpd:*:257:
 _smtpq:*:258:
 spiped:*:259:
 meta1s:*:260:
 meta1q:*:261:
 meta1c:*:262:meta1s
 meta1m:*:263:meta1s,meta1q
 meta1:*:264:
 sshout:*:265:
 step:*:266:
 odoo:*:267:
 tenshi:*:268:tenshi
 dendrite:*:269:
 _rpki-client:*:270:
 signaling:*:271:
 gvm:*:272:
 seaweedfs:*:273:
 usbmuxd:*:274:
 haclient:*:275:
 frontbase:*:276:
 unifi-poller:*:277:
 rtg:*:278:
 mrtg:*:279:
 xymon:*:280:
 prelude:*:281:
 spread:*:282:
 devmon:*:283:
 vnstat:*:284:
 exaddos:*:285:exaddos
 rancid:*:286:
 webdis:*:287:
 ntopng:*:288:
 victoria-metrics:*:289:
 _gmid:*:290:
 pydio:*:291:
 sftpgo:*:292:
 biboumi:*:293:
 krill:*:294:
 jottad:*:295:
 writefreely:*:296:
 conduit:*:297:
 neolink:*:298:
 owncast:*:299:
 backuppc:*:300:
 openvpn:*:301:
 netdata:*:302:
 onlyoffice:*:303:www
 glewlwyd:*:304:
 nats:*:305:
 jitsi:*:306:
 jicofo:*:307:jitsi
 jvb:*:308:jitsi
 wazuh:*:309:
 cardano:*:310:
 _arti:*:311:
 _sphinx:*:312:
 _fastdfs:*:313:
 promscale:*:314:
 lavinmq:*:315:
 nut:*:316:
 hedgedoc:*:317:
 # free: 318, UID used by icingadirector
 rustdesk:*:319:
 teleirc:*:320:
 caldera:*:321:
 tlsc:*:322:
 soju:*:323:
 dkimpy-milter:*:324:
 dkfilter:*:325:
 smfs:*:326:
 _reticulum:*:327:
 galene:*:328:
-# free: 329
+certspotter:*:329:
 orthanc:*:330:
 # free: 331
 # free: 332
 # free: 333
 honeytrap:*:333:
 # free: 335
 # free: 336
 daapd:*:337:
 murmur:*:338:
 mumble-server:*:339:
 wildfire:*:340:
 stunnel:*:341:
 openfire:*:342:
 # free: 343
 # free: 344
 # free: 345
 # free: 346
 eturnal:*:347:
 # free: 348
 # free: 349
 _sabnzbd:*:350:
 sonarr:*:351:
 radarr:*:352:
 _iodined:*:353:
 jackett:*:354:
 nzbhydra2:*:355:
 lidarr:*:356:
 bazarr:*:357:
 autoscan:*:358:
 prowlarr:*:359:
 v2ray:*:360:
 httptunnel:*:361:
 readarr:*:362:
 # free: 363
 # free: 364
 # free: 365
 # free: 366
 # free: 367
 # free: 368
 # free: 369
 _wsdd:*:370:
 # free: 371
 # free: 372
 # free: 373
 # free: 374
 # free: 375
 # free: 376
 # free: 377
 # free: 378
 # free: 379
 # free: 380
 # free: 381
 # free: 382
 # free: 383
 # free: 384
 # free: 385
 # free: 386
 # free: 387
 # free: 388
 ldap:*:389:
 # free: 390
 # free: 391
 # free: 392
 # free: 393
 # free: 394
 # free: 395
 # free: 396
 # free: 397
 tiarra:*:398:
 # free: 399
 # free: 400
 # free: 401
 # free: 402
 # free: 403
 # free: 404
 # free: 405
 # free: 406
 # free: 407
 # free: 408
 # free: 409
 # free: 410
 uhub:*:411:
 # free: 412
 # free: 413
 # free: 414
 # free: 415
 # free: 416
 # free: 417
 # free: 418
 # free: 419
 oxidized:*:420:
 # free: 421
 # free: 422
 # free: 423
 # free: 424
 # free: 425
 drweb:*:426:
 # free: 427
 # free: 428
 varnish:*:429:
 # free: 430
 # free: 431
 # free: 432
 # free: 433
 # free: 434
 # free: 435
 # free: 436
 # free: 437
 # free: 438
 # free: 439
 # free: 440
 # free: 441
 quasselcore:*:442:
 # free: 443
 callweaver:*:444:
 # free: 445
 # free: 446
 # free: 447
 # free: 448
 # free: 449
 ecartis:*:450:
 # free: 451
 # free: 452
 yadifa:*:453:
 # free: 454
 inadyn:*:455:
 # free: 456
 # free: 457
 # free: 458
 # free: 459
 # free: 460
 # free: 461
 # free: 462
 # free: 463
 # free: 464
 courier:*:465:
 condor:*:466:
 netmon:*:467:
 slurm:*:468:
 consul:*:469:
 serf:*:470:
 vault:*:471:
 nomad:*:472:
 minio:*:473:
 gitlab-runner:*:474:
 traefik:*:475:
 gitlab-pages:*:476:
 fiche:*:477:
 prometheus:*:478:
 alertmanager:*:479:
 datadog:*:480:
 # free: 481
 # free: 482
 # free: 483
 # free: 484
 # free: 485
 # free: 486
 # free: 487
 # free: 488
 # free: 489
 # free: 490
 # free: 491
 # free: 492
 # free: 493
 # free: 494
 # free: 495
 # free: 496
 # free: 497
 rustypaste:*:498:
 # free: 499
 # free: 500
 # free: 501
 birdvty:*:502:
 # free: 503
 # free: 504
 _bbstored:*:505:
 radmind:*:506:
 skkserv:*:507:
 # free: 508
 # free: 509
 # free: 510
 # free: 511
 pwhois:*:512:
 # free: 513
 # free: 514
 # free: 515
 # free: 516
 # free: 517
 # free: 518
 # free: 519
 libvirtdbus:*:520:
 davmail:*:521:
 nullmail:*:522:
 freevo:*:523:
 # free: 524
 dkimproxy:*:525:
 # free: 526
 # free: 527
 # free: 528
 # free: 529
 # free: 530
 # free: 531
 # free: 532
 # free: 533
 pgbouncer:*:534:
 redis:*:535:
 keydb:*:536:
 # free: 537
 # free: 538
 # free: 539
 # free: 540
 # free: 541
 _flowd:*:542:
 ejabberd:*:543:
 # free: 544
 # free: 545
 # free: 546
 # free: 547
 # free: 548
 # free: 549
 # free: 550
 # free: 551
 kresd:*:552:
 knot:*:553:
 qtss:*:554:
 ircdru:*:555:
 messagebus:*:556:
 pulse-rt:*:557:
 avahi:*:558:
 tacacs:*:559:
 # Unused since hald has been removed from the ports tree
 # haldaemon:*:560:
 distcc:*:561:
 polkit:*:562:
 pulse:*:563:
 pulse-access:*:564:
 polkitd:*:565:
 # free: 566
 # free: 567
 # free: 568
 # free: 569
 # free: 570
 # free: 571
 # free: 572
 # free: 573
 # free: 574
 nexus:*:575:
 # free: 576
 # free: 577
 # free: 578
 # free: 579
 # free: 580
 # free: 581
 # free: 582
 # free: 583
 # free: 584
 # free: 585
 # free: 586
 assp:*:587:
 avahi-autoipd:*:588:
 # free: 589
 # free: 590
 # free: 591
 # free: 592
 # free: 593
 # free: 594
 # free: 595
 # free: 596
 # free: 597
 # free: 598
 # free: 599
 _xsi:*:600:
 _tss:*:601:
 _pkcs11:*:602:
 _acme:*:603:
 _lego:*:604:
 _hockeypuck:*:605:
 # free: 606
 # free: 607
 # free: 608
 # free: 609
 freeswitch:*:610:
 # free: 611
 # free: 612
 # free: 613
 # free: 614
 ntpa:*:615:
 taskd:*:616:
 # free: 617
 # free: 618
 # free: 619
 # free: 620
 # free: 621
 # free: 622
 # free: 623
 # free: 624
 xapsd:*:625:
 # free: 626
 # free: 627
 # free: 628
 # free: 629
 # free: 630
 # free: 631
 # free: 632
 # free: 633
 # free: 634
 # free: 635
 # free: 636
 # free: 637
 # free: 638
 caldavd:*:639:
 # free: 640
 monkeysphere:*:641:
 # free: 642
 # free: 643
 # free: 644
 # free: 645
 # free: 646
 # free: 647
 # free: 648
 # free: 649
 # free: 650
 # free: 651
 # free: 652
 # free: 653
 # free: 654
 # free: 655
 # free: 656
 # free: 657
 # free: 658
 # free: 659
 # free: 660
 # free: 661
 # free: 662
 # free: 663
 # free: 664
 # free: 665
 aox:*:666:
 riak:*:667:
 # free: 668
 # free: 669
 # free: 670
 # free: 671
 # free: 672
 # free: 673
 # free: 674
 # free: 675
 # free: 676
 # free: 677
 # free: 678
 # free: 679
 # free: 680
 # free: 681
 # free: 682
 # free: 683
 # free: 684
 # free: 685
 # free: 686
 # free: 687
 darkhttpd:*:688:
 # free: 689
 # free: 690
 # free: 691
 # free: 692
 # free: 693
 # free: 694
 # free: 695
 # free: 696
 # free: 697
 # free: 698
 # free: 699
 bnetd:*:700:
 fastnetmon:*:701:
 _sndio:*:702:
 # free: 703
 # free: 704
 # free: 705
 # free: 706
 # free: 707
 # free: 708
 # free: 709
 # free: 710
 # free: 711
 # free: 712
 # free: 713
 # free: 714
 # free: 715
 # free: 716
 bopm:*:717:
 # free: 718
 # free: 719
 # free: 720
 # free: 721
 # free: 722
 # free: 723
 # free: 724
 # free: 725
 # free: 726
 # free: 727
 # free: 728
 # free: 729
 # free: 730
 # free: 731
 # free: 732
 # free: 733
 # free: 734
 c-lightning:*:735:
 # free: 736
 # free: 737
 # free: 738
 # free: 739
 # free: 740
 # free: 741
 # free: 742
 # free: 743
 # free: 744
 # free: 745
 # free: 746
 # free: 747
 # free: 748
 # free: 749
 # free: 750
 # free: 751
 # free: 752
 # free: 753
 # free: 754
 # free: 755
 # free: 756
 sopel:*:757:
 # free: 758
 # free: 759
 # free: 760
 # free: 761
 # free: 762
 # free: 763
 # free: 764
 # free: 765
 # free: 766
 # free: 767
 # free: 768
 # free: 769
 postgres:*:770:
 cockroach:*:771:
 postgrest:*:772:
 # free: 773
 # free: 774
 # free: 775
 namecoin:*:776:
 openxpki:*:777:
 litecoin:*:778:
 bitcoin:*:779:
 zetacoin:*:780:
 monero:*:781:
 zeek:*:782:
 # free: 783
 # free: 784
 # free: 785
 # free: 786
 # free: 787
 # free: 788
 # free: 789
 # free: 790
 # free: 791
 # free: 792
 # free: 793
 # free: 794
 # free: 795
 # free: 796
 # free: 797
 # free: 798
 # free: 799
 clickhouse:*:800:
 # free: 801
 # free: 802
 # free: 803
 # free: 804
 # free: 805
 # free: 806
 bosun:*:807:
 clixon:*:808:
 # free: 809
 # free: 810
 # free: 811
 foreman_proxy:*:812:
 hitch:*:813:
 puppet:*:814:
 uchiwa:*:815:
 # free: 816
 rslsync:*:817:
 jenkins:*:818:
 rundeck:*:819:
 openacs:*:820:
 dotlrn:*:821:
 # free: 822
 # free: 823
 selenium:*:824:
 polw:*:825:
 statsd:*:826:
 _tuptime:*:827:
 cirrus:*:828:
 # free: 829
 # free: 830
 # free: 831
 beehive:*:832:
 # free: 833
 # free: 834
 # free: 835
 # free: 836
 # free: 837
 # free: 838
 # free: 839
 netdisco:*:840:
 tcpcryptd:*:841:
 munin:*:842:
 dahdi:*:843:asterisk
 subsonic:*:844:
 # free: 845
 sogod:*:846:
 domoticz:*:847:
 graylog:*:848:
 chronyd:*:849:
 qbittorrent:*:850:
 cassandra:*:851:
 p0f:*:852:
 _geodns:*:853:
 ebusd:*:854:
 opensearch:*:855:
 # free: 856
 # free: 857
 # free: 858
 # free: 859
 plocate:*:860:
 # free: 861
 # free: 862
 # free: 863
 # free: 864
 # free: 865
 # free: 866
 sqlpage:*:867:
 jellyfin:*:868:
 keyd:*:869:
 buildbot:*:870:
 # free: 871
 bitmark:*:872:
 bitmark-recorder:*:873:
 librespeed:*:874:
 cfssl:*:875:
 _lms:*:876:
 gemserv:*:877:
 gerbera:*:878:
 _encrypted-dns:*:879:
 pyspf-milter:*:880:
 ultimaker:*:881:
 midpoint:*:882:
 ipfs-go:*:883:
 telegraf:*:884:
 tcpdump:*:885:
 miniflux:*:886:
 pdagent:*:887:
 vuls:*:888:
 mattermost:*:889:
 matterircd:*:890:
 urbackup:*:891:
 tautulli:*:892:
 logstash:*:893:
 arangodb:*:894:
 snmptt:*:895:
 istat:*:896:
 znc:*:897:
 ufdb:*:898:
 guacamole:*:899:
 seafile:*:900:
 fossy:*:901:www
 scanlogd:*:902:
 _ocserv:*:903:
 grafana:*:904:
 artifactory:*:905:
 opentsdb:*:906:
 influxd:*:907:
 riemann:*:908:
 proxy65:*:909:
 bacula:*:910:
 iserv:*:911:
 _sj3:*:912:
 _relayd:*:913:
 bitlbee:*:914:
 logcheck:*:915:
 ssmtp:*:916:
 prayer:*:917:
 nefu:*:918:
 couchdb:*:919:
 vboxusers:*:920:
 transmission:*:921:
 mongodb:*:922:
 liquidsoap:*:923:
 postpals:*:924:
 mfs:*:925:
 minbif:*:926:
 kumofs:*:927:
 nslcd:*:928:
 activemq:*:929:
 ifgraph:*:930:
 asterisk:*:931:
 sancp:*:932:
 dlna:*:933:
 torrus:*:934:www
 erlyvideo:*:935:
 crtmpserver:*:936:
 get_iplayer:*:937:
 vdr:*:938:
 noip:*:939:
 _tcpproxy:*:940:
 cego:*:941:
 teamspeak:*:942:
 dnetfold:*:943:
 bbs:*:944:
 dbxml:*:945:
 pgagroal:*:946:
 gnokii:*:947:
 dnrd:*:948:
 _lldpd:*:949:
 conquest:*:950:
 openerpd:*:951:
 bitten-slave:*:952:
 _neubot:*:953:
 couchpotato:*:954:
 hadoop:*:955:
 pandora:*:956:
 razorback:*:957:
 gnunet:*:958:
 c_icap:*:959:
 trytond:*:960:
 gearmand:*:961:
 zookeeper:*:962:
 fluentd:*:963:
 git_daemon:*:964:
 elasticsearch:*:965:
 ossec:*:966:
 loki:*:967:
 promtail:*:968:
 kippo:*:969:
 colord:*:970:
 shibd:*:971:
 plex:*:972:
 boinc:*:973:
 radicale:*:974:
 unifi:*:975:
 minetest:*:976:
 tests:*:977:
 _dnscrypt-proxy:*:978:
 ums:*:979:
 hbase:*:980:
 uvncrep:*:981:
 bro:*:982:
 syncthing:*:983:
 tvheadend:*:984:
 puppetdb:*:985:
 kamailio:*:986:
 spark:*:987:
 pot:*:988:
 emby:*:989:
 oozie:*:990:
 sguil:*:991:
 hive:*:992:
 kannel:*:993:
 rcynic:*:994:
 rpkirtr:*:995:
 tarantool:*:996:
 bareos:*:997:
 _rmilter:*:998:
 ebnetd:*:999:
 # DO NOT USE: 1000-65532
 nogroup:*:65533:
 nobody:*:65534:
diff --git a/UIDs b/UIDs
index d81e56e33c98..f0522ea3f17c 100644
--- a/UIDs
+++ b/UIDs
@@ -1,950 +1,950 @@
 # Please keep this file sorted by UID!
 # Please pick an empty slot when available and also consider base values from
 # /usr/src/etc/master.passwd
 operator:*:2:5::0:0:System &:/:/usr/sbin/nologin
 ftp:*:14:14::0:0:Anonymous FTP:/var/ftp:/nonexistent
 smmsp:*:25:25::0:0:Sendmail Submission User:/var/spool/clientmqueue:/usr/sbin/nologin
 bind:*:53:53::0:0:Bind Sandbox:/:/usr/sbin/nologin
 majordom:*:54:54::0:0:Majordomo Pseudo User:/usr/local/majordomo:/nonexistent
 rdfdb:*:55:55::0:0:rdfDB Daemon:/var/db/rdfdb:/bin/sh
 spamd:*:58:58::0:0:SpamAssassin user:/var/spool/spamd:/usr/sbin/nologin
 unbound:*:59:59::0:0:Unbound DNS Resolver:/nonexistent:/usr/sbin/nologin
 cyrus:*:60:60::0:0:the cyrus mail server:/nonexistent:/nonexistent
 gnats:*:61:1::0:0:GNATS database owner:/usr/local/share/gnats/gnats-db:/bin/sh
 proxy:*:62:62::0:0:Packet Filter pseudo-user:/nonexistent:/nonexistent
 uucp:*:66:66::0:0:UUCP pseudo-user:/var/spool/uucppublic:/usr/libexec/uucp/uucico
 xten:*:67:67::0:0:X-10 daemon:/usr/local/xten:/nonexistent
 pop:*:68:6::0:0:Post Office Owner (popper):/nonexistent:/usr/sbin/nologin
 wnn:*:69:7::0:0:Wnn:/nonexistent:/nonexistent
 pgsql:*:70:70::0:0:PostgreSQL pseudo-user:/usr/local/pgsql:/bin/sh
 oracle:*:71:71::0:0:Oracle:/usr/local/oracle7:/usr/sbin/nologin
 ircd:*:72:72::0:0:IRC daemon:/nonexistent:/nonexistent
 ircservices:*:73:73::0:0:IRC services:/nonexistent:/nonexistent
 simscan:*:74:74::0:0:Simscan User:/nonexistent:/usr/sbin/nologin
 ifmail:*:75:66::0:0:Ifmail user:/nonexistent:/nonexistent
 hybserv:*:76:76::0:0:HybServ Daemon:/nonexistent:/usr/sbin/nologin
 auditdistd:*:78:77::0:0:Auditdistd unprivileged user:/var/empty:/usr/sbin/nologin
 virtuoso:*:79:79::0:0:Virtuoso Universal Server:/usr/local/virtuoso:/bin/sh
 www:*:80:80::0:0:World Wide Web Owner:/nonexistent:/usr/sbin/nologin
 alias:*:81:81::0:0:QMail user:/var/qmail/alias:/nonexistent
 qmaild:*:82:81::0:0:QMail user:/var/qmail:/nonexistent
 qmaill:*:83:81::0:0:QMail user:/var/qmail:/nonexistent
 qmailp:*:84:81::0:0:QMail user:/var/qmail:/nonexistent
 qmailq:*:85:82::0:0:QMail user:/var/qmail:/nonexistent
 qmailr:*:86:82::0:0:QMail user:/var/qmail:/nonexistent
 qmails:*:87:82::0:0:QMail user:/var/qmail:/nonexistent
 mysql:*:88:88::0:0:MySQL Daemon:/var/db/mysql:/usr/sbin/nologin
 vpopmail:*:89:89::0:0:VPop Mail User:/usr/local/vpopmail:/nonexistent
 firebird:*:90:90::0:0:Firebird Database Administrator:/var/db/firebird:/bin/sh
 mailman:*:91:91::0:0:Mailman User:/usr/local/mailman:/usr/sbin/nologin
 gdm:*:92:92::0:0:GNOME Display Manager:/usr/local/etc/gdm/home:/usr/sbin/nologin
 jabber:*:93:93::0:0:Jabber Daemon:/nonexistent:/nonexistent
 p4admin:*:94:94::0:0:Perforce admin:/nonexistent:/usr/sbin/nologin
 interch:*:95:95::0:0:Interchange user:/usr/local/interchange:/usr/sbin/nologin
 squeuer:*:96:96::0:0:SQueuer Owner:/nonexistent:/bin/sh
 mud:*:97:97::0:0:MUD Owner:/nonexistent:/bin/sh
 msql:*:98:98::0:0:mSQL-2 pseudo-user:/var/db/msqldb:/bin/sh
 rscsi:*:99:99::0:0:Remote SCSI:/usr/local/rscsi:/usr/local/sbin/rscsi
 squid:*:100:100::0:0:squid caching-proxy pseudo user:/var/squid:/usr/sbin/nologin
 quagga:*:101:101::0:0:Quagga route daemon pseudo user:/var/empty:/usr/sbin/nologin
 ganglia:*:102:102::0:0:Ganglia User:/nonexistent:/usr/sbin/nologin
 sgeadmin:*:103:103::0:0:Sun Grid Engine Admin:/nonexistent:/usr/sbin/nologin
 slimserv:*:104:104::0:0:Slim Devices SlimServer pseudo-user:/nonexistent:/usr/sbin/nologin
 dnetc:*:105:105::0:0:distributed.net client and proxy pseudo-user:/nonexistent:/usr/sbin/nologin
 clamav:*:106:106::0:0:Clamav Antivirus:/nonexistent:/usr/sbin/nologin
 cacti:*:107:107::0:0:Cacti Sandbox:/nonexistent:/usr/sbin/nologin
 webkit:*:108:108::0:0:WebKit Default User:/usr/local/www/webkit:/bin/sh
 quickml:*:109:109::0:0:quickml Server:/nonexistent:/usr/sbin/nologin
 vscan:*:110:110::0:0:Scanning Virus Account:/var/maiad:/bin/sh
 fido:*:111:111::0:0:Fido System:/usr/local/fido:/bin/sh
 dcc:*:112:112::0:0:Distributed Checksum Clearinghouse:/nonexistent:/usr/sbin/nologin
 amavis:*:113:113::0:0:Amavis-stats Account:/nonexistent:/usr/sbin/nologin
 dhis:*:114:114::0:0:DHIS Daemon:/nonexistent:/usr/sbin/nologin
 _symon:*:115:115::0:0:Symon Account:/var/empty:/usr/sbin/nologin
 hplip:*:116:116::0:0:HPLIP Server:/nonexistent:/usr/sbin/nologin
 smokeping:*:117:117::0:0:SmokePing Daemon:/nonexistent:/usr/sbin/nologin
 ircproxyd:*:118:118::0:0:Night Light IRC Proxy:/nonexistent:/usr/sbin/nologin
 mythtv:*:119:119::0:0:MythTV pseudo-user:/nonexistent:/bin/sh
 pdns_recursor:*:120:120::0:0:pdns_recursor pseudo-user:/nonexistent:/usr/sbin/nologin
 otrs:*:121:121::0:0:OTRS Administrator:/usr/local/otrs:/bin/csh
 zabbix:*:122:122::0:0:Zabbix NMS:/nonexistent:/bin/sh
 ntpd:*:123:123::0:0:NTP Daemon:/var/db/ntp:/usr/sbin/nologin
 fetchmail:*:124:124::0:0:Fetchmail mail-retrieval daemon:/nonexistent:/usr/sbin/nologin
 postfix:*:125:125::0:0:Postfix Mail System:/var/spool/postfix:/usr/sbin/nologin
 synapse:*:126:141::0:0:Synapse Daemon:/nonexistent:/usr/sbin/nologin
 navcron:*:127:127::0:0:Network Administration Visualized:/usr/local/nav:/usr/sbin/nologin
 sd-agent:*:128:128::0:0:ServerDensity Agent:/nonexistent:/usr/sbin/nologin
 digdag:*:129:65534::0:0:digdag server:/nonexistent:/usr/sbin/nologin
 _bgpd:*:130:130::0:0:BGP Daemon:/var/empty:/usr/sbin/nologin
 _ospfd:*:131:131::0:0:OSPF Daemon:/var/empty:/usr/sbin/nologin
 _spamd:*:132:132::0:0:Spam Daemon:/var/empty:/usr/sbin/nologin
 freeradius:*:133:133::0:0:FreeRADIUS Daemon:/nonexistent:/usr/sbin/nologin
 undernet:*:134:134::0:0:Undernet ircu Daemon:/nonexistent:/usr/sbin/nologin
 rabbitmq:*:135:135::0:0:RabbitMQ:/var/db/rabbitmq:/usr/sbin/nologin
 dhcpd:*:136:136::0:0:ISC DHCP daemon:/nonexistent:/usr/sbin/nologin
 mpd:*:137:137::0:0:MusicPD pseudo-user:/var/mpd:/usr/sbin/nologin
 wolfpack:*:138:138::0:0:Wolfpack Empire Server:/usr/local/share/wolfpack:/usr/sbin/nologin
 shellinabox:*:139:139::0:0:Shell In A Box:/nonexistent:/usr/sbin/nologin
 amanda:*:140:140::0:0:Amanda Daemon:/var/db/amanda:/usr/sbin/nologin
 cricket:*:141:80::0:0:Cricket Monitoring User:/usr/local/cricket:/usr/sbin/nologin
 ladvd:*:142:142::0:0:Ladvd User:/var/empty:/usr/sbin/nologin
 dovecot:*:143:143::0:0:Dovecot User:/var/empty:/usr/sbin/nologin
 dovenull:*:144:144::0:0:Dovecot login User:/var/empty:/usr/sbin/nologin
 webcamd:*:145:145::0:0:Webcamd user:/var/empty:/usr/sbin/nologin
 ventrilo:*:146:146::0:0:& server:/usr/local/ventrilo-server:/usr/sbin/nologin
 kdm:*:147:147::0:0:KDE Display Manager:/nonexistent:/usr/sbin/nologin
 ipv6mon:*:148:148::0:0:IPv6 Address Monitoring Daemon:/nonexistent:/usr/sbin/nologin
 avenger:*:149:149::0:0:Mail Avenger:/var/spool/avenger:/usr/sbin/nologin
 cbsd:*:150:150::0:0:Cbsd user:/nonexistent:/bin/sh
 pop3vscan:*:151:6::0:0:POP3VScan Daemon:/var/spool/pop3vscan:/usr/sbin/nologin
 iog:*:152:80::0:0:iog Monitoring Owner:/usr/local/iog:/usr/sbin/nologin
 rbldns:*:153:153::0:0:rbldnsd pseudo-user:/nonexistent:/usr/sbin/nologin
 trircd:*:154:154::0:0:& user:/usr/local/etc/tr-ircd:/usr/sbin/nologin
 xmrig:*:155:65534::0:0:XMRig:/nonexistent:/usr/sbin/nologin
 monetdb:*:156:156::0:0:MonetDB user:/usr/local/monetdb5:/bin/sh
 barman:*:157:157::0:0:Barman user:/var/barman:/bin/sh
 pootle:*:158:158::0:0:Pootle User:/var/db/pootle:/usr/sbin/nologin
 nocat:*:159:159::0:0:NoCat Daemon:/libexec/nocat:/sbin/nologin
 _ypldap:*:160:160::0:0:YP Ldap unprivileged user:/var/empty:/usr/sbin/nologin
 solr:*:161:161::0:0:Apache Solr System:/var/db/solr:/usr/sbin/nologin
 octoprint:*:162:162::0:0:OctoPrint Daemon:/usr/local/octoprint:/usr/sbin/nologin
 _iked:*:163:163::0:0:IKEv2 Daemon:/var/empty:/usr/sbin/nologin
 lightdm:*:164:164::0:0:Light Display Manager:/var/lib/lightdm-data:/usr/sbin/nologin
 uwsgi:*:165:165::0:0:uwsgi Daemon:/nonexistent:/usr/sbin/nologin
 yule:*:166:166::0:0:Samhain Daemon:/nonexistent:/usr/sbin/nologin
 ceph:*:167:167::0:0:Ceph Daemons:/var/lib/ceph:/usr/sbin/nologin
 frr:*:168:168::0:0:FRRouting user:/var/empty:/usr/sbin/nologin
 acme:*:169:169::0:0:ACME protocol client:/var/db/acme:/bin/sh
 tile38:*:170:170::0:0:Tile38 User:/var/db/tile38:/usr/sbin/nologin
 sfs:*:171:171::0:0:Self-Certifying File System:/nonexistent:/usr/sbin/nologin
 agk:*:172:172::0:0:AquaGateKeeper:/nonexistent:/nonexistent
 polipo:*:173:173::0:0:polipo web cache:/nonexistent:/usr/sbin/nologin
 flowtools:*:174:174::0:0:Flow-tools collector pseudo-user:/nonexistent:/usr/sbin/nologin
 twms:*:175:175::0:0:tWMS pseudo-user:/nonexistent:/usr/sbin/nologin
 mlvpn:*:176:176::0:0:mlVPN pseudo-user:/var/run/mlvpn:/usr/sbin/nologin
 _mdnsd:*:177:177::0:0:Multicast DNS Daemon:/var/empty:/usr/sbin/nologin
 otpw:*:178:178::0:0:OTPW pseudo-user:/var/lib/otpw:/usr/sbin/nologin
 gdnsd:*:179:179::0:0:gDNSd pseudo-user:/nonexistent:/usr/sbin/nologin
 pdns:*:180:120::0:0:pdns pseudo-user:/nonexistent:/usr/sbin/nologin
 nagios:*:181:181::0:0:Nagios pseudo-user:/var/spool/nagios:/usr/sbin/nologin
 noc:*:182:182::0:0:NOC pseudo-user:/usr/local/noc:/bin/sh
 icinga:*:183:183::0:0:Icinga pseudo-user:/var/spool/icinga:/usr/sbin/nologin
 dnscache:*:184:184::0:0:dnscache pseudo-user:/nonexistent:/usr/sbin/nologin
 tinydns:*:185:185::0:0:tinydns pseudo-user:/nonexistent:/usr/sbin/nologin
 dnslog:*:186:186::0:0:dnslog pseudo-user:/nonexistent:/usr/sbin/nologin
 swift:*:187:187::0:0:Swift daemon pseudo-user:/nonexistent:/usr/sbin/nologin
 netxms:*:188:188::0:0:netxms pseudo-user:/nonexistent:/usr/sbin/nologin
 leofs:*:189:189::0:0:LeoFS daemons pseudo-user:/var/db/leofs:/usr/sbin/nologin
 keystone:*:190:190::0:0:Keystone pseudo-user:/var/lib/keystone:/usr/sbin/nologin
 glance:*:191:191::0:0:Glance pseudo-user:/var/lib/glance:/usr/sbin/nologin
 moinmoin:*:192:192::0:0:MoinMoin User:/nonexistent:/usr/sbin/nologin
 cups:*:193:193::0:0:Cups Owner:/nonexistent:/usr/sbin/nologin
 saned:*:194:194::0:0:SANE Scanner Daemon:/nonexistent:/bin/sh
 radns:*:195:195::0:0:radns user:/nonexistent:/usr/sbin/nologin
 nova:*:196:196::0:0:Nova daemon pseudo-user:/var/lib/nova:/usr/sbin/nologin
 dq:*:197:197::0:0:dqcache user:/nonexistent:/usr/sbin/nologin
 horizon:*:198:198::0:0:Horizon pseudo-user:/var/lib/horizon:/usr/sbin/nologin
 mcserver:*:199:199::0:0:Minecraft Server:/nonexistent:/bin/sh
 sympa:*:200:200::0:0:Sympa Owner:/nonexistent:/usr/sbin/nologin
 privoxy:*:201:201::0:0:Privoxy proxy user:/nonexistent:/usr/sbin/nologin
 dspam:*:202:202::0:0:Dspam:/nonexistent:/usr/sbin/nologin
 cinder:*:203:203::0:0:Cinder daemon pseudo-user:/var/lib/cinder:/usr/sbin/nologin
 yate:*:204:204::0:0:Yate:/nonexistent:/usr/sbin/nologin
 gnugk:*:205:205::0:0:GNU GateKeeper pseudo-user:/nonexistent:/usr/sbin/nologin
 gini:*:206:206::0:0:& streaming server:/var/log/gini:/usr/sbin/nologin
 _mixminion:*:207:207::0:0:Mixminion server:/nonexistent:/usr/sbin/nologin
 _dnsdist:*:208:208::0:0:dnsdist user:/nonexistent:/usr/sbin/nologin
 gotosocial:*:209:209::0:0:Gotosocial user:/nonexistent:/usr/sbin/nologin
 shoutcast:*:210:210::0:0:Shoutcast sandbox:/nonexistent:/bin/sh
 git:*:211:211::0:0:git user:/usr/local/git:/bin/sh
 hg:*:212:212::0:0:mercurial-server user:/usr/local/hg:/bin/sh
 drizzle:*:213:213::0:0:Drizzle daemon:/var/db/drizzle:/usr/sbin/nologin
 kyototycoon:*:214:214::0:0:kyototycoon user:/var/empty:/usr/sbin/nologin
 opendnssec:*:215:215::0:0:Opendnssec Pseudo User:/nonexistent:/usr/sbin/nologin
 nsd:*:216:216::0:0:NSD DNS Server:/nonexistent:/usr/sbin/nologin
 anvil:*:217:217::0:0:anvil certificate dropper:/var/db/anvil:/bin/sh
 zap:*:218:218::0:0:zap user:/usr/local/zap:/bin/sh
 sddm:*:219:219::0:0:SDDM Display Manager user:/var/lib/sddm:/usr/sbin/nologin
 bs:*:220:220::0:0:Big Sister:/usr/local/bigsister:/bin/sh
 opensips:*:221:221::0:0:OpenSIPS user:/nonexistent:/usr/sbin/nologin
 rtpproxy:*:222:222::0:0:& user:/nonexistent:/sbin/nologin
 mqttwarn:*:223:223::0:0:mqttwarn:/nonexistent:/sbin/nologin
 payara:*:224:224::0:0:Payara Application Server user:/nonexistent:/usr/sbin/nologin
 postgrey:*:225:225::0:0:Postgrey Owner:/nonexistent:/usr/sbin/nologin
 sqlgrey:*:226:226::0:0:SQLgrey Owner:/nonexistent:/usr/sbin/nologin
 _hfm:*:227:227::0:0:hfm daemon:/nonexistent:/usr/sbin/nologin
 osrm:*:228:228::0:0:osrm:/nonexistent:/usr/sbin/nologin
 # free: 229, GID used
 carbon:*:230:230::0:0:osrm:/nonexistent:/usr/sbin/nologin
 foundationdb:*:231:231::0:0:foundationdb:/nonexistent:/usr/sbin/nologin
 archiva:*:232:232::0:0:Archiva Daemon User:/usr/local/archiva:/bin/sh
 _ntp:*:233:233::0:0:NTP Daemon:/var/empty:/usr/sbin/nologin
 kafka:*:234:234::0:0:Apache Kafka user:/nonexistent:/usr/sbin/nologin
 openhab:*:235:235::0:0:openHAB user:/var/db/openhab2/home:/usr/sbin/nologin
 rspamd:*:236:236::0:0:rspamd pseudo-user:/nonexistent:/usr/sbin/nologin
