diff --git a/security/logcheck/Makefile b/security/logcheck/Makefile
index 8d29dd5b2cf6..c47b931a3c28 100644
--- a/security/logcheck/Makefile
+++ b/security/logcheck/Makefile
@@ -1,106 +1,109 @@
 PORTNAME=	logcheck
-DISTVERSION=	1.4.3
-PORTREVISION=	2
+DISTVERSION=	1.4.4
 CATEGORIES=	security
 MASTER_SITES=	DEBIAN_POOL
 DISTNAME=	${PORTNAME}_${PORTVERSION}
 
 MAINTAINER=	yasu@FreeBSD.org
 COMMENT=	Auditing tool for system logs on Unix boxes
 WWW=		https://salsa.debian.org/debian/logcheck
 
 LICENSE=	GPLv2+
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 BUILD_DEPENDS=	docbook-to-man>0:textproc/docbook-to-man
 RUN_DEPENDS=	bash:shells/bash \
 		lockfile-create:sysutils/lockfile-progs \
 		mime-construct:mail/mime-construct
 
 # Enable Perl dependency for logtail script
 USES=		perl5 shebangfix tar:xz
 SHEBANG_FILES=	src/detectrotate/*.dtr src/logcheck src/logtail src/logtail2
 BINMODE=	755
 SUB_FILES=	pkg-deinstall pkg-install pkg-message
 SUB_LIST+=	CRON=${PORT_OPTIONS:MCRON} \
 		DBDIR=${DBDIR} \
 		LOGCHECK_GROUP=${LOGCHECK_GROUP} \
 		LOGCHECK_USER=${LOGCHECK_USER}
 WRKSRC=		${WRKDIR}/${PORTNAME}-${PORTVERSION}
 USERS=		${LOGCHECK_USER}
 GROUPS=		${LOGCHECK_GROUP}
 PLIST_SUB+=	CHGRP=${CHGRP} \
 		CHMOD=${CHMOD} \
 		DBDIR=${DBDIR} \
 		FIND=${FIND} \
 		LOGCHECK_GROUP=${LOGCHECK_GROUP} \
 		LOGCHECK_USER=${LOGCHECK_USER} \
 		RUNDIR=${RUNDIR}
 PORTDOCS=	${DOCS:T}
 
 OPTIONS_DEFINE=		CRON DOCS EXAMPLES
 OPTIONS_DEFAULT=	CRON
 CRON_DESC=		Install cron script automatically
 
 # None. portlint compliance
 BASEDIR?=
 CONFIG_DIRS=		cracking.d ignore.d.paranoid ignore.d.server \
 			ignore.d.workstation violations.d violations.ignore.d
 DBDIR=			${BASEDIR}/var/db/${PORTNAME}
 DOCS=			AUTHORS CHANGES CREDITS TODO docs/README*
 LOGCHECK_GROUP=		${LOGCHECK_USER}
 LOGCHECK_USER=		logcheck
 MAN1_FILES=		logcheck-test.1
 MAN8_FILES=		logcheck.8 logtail.8 logtail2.8
 REINPLACE_FILES=	debian/logcheck.cron.d docs/logcheck.sgml \
 			docs/logtail2.8 docs/README.logcheck \
 			docs/README.logcheck-database docs/README.logtail \
 			etc/logcheck.conf etc/logcheck.logfiles src/logcheck \
 			src/logtail2
 RUNDIR=			${BASEDIR}/var/run/${PORTNAME}
 
 .include <bsd.port.pre.mk>
 
 do-build:
 .for file in ${REINPLACE_FILES}
 	${REINPLACE_CMD} ${_SUB_LIST_TEMP} ${WRKSRC}/${file}
 .endfor
 	docbook-to-man ${WRKSRC}/docs/logcheck.sgml > ${WRKSRC}/docs/logcheck.8
 	${FIND} ${WRKSRC} -type f \( -name \*.orig -o -name \*.bak \) -delete
 