 paperless:*:237:237::0:0:paperless user:/var/db/paperless:/bin/sh
 sonic:*:238:238::0:0:sonic user:/var/db/sonic:/usr/sbin/nologin
 restserver:*:239:239::0:0:restic rest-server Daemon:/var/db/restserver:/usr/sbin/nologin
 aprsd:*:240:240::0:0:aprsd:/nonexistent:/bin/sh
 tnc:*:241:241::0:0:aprsd:/nonexistent:/bin/sh
 prosody:*:242:242::0:0:Prosody Jabber Server:/nonexistent:/usr/sbin/nologin
 ot-recorder:*:243:243::0:0:OwnTracks Recorder:/nonexistent:/usr/sbin/nologin
 mastodon:*:244:244::0:0:Mastodon User:/usr/local/www/mastodon:/bin/sh
 routinator:*:245:245::0:0:Routinator 3000 Pseudo User:/nonexistent:/usr/sbin/nologin
 fahclient:*:246:246::0:0:Folding@home User:/nonexistent:/usr/sbin/nologin
 fcron:*:247:247::0:0:fcron pseudo-user:/nonexistent:/usr/sbin/nologin
 signal-cli:*:248:248::0:0:Signal CLI:/nonexistent:/usr/sbin/nologin
 sonarqube:*:249:249::0:0:SonarQube Server:/nonexistent:/usr/sbin/nologin
 sems:*:250:250::0:0:SIP Express Media Server:/nonexistent:/usr/sbin/nologin
 irrd:*:251:251::0:0:irrd Daemon:/nonexistent:/usr/sbin/nologin
 gonic:*:252:252::0:0:Music streaming server:/nonexistent:/usr/sbin/nologin
 _adsuck:*:253:253::0:0:Adsuck ad blocking user:/nonexistent:/usr/sbin/nologin
 imds:*:254:254::0:0:Instance Metadata Service filter:/nonexistent:/usr/sbin/nologin
 _i2pd:*:255:255::0:0:I2P daemon:/var/db/i2pd:/usr/sbin/nologin
 _tor:*:256:256::0:0:Tor anonymizing router:/var/db/tor:/usr/sbin/nologin
 _smtpd:*:257:257::0:0:OpenSMTPD:/var/empty:/usr/sbin/nologin
 _smtpq:*:258:258::0:0:OpenSMTPD queue user:/var/empty:/usr/sbin/nologin
 spiped:*:259:259::0:0:spiped user:/nonexistent:/usr/sbin/nologin
 meta1s:*:260:260::0:0:MeTA1 SMTPS:/nonexistent:/usr/sbin/nologin
 meta1q:*:261:261::0:0:MeTA1 QMGR:/nonexistent:/usr/sbin/nologin
 meta1c:*:262:262::0:0:MeTA1 SMTPC:/nonexistent:/usr/sbin/nologin
 meta1m:*:263:263::0:0:MeTA1 misc:/nonexistent:/usr/sbin/nologin
 meta1:*:264:264::0:0:MeTA1 other:/nonexistent:/usr/sbin/nologin
 sshout:*:265:265::0:0:Secure Shout Host Oriented Unified Talk:/var/db/sshout:/usr/local/libexec/sshoutd
 step:*:266:266::0:0:Step CA:/nonexistent:/usr/sbin/nologin
 odoo:*:267:267::0:0:Odoo ERP:/nonexistent:/usr/sbin/nologin
 tenshi:*:268:268::0:0:Tenshi user:/var/lib/tenshi:/usr/sbin/nologin
 dendrite:*:269:269::0:0:Dendrite user:/nonexistent:/usr/sbin/nologin
 _rpki-client:*:270:270::0:0:rpki-client user:/nonexistent:/usr/sbin/nologin
 signaling:*:271:271::0:0:Signaling server:/nonexistent:/usr/sbin/nologin
 gvm:*:272:272::0:0:Greenbone Vulnerability Management:/nonexistent:/usr/sbin/nologin
 seaweedfs:*:273:273::0:0:seaweedfs user:/var/db/seaweedfs:/usr/sbin/nologin
 usbmuxd:*:274:274::0:0:USB multiplexing daemon:/nonexistent:/usr/sbin/nologin
 hacluster:*:275:275::0:0:Heartbeat cluster user:/nonexistent:/usr/sbin/nologin
 frontbase:*:276:276::0:0:FrontBase Daemon:/usr/local/FrontBase/Databases:/bin/sh
 unifi-poller:*:277:277::0:0:unifi-poller daemon:/nonexistent:/usr/sbin/nologin
 rtg:*:278:278::0:0:RTG daemon:/nonexistent:/usr/sbin/nologin
 mrtg:*:279:279::0:0:MRTG daemon:/nonexistent:/usr/sbin/nologin
 xymon:*:280:280::0:0:Xymon Monitor:/nonexistent:/usr/sbin/nologin
 prelude:*:281:281::0:0:Prelude user:/nonexistent:/usr/sbin/nologin
 spread:*:282:282::0:0:Spread user:/nonexistent:/usr/sbin/nologin
 devmon:*:283:283::0:0:devmon monitor:/nonexistent:/usr/sbin/nologin
 vnstat:*:284:284::0:0:vnStat Network Monitor:/nonexistent:/usr/sbin/nologin
 exaddos:*:285:285::0:0:exaddos daemon user:/nonexistent:/usr/sbin/nologin
 rancid:*:286:286::0:0:RANCID daemon user:/usr/local/var/rancid:/bin/sh
 webdis:*:287:287::0:0:webdis daemon user:/nonexistent:/usr/sbin/nologin
 ntopng:*:288:288::0:0:ntopng daemon user:/nonexistent:/usr/sbin/nologin
 victoria-metrics:*:289:289::0:0:VictoriaMetrics user:/nonexistent:/usr/sbin/nologin
 _gmid:*:290:290::0:0:gmid daemon user:/var/empty:/usr/sbin/nologin
 pydio:*:291:291::0:0:pydio cells user:/var/pydio:/bin/sh
 sftpgo:*:292:292::0:0:SFTPGo user:/nonexistent:/usr/sbin/nologin
 biboumi:*:293:293::0:0:biboumi:/nonexistent:/usr/sbin/nologin
 krill:*:294:294::0:0:krill Pseudo User:/nonexistent:/usr/sbin/nologin
 jottad:*:295:295::0:0:Jotta Cloud Daemon:/nonexisten:/usr/sbin/nologin
 writefreely:*:296:296::0:0:WriteFreely daemon:/var/db/writefreely:/usr/sbin/nologin
 conduit:*:297:297::0:0:Conduit daemon:/var/db/conduit:/usr/sbin/nologin
 neolink:*:298:298::0:0:& daemon:/nonexistent:/usr/sbin/nologin
 owncast:*:299:299::0:0:& daemon:/nonexistent:/usr/sbin/nologin
 backuppc:*:300:300::0:0:BackupPC pseudo-user:/nonexistent:/usr/sbin/nologin
 openvpn:*:301:301::0:0:OpenVPN pseudo-user:/nonexistent:/usr/sbin/nologin
 netdata:*:302:302::0:0:NetData Daemon:/var/cache/netdata:/usr/sbin/nologin
 onlyoffice:*:303:303::0:0:Onlyoffice pseudo-user:/usr/local/www/onlyoffice/documentserver:/usr/sbin/nologin
 glewlwyd:*:304:304::0:0:Glewlwyd SSO server:/nonexistent:/usr/sbin/nologin
 nats:*:305:305::0:0:NATS Daemon:/nonexistent:/usr/sbin/nologin
 jitsi:*:306:306::0:0:Jitsi Meet Owner:/nonexistent:/usr/sbin/nologin
 jicofo:*:307:307::0:0:Jitsi Conference Focus Owner:/nonexistent:/usr/sbin/nologin
 jvb:*:308:308::0:0:Jitsi VideoBridge Owner:/nonexistent:/usr/sbin/nologin
 wazuh:*:309:309::0:0:Wazuh Owner:/var/ossec:/usr/sbin/nologin
 cardano:*:310:310::0:0:Cardano Node Daemon:/nonexistent:/usr/sbin/nologin
 _arti:*:311:311::0:0:Arti Daemon:/nonexistent:/usr/sbin/nologin
 _sphinx:*:312:312::0:0:Sphinxsearch Owner:/nonexistent:/usr/sbin/nologin
 _fastdfs:*:313:313::0:0:FastDFS Owner:/nonexistent:/usr/sbin/nologin
 promscale:*:314:314::0:0:Promscale:/nonexistent:/usr/sbin/nologin
 lavinmq:*:315:315::0:0:LavinMQ user:/nonexistent:/usr/sbin/nologin
 nut:*:316:316::0:0:Network UPS Tools user:/nonexistent:/usr/sbin/nologin
 hedgedoc:*:317:317::0:0:HedgeDoc user:/nonexistent:/usr/sbin/nologin
 icingadirector:*:318:183::0:0:icingadirector user:/nonexistent:/usr/sbin/nologin
 rustdesk:*:319:319::0:0:rustdesk-server user:/nonexistent:/usr/sbin/nologin
 teleirc:*:320:320::0:0:Telegram and IRC bridge:/nonexistent:/usr/sbin/nologin
 caldera:*:321:321::0:0:Caldera Mitre user:/nonexistent:/usr/sbin/nologin
 tlsc:*:322:322::0:0:TLS connect daemon:/nonexistent:/usr/sbin/nologin
 soju:*:323:323::0:0:soju:/nonexistent:/usr/sbin/nologin
 dkimpy-milter:*:324:324::0:0:Dkimpy Milter:/nonexistent:/usr/sbin/nologin
 dkfilter:*:325:325::0:0:DK Filter Owner:/nonexistent:/usr/sbin/nologin
 smfs:*:326:326::0:0:SMFSAV Owner:/nonexistent:/usr/sbin/nologin
 _reticulum:*:327:327::0:0:Reticulum Daemon:/nonexistent:/usr/sbin/nologin
 galene:*:328:328::0:0:Galene Visioconference server:/nonexistent:/usr/sbin/nologin
-# free: 329
+certspotter:*:329:329::0:0:Cert Spotter user:/nonexistent:/usr/sbin/nologin
 orthanc:*:330:330::0:0:Orthanc Daemon:/nonexistent:/usr/sbin/nologin
 # free: 331
 # free: 332
 honeytrap:*:333:333::0:0:HoneyTrap Daemon:/nonexistent:/usr/sbin/nologin
 # free: 334
 # free: 335
 _pma:*:336:80::0:0:phpMyAdmin Owner:/nonexistent:/usr/sbin/nologin
 daapd:*:337:337::0:0:daapd User:/nonexistent:/usr/sbin/nologin
 murmur:*:338:338::0:0:& User:/nonexistent:/usr/sbin/nologin
 mumble-server:*:339:339::0:0:& User:/nonexistent:/usr/sbin/nologin
 wildfire:*:340:340::0:0:Wildfire Daemon:/nonexistent:/usr/sbin/nologin
 stunnel:*:341:341::0:0:Stunnel Daemon:/nonexistent:/usr/sbin/nologin
 openfire:*:342:342::0:0:Openfire IM Daemon:/nonexistent:/usr/sbin/nologin
 # free: 343
 # free: 344
 # free: 345
 # free: 346
 eturnal:*:347:347::0:0:eturnal User:/var/spool/eturnal:/bin/sh
 # free: 348
 # free: 349
 _sabnzbd:*:350:350::0:0:sabnzb Daemon:/nonexistent:/usr/sbin/nologin
 sonarr:*:351:351::0:0:Sonarr PVR:/nonexistent:/usr/sbin/nologin
 radarr:*:352:352::0:0:Radarr Daemon:/nonexistent:/usr/sbin/nologin
 _iodined:*:353:353::0:0:Iodine Daemon:/nonexistent:/usr/sbin/nologin
 jackett:*:354:354::0:0:Jackett Torznab Proxy Daemon:/nonexistent:/usr/sbin/nologin
 nzbhydra2:*:355:355::0:0:NZBHydra 2 Daemon:/nonexistent:/usr/sbin/nologin
 lidarr:*:356:356::0:0:Lidarr Daemon:/nonexistent:/usr/sbin/nologin
 bazarr:*:357:357::0:0:Bazarr Daemon:/nonexistent:/usr/sbin/nologin
 autoscan:*:358:358::0:0:Autoscan Daemon:/nonexistent:/usr/sbin/nologin
 prowlarr:*:359:359::0:0:Prowlarr Daemon:/nonexistent:/usr/sbin/nologin
 v2ray:*:360:360::0:0:V2Ray Daemon:/nonexistent:/usr/sbin/nologin
 httptunnel:*:361:361::0:0:httptunnel Daemon:/nonexistent:/usr/sbin/nologin
 readarr:*:362:362::0:0:Readarr Daemon:/nonexistent:/usr/sbin/nologin
 # free: 363
 # free: 364
 # free: 365
 # free: 366
 # free: 367
 # free: 368
 # free: 369
 _wsdd:*:370:370::0:0:Web Service Discovery Daemon:/nonexistent:/usr/sbin/nologin
 # free: 371
 # free: 372
 # free: 373
 # free: 374
 # free: 375
 # free: 376
 # free: 377
 # free: 378
 # free: 379
 # free: 380
 # free: 381
 # free: 382
 # free: 383
 # free: 384
 # free: 385
 # free: 386
 # free: 387
 # free: 388
 ldap:*:389:389::0:0:OpenLDAP Server:/nonexistent:/usr/sbin/nologin
 # free: 390
 # free: 391
 # free: 392
 # free: 393
 # free: 394
 # free: 395
 # free: 396
 # free: 397
 tiarra:*:398:398::0:0:Tiarra IRC Proxy:/nonexistent:/usr/sbin/nologin
 # free: 399
 # free: 400
 # free: 401
 # free: 402
 # free: 403
 # free: 404
 # free: 405
 # free: 406
 # free: 407
 # free: 408
 # free: 409
 # free: 410
 uhub:*:411:411::0:0:uHub ADC Daemon:/nonexistent:/usr/sbin/nologin
 # free: 412
 # free: 413
 # free: 414
 # free: 415
 # free: 416
 # free: 417
 # free: 418
 # free: 419
 oxidized:*:420:420::0:0:Oxidized Owner:/var/db/oxidized:/usr/sbin/nologin
 # free: 421
 # free: 422
 # free: 423
 # free: 424
 # free: 425
 drweb:*:426:426::0:0:Dr.Web Mail Scanner:/nonexistent:/usr/sbin/nologin
 # free: 427
 # free: 428
 varnish:*:429:429::0:0:Varnish Cache User:/nonexistent:/usr/sbin/nologin
 varnishlog:*:430:429::0:0:Varnish Log User:/nonexistent:/usr/sbin/nologin
 # free: 431
 # free: 432
 # free: 433
 # free: 434
 # free: 435
 # free: 436
 # free: 437
 # free: 438
 # free: 439
 # free: 440
 # free: 441
 quasselcore:*:442:442::0:0:Quassel IRC User:/nonexistent:/usr/sbin/nologin
 # free: 443
 callweaver:*:444:444::0:0:Callweaver account:/var/lib/callweaver:/usr/sbin/nologin
 # free: 445
 # free: 446
 # free: 447
 # free: 448
 # free: 449
 ecartis:*:450:450::0:0:Ecartis Listserver:/usr/local/ecartis:/usr/sbin/nologin
 # free: 451
 # free: 452
 yadifa:*:453:453::0:0:Yadifa DNS Server:/nonexistent:/usr/sbin/nologin
 # free: 454
 inadyn:*:455:455::0:0:inadyn user:/nonexistent:/usr/sbin/nologin
 # free: 456
 # free: 457
 # free: 458
 # free: 459
 # free: 460
 # free: 461
 # free: 462
 # free: 463
 # free: 464
 courier:*:465:465::0:0:Courier Mail Server:/nonexistent:/usr/sbin/nologin
 condor:*:466:466::0:0:& user:/home/condor:/usr/sbin/nologin
 netmon:*:467:467::0:0:Network monitor account:/var/netmon:/usr/sbin/nologin
 slurm:*:468:468::0:0:SLURM Daemon:/nonexistent:/usr/sbin/nologin
 consul:*:469:469::0:0:Consul Daemon:/var/tmp/consul:/usr/sbin/nologin
 serf:*:470:470::0:0:Serf Daemon:/nonexistent:/usr/sbin/nologin
 vault:*:471:471:daemon:0:0:Vault Daemon:/nonexistent:/usr/sbin/nologin
 nomad:*:472:472::0:0:Nomad Daemon:/nonexistent:/usr/sbin/nologin
 minio:*:473:473::0:0:Minio Daemon:/var/tmp/minio:/usr/sbin/nologin
 gitlab-runner:*:474:474::0:0:GitLab Runner Daemon:/var/tmp/gitlab_runner:/usr/sbin/nologin
 traefik:*:475:475::0:0:Traefik Daemon:/var/tmp/traefik:/usr/sbin/nologin
 gitlab-pages:*:476:476::0:0:GitLab Pages Daemon:/var/tmp/gitlab_pages:/usr/sbin/nologin
 fiche:*:477:477::0:0:fiche Daemon:/usr/local/www/fiche:/usr/sbin/nologin
 prometheus:*:478:478::0:0:Prometheus Daemon:/var/tmp/prometheus:/usr/sbin/nologin
 alertmanager:*:479:479::0:0:Alertmanager Daemon:/var/tmp/alertmanager:/usr/sbin/nologin
 datadog:*:480:480::0:0:DataDog Agent:/var/db/datadog:/usr/sbin/nologin
 # free: 481
 # free: 482
 # free: 483
 # free: 484
 # free: 485
 # free: 486
 # free: 487
 # free: 488
 # free: 489
 # free: 490
 # free: 491
 # free: 492
 # free: 493
 # free: 494
 # free: 495
 # free: 496
 # free: 497
 rustypaste:*:498:498::0:0:Minimal file upload/pastebin service:/nonexistent:/usr/sbin/nologin
 # free: 499
 # free: 500
 # free: 501
 # free: 502
 # free: 503
 # free: 504
 _bbstored:*:505:505::0:0:Box Backup Store Daemon:/nonexistent:/usr/sbin/nologin
 radmind:*:506:506::0:0:radmind User:/var/radmind:/usr/sbin/nologin
 skkserv:*:507:507::0:0:skkserv User:/nonexistent:/usr/sbin/nologin
 # free: 508
 # free: 509
 # free: 510
 # free: 511
 pwhois:*:512:512::0:0:pwhoisd User:/nonexistent:/usr/sbin/nologin
 # free: 513
 # free: 514
 # free: 515
 # free: 516
 # free: 517
 # free: 518
 # free: 519
 libvirtdbus:*:520:520::0:0:Libvirt D-Bus bridge:/nonexistent:/usr/sbin/nologin
 davmail:*:521:521::0:0:Davmail Exchange Gateway:/nonexistent:/usr/sbin/nologin
 nullmail:*:522:522::0:0:Nullmailer Mail System:/var/spool/nullmailer:/bin/sh
 freevo:*:523:523::0:0:Freevo User:/var/db/freevo:/bin/sh