 do-install:
 	@${MKDIR} ${STAGEDIR}${DATADIR}/detectrotate \
 		  ${STAGEDIR}${DBDIR} \
-		  ${STAGEDIR}${DOCSDIR} \
 		  ${STAGEDIR}${ETCDIR} \
 		  ${STAGEDIR}${ETCDIR}/logcheck.logfiles.d \
-		  ${STAGEDIR}${EXAMPLESDIR} \
 		  ${STAGEDIR}${RUNDIR}
 	${INSTALL_SCRIPT} ${WRKSRC}/src/logcheck-test ${STAGEDIR}${PREFIX}/bin
 	${INSTALL_SCRIPT} ${WRKSRC}/src/logcheck ${STAGEDIR}${PREFIX}/sbin
 	${INSTALL_SCRIPT} ${WRKSRC}/src/logtail ${STAGEDIR}${PREFIX}/sbin
 	${INSTALL_SCRIPT} ${WRKSRC}/src/logtail2 ${STAGEDIR}${PREFIX}/sbin
 	${INSTALL_DATA} ${WRKSRC}/etc/logcheck.conf \
 		${STAGEDIR}${ETCDIR}/logcheck.conf.sample
 	${INSTALL_DATA} ${WRKSRC}/etc/logcheck.logfiles \
 		${STAGEDIR}${ETCDIR}/
 	${INSTALL_DATA} ${WRKSRC}/etc/logcheck.logfiles.d/syslog.logfiles \
 		${STAGEDIR}${ETCDIR}/logcheck.logfiles.d/syslog.logfiles.sample
 .for i in ${CONFIG_DIRS}
 	@${MKDIR} ${STAGEDIR}${ETCDIR}/${i}
 	${INSTALL_DATA} ${WRKSRC}/rulefiles/linux/${i}/* \
 		${STAGEDIR}${ETCDIR}/${i}
 .endfor
 	${INSTALL_DATA} ${WRKSRC}/src/detectrotate/*.dtr \
 		${STAGEDIR}${DATADIR}/detectrotate
-	${INSTALL_DATA} ${WRKSRC}/debian/logcheck.cron.d \
-		${STAGEDIR}${EXAMPLESDIR}/crontab.in
 .for i in ${MAN1_FILES}
 	${INSTALL_MAN} ${WRKSRC}/docs/$i ${STAGEDIR}${PREFIX}/share/man/man1
 .endfor
 .for i in ${MAN8_FILES}
 	${INSTALL_MAN} ${WRKSRC}/docs/$i ${STAGEDIR}${PREFIX}/share/man/man8
 .endfor
+
+do-install-DOCS-on:
+	@${MKDIR} ${STAGEDIR}${DOCSDIR}
 	cd ${WRKSRC} && ${INSTALL_DATA} ${DOCS} ${STAGEDIR}${DOCSDIR}
 
+do-install-EXAMPLES-on:
+	@${MKDIR} ${STAGEDIR}${EXAMPLESDIR}
+	${INSTALL_DATA} ${WRKSRC}/debian/logcheck.cron.d \
+		${STAGEDIR}${EXAMPLESDIR}/crontab.in
+
 .include <bsd.port.post.mk>
diff --git a/security/logcheck/distinfo b/security/logcheck/distinfo
index 207cfec31bed..a361a9724258 100644
--- a/security/logcheck/distinfo
+++ b/security/logcheck/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1689704376
-SHA256 (logcheck_1.4.3.tar.xz) = ad83ae80bd780bdae5eefd40ad59a3e97b85ad3a4962aa7c00d98ed3bdffcdd0
-SIZE (logcheck_1.4.3.tar.xz) = 138740
+TIMESTAMP = 1746315311
+SHA256 (logcheck_1.4.4.tar.xz) = d40e1a92707e19581cdc5f1596a56d26396f18b061612e84fb0fbd957bc03864
+SIZE (logcheck_1.4.4.tar.xz) = 143220
diff --git a/security/logcheck/files/patch-debian_logcheck.cron.d b/security/logcheck/files/patch-debian_logcheck.cron.d
index 0f33b88cb62a..ef8ab439bc74 100644
--- a/security/logcheck/files/patch-debian_logcheck.cron.d
+++ b/security/logcheck/files/patch-debian_logcheck.cron.d
@@ -1,16 +1,14 @@
---- debian/logcheck.cron.d.orig	2023-07-18 10:54:00 UTC
+--- debian/logcheck.cron.d.orig	2025-04-28 15:28:43 UTC
 +++ debian/logcheck.cron.d
-@@ -1,9 +1,5 @@
--# /etc/cron.d/logcheck: crontab entries for the logcheck package
--
+@@ -1,8 +1,8 @@
+ # /etc/cron.d/logcheck: crontab entries for the logcheck package
+ # These do nothing under systemd because the systemd timer will take precedence
+ 
 -PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
-+# crontab entries for the logcheck package
-+PATH=/sbin:/bin:/usr/sbin:/usr/bin:%%PREFIX%%/sbin:%%PREFIX%%/bin
++PATH=%%PREFIX%%/sbin:%%PREFIX%%/bin:/sbin:/bin:/usr/sbin:/usr/bin
  MAILTO=root
--
--@reboot         logcheck    if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck -R; fi
--2 * * * *       logcheck    if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck; fi
--
--# EOF
-+@reboot    if [ -x %%PREFIX%%/sbin/logcheck ]; then /usr/bin/lockf -t 0 /tmp/.logcheck nice -n10 %%PREFIX%%/sbin/logcheck -R; fi
-+2 * * * *  if [ -x %%PREFIX%%/sbin/logcheck ]; then /usr/bin/lockf -t 0 /tmp/.logcheck nice -n10 %%PREFIX%%/sbin/logcheck; fi
+ 
+-@reboot         logcheck    if [ ! -d /run/systemd/system ] && [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck -R; fi
+-2 * * * *       logcheck    if [ ! -d /run/systemd/system ] && [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck; fi
++@reboot         logcheck    if [ ! -d /run/systemd/system ] && [ -x %%PREFIX%%/sbin/logcheck ]; then nice -n10 %%PREFIX%%/sbin/logcheck -R; fi
++2 * * * *       logcheck    if [ ! -d /run/systemd/system ] && [ -x %%PREFIX%%/sbin/logcheck ]; then nice -n10 %%PREFIX%%/sbin/logcheck; fi
diff --git a/security/logcheck/files/patch-rulefiles__linux__ignore.d.server__ssh b/security/logcheck/files/patch-rulefiles__linux__ignore.d.server__ssh
deleted file mode 100644
index b54cf2add4de..000000000000
--- a/security/logcheck/files/patch-rulefiles__linux__ignore.d.server__ssh
+++ /dev/null
@@ -1,11 +0,0 @@
---- rulefiles/linux/ignore.d.server/ssh.orig	2022-12-22 23:03:11 UTC
-+++ rulefiles/linux/ignore.d.server/ssh
-@@ -14,7 +14,7 @@
- ^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Postponed keyboard-interactive(/pam)? for (invalid user )?[^[:space:]]+ from [^[:space:]]+ port [[:digit:]]{1,5}( (ssh|ssh2)( \[preauth\])?)?$
- ^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Received disconnect from [:.[:xdigit:]]+: [12]: Timeout, server not responding\.$
- ^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Received disconnect from [:.[:xdigit:]]+(: | port [[:digit:]]{1,5}:)11: (disconnected by user|Closed due to user request\.|Bye Bye \[preauth\])$
--^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Received disconnect from [:[:xdigit:].]+: [[:digit:]]+: .{0,256} \[preauth\]$
-+^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Received disconnect from [:[:xdigit:].]+: [[:digit:]]+: .{0,255} \[preauth\]$
- ^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Received disconnect from [:[:xdigit:].]+: [[:digit:]]+: Client disconnect$
- ^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Received disconnect from [:[:xdigit:].]+: [[:digit:]]+: Disconnect requested by Windows SSH Client\.$
- ^(\w{3} [ :[:digit:]]{11}|[0-9T:.+-]{32}) [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Disconnected from( (invalid|authenticating))?( user [^[:space:]]+)? [:[:xdigit:].]+ port [[:digit:]]{1,5}( \[preauth\])?$
diff --git a/security/logcheck/files/patch-src_logcheck b/security/logcheck/files/patch-src_logcheck
index 933a2cd2bf81..dc1f0636f23b 100644
--- a/security/logcheck/files/patch-src_logcheck
+++ b/security/logcheck/files/patch-src_logcheck
@@ -1,115 +1,115 @@
---- src/logcheck.orig	2023-03-02 08:19:09 UTC
+--- src/logcheck.orig	2025-05-03 23:35:17 UTC
 +++ src/logcheck
-@@ -24,16 +24,16 @@
+@@ -24,16 +24,16 @@ if [ "$(id -u)" = 0 ]; then
  