 # free: 524
 dkimproxy:*:525:525::0:0:DKIM Proxy Owner:/nonexistent:/usr/sbin/nologin
 # free: 526
 # free: 527
 # free: 528
 # free: 529
 # free: 530
 # free: 531
 # free: 532
 # free: 533
 pgbouncer:*:534:534::0:0:Pgbouncer Daemon:/nonexistent:/usr/sbin/nologin
 redis:*:535:535::0:0:Redis Daemon:/nonexistent:/usr/sbin/nologin
 keydb:*:536:536::0:0:KeyDB Daemon:/nonexistent:/usr/sbin/nologin
 # free: 537
 # free: 538
 # free: 539
 # free: 540
 # free: 541
 _flowd:*:542:542::0:0:flowd privilege separation user:/var/empty:/usr/sbin/nologin
 ejabberd:*:543:543::0:0:ejabberd pseudo user:/var/spool/ejabberd:/bin/sh
 # free: 544
 # free: 545
 # free: 546
 # free: 547
 # free: 548
 # free: 549
 # free: 550
 # free: 551
 kresd:*:552:552::0:0:Knot DNS Resolver:/nonexistent:/usr/sbin/nologin
 knot:*:553:553::0:0:Knot DNS Server:/nonexistent:/usr/sbin/nologin
 qtss:*:554:554::0:0:Darwin Streaming Server:/nonexistent:/usr/sbin/nologin
 ircdru:*:555:555::0:0:Russian hybrid IRC server:/nonexistent:/bin/sh
 messagebus:*:556:556::0:0:D-BUS Daemon User:/nonexistent:/usr/sbin/nologin
 # free: 557
 avahi:*:558:558::0:0:Avahi Daemon User:/nonexistent:/usr/sbin/nologin
 tacacs:*:559:559::0:0:TACACS+ Daemon User:/nonexistent:/usr/sbin/nologin
 # Unused since hald has been removed from the ports tree
 # haldaemon:*:560:560::0:0:HAL Daemon User:/nonexistent:/usr/sbin/nologin
 distcc:*:561:561::0:0:Distcc user:/nonexistent:/usr/sbin/nologin
 polkit:*:562:562::0:0:PolicyKit User:/nonexistent:/usr/sbin/nologin
 pulse:*:563:563::0:0:PulseAudio System User:/nonexistent:/usr/sbin/nologin
 # free: 564
 polkitd:*:565:565::0:0:Polkit Daemon User:/var/empty:/usr/sbin/nologin
 # free: 566
 # free: 567
 # free: 568
 # free: 569
 # free: 570
 # free: 571
 # free: 572
 # free: 573
 # free: 574
 nexus:*:575:575::0:0:Nexus Repository Manager OSS:/nonexistent:/usr/sbin/nologin
 # free: 576
 # free: 577
 # free: 578
 # free: 579
 # free: 580
 # free: 581
 # free: 582
 # free: 583
 # free: 584
 # free: 585
 # free: 586
 assp:*:587:587::0:0:ASSP Anti-Spam Proxy:/var/db/assp:/usr/sbin/nologin
 avahi-autoipd:*:588:588::0:0:Avahi Autoipd Daemon user:/nonexistent:/usr/sbin/nologin
 # free: 589
 # free: 590
 # free: 591
 # free: 592
 # free: 593
 # free: 594
 # free: 595
 # free: 596
 # free: 597
 # free: 598
 # free: 599
 _xsi:*:600:600::0:0:XMLSysInfo User:/nonexistent:/usr/sbin/nologin
 _tss:*:601:601:daemon:0:0:TCG Software Stack user:/var/empty:/usr/sbin/nologin
 _pkcs11:*:602:602:daemon:0:0:opencryptoki user:/var/empty:/usr/sbin/nologin
 _acme:*:603:603::0:0:ACME client user:/var/empty:/usr/sbin/nologin
 _lego:*:604:604::0:0:lego client user:/nonexistent:/usr/sbin/nologin
 _hockeypuck:*:605:605::0:0:hockeypuck pgp keyserver user:/var/empty:/usr/sbin/nologin
 # free: 606
 # free: 607
 # free: 608
 # free: 609
 freeswitch:*:610:610::0:0:Freeswitch user:/nonexistent:/usr/sbin/nologin
 # free: 611
 # free: 612
 # free: 613
 # free: 614
 ntpa:*:615:615::0:0:NTPa user:/nonexistent:/usr/sbin/nologin
 taskd:*:616:616::0:0:taskd user:/nonexistent:/usr/sbin/nologin
 # free: 617
 # free: 618
 # free: 619
 # free: 620
 # free: 621
 # free: 622
 # free: 623
 # free: 624
 xapsd:*:625:625::0:0:xapsd:/var/lib/xapsd:/usr/sbin/nologin
 # free: 626
 # free: 627
 # free: 628
 # free: 629
 # free: 630
 # free: 631
 # free: 632
 # free: 633
 # free: 634
 # free: 635
 _pla:*:636:80::0:0:phpLDAPAdmin Owner:/nonexistent:/usr/sbin/nologin
 # free: 637
 # free: 638
 caldavd:*:639:639::0:0:Caldavd user:/var/db/caldavd:/usr/sbin/nologin
 # free: 640
 monkeysphere:*:641:641::0:0:Monkeysphere User:/var/monkeysphere:/usr/local/bin/bash
 # free: 642
 # free: 643
 # free: 644
 # free: 645
 # free: 646
 # free: 647
 # free: 648
 # free: 649
 # free: 650
 # free: 651
 # free: 652
 # free: 653
 # free: 654
 # free: 655
 # free: 656
 # free: 657
 # free: 658
 # free: 659
 # free: 660
 # free: 661
 # free: 662
 # free: 663
 # free: 664
 # free: 665
 aox:*:666:666::0:0:Archiveopteryx user:/nonexistent:/usr/sbin/nologin
 riak:*:667:667::0:0:Riak user:/usr/local/lib/riak:/bin/sh
 riakcs:*:668:667::0:0:Riak CS user:/usr/local/lib/riak-cs:/bin/sh
 stanchion:*:669:667::0:0:Stanchion user:/usr/local/lib/stanchion:/bin/sh
 # free: 670
 # free: 671
 # free: 672
 # free: 673
 # free: 674
 # free: 675
 # free: 676
 # free: 677
 # free: 678
 # free: 679
 # free: 680
 # free: 681
 # free: 682
 # free: 683
 # free: 684
 # free: 685
 # free: 686
 # free: 687
 darkhttpd:*:688:688::0:0:Simple, static web server:/nonexistent:/usr/sbin/nologin
 # free: 689
 # free: 690
 # free: 691
 # free: 692
 # free: 693
 # free: 694
 # free: 695
 # free: 696
 # free: 697
 # free: 698
 # free: 699
 bnetd:*:700:700::0:0:Bnetd user:/nonexistent:/usr/sbin/nologin
 fastnetmon:*:701:701::0:0:FastNetMon user:/nonexistent:/usr/sbin/nologin
 _sndio:*:702:702::0:0:sndio privsep:/var/empty:/usr/sbin/nologin
 # free: 703
 # free: 704
 # free: 705
 # free: 706
 # free: 707
 # free: 708
 # free: 709
 # free: 710
 # free: 711
 # free: 712
 # free: 713
 # free: 714
 # free: 715
 # free: 716
 bopm:*:717:717::0:0:Blitzed Open Proxy Monitor:/nonexistent:/bin/sh
 _dnscrypt-wrapper:*:718:65534::0:0:dnscrypt-wrapper user:/var/empty:/usr/sbin/nologin
 # free: 719
 # free: 720
 # free: 721
 # free: 722
 # free: 723
 # free: 724
 # free: 725
 # free: 726
 # free: 727
 # free: 728
 # free: 729
 # free: 730
 # free: 731
 # free: 732
 # free: 733
 # free: 734
 c-lightning:*:735:735::0:0:c-lightning Daemon:/var/db/c-lightning:/usr/sbin/nologin
 # free: 736
 # free: 737
 # free: 738
 # free: 739
 # free: 740
 # free: 741
 # free: 742
 # free: 743
 # free: 744
 # free: 745
 # free: 746
 # free: 747
 # free: 748
 # free: 749
 # free: 750
 # free: 751
 # free: 752
 # free: 753
 # free: 754
 # free: 755
 # free: 756
 sopel:*:757:757::0:0:Sopel IRC Bot:/var/db/sopel:/usr/sbin/nologin
 # free: 758
 # free: 759
 # free: 760
 # free: 761
 # free: 762
 # free: 763
 # free: 764
 # free: 765
 # free: 766
 # free: 767
 # free: 768
 # free: 769
 postgres:*:770:770::0:0:PostgreSQL Daemon:/var/db/postgres:/bin/sh
 cockroach:*:771:771::0:0:CockroachDB Daemon:/var/db/cockroach:/usr/sbin/nologin
 postgrest:*:772:772::0:0:PostgREST Daemon:/nonexistent:/usr/sbin/nologin
 # free: 773
 # free: 774
 # free: 775
 namecoin:*:776:776::0:0:namecoin Daemon:/var/db/namecoin:/usr/sbin/nologin
 openxpki:*:777:777::0:0:OpenXPKI Owner:/nonexistent:/usr/sbin/nologin
 litecoin:*:778:778::0:0:litecoin Daemon:/var/db/litecoin:/usr/sbin/nologin
 bitcoin:*:779:779::0:0:bitcoin Daemon:/var/db/bitcoin:/usr/sbin/nologin
 zetacoin:*:780:780::0:0:ZetaCoin Daemon:/nonexistent:/usr/sbin/nologin
 monero:*:781:781::0:0:Monero Daemon:/var/db/monero:/usr/sbin/nologin
 zeek:*:782:782::0:0:Zeek Network Security Monitor:/nonexistent:/usr/sbin/nologin
 # free: 783
 # free: 784
 # free: 785
 # free: 786
 # free: 787
 # free: 788
 # free: 789
 # free: 790
 # free: 791
 # free: 792
 # free: 793
 # free: 794
 # free: 795
 # free: 796
 # free: 797
 # free: 798
 # free: 799
 clickhouse:*:800:800::0:0:ClickHouse Daemon:/var/db/clickhouse:/usr/sbin/nologin
 # free: 801
 # free: 802
 # free: 803
 # free: 804
 # free: 805
 # free: 806
 bosun:*:807:807::0:0:Bosun Daemon:/nonexistent:/usr/sbin/nologin
 clixon:*:808:808::0:0:Clixon Daemon:/nonexistent:/usr/sbin/nologin
 # free: 809
 # free: 810
 # free: 811
 foreman_proxy:*:812:812::0:0:Foreman Smart Proxy:/usr/local/share/foreman-proxy:/usr/sbin/nologin
 hitch:*:813:813::0:0:Hitch TLS Proxy:/nonexistent:/usr/sbin/nologin
 puppet:*:814:814::0:0:Puppet Daemon:/nonexistent:/usr/sbin/nologin
 uchiwa:*:815:815::0:0:Uchiwa Dashboard:/nonexistent:/usr/sbin/nologin
 promtail:*:816:968::0:0:Promtail:/var/db/promtail:/usr/sbin/nologin
 rslsync:*:817:817::0:0:Resilio Sync Daemon:/nonexistent:/usr/sbin/nologin
 jenkins:*:818:818::0:0:Jenkins CI:/usr/local/jenkins:/bin/sh
 rundeck:*:819:819::0:0:Rundeck:/usr/local/rundeck:/bin/sh
 openacs:*:820:820::0:0:OpenACS Daemon User:/nonexistent:/usr/sbin/nologin
 dotlrn:*:821:821::0:0:.LRN Daemon User:/nonexistent:/usr/sbin/nologin
 titus:*:822:65533::0:0:Titus Daemon User:/nonexistent:/usr/sbin/nologin
 titus-keys:*:823:65533::0:0:Titus Keyserver User:/nonexistent:/usr/sbin/nologin
 selenium:*:824:824::0:0:Selenium Daemon User:/usr/local/selenium:/bin/sh
 polw:*:825:825::0:0:Policyd-weight Cache Owner:/nonexistent:/sbin/nologin
 statsd:*:826:826::0:0:Statsd Daemon:/nonexistent:/sbin/nologin
 _tuptime:*:827:827::0:0:Tuptime:/var/lib/tuptime:/usr/sbin/nologin
 cirrus:*:828:828::0:0:Cirrus CI:/usr/local/cirrus:/bin/sh
 # free: 829
 # free: 830
 # free: 831
 beehive:*:832:832::0:0:beehive user:/nonexistent:/usr/sbin/nologin
 # free: 833
 # free: 834
 # free: 835
 # free: 836
 # free: 837
 # free: 838
 # free: 839
 netdisco:*:840:840::0:0:netdisco daemon:/usr/local/etc/netdisco:/bin/sh
 tcpcryptd:*:841:841::0:0:tcpcrypt daemon:/nonexistent:/usr/sbin/nologin
 munin:*:842:842::0:0:Munin:/var/munin:/usr/sbin/nologin
 # free: 843
 subsonic:*:844:844::0:0:Subsonic standalone-server:/nonexistent:/usr/sbin/nologin
 # free: 845
 sogod:*:846:846::0:0:SOGo groupware:/nonexistent:/usr/sbin/nologin
 domoticz:*:847:847::0:0:domoticz user:/nonexistent:/usr/sbin/nologin
 graylog:*:848:848::0:0:Graylog user:/nonexistent:/usr/sbin/nologin
 chronyd:*:849:849::0:0:chronyd user:/nonexistent:/usr/sbin/nologin
 qbittorrent:*:850:850::0:0:qBittorrent Daemon User:/var/db/qbittorrent/conf:/usr/sbin/nologin
 cassandra:*:851:851::0:0:Cassandra DB Daemon User:/var/db/cassandra:/usr/sbin/nologin
 p0f:*:852:852::0:0:p0f unprivileged user:/var/empty:/usr/sbin/nologin
 _geodns:*:853:853::0:0:GeoDNS User:/var/empty:/usr/sbin/nologin
 ebusd:*:854:854::0:0:eBUS Daemon user:/nonexistent:/usr/sbin/nologin
 opensearch:*:855:855::0:0:opensearch user:/nonexistent:/usr/sbin/nologin
 # free: 856
 # free: 857
 # free: 858
 # free: 859
 # free: 860
 # free: 861
 # free: 862
 # free: 863
 # free: 864
 # free: 865
 # free: 866
 sqlpage:*:867:867::0:0:SQLPage:/nonexistent:/usr/sbin/nologin
 jellyfin:*:868:868::0:0:Jellyfin:/nonexistent:/usr/sbin/nologin
 keyd:*:869:869::0:0:Key remapping daemon for evdev:/nonexistent:/usr/sbin/nologin
 buildbot:*:870:870::0:0:Buildbot user:/var/db/buildbot:/usr/sbin/nologin
 archiva:*:871:871::0:0:Apache Archiva Daemon:/nonexistent:/usr/sbin/nologin
 bitmark:*:872:872::0:0:Bitmark Property System:/var/lib/bitmarkd:/usr/sbin/nologin
 bitmark-recorder:*:873:873::0:0:Bitmark Property Recorder:/var/lib/recorderd:/usr/sbin/nologin
 librespeed:*:874:874::0:0:LibreSpeed user:/nonexistent:/usr/sbin/nologin
 cfssl:*:875:875::0:0:cfssl user:/nonexistent:/usr/sbin/nologin
 _lms:*:876:876::0:0:Lightweight Music Server user:/nonexistent:/usr/sbin/nologin
 gemserv:*:877:877::0:0:gemserv user:/nonexistent:/usr/sbin/nologin
 gerbera:*:878:878::0:0:Gerbera DLNA Media Server:/nonexistent:/usr/sbin/nologin
 _encrypted-dns:*:879:879::0:0:encrypted-dns user:/var/empty:/usr/sbin/nologin
 pyspf-milter:*:880:880::0:0:pyspf-milter:/nonexistent:/usr/sbin/nologin
 ultimaker:*:881:881::0:0:Ultimaker user:/nonexistent:/usr/sbin/nologin
 midpoint:*:882:882::0:0:midPoint user:/var/db/midpoint:/usr/sbin/nologin
 ipfs-go:*:883:883::0:0:ipfs-go user:/var/db/ipfs-go:/bin/sh
 telegraf:*:884:884::0:0:telegraf user:/nonexistent:/usr/sbin/nologin
 tcpdump:*:885:885::0:0:tcpdump user:/nonexistent:/usr/sbin/nologin
 miniflux:*:886:886::0:0:Miniflux:/nonexistent:/usr/sbin/nologin
 pdagent:*:887:887::0:0:PagerDuty Agent:/nonexistent:/usr/sbin/nologin
 vuls:*:888:888::0:0:VULnerability Scanner:/var/db/vuls:/usr/sbin/nologin
 mattermost:*:889:889::0:0:Mattermost:/usr/local/www/mattermost:/usr/sbin/nologin
 matterircd:*:890:890::0:0:Matterircd User:/nonexistent:/usr/sbin/nologin
 urbackup:*:891:891::0:0:UrBackup Server:/var/urbackup:/usr/sbin/nologin
 tautulli:*:892:892::0:0:Tautulli user:/nonexistent:/usr/sbin/nologin
 logstash:*:893:893::0:0:Logstash user:/nonexistent:/usr/sbin/nologin
 arangodb:*:894:894::0:0:ArangoDB pseudo-user:/var/db/arangodb:/usr/sbin/nologin
 snmptt:*:895:895::0:0:SNMPTT User:/var/spool/snmptt:/usr/sbin/nologin
 istat:*:896:896::0:0:istatserver user:/nonexistent:/usr/sbin/nologin
 znc:*:897:897::0:0:ZNC User:/nonexistent:/usr/sbin/nologin
 ufdb:*:898:898::0:0:ufdb user:/nonexistent:/usr/sbin/nologin
 guacamole:*:899:899::0:0:Guacamole user:/nonexistent:/usr/sbin/nologin
 seafile:*:900:900::0:0:Seafile user:/nonexistent:/usr/bin/nologin
 fossy:*:901:901::0:0:FOSSology user:/usr/local/share/fossology:/usr/local/bin/bash
 scanlogd:*:902:902::0:0:scanlogd user:/nonexistent:/usr/sbin/nologin
 _ocserv:*:903:903::0:0:ocserv user:/nonexistent:/usr/sbin/nologin
 grafana:*:904:904::0:0:Grafana2:/nonexistent:/usr/bin/nologin
 artifactory:*:905:905::0:0:artifactory user:/nonexistent:/usr/sbin/nologin
 opentsdb:*:906:906::0:0:OpenTSDB Daemon:/var/empty:/usr/sbin/nologin