  if [ "$(id -u)" = 0 ]; then
      echo "logcheck should not be run as root. Use su to invoke logcheck:"
 -    echo "su -s /bin/bash -c \"/usr/sbin/logcheck${*:+ $*}\" logcheck"
 +    echo "su -m %%LOGCHECK_USER%% -c \"%%LOCALBASE%%/bin/bash %%LOCALBASE%%/sbin/logcheck${*:+ $*}\" logcheck"
      echo "Or use sudo: sudo -u logcheck logcheck${*:+ $*}."
      # you may want to uncomment that hack to let logcheck invoke itself.
 -    # su -s /bin/bash -c "$0 $*" logcheck
 +    # su -s %%LOCALBASE%%/bin/bash -c "$0 $*" logcheck
      exit 1
  fi
  
 -if [ ! -f /usr/bin/lockfile-create ] || \
 -   [ ! -f /usr/bin/lockfile-remove ] || \
 -   [ ! -f /usr/bin/lockfile-touch ]; then
 +if [ ! -f %%LOCALBASE%%/bin/lockfile-create ] || \
 +   [ ! -f %%LOCALBASE%%/bin/lockfile-remove ] || \
 +   [ ! -f %%LOCALBASE%%/bin/lockfile-touch ]; then
      echo "fatal: lockfile-progs is a prerequisite for logcheck, but was not found."
      exit 1
  fi
-@@ -71,13 +71,13 @@ EVENTSSUBJECT="System Events"
+@@ -71,13 +71,13 @@ ADDTAG="no"
  ADDTAG="no"
  
  # Default paths
 -RULEDIR="/etc/logcheck"
 -CONFFILE="/etc/logcheck/logcheck.conf"
 -STATEDIR="/var/lib/logcheck"
 -LOGFILES_LIST="/etc/logcheck/logcheck.logfiles"
 -LOGFILES_LIST_D="/etc/logcheck/logcheck.logfiles.d"
 -LOGFILE_FALLBACK="/var/log/syslog"
 -LOGTAIL="/usr/sbin/logtail2"
 +RULEDIR="%%ETCDIR%%"
 +CONFFILE="%%ETCDIR%%/logcheck.conf"
 +STATEDIR="%%DBDIR%%"
 +LOGFILES_LIST="%%ETCDIR%%/logcheck.logfiles"
 +LOGFILES_LIST_D="%%ETCDIR%%/logcheck.logfiles.d"
 +LOGFILE_FALLBACK="/var/log/messages"
 +LOGTAIL="%%PREFIX%%/sbin/logtail2"
  SYSLOG_SUMMARY="/usr/bin/syslog-summary"
  
  # Defaults for options
-@@ -92,7 +92,7 @@ FQDN=0
+@@ -92,7 +92,7 @@ SYSLOGSUMMARY=0
  SORTUNIQ=0
  SUPPORT_CRACKING_IGNORE=0
  SYSLOGSUMMARY=0
 -LOCKDIR=/run/lock/logcheck
 +LOCKDIR=/var/run/logcheck
  LOCKFILE="$LOCKDIR/logcheck"
  
  # Allow globs to return zero files
-@@ -183,8 +183,8 @@ ${TMPDIR:+"- Check temporary directory: $TMPDIR"
+@@ -183,8 +183,8 @@ logfiles specified in;
  }
  - verify that the logcheck user can read all
  logfiles specified in;
 -  /etc/logcheck/logcheck.logfiles
--  /etc/logcheck/logcheck.logfiled.d/*.logfiles
-+  %%ETCDIR%%/logcheck.logfiles
-+  %%ETCDIR%%/logcheck.logfiled.d/*.logfiles
+-  /etc/logcheck/logcheck.logfiles.d/*.logfiles
++  %%ETCDIR%%/logcheck/logcheck.logfiles
++  %%ETCDIR%%/logcheck/logcheck.logfiles.d/*.logfiles
  - check the system has enough space; (df -h output follows):
  $(df -h 2>&1|| :)
  - check the settings (environment follows):
 @@ -237,7 +237,7 @@ cleanrules() {
  								error "Could not read $x"
  						fi
  				done
 -				for rulefile in $(run-parts --list "$dir"); do
 +				for rulefile in $(ls -1R "$dir"); do
  						rulefile="$(basename "$rulefile")"
  						if [ -f "${dir}/${rulefile}" ]; then
  								debug "cleanrules: ${dir}/${rulefile} -> $cleaned/$rulefile"
 @@ -503,7 +503,7 @@ logoutput() {
  										 >> "$TMPDIR/report" || error "Could not write message about first-time check of journal to report"
  								echo "Only recent entries (from the last 5 hours) will be checked" \
  										 >> "$TMPDIR/report" || error "Could not write message about first-time check of journal to report"
 -								echo "If you do not wish to check the systemd journal, please see /etc/logcheck/logcheck.logfiles.d/journal.logfiles" \
 +								echo "If you do not wish to check the systemd journal, please see %%ETCDIR%%/logcheck.logfiles.d/journal.logfiles" \
  										 >> "$TMPDIR/report" || error "Could not write message about first-time check of journal to report"
  								offsettime="--since=-5h"
  						fi
-@@ -587,7 +587,7 @@ debug "Sourcing - $CONFFILE"
+@@ -589,7 +589,7 @@ if [ -r "$CONFFILE" ]; then
  