 influxd:*:907:907::0:0:InfluxDB Daemon:/var/empty:/usr/sbin/nologin
 riemann:*:908:908::0:0:Riemann User:/var/empty:/usr/sbin/nologin
 proxy65:*:909:909::0:0:Proxy65 Daemon:/nonexistent:/usr/sbin/nologin
 bacula:*:910:910::0:0:Bacula Daemon:/var/db/bacula:/usr/sbin/nologin
 iserv:*:911:911::0:0:Iserv Daemon:/nonexistent:/usr/sbin/nologin
 _sj3:*:912:912::0:0:SJ3 Daemon:/nonexistent:/usr/sbin/nologin
 _relayd:*:913:913::0:0:Relay Daemon:/var/empty:/usr/sbin/nologin
 bitlbee:*:914:914::0:0:Bitlbee pseudo-user:/var/db/bitlbee:/usr/sbin/nologin
 logcheck:*:915:915::0:0:Logcheck system account:/var/lib/logcheck:/usr/local/bin/bash
 loki:*:916:967::0:0:Loki:/var/db/loki:/usr/sbin/nologin
 _prayer:*:917:917::0:0:Prayer Account:/nonexistent:/usr/sbin/nologin
 nefu:*:918:918::0:0:Nefu daemon:/var/db/nefu:/usr/sbin/nologin
 couchdb:*:919:919::0:0:CouchDB Account:/var/empty:/usr/sbin/nologin
 vboxusers:*:920:920::0:0:Virtualbox user:/nonexistent:/usr/sbin/nologin
 transmission:*:921:921::0:0:Transmission Daemon User:/usr/local/etc/transmission/home:/usr/sbin/nologin
 mongodb:*:922:922::0:0:MongoDB pseudo-user:/var/db/mongodb:/usr/sbin/nologin
 liquidsoap:*:923:923::0:0:Liquidsoap User:/nonexistent:/usr/sbin/nologin
 postpals:*:924:924::0:0:postpals user:/nonexistent:/usr/sbin/nologin
 mfs:*:925:925::0:0:MooseFS User:/nonexistent:/usr/sbin/nologin
 minbif:*:926:926::0:0:Minbif Daemon User:/nonexistent:/usr/sbin/nologin
 kumofs:*:927:927::0:0:kumofs daemon:/nonexistent:/usr/sbin/nologin
 nslcd:*:928:928::0:0:nslcd daemon:/nonexistent:/usr/sbin/nologin
 activemq:*:929:929::0:0:ActiveMQ Daemon:/nonexistent:/usr/sbin/nologin
 ifgraph:*:930:930::0:0:ifGraph:/nonexistent:/usr/sbin/nologin
 asterisk:*:931:931::0:0:Asterisk User:/nonexistent:/usr/sbin/nologin
 sancp:*:932:932::0:0:SANCP Daemon:/var/log/sancp:/usr/sbin/nologin
 dlna:*:933:933::0:0:DLNA Daemon:/nonexistent:/usr/sbin/nologin
 torrus:*:934:934::0:0:torrus daemon:/nonexistent:/usr/sbin/nologin
 erlyvideo:*:935:935::0:0:erlyvideo user:/nonexistent:/usr/sbin/nologin
 crtmpserver:*:936:936::0:0:crtmpserver user:/nonexistent:/usr/sbin/nologin
 get_iplayer:*:937:937::0:0:get_iplayer user:/nonexistent:/usr/sbin/nologin
 vdr:*:938:938::0:0:vdr user:/nonexistent:/usr/sbin/nologin
 noip:*:939:939::0:0:noip user:/nonexistent:/usr/sbin/nologin
 _tcpproxy:*:940:940::0:0:tcpproxy user:/nonexistent:/usr/sbin/nologin
 cego:*:941:941::0:0:cego user:/usr/local/cego:/usr/sbin/nologin
 teamspeak:*:942:942::0:0:TeamSpeak user:/nonexistent:/usr/sbin/nologin
 dnetfold:*:943:943::0:0:& user:/nonexistent:/usr/sbin/nologin
 bbs:*:944:944::0:0:& user:/nonexistent:/usr/sbin/nologin
 dbxml:*:945:945::0:0:& user:/nonexistent:/usr/sbin/nologin
 pgagroal:*:946:946::0:0:Pgagroal user:/nonexistent:/usr/sbin/nologin
 mapred:*:947:955::0:0:Hadoop MapReduce user:/nonexistent:/usr/sbin/nologin
 dnrd:*:948:948::0:0:& user:/nonexistent:/usr/sbin/nologin
 _lldpd:*:949:949::0:0:lldpd user:/nonexistent:/usr/sbin/nologin
 couchpotato:*:950:954::0:0:couchpotato user:/nonexistent:/usr/sbin/nologin
 openerpd:*:951:951::0:0:Openerpd user:/nonexistent:/usr/sbin/nologin
 bitten-slave:*:952:952:daemon:0:0:Bitten slave user:/var/lib/bitten-slave:/usr/sbin/nologin
 _neubot:*:953:953::0:0:neubot daemon:/nonexistent:/usr/sbin/nologin
 oops:*:954:65534::0:0:oops user:/nonexistent:/usr/sbin/nologin
 hdfs:*:955:955::0:0:Hadoop HDFS user:/nonexistent:/usr/sbin/nologin
 pandora:*:956:956::0:0:Pandora FMS user:/usr/local/etc/pandora/home:/usr/sbin/nologin
 razorback:*:957:957::0:0:Razorback user:/var/run/razorback:/usr/sbin/nologin
 gnunet:*:958:958::0:0:GNUnet daemon:/var/lib/gnunet:/usr/sbin/nologin
 c_icap:*:959:959::0:0:c-icap daemon:/var/empty:/usr/sbin/nologin
 trytond:*:960:960::0:0:trytond daemon:/var/empty:/usr/sbin/nologin
 gearmand:*:961:961::0:0:gearmand daemon:/var/empty:/usr/sbin/nologin
 zookeeper:*:962:962::0:0:zookeeper user:/nonexistent:/usr/sbin/nologin
 fluentd:*:963:963::0:0:fluentd user:/nonexistent:/usr/sbin/nologin
 git_daemon:*:964:964::0:0:git daemon:/nonexistent:/usr/sbin/nologin
 elasticsearch:*:965:965::0:0:elasticsearch user:/nonexistent:/usr/sbin/nologin
 ossec:*:966:966::0:0:OSSEC user:/nonexistent:/usr/sbin/nologin
 ossecm:*:967:966::0:0:OSSEC mail user:/nonexistent:/usr/sbin/nologin
 ossecr:*:968:966::0:0:OSSEC rem user:/nonexistent:/usr/sbin/nologin
 kippo:*:969:969::0:0:kippo user:/nonexistent:/usr/sbin/nologin
 colord:*:970:970::0:0:colord color management daemon:/nonexistent:/usr/sbin/nologin
 shibd:*:971:971::0:0:Shibboleth SAML daemon:/nonexistent:/usr/sbin/nologin
 plex:*:972:972::0:0:Plex Media Server:/nonexistent:/usr/sbin/nologin
 boinc:*:973:973::0:0:BOINC user:/var/db/boinc:/bin/sh
 radicale:*:974:974::0:0:Radicale daemon:/nonexistent:/usr/sbin/nologin
 unifi:*:975:975::0:0:Unifi Wireless Controller:/nonexistent:/usr/sbin/nologin
 minetest:*:976:976::0:0:& server:/nonexistent:/usr/sbin/nologin
 tests:*:977:977::0:0:Unprivileged user for tests:/nonexistent:/usr/sbin/nologin
 _dnscrypt-proxy:*:978:978::0:0:dnscrypt-proxy user:/var/empty:/usr/sbin/nologin
 ums:*:979:979::0:0:Universal Media Server:/nonexistent:/usr/sbin/nologin
 hbase:*:980:980::0:0:HBase user:/nonexistent:/usr/sbin/nologin
 uvncrep:*:981:981::0:0:UltraVNC Repeater daemon:/nonexistent:/usr/sbin/nologin
 bro:*:982:982::0:0:Bro Network Security Monitor:/nonexistent:/usr/sbin/nologin
 syncthing:*:983:983::0:0:Syncthing Daemon:/var/tmp/syncthing:/usr/sbin/nologin
 tvheadend:*:984:984::0:0:TV Headend:/usr/local/etc/tvheadend:/bin/sh
 puppetdb:*:985:985::0:0:PuppetDB Daemon pseudo-user:/nonexistent:/usr/sbin/nologin
 kamailio:*:986:986::0:0:kamailio daemon:/nonexistent:/usr/sbin/nologin
 spark:*:987:987::0:0:Apache Spark user:/nonexistent:/usr/sbin/nologin
 toxdht:*:988:65534::0:0:Tox DHT bootstrap user:/nonexistent:/usr/sbin/nologin
 emby:*:989:989::0:0:Emby:/nonexistent:/usr/sbin/nologin
 oozie:*:990:990::0:0:Apache Oozie user:/nonexistent:/usr/sbin/nologin
 sguil:*:991:991::0:0:Sguil:/nonexistent:/usr/sbin/nologin
 hive:*:992:992::0:0:Apache Hive user:/nonexistent:/usr/sbin/nologin
 kannel:*:993:993::0:0:Kannel User:/nonexistent:/usr/sbin/nologin
 rcynic:*:994:994::0:0:RPKI validation system:/nonexistent:/usr/sbin/nologin
 rpkirtr:*:995:995::0:0:RPKI router server:/nonexistent:/usr/sbin/nologin
 tarantool:*:996:996::0:0:Tarantool Daemon:/nonexistent:/usr/sbin/nologin
 bareos:*:997:997::0:0:Bareos Daemon:/var/db/bareos:/usr/sbin/nologin
 _rmilter:*:998:998::0:0:Rmilter daemon:/nonexistent:/usr/sbin/nologin
 ebnetd:*:999:999::0:0:EBNETD:/nonexistent:/usr/sbin/nologin
 # DO NOT USE: 1000-65533
 nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/usr/sbin/nologin
diff --git a/security/Makefile b/security/Makefile
index 99ec5c3a1f7b..c5b64253fdfa 100644
--- a/security/Makefile
+++ b/security/Makefile
@@ -1,1398 +1,1399 @@
     COMMENT = Security tools
 
     SUBDIR += 0d1n
     SUBDIR += 1password-client
     SUBDIR += 1password-client2
     SUBDIR += 1password-client2-beta
     SUBDIR += 2fa
     SUBDIR += ADMsmb
     SUBDIR += ADMsnmp
     SUBDIR += R-cran-ROAuth
     SUBDIR += R-cran-askpass
     SUBDIR += R-cran-credentials
     SUBDIR += R-cran-digest
     SUBDIR += R-cran-gitcreds
     SUBDIR += R-cran-openssl
     SUBDIR += R-cran-sodium
     SUBDIR += acme.sh
     SUBDIR += acmed
     SUBDIR += acmetool
     SUBDIR += aescrypt
     SUBDIR += aespipe
     SUBDIR += afl++
     SUBDIR += afterglow
     SUBDIR += age
     SUBDIR += aide
     SUBDIR += akmos
     SUBDIR += amavisd-milter
     SUBDIR += amavisd-new
     SUBDIR += apache-xml-security-c
     SUBDIR += apg
     SUBDIR += apkid
     SUBDIR += archlinux-keyring
     SUBDIR += arpCounterattack
     SUBDIR += arti
     SUBDIR += asignify
     SUBDIR += assh
     SUBDIR += authenticator
     SUBDIR += authoscope
     SUBDIR += autossh
     SUBDIR += aws-c-auth
     SUBDIR += aws-c-cal
     SUBDIR += aws-iam-authenticator
     SUBDIR += aws-vault
     SUBDIR += axc
     SUBDIR += barnyard2
     SUBDIR += barnyard2-sguil
     SUBDIR += bastillion
     SUBDIR += bcrypt
     SUBDIR += bcwipe
     SUBDIR += bdes
     SUBDIR += bearssl
     SUBDIR += beecrypt
     SUBDIR += beid
     SUBDIR += belier
     SUBDIR += bfbtester
     SUBDIR += binwalk
     SUBDIR += bitwarden-cli
     SUBDIR += blst
     SUBDIR += boringssl
     SUBDIR += botan2
     SUBDIR += botan3
     SUBDIR += bruteblock
     SUBDIR += bsdsfv
     SUBDIR += bsmtrace
     SUBDIR += bsmtrace3
     SUBDIR += bzrtp
     SUBDIR += ca_root_nss
     SUBDIR += caesarcipher
     SUBDIR += caldera
     SUBDIR += caldera-ot
     SUBDIR += calife
     SUBDIR += cardpeek
     SUBDIR += cargo-audit
     SUBDIR += ccrypt
     SUBDIR += ccsrch
     SUBDIR += certmgr
+    SUBDIR += certspotter
     SUBDIR += cfs
     SUBDIR += cfssl
     SUBDIR += cfv
     SUBDIR += chaosreader
     SUBDIR += checkpassword
     SUBDIR += checkpassword-pam
     SUBDIR += chkrootkit
     SUBDIR += chntpw
     SUBDIR += chroot_safe
     SUBDIR += chrootuid
     SUBDIR += ckpass
     SUBDIR += cksfv
     SUBDIR += cl-md5
     SUBDIR += cl-md5-sbcl
     SUBDIR += clamassassin
     SUBDIR += clamav
     SUBDIR += clamav-lts
     SUBDIR += clamav-unofficial-sigs
     SUBDIR += clamd-stream-client
     SUBDIR += clamfs
     SUBDIR += clamsmtp
     SUBDIR += clamtk
     SUBDIR += cloak
     SUBDIR += clusterssh
     SUBDIR += cops
     SUBDIR += courier-authlib
     SUBDIR += courier-authlib-base
     SUBDIR += courierpassd
     SUBDIR += courierpasswd
     SUBDIR += courieruserinfo
     SUBDIR += cowrie
     SUBDIR += cpfx
     SUBDIR += cracklib
     SUBDIR += crackpkcs12
     SUBDIR += create-cert
     SUBDIR += crlfuzz
     SUBDIR += crowdsec
     SUBDIR += crowdsec-blocklist-mirror
     SUBDIR += crowdsec-firewall-bouncer
     SUBDIR += cryptlib
     SUBDIR += cryptopp
     SUBDIR += ct-submit
     SUBDIR += cvechecker
     SUBDIR += cvm
     SUBDIR += cyberchef
     SUBDIR += cyrus-sasl2
     SUBDIR += cyrus-sasl2-gssapi
     SUBDIR += cyrus-sasl2-ldapdb
     SUBDIR += cyrus-sasl2-saslauthd
     SUBDIR += cyrus-sasl2-sql
     SUBDIR += cyrus-sasl2-srp
     SUBDIR += cyrus-sasl2-xoauth2
     SUBDIR += d0_blind_id
     SUBDIR += debian-keyring
     SUBDIR += dehydrated
     SUBDIR += denyhosts
     SUBDIR += destroy
     SUBDIR += diffcode
     SUBDIR += digestpp
     SUBDIR += dirbuster
     SUBDIR += dirmngr
     SUBDIR += distcache
     SUBDIR += diswall
     SUBDIR += doas
     SUBDIR += dotdotpwn
     SUBDIR += dropbear
     SUBDIR += dsniff
     SUBDIR += dsvpn
     SUBDIR += duo
     SUBDIR += duo_openvpn
     SUBDIR += easy-rsa
     SUBDIR += enchive
     SUBDIR += eschalot
     SUBDIR += expiretable
     SUBDIR += f-prot
     SUBDIR += fakebo
     SUBDIR += fakeident
     SUBDIR += fakeroot
     SUBDIR += farmhash
     SUBDIR += fcheck
     SUBDIR += fcrackzip
     SUBDIR += ffuf
     SUBDIR += fiked
     SUBDIR += fizz
     SUBDIR += fl0p
     SUBDIR += flawfinder
     SUBDIR += fprint_demo
     SUBDIR += fprintd
     SUBDIR += fragroute
     SUBDIR += fragrouter
     SUBDIR += fswatch
     SUBDIR += ftimes
     SUBDIR += fuzz
     SUBDIR += fwanalog
     SUBDIR += fwknop
     SUBDIR += fwlogwatch
     SUBDIR += gcr
     SUBDIR += gef
     SUBDIR += git-credential-azure
     SUBDIR += git-credential-gopass
     SUBDIR += git-credential-oauth
     SUBDIR += git-crypt
     SUBDIR += git-remote-gcrypt
     SUBDIR += git-secret
     SUBDIR += gitjacker
     SUBDIR += globalprotect-openconnect
     SUBDIR += gnome-keyring
     SUBDIR += gnome-keyring-sharp
     SUBDIR += gnome-ssh-askpass
     SUBDIR += gnupg
     SUBDIR += gnupg-pkcs11-scd
     SUBDIR += gnupg1
     SUBDIR += gnutls
     SUBDIR += go-cve-dictionary
     SUBDIR += gokart
     SUBDIR += gokey
     SUBDIR += gonepass
     SUBDIR += gopass
     SUBDIR += gorilla
     SUBDIR += gosec
     SUBDIR += gost-engine
     SUBDIR += gostsum
     SUBDIR += gpa
     SUBDIR += gpg-gui
     SUBDIR += gpg-tui
     SUBDIR += gpgdir
     SUBDIR += gpgme
     SUBDIR += gpgme-cpp
     SUBDIR += gpgme-qt
     SUBDIR += gpgme-qt-headers
     SUBDIR += gsa
     SUBDIR += gsad
     SUBDIR += gsasl
     SUBDIR += gstreamer1-plugins-dtls
     SUBDIR += gtkpasman
     SUBDIR += gvm
     SUBDIR += gvm-libs
     SUBDIR += gvmd
     SUBDIR += hardening-check
     SUBDIR += hash
     SUBDIR += hashcat
     SUBDIR += heaan
     SUBDIR += headscale
     SUBDIR += heimdal
     SUBDIR += heimdal-devel
     SUBDIR += helib
     SUBDIR += hexl
     SUBDIR += highwayhash
     SUBDIR += hitch
     SUBDIR += hockeypuck
     SUBDIR += honeytrap
     SUBDIR += honggfuzz
     SUBDIR += horcrux
     SUBDIR += howdy
     SUBDIR += hpenc
     SUBDIR += hs-cryptol
     SUBDIR += hydra
     SUBDIR += hyperhotp
     SUBDIR += i2p
     SUBDIR += i2pd
     SUBDIR += iaikpkcs11wrapper
     SUBDIR += iddawc
     SUBDIR += idea