  # Now source the config file - before things that should not be changed
  if [ -r "$CONFFILE" ]; then
 -		# shellcheck source=/etc/logcheck/logcheck.conf
 +		# shellcheck source=%%ETCDIR%%/logcheck.conf
  		. "$CONFFILE"
  elif [ -f "$CONFFILE" ]; then
  		error  "Config file $CONFFILE could not be read"
-@@ -618,9 +618,9 @@ fi
+@@ -620,9 +620,9 @@ if [ "$FQDN" -eq 1 ]; then
  
  # HOSTNAME is either 'fully qualified' or 'short'
  if [ "$FQDN" -eq 1 ]; then
 -		HOSTNAME="$(hostname --fqdn 2>/dev/null)"
 +		HOSTNAME="$(hostname -f 2>/dev/null)"
  else
 -		HOSTNAME="$(hostname --short 2>/dev/null)"
 +		HOSTNAME="$(hostname -s 2>/dev/null)"
  fi
  
  # Now check for the other options
-@@ -725,8 +725,8 @@ else
+@@ -727,8 +727,8 @@ fi
  fi
  
  # Create a secure temporary working directory (or exit)
 -TMPDIR="$(mktemp -d -p "${TMP:-/tmp}" logcheck.XXXXXX)" \
 -		|| TMPDIR="$(mktemp -d -p /var/tmp logcheck.XXXXXX)" \
 +TMPDIR="$(mktemp -d ${TMP:-/tmp}/logcheck.XXXXXX)" \
 +		|| TMPDIR="$(mktemp -d /var/tmp/logcheck.XXXXXX)" \
  		|| error "Could not create temporary directory"
  
  debug "Using working dir: $TMPDIR"
diff --git a/security/logcheck/pkg-plist b/security/logcheck/pkg-plist
index 09b74d5f028f..55dc71fbef56 100644
--- a/security/logcheck/pkg-plist
+++ b/security/logcheck/pkg-plist
@@ -1,211 +1,218 @@
 %%DATADIR%%/detectrotate/10-savelog.dtr
 %%DATADIR%%/detectrotate/20-logrotate.dtr
 %%DATADIR%%/detectrotate/30-logrotate-dateext.dtr
 @group %%LOGCHECK_GROUP%%
 %%ETCDIR%%/cracking.d/kernel
 %%ETCDIR%%/cracking.d/rlogind
 %%ETCDIR%%/cracking.d/rsh
 %%ETCDIR%%/cracking.d/smartd
 %%ETCDIR%%/cracking.d/tftpd
 %%ETCDIR%%/cracking.d/uucico
 %%ETCDIR%%/ignore.d.paranoid/bind
 %%ETCDIR%%/ignore.d.paranoid/cron
 %%ETCDIR%%/ignore.d.paranoid/incron
 %%ETCDIR%%/ignore.d.paranoid/logcheck
 %%ETCDIR%%/ignore.d.paranoid/postfix
 %%ETCDIR%%/ignore.d.paranoid/ppp
-%%ETCDIR%%/ignore.d.paranoid/pureftp
 %%ETCDIR%%/ignore.d.paranoid/qpopper
 %%ETCDIR%%/ignore.d.paranoid/squid
 %%ETCDIR%%/ignore.d.paranoid/ssh
 %%ETCDIR%%/ignore.d.paranoid/stunnel
 %%ETCDIR%%/ignore.d.paranoid/sysklogd
 %%ETCDIR%%/ignore.d.paranoid/telnetd
 %%ETCDIR%%/ignore.d.paranoid/tripwire
 %%ETCDIR%%/ignore.d.paranoid/usb
 %%ETCDIR%%/ignore.d.server/acpid
 %%ETCDIR%%/ignore.d.server/amandad
 %%ETCDIR%%/ignore.d.server/amavisd-new
 %%ETCDIR%%/ignore.d.server/anacron
 %%ETCDIR%%/ignore.d.server/anon-proxy
 %%ETCDIR%%/ignore.d.server/apache
 %%ETCDIR%%/ignore.d.server/apcupsd
 %%ETCDIR%%/ignore.d.server/arpwatch
 %%ETCDIR%%/ignore.d.server/asterisk
 %%ETCDIR%%/ignore.d.server/automount
 %%ETCDIR%%/ignore.d.server/bind
 %%ETCDIR%%/ignore.d.server/bluez-utils
 %%ETCDIR%%/ignore.d.server/courier
 %%ETCDIR%%/ignore.d.server/cpqarrayd
 %%ETCDIR%%/ignore.d.server/cpufreqd
 %%ETCDIR%%/ignore.d.server/cron
 %%ETCDIR%%/ignore.d.server/cron-apt
 %%ETCDIR%%/ignore.d.server/cups-lpd
 %%ETCDIR%%/ignore.d.server/cvs-pserver
 %%ETCDIR%%/ignore.d.server/cvsd
 %%ETCDIR%%/ignore.d.server/cyrus
+%%ETCDIR%%/ignore.d.server/dbus-daemon
 %%ETCDIR%%/ignore.d.server/dcc
 %%ETCDIR%%/ignore.d.server/ddclient
 %%ETCDIR%%/ignore.d.server/dhclient
 %%ETCDIR%%/ignore.d.server/dhcp
 %%ETCDIR%%/ignore.d.server/dictd
 %%ETCDIR%%/ignore.d.server/dkfilter
 %%ETCDIR%%/ignore.d.server/dnsmasq
 %%ETCDIR%%/ignore.d.server/dovecot
 %%ETCDIR%%/ignore.d.server/dropbear
 %%ETCDIR%%/ignore.d.server/dspam
 %%ETCDIR%%/ignore.d.server/epmd
 %%ETCDIR%%/ignore.d.server/exim4
 %%ETCDIR%%/ignore.d.server/fcron
 %%ETCDIR%%/ignore.d.server/ftpd
 %%ETCDIR%%/ignore.d.server/git-daemon
 %%ETCDIR%%/ignore.d.server/gnu-imap4d
 %%ETCDIR%%/ignore.d.server/gps
 %%ETCDIR%%/ignore.d.server/grinch
 %%ETCDIR%%/ignore.d.server/horde3
 %%ETCDIR%%/ignore.d.server/hplip
 %%ETCDIR%%/ignore.d.server/hylafax
 %%ETCDIR%%/ignore.d.server/ikiwiki
 %%ETCDIR%%/ignore.d.server/imap
 %%ETCDIR%%/ignore.d.server/imapproxy
 %%ETCDIR%%/ignore.d.server/imp