     SUBDIR += identify
     SUBDIR += imds-filterd
     SUBDIR += intel-ipsec-mb
     SUBDIR += ipfmeta
     SUBDIR += ipguard
     SUBDIR += ipsec-tools
     SUBDIR += ipv6toolkit
     SUBDIR += isal-kmod
     SUBDIR += ismtp
     SUBDIR += isnprober
     SUBDIR += john
     SUBDIR += kbfsd
     SUBDIR += kc
     SUBDIR += kdbxviewer
     SUBDIR += keepass
     SUBDIR += keepass-plugin-keepassrpc
     SUBDIR += keepassxc
     SUBDIR += keybase
     SUBDIR += keychain
     SUBDIR += keyprint
     SUBDIR += keysmith
     SUBDIR += kf5-kdesu
     SUBDIR += kf6-kdesu
     SUBDIR += kgpg
     SUBDIR += kickpass
     SUBDIR += klee
     SUBDIR += kleopatra
     SUBDIR += knock
     SUBDIR += knocker
     SUBDIR += kpcli
     SUBDIR += kpkpass
     SUBDIR += kpmenu
     SUBDIR += krb5
     SUBDIR += krb5-119
     SUBDIR += krb5-120
     SUBDIR += krb5-121
     SUBDIR += krb5-devel
     SUBDIR += kstart
     SUBDIR += ktls_isa-l_crypto-kmod
     SUBDIR += kuku
     SUBDIR += kwalletmanager
     SUBDIR += l0pht-watch
     SUBDIR += lasso
     SUBDIR += lastpass-cli
     SUBDIR += lego
     SUBDIR += libargon2
     SUBDIR += libassuan
     SUBDIR += libcryptui
     SUBDIR += libdecaf
     SUBDIR += libecc
     SUBDIR += libfido2
     SUBDIR += libfprint
     SUBDIR += libgcrypt
     SUBDIR += libgnome-keyring
     SUBDIR += libgpg-error
     SUBDIR += libgsasl
     SUBDIR += libhijack
     SUBDIR += libident
     SUBDIR += libkleo
     SUBDIR += libkpass
     SUBDIR += libksba
     SUBDIR += libmcrypt
     SUBDIR += libnitrokey
     SUBDIR += libntlm
     SUBDIR += libomemo
     SUBDIR += libomemo-c
     SUBDIR += liboqs
     SUBDIR += libotr
     SUBDIR += libotr3
     SUBDIR += libp11
     SUBDIR += libpki
     SUBDIR += libprelude
     SUBDIR += libpreludedb
     SUBDIR += libpwquality
     SUBDIR += libressl
     SUBDIR += libressl-devel
     SUBDIR += libreswan
     SUBDIR += libretls
     SUBDIR += libscep
     SUBDIR += libscrypt
     SUBDIR += libsecret
     SUBDIR += libsectok
     SUBDIR += libsodium
     SUBDIR += libssh
     SUBDIR += libssh2
     SUBDIR += libtasn1
     SUBDIR += libtomcrypt
     SUBDIR += libu2f-host
     SUBDIR += libuecc
     SUBDIR += libwhisker
     SUBDIR += libxcrypt
     SUBDIR += libyubikey
     SUBDIR += libzrtpcppcore
     SUBDIR += lime
     SUBDIR += linux-bitwarden-cli
     SUBDIR += linux-c7-ca-certificates
     SUBDIR += linux-c7-cyrus-sasl2
     SUBDIR += linux-c7-gnutls
     SUBDIR += linux-c7-libgcrypt
     SUBDIR += linux-c7-libgpg-error
     SUBDIR += linux-c7-libssh2
     SUBDIR += linux-c7-libtasn1
     SUBDIR += linux-c7-nettle
     SUBDIR += linux-c7-nss
     SUBDIR += linux-c7-openssl-devel
     SUBDIR += linux-c7-p11-kit
     SUBDIR += linux-c7-trousers
     SUBDIR += local-php-security-checker
     SUBDIR += logcheck
     SUBDIR += lua-argon2
     SUBDIR += lua-bcrypt
     SUBDIR += lua-resty-hmac
     SUBDIR += lua-resty-jwt
     SUBDIR += lua-resty-openidc
     SUBDIR += lua-resty-openssl
     SUBDIR += luasec
     SUBDIR += lxqt-openssh-askpass
     SUBDIR += lxqt-sudo
     SUBDIR += lynis
     SUBDIR += mac-robber
     SUBDIR += maia
     SUBDIR += mailzu
     SUBDIR += makepasswd
     SUBDIR += maltrail
     SUBDIR += masscan
     SUBDIR += mate-pam-helper
     SUBDIR += mbedtls
     SUBDIR += mcrypt
     SUBDIR += md5deep
     SUBDIR += medusa
     SUBDIR += meek
     SUBDIR += metasploit
     SUBDIR += mhash
     SUBDIR += mindterm-binary
     SUBDIR += minisign
     SUBDIR += mkp224o
     SUBDIR += modsecurity3
     SUBDIR += modsecurity3-nginx
     SUBDIR += monkeysphere
     SUBDIR += monocypher
     SUBDIR += munge
     SUBDIR += n2n
     SUBDIR += ncrack
     SUBDIR += ncrypt
     SUBDIR += nebula
     SUBDIR += nettle
     SUBDIR += nextcloud-end_to_end_encryption
     SUBDIR += nextcloud-passman
     SUBDIR += nextcloud-twofactor_admin
     SUBDIR += nextcloud-twofactor_nextcloud_notification
     SUBDIR += nextcloud-twofactor_webauthn
     SUBDIR += nflib
     SUBDIR += ngrok
     SUBDIR += nikto
     SUBDIR += nist-kat
     SUBDIR += nitrokey-app
     SUBDIR += nmap
     SUBDIR += nss
     SUBDIR += nss_compat_ossl
     SUBDIR += nuclei
     SUBDIR += nyx
     SUBDIR += oath-toolkit
     SUBDIR += obfs4proxy-tor
     SUBDIR += ocaml-cryptgps
     SUBDIR += ocaml-cryptokit
     SUBDIR += ocaml-ssl
     SUBDIR += oidentd
     SUBDIR += oinkmaster
     SUBDIR += olm
     SUBDIR += onionscan
     SUBDIR += op
     SUBDIR += openbsm
     SUBDIR += openca-ocspd
     SUBDIR += openconnect
     SUBDIR += openconnect-freebsd-daemon
     SUBDIR += openconnect-gui
     SUBDIR += opencryptoki
     SUBDIR += openct
     SUBDIR += openfhe
     SUBDIR += openfortivpn
     SUBDIR += openiked
     SUBDIR += openiked-portable
     SUBDIR += opensaml
     SUBDIR += opensc
     SUBDIR += openssh-askpass
     SUBDIR += openssh-portable
     SUBDIR += openssl
     SUBDIR += openssl-agent
     SUBDIR += openssl-quictls
     SUBDIR += openssl-unsafe
     SUBDIR += openssl111
     SUBDIR += openssl31
     SUBDIR += openssl31-quictls
     SUBDIR += openssl32
     SUBDIR += openvas
     SUBDIR += openvpn
     SUBDIR += openvpn-admin
     SUBDIR += openvpn-auth-ldap
     SUBDIR += openvpn-auth-radius
     SUBDIR += openvpn-auth-script
     SUBDIR += openvpn-devel
     SUBDIR += ophcrack
     SUBDIR += opie
     SUBDIR += ossec-hids
     SUBDIR += ossec-hids-agent
     SUBDIR += ossec-hids-agent-config
     SUBDIR += ossec-hids-local
     SUBDIR += ossec-hids-local-config
     SUBDIR += ossec-hids-server
     SUBDIR += ossec-hids-server-config
     SUBDIR += osslsigncode
     SUBDIR += osv-scanner
     SUBDIR += otpw
     SUBDIR += owasp-dependency-check
     SUBDIR += p11-kit
     SUBDIR += p5-Alt-Crypt-RSA-BigInt
     SUBDIR += p5-Apache-Htpasswd
     SUBDIR += p5-App-Acmeman
     SUBDIR += p5-App-Genpass
     SUBDIR += p5-App-TLSMe
     SUBDIR += p5-Auth-YubikeyDecrypter
     SUBDIR += p5-AuthCAS
     SUBDIR += p5-Authen-Bitcard
     SUBDIR += p5-Authen-Captcha
     SUBDIR += p5-Authen-CyrusSASL
     SUBDIR += p5-Authen-DecHpwd
     SUBDIR += p5-Authen-Htpasswd
     SUBDIR += p5-Authen-Krb5
     SUBDIR += p5-Authen-Krb5-Simple
     SUBDIR += p5-Authen-Libwrap
     SUBDIR += p5-Authen-NTLM
     SUBDIR += p5-Authen-OATH
     SUBDIR += p5-Authen-PAAS
     SUBDIR += p5-Authen-PAM
     SUBDIR += p5-Authen-Passphrase
     SUBDIR += p5-Authen-PluggableCaptcha
     SUBDIR += p5-Authen-Radius
     SUBDIR += p5-Authen-SASL
     SUBDIR += p5-Authen-SASL-Cyrus
     SUBDIR += p5-Authen-SASL-SASLprep
     SUBDIR += p5-Authen-SCRAM
     SUBDIR += p5-Authen-Simple
     SUBDIR += p5-Authen-Simple-DBI
     SUBDIR += p5-Authen-Simple-DBM
     SUBDIR += p5-Authen-Simple-HTTP
     SUBDIR += p5-Authen-Simple-Kerberos
     SUBDIR += p5-Authen-Simple-LDAP
     SUBDIR += p5-Authen-Simple-Net
     SUBDIR += p5-Authen-Simple-PAM
     SUBDIR += p5-Authen-Simple-Passwd
     SUBDIR += p5-Authen-Simple-RADIUS
     SUBDIR += p5-Authen-Simple-SMB
     SUBDIR += p5-Authen-Simple-SSH
     SUBDIR += p5-Authen-Smb
     SUBDIR += p5-Authen-TacacsPlus
     SUBDIR += p5-Authen-Ticket
     SUBDIR += p5-Authen-TypeKey
     SUBDIR += p5-Business-PayPal-EWP
     SUBDIR += p5-Bytes-Random-Secure
     SUBDIR += p5-Bytes-Random-Secure-Tiny
     SUBDIR += p5-CACertOrg-CA
     SUBDIR += p5-CPAN-Audit
     SUBDIR += p5-CSP
     SUBDIR += p5-Cisco-Hash
     SUBDIR += p5-Crypt-Anubis
     SUBDIR += p5-Crypt-AppleTwoFish
     SUBDIR += p5-Crypt-Argon2
     SUBDIR += p5-Crypt-Bcrypt
     SUBDIR += p5-Crypt-Blowfish
     SUBDIR += p5-Crypt-Blowfish_PP
     SUBDIR += p5-Crypt-CAST5
     SUBDIR += p5-Crypt-CAST5_PP
     SUBDIR += p5-Crypt-CBC
     SUBDIR += p5-Crypt-CBCeasy
     SUBDIR += p5-Crypt-CFB
     SUBDIR += p5-Crypt-Caesar
     SUBDIR += p5-Crypt-Camellia_PP
     SUBDIR += p5-Crypt-Chimera
     SUBDIR += p5-Crypt-CipherSaber
     SUBDIR += p5-Crypt-Cracklib
     SUBDIR += p5-Crypt-Ctr
     SUBDIR += p5-Crypt-Curve25519
     SUBDIR += p5-Crypt-DES
     SUBDIR += p5-Crypt-DES_EDE3
     SUBDIR += p5-Crypt-DES_PP
     SUBDIR += p5-Crypt-DH
     SUBDIR += p5-Crypt-DSA
     SUBDIR += p5-Crypt-Dining
     SUBDIR += p5-Crypt-ECB
     SUBDIR += p5-Crypt-Eksblowfish
     SUBDIR += p5-Crypt-Enigma
     SUBDIR += p5-Crypt-Format
     SUBDIR += p5-Crypt-GCrypt
     SUBDIR += p5-Crypt-GOST
     SUBDIR += p5-Crypt-GOST_PP
     SUBDIR += p5-Crypt-GPG
     SUBDIR += p5-Crypt-GeneratePassword
     SUBDIR += p5-Crypt-GpgME
     SUBDIR += p5-Crypt-HCE_MD5
     SUBDIR += p5-Crypt-HCE_SHA
     SUBDIR += p5-Crypt-HSXKPasswd
     SUBDIR += p5-Crypt-IDEA
     SUBDIR += p5-Crypt-Imail
     SUBDIR += p5-Crypt-JWT
     SUBDIR += p5-Crypt-Juniper
     SUBDIR += p5-Crypt-Khazad
     SUBDIR += p5-Crypt-LE
     SUBDIR += p5-Crypt-LibSCEP
     SUBDIR += p5-Crypt-License
     SUBDIR += p5-Crypt-Lite
     SUBDIR += p5-Crypt-Loki97
     SUBDIR += p5-Crypt-MySQL
     SUBDIR += p5-Crypt-NULL
     SUBDIR += p5-Crypt-OFB
     SUBDIR += p5-Crypt-OICQ
     SUBDIR += p5-Crypt-OTP
     SUBDIR += p5-Crypt-OpenPGP
     SUBDIR += p5-Crypt-OpenSSL-AES
     SUBDIR += p5-Crypt-OpenSSL-Bignum
     SUBDIR += p5-Crypt-OpenSSL-CA
     SUBDIR += p5-Crypt-OpenSSL-DSA
     SUBDIR += p5-Crypt-OpenSSL-EC
     SUBDIR += p5-Crypt-OpenSSL-ECDSA
     SUBDIR += p5-Crypt-OpenSSL-Guess
     SUBDIR += p5-Crypt-OpenSSL-PKCS10
     SUBDIR += p5-Crypt-OpenSSL-RSA
     SUBDIR += p5-Crypt-OpenSSL-Random
     SUBDIR += p5-Crypt-OpenSSL-Verify
     SUBDIR += p5-Crypt-OpenSSL-X509
     SUBDIR += p5-Crypt-PBKDF2
     SUBDIR += p5-Crypt-PKCS10
     SUBDIR += p5-Crypt-PWSafe3
     SUBDIR += p5-Crypt-PassGen
     SUBDIR += p5-Crypt-Passwd-XS
     SUBDIR += p5-Crypt-PasswdMD5
     SUBDIR += p5-Crypt-Password-Util
     SUBDIR += p5-Crypt-Perl
     SUBDIR += p5-Crypt-Primes
     SUBDIR += p5-Crypt-RC4
     SUBDIR += p5-Crypt-RC5
     SUBDIR += p5-Crypt-RC6
     SUBDIR += p5-Crypt-RHash
     SUBDIR += p5-Crypt-RIPEMD160
     SUBDIR += p5-Crypt-RSA
     SUBDIR += p5-Crypt-RSA-Parse
     SUBDIR += p5-Crypt-RSA-Yandex
     SUBDIR += p5-Crypt-Rabbit
     SUBDIR += p5-Crypt-RandPasswd
     SUBDIR += p5-Crypt-Random
     SUBDIR += p5-Crypt-Random-Seed
     SUBDIR += p5-Crypt-Random-Source
     SUBDIR += p5-Crypt-Random-TESHA2
     SUBDIR += p5-Crypt-Rijndael
     SUBDIR += p5-Crypt-Rijndael_PP
     SUBDIR += p5-Crypt-SKey
     SUBDIR += p5-Crypt-SMIME
     SUBDIR += p5-Crypt-SSLeay
     SUBDIR += p5-Crypt-SSSS
     SUBDIR += p5-Crypt-Salt
     SUBDIR += p5-Crypt-SaltedHash
     SUBDIR += p5-Crypt-Serpent
     SUBDIR += p5-Crypt-Shark
     SUBDIR += p5-Crypt-Simple
     SUBDIR += p5-Crypt-SmbHash
     SUBDIR += p5-Crypt-Sodium
     SUBDIR += p5-Crypt-Solitaire
     SUBDIR += p5-Crypt-TEA
     SUBDIR += p5-Crypt-T_e_a
     SUBDIR += p5-Crypt-Tea_JS
     SUBDIR += p5-Crypt-TripleDES
     SUBDIR += p5-Crypt-Twofish
     SUBDIR += p5-Crypt-Twofish2
     SUBDIR += p5-Crypt-Twofish_PP
     SUBDIR += p5-Crypt-URandom
     SUBDIR += p5-Crypt-UnixCrypt
     SUBDIR += p5-Crypt-UnixCrypt_XS
     SUBDIR += p5-Crypt-X509
     SUBDIR += p5-Crypt-X509-CRL
     SUBDIR += p5-Crypt-XTEA
     SUBDIR += p5-Crypt-xDBM_File
     SUBDIR += p5-CryptX
     SUBDIR += p5-Dancer-Plugin-Auth-Extensible
     SUBDIR += p5-Dancer-Plugin-Auth-Extensible-Provider-Usergroup
     SUBDIR += p5-Dancer-Plugin-Passphrase
     SUBDIR += p5-Dancer2-Plugin-Auth-Extensible
     SUBDIR += p5-Dancer2-Plugin-Auth-Extensible-Provider-DBIC
     SUBDIR += p5-Dancer2-Plugin-Auth-Extensible-Provider-Database
     SUBDIR += p5-Dancer2-Plugin-Auth-Extensible-Provider-IMAP
     SUBDIR += p5-Dancer2-Plugin-Auth-Extensible-Provider-Usergroup
     SUBDIR += p5-Dancer2-Plugin-Passphrase
     SUBDIR += p5-Data-Entropy
     SUBDIR += p5-Data-Password
     SUBDIR += p5-Digest
     SUBDIR += p5-Digest-Adler32
     SUBDIR += p5-Digest-Bcrypt
     SUBDIR += p5-Digest-BubbleBabble
     SUBDIR += p5-Digest-CRC
     SUBDIR += p5-Digest-Crc32
     SUBDIR += p5-Digest-DJB
     SUBDIR += p5-Digest-DMAC
     SUBDIR += p5-Digest-EMAC
     SUBDIR += p5-Digest-Elf
     SUBDIR += p5-Digest-FNV
     SUBDIR += p5-Digest-GOST
     SUBDIR += p5-Digest-HMAC
     SUBDIR += p5-Digest-Hashcash
     SUBDIR += p5-Digest-Haval256
     SUBDIR += p5-Digest-JHash
     SUBDIR += p5-Digest-MD2
     SUBDIR += p5-Digest-MD4
     SUBDIR += p5-Digest-MD5
     SUBDIR += p5-Digest-MD5-File
     SUBDIR += p5-Digest-MD5-M4p
     SUBDIR += p5-Digest-MD5-Reverse
     SUBDIR += p5-Digest-ManberHash
     SUBDIR += p5-Digest-MurmurHash
     SUBDIR += p5-Digest-Nilsimsa
     SUBDIR += p5-Digest-Pearson
     SUBDIR += p5-Digest-Pearson-PurePerl
     SUBDIR += p5-Digest-Perl-MD4
     SUBDIR += p5-Digest-Perl-MD5
     SUBDIR += p5-Digest-SHA
     SUBDIR += p5-Digest-SHA-PurePerl
     SUBDIR += p5-Digest-SHA1
     SUBDIR += p5-Digest-SHA3
     SUBDIR += p5-Digest-SV1
     SUBDIR += p5-Digest-Tiger
     SUBDIR += p5-Digest-Whirlpool