 %%ETCDIR%%/ignore.d.server/imp4
 %%ETCDIR%%/ignore.d.server/innd
 %%ETCDIR%%/ignore.d.server/ipppd
 %%ETCDIR%%/ignore.d.server/isdnlog
 %%ETCDIR%%/ignore.d.server/isdnutils
 %%ETCDIR%%/ignore.d.server/jabberd
 %%ETCDIR%%/ignore.d.server/kernel
 %%ETCDIR%%/ignore.d.server/klogind
 %%ETCDIR%%/ignore.d.server/krb5-kdc
 %%ETCDIR%%/ignore.d.server/libpam-krb5
 %%ETCDIR%%/ignore.d.server/libpam-mount
+%%ETCDIR%%/ignore.d.server/libpam-systemd
 %%ETCDIR%%/ignore.d.server/logcheck
 %%ETCDIR%%/ignore.d.server/login
 %%ETCDIR%%/ignore.d.server/maradns
 %%ETCDIR%%/ignore.d.server/mldonkey-server
 %%ETCDIR%%/ignore.d.server/mon
 %%ETCDIR%%/ignore.d.server/mountd
 %%ETCDIR%%/ignore.d.server/nagios
 %%ETCDIR%%/ignore.d.server/netconsole
 %%ETCDIR%%/ignore.d.server/nfs
 %%ETCDIR%%/ignore.d.server/nntpcache
 %%ETCDIR%%/ignore.d.server/nscd
 %%ETCDIR%%/ignore.d.server/nslcd
+%%ETCDIR%%/ignore.d.server/opendkim
+%%ETCDIR%%/ignore.d.server/opendmarc
 %%ETCDIR%%/ignore.d.server/openvpn
 %%ETCDIR%%/ignore.d.server/otrs
 %%ETCDIR%%/ignore.d.server/passwd
 %%ETCDIR%%/ignore.d.server/pdns
 %%ETCDIR%%/ignore.d.server/perdition
 %%ETCDIR%%/ignore.d.server/policyd
 %%ETCDIR%%/ignore.d.server/popa3d
 %%ETCDIR%%/ignore.d.server/postfix
 %%ETCDIR%%/ignore.d.server/postfix-policyd
 %%ETCDIR%%/ignore.d.server/ppp
 %%ETCDIR%%/ignore.d.server/pptpd
 %%ETCDIR%%/ignore.d.server/procmail
 %%ETCDIR%%/ignore.d.server/proftpd
 %%ETCDIR%%/ignore.d.server/pure-ftpd
-%%ETCDIR%%/ignore.d.server/pureftp
 %%ETCDIR%%/ignore.d.server/qpopper
 %%ETCDIR%%/ignore.d.server/rbldnsd
 %%ETCDIR%%/ignore.d.server/rpc_statd
 %%ETCDIR%%/ignore.d.server/rsnapshot
 %%ETCDIR%%/ignore.d.server/rsync
+%%ETCDIR%%/ignore.d.server/runuser
 %%ETCDIR%%/ignore.d.server/sa-exim
 %%ETCDIR%%/ignore.d.server/samba
 %%ETCDIR%%/ignore.d.server/saned
 %%ETCDIR%%/ignore.d.server/sasl2-bin
 %%ETCDIR%%/ignore.d.server/saslauthd
 %%ETCDIR%%/ignore.d.server/schroot
 %%ETCDIR%%/ignore.d.server/scponly
 %%ETCDIR%%/ignore.d.server/slapd
 %%ETCDIR%%/ignore.d.server/smartd
 %%ETCDIR%%/ignore.d.server/smbd_audit
 %%ETCDIR%%/ignore.d.server/smokeping
 %%ETCDIR%%/ignore.d.server/snmpd
 %%ETCDIR%%/ignore.d.server/snort
 %%ETCDIR%%/ignore.d.server/spamc
 %%ETCDIR%%/ignore.d.server/spamd
 %%ETCDIR%%/ignore.d.server/squid
 %%ETCDIR%%/ignore.d.server/ssh
 %%ETCDIR%%/ignore.d.server/stunnel
 %%ETCDIR%%/ignore.d.server/su
 %%ETCDIR%%/ignore.d.server/sudo
 %%ETCDIR%%/ignore.d.server/sympa
 %%ETCDIR%%/ignore.d.server/syslogd
 %%ETCDIR%%/ignore.d.server/systemd
+%%ETCDIR%%/ignore.d.server/systemd-journald
 %%ETCDIR%%/ignore.d.server/systemd-logind
+%%ETCDIR%%/ignore.d.server/systemd-networkd
 %%ETCDIR%%/ignore.d.server/systemd-timesyncd
 %%ETCDIR%%/ignore.d.server/teapop
 %%ETCDIR%%/ignore.d.server/telnetd
 %%ETCDIR%%/ignore.d.server/tftpd