     SUBDIR += p5-File-KeePass
     SUBDIR += p5-File-KeePass-Agent
     SUBDIR += p5-File-Scan
     SUBDIR += p5-File-Scan-ClamAV
     SUBDIR += p5-Filter-CBC
     SUBDIR += p5-Filter-Crypto
     SUBDIR += p5-GD-SecurityImage
     SUBDIR += p5-GSSAPI
     SUBDIR += p5-GnuPG
     SUBDIR += p5-GnuPG-Interface
     SUBDIR += p5-HTML-Email-Obfuscate
     SUBDIR += p5-Heimdal-Kadm5
     SUBDIR += p5-IO-Async-SSL
     SUBDIR += p5-IO-Socket-SSL
     SUBDIR += p5-MD5
     SUBDIR += p5-Mcrypt
     SUBDIR += p5-Module-Signature
     SUBDIR += p5-Net-Daemon-SSL
     SUBDIR += p5-Net-OpenID-Common
     SUBDIR += p5-Net-OpenID-JanRain
     SUBDIR += p5-Net-OpenID-Server
     SUBDIR += p5-Net-Radius-Server
     SUBDIR += p5-Net-SAML2
     SUBDIR += p5-Net-SSH-AuthorizedKeysFile
     SUBDIR += p5-Net-SSL-ExpireDate
     SUBDIR += p5-Net-SSLGlue
     SUBDIR += p5-Net-SSLeay
     SUBDIR += p5-Net-Server-Mail-ESMTP-AUTH
     SUBDIR += p5-Net-SinFP
     SUBDIR += p5-Nmap-Parser
     SUBDIR += p5-Nmap-Scanner
     SUBDIR += p5-OpenCA-CRL
     SUBDIR += p5-OpenCA-CRR
     SUBDIR += p5-OpenCA-REQ
     SUBDIR += p5-OpenCA-X509
     SUBDIR += p5-PBKDF2-Tiny
     SUBDIR += p5-PGP
     SUBDIR += p5-PGP-Sign
     SUBDIR += p5-POE-Component-SSLify
     SUBDIR += p5-POE-Filter-SSL
     SUBDIR += p5-Parse-Snort
     SUBDIR += p5-PerlCryptLib
     SUBDIR += p5-Protocol-ACME
     SUBDIR += p5-SAVI-Perl
     SUBDIR += p5-SHA
     SUBDIR += p5-Safe-Hole
     SUBDIR += p5-Session-Token
     SUBDIR += p5-Snort-Rule
     SUBDIR += p5-String-MkPasswd
     SUBDIR += p5-Sudo
     SUBDIR += p5-Text-Password-Pronounceable
     SUBDIR += p5-Tie-EncryptedHash
     SUBDIR += p5-Tree-Authz
     SUBDIR += p5-URN-OASIS-SAML2
     SUBDIR += p5-Unix-Passwd-File
     SUBDIR += p5-Unix-setuid
     SUBDIR += p5-Yahoo-BBAuth
     SUBDIR += p5-dicewaregen
     SUBDIR += p5-openxpki
     SUBDIR += p5-openxpki-i18n
     SUBDIR += p5-plog
     SUBDIR += palisade
     SUBDIR += pam-modules
     SUBDIR += pam-mysql
     SUBDIR += pam-pgsql
     SUBDIR += pam_fprint
     SUBDIR += pam_google_authenticator
     SUBDIR += pam_helper
     SUBDIR += pam_howdy
     SUBDIR += pam_jail
     SUBDIR += pam_kde
     SUBDIR += pam_krb5
     SUBDIR += pam_krb5-rh
     SUBDIR += pam_ldap
     SUBDIR += pam_mkhomedir
     SUBDIR += pam_ocra
     SUBDIR += pam_p11
     SUBDIR += pam_pkcs11
     SUBDIR += pam_pwdfile
     SUBDIR += pam_require
     SUBDIR += pam_rssh
     SUBDIR += pam_script
     SUBDIR += pam_search_list
     SUBDIR += pam_ssh_agent_auth
     SUBDIR += pam_u2f
     SUBDIR += pam_yubico
     SUBDIR += pamtester
     SUBDIR += paperkey
     SUBDIR += passh
     SUBDIR += passivedns
     SUBDIR += pbc
     SUBDIR += pcsc-tools
     SUBDIR += pdfcrack
     SUBDIR += pear-Auth
     SUBDIR += pear-Auth_HTTP
     SUBDIR += pear-Auth_PrefManager
     SUBDIR += pear-Auth_SASL
     SUBDIR += pear-Auth_SASL2
     SUBDIR += pear-Crypt_Blowfish
     SUBDIR += pear-Crypt_CBC
     SUBDIR += pear-Crypt_CHAP
     SUBDIR += pear-Crypt_DiffieHellman
     SUBDIR += pear-Crypt_GPG
     SUBDIR += pear-Crypt_HMAC2
     SUBDIR += pear-Crypt_MicroID
     SUBDIR += pear-Crypt_RC4
     SUBDIR += pear-Crypt_RSA
     SUBDIR += pear-Crypt_XXTEA
     SUBDIR += pear-File_HtAccess
     SUBDIR += pear-File_Passwd
     SUBDIR += pear-File_SMBPasswd
     SUBDIR += pear-HTML_Crypt
     SUBDIR += pear-Horde_Auth
     SUBDIR += pear-Horde_Crypt
     SUBDIR += pear-Horde_Crypt_Blowfish
     SUBDIR += pear-Horde_Group
     SUBDIR += pear-Horde_Oauth
     SUBDIR += pear-Horde_Perms
     SUBDIR += pear-Horde_Secret
     SUBDIR += pear-Horde_Share
     SUBDIR += pear-LiveUser
     SUBDIR += pear-LiveUser_Admin
     SUBDIR += pear-Net_Portscan
     SUBDIR += pear-Text_Password
     SUBDIR += pecl-crypto
     SUBDIR += pecl-gnupg
     SUBDIR += pecl-krb5
     SUBDIR += pecl-libsodium
     SUBDIR += pecl-mcrypt
     SUBDIR += pecl-pam
     SUBDIR += pecl-pkcs11
     SUBDIR += pecl-scrypt
     SUBDIR += pecl-ssh2
     SUBDIR += peda
     SUBDIR += pev
     SUBDIR += pgpdump
     SUBDIR += pgpgpg
     SUBDIR += pgpin
     SUBDIR += php81-filter
     SUBDIR += php81-sodium
     SUBDIR += php82-filter
     SUBDIR += php82-sodium
     SUBDIR += php83-filter
     SUBDIR += php83-sodium
     SUBDIR += picocrypt
     SUBDIR += picosha2
     SUBDIR += pidgin-encryption
     SUBDIR += pidgin-otr
     SUBDIR += pinentry
     SUBDIR += pinentry-curses
     SUBDIR += pinentry-efl
     SUBDIR += pinentry-fltk
     SUBDIR += pinentry-gnome
     SUBDIR += pinentry-gtk2
     SUBDIR += pinentry-qt5
     SUBDIR += pinentry-tty
     SUBDIR += pixiewps
     SUBDIR += pkcrack
     SUBDIR += pkcs11-dump
     SUBDIR += pkcs11-gateway
     SUBDIR += pkcs11-helper
     SUBDIR += pkcs11-tools
     SUBDIR += pkesh
     SUBDIR += pks
     SUBDIR += plasma5-kscreenlocker
     SUBDIR += plasma5-ksshaskpass
     SUBDIR += plasma5-kwallet-pam
     SUBDIR += plasma6-kscreenlocker
     SUBDIR += plasma6-ksshaskpass
     SUBDIR += plasma6-kwallet-pam
     SUBDIR += please
     SUBDIR += poly1305aes
     SUBDIR += portacl-rc
     SUBDIR += proftpd-mod_clamav
     SUBDIR += proxycheck
     SUBDIR += proxytunnel
     SUBDIR += pssh
     SUBDIR += pulledpork
     SUBDIR += pure-sfv
     SUBDIR += putty
     SUBDIR += putty-nogtk
     SUBDIR += pvk
     SUBDIR += pwauth
     SUBDIR += pwman
     SUBDIR += pwned-check
     SUBDIR += py-RestrictedPython
     SUBDIR += py-SecretStorage
     SUBDIR += py-YubiOTP
     SUBDIR += py-acme
     SUBDIR += py-acme-tiny
     SUBDIR += py-ailment
     SUBDIR += py-aiohttp-security
     SUBDIR += py-angr
     SUBDIR += py-argon2-cffi
     SUBDIR += py-argon2-cffi-bindings
     SUBDIR += py-artifacts
     SUBDIR += py-asyncssh
     SUBDIR += py-authlib
     SUBDIR += py-azure-keyvault-certificates
     SUBDIR += py-azure-keyvault-keys
     SUBDIR += py-azure-keyvault-secrets
     SUBDIR += py-badkeys
     SUBDIR += py-base58
     SUBDIR += py-bcrypt
     SUBDIR += py-bitbox02
     SUBDIR += py-btchip-python
     SUBDIR += py-cerealizer
     SUBDIR += py-cert-human
     SUBDIR += py-certbot
     SUBDIR += py-certbot-apache
     SUBDIR += py-certbot-dns-cloudflare
     SUBDIR += py-certbot-dns-cpanel
     SUBDIR += py-certbot-dns-digitalocean
     SUBDIR += py-certbot-dns-dnsimple
     SUBDIR += py-certbot-dns-dnsmadeeasy
     SUBDIR += py-certbot-dns-gandi
     SUBDIR += py-certbot-dns-gehirn
     SUBDIR += py-certbot-dns-google
     SUBDIR += py-certbot-dns-linode
     SUBDIR += py-certbot-dns-luadns
     SUBDIR += py-certbot-dns-nsone
     SUBDIR += py-certbot-dns-ovh
     SUBDIR += py-certbot-dns-powerdns
     SUBDIR += py-certbot-dns-rfc2136
     SUBDIR += py-certbot-dns-route53
     SUBDIR += py-certbot-dns-sakuracloud
     SUBDIR += py-certbot-dns-standalone
     SUBDIR += py-certbot-nginx
     SUBDIR += py-certifi
     SUBDIR += py-certomancer
     SUBDIR += py-certstream
     SUBDIR += py-ckcc-protocol
     SUBDIR += py-coincurve
     SUBDIR += py-cpe
     SUBDIR += py-cryptography
     SUBDIR += py-cryptography-legacy
     SUBDIR += py-cryptography-vectors
     SUBDIR += py-ctypescrypto
     SUBDIR += py-cybox
     SUBDIR += py-detect-secrets
     SUBDIR += py-dfdatetime
     SUBDIR += py-dfvfs
     SUBDIR += py-dfwinreg
     SUBDIR += py-dirhash
     SUBDIR += py-django-auth-kerberos
     SUBDIR += py-docker-pycreds
     SUBDIR += py-ecdsa
     SUBDIR += py-ed25519ll
     SUBDIR += py-exscript
     SUBDIR += py-fail2ban
     SUBDIR += py-fido2
     SUBDIR += py-first-server
     SUBDIR += py-flask-bcrypt
     SUBDIR += py-flask-httpauth
     SUBDIR += py-flask-kerberos
     SUBDIR += py-flask-saml
     SUBDIR += py-gixy
     SUBDIR += py-gnupg
     SUBDIR += py-gnutls
     SUBDIR += py-google-auth
     SUBDIR += py-google-auth-httplib2
     SUBDIR += py-google-auth-oauthlib
     SUBDIR += py-gpgme
     SUBDIR += py-gpsoauth
     SUBDIR += py-greenbone-feed-sync
     SUBDIR += py-gssapi
     SUBDIR += py-gvm-tools
     SUBDIR += py-hkdf
     SUBDIR += py-htpasswd
     SUBDIR += py-httpx-auth
     SUBDIR += py-iris-check-module
     SUBDIR += py-iris-client
     SUBDIR += py-iris-evtx-module
     SUBDIR += py-iris-intelowl-module
     SUBDIR += py-iris-misp-module
     SUBDIR += py-iris-module-interface
     SUBDIR += py-iris-vt-module
     SUBDIR += py-iris-webhooks-module
     SUBDIR += py-itsdangerous
     SUBDIR += py-josepy
     SUBDIR += py-jwcrypto
     SUBDIR += py-keepkey
     SUBDIR += py-kerberos
     SUBDIR += py-keyring
     SUBDIR += py-keyrings.alt
     SUBDIR += py-krb5
     SUBDIR += py-libnacl
     SUBDIR += py-liboqs-python
     SUBDIR += py-m2crypto
     SUBDIR += py-maec
     SUBDIR += py-merkletools
     SUBDIR += py-mixbox
     SUBDIR += py-mnemonic
     SUBDIR += py-msoffcrypto-tool
     SUBDIR += py-muacrypt
     SUBDIR += py-nassl
     SUBDIR += py-netbox-secrets
     SUBDIR += py-netmiko
     SUBDIR += py-noiseprotocol
     SUBDIR += py-notus-scanner
     SUBDIR += py-ntlm-auth
     SUBDIR += py-oauth2client
     SUBDIR += py-oauthlib
     SUBDIR += py-omemo-dr
     SUBDIR += py-onlykey
     SUBDIR += py-openssl
     SUBDIR += py-oscrypto
     SUBDIR += py-ospd-openvas
     SUBDIR += py-paramiko
     SUBDIR += py-pass-audit
     SUBDIR += py-pass-git-helper
     SUBDIR += py-passlib
     SUBDIR += py-pbkdf2
     SUBDIR += py-pem
     SUBDIR += py-pgpdump
     SUBDIR += py-pgpy
     SUBDIR += py-plaso
     SUBDIR += py-potr
     SUBDIR += py-pwntools
     SUBDIR += py-pyaes
     SUBDIR += py-pyaff4
     SUBDIR += py-pyaxo
     SUBDIR += py-pyblake2
     SUBDIR += py-pyclamd
     SUBDIR += py-pycryptodome
     SUBDIR += py-pycryptodome-test-vectors
     SUBDIR += py-pycryptodomex
     SUBDIR += py-pyelliptic
     SUBDIR += py-pyhanko
     SUBDIR += py-pyhanko-certvalidator
     SUBDIR += py-pylibacl
     SUBDIR += py-pymacaroons
     SUBDIR += py-pynacl
     SUBDIR += py-pyotp
     SUBDIR += py-pyotp2289
     SUBDIR += py-pysaml2
     SUBDIR += py-pysaml24
     SUBDIR += py-pysaml26
     SUBDIR += py-pyscard
     SUBDIR += py-pysha3
     SUBDIR += py-pysodium
     SUBDIR += py-pyspnego
     SUBDIR += py-python-axolotl
     SUBDIR += py-python-axolotl-curve25519
     SUBDIR += py-python-cas
     SUBDIR += py-python-gnupg
     SUBDIR += py-python-gvm
     SUBDIR += py-python-jose
     SUBDIR += py-python-nss
     SUBDIR += py-python-openid
     SUBDIR += py-python-pam
     SUBDIR += py-python-pkcs11
     SUBDIR += py-python-registry
     SUBDIR += py-python3-openid
     SUBDIR += py-python3-saml
     SUBDIR += py-pyvex
     SUBDIR += py-pywinrm
     SUBDIR += py-requests-credssp
     SUBDIR += py-requests-kerberos
     SUBDIR += py-ropgadget
     SUBDIR += py-ropper
     SUBDIR += py-rsa
     SUBDIR += py-safe
     SUBDIR += py-scp
     SUBDIR += py-scramp
     SUBDIR += py-scrypt
     SUBDIR += py-secure
     SUBDIR += py-securesystemslib
     SUBDIR += py-service-identity
     SUBDIR += py-service_identity
     SUBDIR += py-signedjson
     SUBDIR += py-social-auth-core
     SUBDIR += py-spake2
     SUBDIR += py-ssh-audit
     SUBDIR += py-sshpubkeys
     SUBDIR += py-sslyze
     SUBDIR += py-stem
     SUBDIR += py-stix
     SUBDIR += py-stix2
     SUBDIR += py-stix2-patterns
     SUBDIR += py-taxii2-client
     SUBDIR += py-tinyaes
     SUBDIR += py-tls-parser
     SUBDIR += py-tlslite
     SUBDIR += py-tlslite-ng
     SUBDIR += py-trezor
     SUBDIR += py-trustme
     SUBDIR += py-truststore
     SUBDIR += py-tuf
     SUBDIR += py-txtorcon
     SUBDIR += py-uhashring
     SUBDIR += py-vici
     SUBDIR += py-virustotal-api
     SUBDIR += py-volatility3
     SUBDIR += py-vpn-slice
     SUBDIR += py-vulndb
     SUBDIR += py-webauthn
     SUBDIR += py-xkcdpass
     SUBDIR += py-xmlsec
     SUBDIR += py-yara
     SUBDIR += py-yara-python-dex
     SUBDIR += py-yubikey-manager
     SUBDIR += py-zkg
     SUBDIR += py-zope.password
     SUBDIR += py-zxcvbn
     SUBDIR += pygost
     SUBDIR += qtkeychain
     SUBDIR += quantis-kmod
     SUBDIR += racoon2
     SUBDIR += rage-encryption
     SUBDIR += ratproxy
     SUBDIR += rats
     SUBDIR += rcracki_mt
     SUBDIR += reop
     SUBDIR += rhash
     SUBDIR += rhonabwy
     SUBDIR += ridl
     SUBDIR += rifiuti2
     SUBDIR += rkhunter
     SUBDIR += rndpassw
     SUBDIR += rnp
     SUBDIR += rotate
     SUBDIR += rpm-sequoia
     SUBDIR += rubygem-acme-client
     SUBDIR += rubygem-aes_key_wrap
     SUBDIR += rubygem-airbrussh
     SUBDIR += rubygem-android_key_attestation
     SUBDIR += rubygem-attr_encrypted
     SUBDIR += rubygem-attr_encrypted3
     SUBDIR += rubygem-bcrypt
     SUBDIR += rubygem-bcrypt-ruby
     SUBDIR += rubygem-bcrypt_pbkdf
     SUBDIR += rubygem-cose
     SUBDIR += rubygem-cvss-suite
     SUBDIR += rubygem-declarative_policy
     SUBDIR += rubygem-devise-two-factor
     SUBDIR += rubygem-devise-two-factor-rails5
     SUBDIR += rubygem-devise-two-factor-rails70
     SUBDIR += rubygem-devise-two-factor41-rails70
     SUBDIR += rubygem-devise_pam_authenticatable2
     SUBDIR += rubygem-devise_pam_authenticatable2-rails61
     SUBDIR += rubygem-digest
     SUBDIR += rubygem-digest-crc
     SUBDIR += rubygem-doorkeeper
     SUBDIR += rubygem-doorkeeper-openid_connect
     SUBDIR += rubygem-doorkeeper-rails5
     SUBDIR += rubygem-doorkeeper-rails50
     SUBDIR += rubygem-doorkeeper-rails61
     SUBDIR += rubygem-doorkeeper-rails70
     SUBDIR += rubygem-duo_api
     SUBDIR += rubygem-ed25519
     SUBDIR += rubygem-encryptor
     SUBDIR += rubygem-ezcrypto
     SUBDIR += rubygem-googleauth
     SUBDIR += rubygem-gpgme
     SUBDIR += rubygem-gpgr
     SUBDIR += rubygem-gssapi
     SUBDIR += rubygem-haiti-hash
     SUBDIR += rubygem-hkdf
     SUBDIR += rubygem-hkdf0
     SUBDIR += rubygem-hrr_rb_ssh
     SUBDIR += rubygem-hrr_rb_ssh-ed25519
     SUBDIR += rubygem-lockbox
     SUBDIR += rubygem-metasploit-aggregator
     SUBDIR += rubygem-metasploit-concern
     SUBDIR += rubygem-metasploit-credential
     SUBDIR += rubygem-metasploit-model
     SUBDIR += rubygem-metasploit-payloads
     SUBDIR += rubygem-metasploit_data_models
     SUBDIR += rubygem-metasploit_payloads-mettle
     SUBDIR += rubygem-nessus_rest
     SUBDIR += rubygem-net-scp
     SUBDIR += rubygem-net-scp1
     SUBDIR += rubygem-net-sftp
     SUBDIR += rubygem-net-sftp2
     SUBDIR += rubygem-net-ssh
     SUBDIR += rubygem-net-ssh-gateway
     SUBDIR += rubygem-net-ssh-krb
     SUBDIR += rubygem-net-ssh-multi
     SUBDIR += rubygem-net-ssh5
     SUBDIR += rubygem-net-ssh6
     SUBDIR += rubygem-net-telnet
     SUBDIR += rubygem-nexpose
     SUBDIR += rubygem-nmap-parser
     SUBDIR += rubygem-omniauth
     SUBDIR += rubygem-omniauth-alicloud
     SUBDIR += rubygem-omniauth-atlassian-oauth2
     SUBDIR += rubygem-omniauth-bitbucket
     SUBDIR += rubygem-omniauth-cas
     SUBDIR += rubygem-omniauth-dingtalk-oauth2
     SUBDIR += rubygem-omniauth-gitlab
     SUBDIR += rubygem-omniauth-jwt
     SUBDIR += rubygem-omniauth-multipassword
     SUBDIR += rubygem-omniauth-oauth2-generic
     SUBDIR += rubygem-omniauth-rails_csrf_protection
     SUBDIR += rubygem-omniauth-saml
     SUBDIR += rubygem-omniauth-saml1
     SUBDIR += rubygem-omniauth-shibboleth
     SUBDIR += rubygem-omniauth-shibboleth-redux
     SUBDIR += rubygem-omniauth1
     SUBDIR += rubygem-openssl
     SUBDIR += rubygem-openssl-ccm
     SUBDIR += rubygem-openssl-cmac
     SUBDIR += rubygem-openssl-signature_algorithm
     SUBDIR += rubygem-openvas-omp
     SUBDIR += rubygem-origami
     SUBDIR += rubygem-pbkdf2-ruby
     SUBDIR += rubygem-pundit
     SUBDIR += rubygem-pundit61
     SUBDIR += rubygem-pyu-ruby-sasl
     SUBDIR += rubygem-rack-oauth2
     SUBDIR += rubygem-rack-oauth21
     SUBDIR += rubygem-rasn1
     SUBDIR += rubygem-razorback-scriptNugget
     SUBDIR += rubygem-rbnacl
     SUBDIR += rubygem-rbnacl-libsodium
     SUBDIR += rubygem-recog
     SUBDIR += rubygem-rex-arch
     SUBDIR += rubygem-rex-bin_tools
     SUBDIR += rubygem-rex-core
     SUBDIR += rubygem-rex-encoder
     SUBDIR += rubygem-rex-exploitation
     SUBDIR += rubygem-rex-java
     SUBDIR += rubygem-rex-mime
     SUBDIR += rubygem-rex-nop
     SUBDIR += rubygem-rex-ole
     SUBDIR += rubygem-rex-powershell
     SUBDIR += rubygem-rex-random_identifier
     SUBDIR += rubygem-rex-registry
     SUBDIR += rubygem-rex-rop_builder
     SUBDIR += rubygem-rex-socket
     SUBDIR += rubygem-rex-sslscan
     SUBDIR += rubygem-rex-struct2
     SUBDIR += rubygem-rex-text
     SUBDIR += rubygem-rex-zip
     SUBDIR += rubygem-roauth
     SUBDIR += rubygem-rpam2
     SUBDIR += rubygem-ruby-hmac
     SUBDIR += rubygem-ruby-rc4
     SUBDIR += rubygem-ruby-saml
     SUBDIR += rubygem-ruby-saml115
     SUBDIR += rubygem-safety_net_attestation
     SUBDIR += rubygem-scrypt
     SUBDIR += rubygem-securecompare
     SUBDIR += rubygem-securerandom
     SUBDIR += rubygem-signet
     SUBDIR += rubygem-six
     SUBDIR += rubygem-ssh_data
     SUBDIR += rubygem-sshkey
     SUBDIR += rubygem-sshkit
     SUBDIR += rubygem-sslshake
     SUBDIR += rubygem-ssrf_filter
     SUBDIR += rubygem-timfel-krb5
     SUBDIR += rubygem-tpm-key_attestation
     SUBDIR += rubygem-twitter_oauth
     SUBDIR += rubygem-unix-crypt
     SUBDIR += rubygem-vault
     SUBDIR += rubygem-webauthn
     SUBDIR += rubygem-webpush
     SUBDIR += rustscan
     SUBDIR += s2n-tls
     SUBDIR += safesh
     SUBDIR += samhain
     SUBDIR += samhain-client
     SUBDIR += samhain-server
     SUBDIR += sancp
     SUBDIR += sasp
     SUBDIR += scanlogd
     SUBDIR += scrypt
     SUBDIR += seahorse
     SUBDIR += seal
     SUBDIR += seccure
     SUBDIR += seclists
     SUBDIR += secpanel
     SUBDIR += sectok
     SUBDIR += secure_delete
     SUBDIR += sedutil
     SUBDIR += sequoia
     SUBDIR += sequoia-sq
     SUBDIR += setaudit
     SUBDIR += sha1collisiondetection
     SUBDIR += sha2wordlist
     SUBDIR += shibboleth-idp
     SUBDIR += shibboleth-sp
     SUBDIR += sig2dot
     SUBDIR += signify
     SUBDIR += signing-party
     SUBDIR += silktools
     SUBDIR += sks
     SUBDIR += smurflog
     SUBDIR += sniffglue
     SUBDIR += snoopy
     SUBDIR += snort
     SUBDIR += snort-rep
     SUBDIR += snort2pfcd
     SUBDIR += snort3
     SUBDIR += snortsam
     SUBDIR += snortsnarf
     SUBDIR += snowflake-tor
     SUBDIR += snuffleupagus
     SUBDIR += softether
     SUBDIR += softether-devel
     SUBDIR += softether5
     SUBDIR += softhsm2
     SUBDIR += solana
     SUBDIR += sops
     SUBDIR += spass
     SUBDIR += spass-qt5
     SUBDIR += spectre-meltdown-checker
     SUBDIR += spm
     SUBDIR += sqlmap
     SUBDIR += sqlninja
     SUBDIR += srm
     SUBDIR += ssb
     SUBDIR += ssdeep
     SUBDIR += ssh-import-id
     SUBDIR += ssh-multiadd
     SUBDIR += ssh-tools
     SUBDIR += ssh-vault
     SUBDIR += sshguard
     SUBDIR += sshpass
     SUBDIR += ssl-admin
     SUBDIR += ssllabs-scan
     SUBDIR += sslproxy
     SUBDIR += sslscan
     SUBDIR += sslsplit
     SUBDIR += sssd
     SUBDIR += sssd-devel
     SUBDIR += ssss
     SUBDIR += sst
     SUBDIR += starttls
     SUBDIR += steghide
     SUBDIR += stegify
     SUBDIR += step-certificates
     SUBDIR += step-cli
     SUBDIR += stoken
     SUBDIR += strongswan
     SUBDIR += stunnel
     SUBDIR += su-exec
     SUBDIR += subversion-gnome-keyring
     SUBDIR += sudo
     SUBDIR += sudoscript
     SUBDIR += super
     SUBDIR += suricata
     SUBDIR += swatchdog
     SUBDIR += tailscale
     SUBDIR += tang
     SUBDIR += tclsasl
     SUBDIR += tcpcrypt
     SUBDIR += teleport
     SUBDIR += testssl.sh
     SUBDIR += tfhe
     SUBDIR += tfsec
     SUBDIR += theonionbox
     SUBDIR += tinc
     SUBDIR += tinc-devel
     SUBDIR += tinyca
     SUBDIR += tls-check
     SUBDIR += tlsc
     SUBDIR += tor
     SUBDIR += totp-cli
     SUBDIR += tpm-quote-tools
     SUBDIR += tpm-tools
     SUBDIR += tpm2-abrmd
     SUBDIR += tpm2-pkcs11
     SUBDIR += tpm2-tools
     SUBDIR += tpm2-tss
     SUBDIR += transcrypt
     SUBDIR += trezord
     SUBDIR += tripwire
     SUBDIR += trousers
     SUBDIR += trufflehog
     SUBDIR += tthsum
     SUBDIR += u2f-devd
     SUBDIR += uacme
     SUBDIR += ubuntu-keyring
     SUBDIR += unhide
     SUBDIR += unix-selfauth-helper
     SUBDIR += vanguards-tor
     SUBDIR += vault
     SUBDIR += vaultwarden
     SUBDIR += veracrypt
     SUBDIR += vigenere
     SUBDIR += vlock
     SUBDIR += vm-to-tor
     SUBDIR += vouch-proxy
     SUBDIR += vpnc
     SUBDIR += vuls
     SUBDIR += vuxml
     SUBDIR += vxquery
     SUBDIR += wapiti
     SUBDIR += wazuh-agent
     SUBDIR += wazuh-dashboard
     SUBDIR += wazuh-indexer
     SUBDIR += wazuh-manager
     SUBDIR += wazuh-server
     SUBDIR += webfwlog
     SUBDIR += webtunnel-tor
     SUBDIR += weggli
     SUBDIR += whatweb
     SUBDIR += wipe
     SUBDIR += wolfssh
     SUBDIR += wolfssl
     SUBDIR += wpa_supplicant
     SUBDIR += wpa_supplicant-devel
     SUBDIR += wpa_supplicant29
     SUBDIR += xca
     SUBDIR += xinetd
     SUBDIR += xml-security
     SUBDIR += xmlsec1
     SUBDIR += xorsearch
     SUBDIR += xray-core
     SUBDIR += yafic
     SUBDIR += yapet
     SUBDIR += yara
     SUBDIR += yersinia
     SUBDIR += ykclient
     SUBDIR += ykpers
     SUBDIR += ylva
     SUBDIR += yubico-piv-tool
     SUBDIR += yubikey-agent
     SUBDIR += yubikey-manager-qt
     SUBDIR += yubikey-personalization-gui
     SUBDIR += yubioath-desktop
     SUBDIR += zaproxy
     SUBDIR += zeek
     SUBDIR += zeronet
     SUBDIR += zlint
     SUBDIR += zzuf
 
 .include <bsd.port.subdir.mk>
diff --git a/security/certspotter/Makefile b/security/certspotter/Makefile
new file mode 100644
index 000000000000..fa65f32f417d
--- /dev/null
+++ b/security/certspotter/Makefile
@@ -0,0 +1,35 @@
+PORTNAME=	certspotter
+DISTVERSIONPREFIX=	v
+DISTVERSION=	0.18.0
+CATEGORIES=	security www
+
+MAINTAINER=	flo@FreeBSD.org
+COMMENT=	Certificate Transparency Monitor
+WWW=		https://github.com/SSLMate/certspotter
+
+LICENSE=	MPL20
+LICENSE_FILE=	${WRKSRC}/LICENSE
+
+USES=		go:1.21,modules
+USE_RC_SUBR=	certspotter
+GO_MODULE=	software.sslmate.com/src/certspotter
+GO_TARGET=	./cmd/${PORTNAME}:${PREFIX}/sbin/${PORTNAME}
+
+CERTSPOTTER_USER?=	certspotter
+CERTSPOTTER_GROUP?=	certspotter
+
+SUB_LIST+=	CERTSPOTTER_GROUP=${CERTSPOTTER_GROUP} \
+		CERTSPOTTER_USER=${CERTSPOTTER_USER}
+
+USERS=		${CERTSPOTTER_USER}
+GROUPS=		${CERTSPOTTER_GROUP}
+
+PLIST_SUB+=	CERTSPOTTER_GROUP=${CERTSPOTTER_GROUP} \
+		CERTSPOTTER_USER=${CERTSPOTTER_USER}
+
+pre-install:
+	@${MKDIR} ${STAGEDIR}/var/db/${PORTNAME}
+	@${MKDIR} ${STAGEDIR}${PREFIX}/etc/${PORTNAME}
+	@${ECHO_CMD} "example.org" > ${STAGEDIR}${PREFIX}/etc/${PORTNAME}/watchlist.sample
+	@${MKDIR} ${STAGEDIR}/var/run/${PORTNAME}
+.include <bsd.port.mk>
diff --git a/security/certspotter/distinfo b/security/certspotter/distinfo
new file mode 100644
index 000000000000..d7a980228c6e
--- /dev/null
+++ b/security/certspotter/distinfo
@@ -0,0 +1,5 @@
+TIMESTAMP = 1706474827
+SHA256 (go/security_certspotter/certspotter-v0.18.0/v0.18.0.mod) = 7999f3e078b45dae94b4b4b34bee2dda107e3a23bff847f54b584d0ce3bb549d
+SIZE (go/security_certspotter/certspotter-v0.18.0/v0.18.0.mod) = 165
+SHA256 (go/security_certspotter/certspotter-v0.18.0/v0.18.0.zip) = cd52b973de3ee04cbf5ced8eb87c6634185e77ad2bf4da756a4c72b9881f2c59
+SIZE (go/security_certspotter/certspotter-v0.18.0/v0.18.0.zip) = 89899
diff --git a/security/certspotter/files/certspotter.in b/security/certspotter/files/certspotter.in
new file mode 100644
index 000000000000..f22d334d210d
--- /dev/null
+++ b/security/certspotter/files/certspotter.in
@@ -0,0 +1,44 @@
+#!/bin/sh
+
+# PROVIDE: certspotter
+# REQUIRE: LOGIN
+# KEYWORD: shutdown
+#
+# Add these lines to /etc/rc.conf.local or /etc/rc.conf
+# to enable this service:
+#
+# certspotter_enable (bool):	Set to YES to enable certspotter.
+#				Set to NO by default.
+# certspotter_statedir (path):	State dir. Set to /var/db/certspotter
+#				by default.
+# certspotter_watchlist (path):	File listing the monitored domains.
+#				Set to %%ETCIDIR%%/watchlist by default.
+# certspotter_email (string):	The email address notifications will be
+#				sent to. Set to root by default.
+# certspotter_user (string):	The user account used to run the daemon.
+#				Default: %%CERTSPOTTER_USER%%
+
+. /etc/rc.subr
+
+name=certspotter
+rcvar=certspotter_enable
+
+load_rc_config $name
+
+: ${certspotter_enable:="NO"}
+: ${certspotter_statedir="/var/db/certspotter"}
+: ${certspotter_watchlist="%%ETCDIR%%/watchlist"}
+: ${certspotter_user:="%%CERTSPOTTER_USER%%"}
+: ${certspotter_email:="root"}
+
+pidfile=/var/run/certspotter/${name}.pid
+command=%%PREFIX%%/sbin/certspotter
+start_cmd="certspotter_start"
+
+certspotter_start()
+{
+        echo "Starting ${name}."
+        /usr/sbin/daemon -c -f -p ${pidfile} -u ${certspotter_user} %%PREFIX%%/sbin/certspotter -state_dir $certspotter_statedir -watchlist $certspotter_watchlist -email $certspotter_email -start_at_end
+}
+
+run_rc_command "$1"
diff --git a/security/certspotter/pkg-descr b/security/certspotter/pkg-descr
new file mode 100644
index 000000000000..007655649d98
--- /dev/null
+++ b/security/certspotter/pkg-descr
@@ -0,0 +1,2 @@
+Cert Spotter is a Certificate Transparency log monitor from SSLMate that
+alerts you when an SSL/TLS certificate is issued for one of your domains.
diff --git a/security/certspotter/pkg-plist b/security/certspotter/pkg-plist
new file mode 100644
index 000000000000..0544303c9f5d
--- /dev/null
+++ b/security/certspotter/pkg-plist
@@ -0,0 +1,4 @@
+sbin/certspotter
+@sample etc/certspotter/watchlist.sample
+@dir(%%CERTSPOTTER_USER%%,%%CERTSPOTTER_GROUP%%,700) /var/db/certspotter
+@dir(%%CERTSPOTTER_USER%%,%%CERTSPOTTER_GROUP%%,0775) /var/run/certspotter