 %%ETCDIR%%/ignore.d.server/thy
 %%ETCDIR%%/ignore.d.server/ucd-snmp
 %%ETCDIR%%/ignore.d.server/upsd
 %%ETCDIR%%/ignore.d.server/uptimed
 %%ETCDIR%%/ignore.d.server/userv
 %%ETCDIR%%/ignore.d.server/vsftpd
 %%ETCDIR%%/ignore.d.server/watchdog
 %%ETCDIR%%/ignore.d.server/wu-ftpd
 %%ETCDIR%%/ignore.d.server/xinetd
+%%ETCDIR%%/ignore.d.workstation/NetworkManager
 %%ETCDIR%%/ignore.d.workstation/automount
 %%ETCDIR%%/ignore.d.workstation/bind
 %%ETCDIR%%/ignore.d.workstation/bluetooth-alsa
 %%ETCDIR%%/ignore.d.workstation/bluez-utils
 %%ETCDIR%%/ignore.d.workstation/bonobo
 %%ETCDIR%%/ignore.d.workstation/dhcpcd
 %%ETCDIR%%/ignore.d.workstation/francine
 %%ETCDIR%%/ignore.d.workstation/gconf
 %%ETCDIR%%/ignore.d.workstation/gdm
 %%ETCDIR%%/ignore.d.workstation/hald
 %%ETCDIR%%/ignore.d.workstation/hcid
 %%ETCDIR%%/ignore.d.workstation/ifplugd
 %%ETCDIR%%/ignore.d.workstation/ippl
 %%ETCDIR%%/ignore.d.workstation/kdm
 %%ETCDIR%%/ignore.d.workstation/kernel
 %%ETCDIR%%/ignore.d.workstation/laptop-mode-tools
 %%ETCDIR%%/ignore.d.workstation/libmtp-runtime
 %%ETCDIR%%/ignore.d.workstation/libpam-gnome-keyring
 %%ETCDIR%%/ignore.d.workstation/logcheck
 %%ETCDIR%%/ignore.d.workstation/login
 %%ETCDIR%%/ignore.d.workstation/net-acct
 %%ETCDIR%%/ignore.d.workstation/nntpcache
 %%ETCDIR%%/ignore.d.workstation/polypaudio
 %%ETCDIR%%/ignore.d.workstation/postfix
 %%ETCDIR%%/ignore.d.workstation/ppp
 %%ETCDIR%%/ignore.d.workstation/proftpd
 %%ETCDIR%%/ignore.d.workstation/pump
+%%ETCDIR%%/ignore.d.workstation/rtkit-daemon
 %%ETCDIR%%/ignore.d.workstation/sendfile
 %%ETCDIR%%/ignore.d.workstation/slim
 %%ETCDIR%%/ignore.d.workstation/squid
 %%ETCDIR%%/ignore.d.workstation/udev
 %%ETCDIR%%/ignore.d.workstation/wdm
 %%ETCDIR%%/ignore.d.workstation/winbind
 %%ETCDIR%%/ignore.d.workstation/wpasupplicant
 %%ETCDIR%%/ignore.d.workstation/xdm
 %%ETCDIR%%/ignore.d.workstation/xlockmore
 %%ETCDIR%%/logcheck.logfiles
 %%ETCDIR%%/violations.d/kernel
 %%ETCDIR%%/violations.d/logcheck
 %%ETCDIR%%/violations.d/smartd
 %%ETCDIR%%/violations.d/su
 %%ETCDIR%%/violations.d/sudo
 %%ETCDIR%%/violations.ignore.d/logcheck-su
 %%ETCDIR%%/violations.ignore.d/logcheck-sudo
 @sample %%ETCDIR%%/logcheck.conf.sample
 @sample %%ETCDIR%%/logcheck.logfiles.d/syslog.logfiles.sample
 @group
 bin/logcheck-test
 share/man/man1/logcheck-test.1.gz
 share/man/man8/logcheck.8.gz
 share/man/man8/logtail.8.gz
 share/man/man8/logtail2.8.gz
 sbin/logcheck
 sbin/logtail
 sbin/logtail2
 %%PORTEXAMPLES%%%%EXAMPLESDIR%%/crontab.in
 @dir(%%LOGCHECK_USER%%,%%LOGCHECK_GROUP%%,) %%DBDIR%%
 @dir(%%LOGCHECK_USER%%,%%LOGCHECK_GROUP%%,) %%RUNDIR%%
 @postexec %%FIND%% %%PREFIX%%/%%ETCDIR%%/* -type d -exec %%CHGRP%% %%LOGCHECK_GROUP%% {} +
 @postexec %%FIND%% %%PREFIX%%/%%ETCDIR%%/* -type d -exec %%CHMOD%% 750 {} +