/usr/sbin/logcheck o {
	/ h
	/bin x
	/bin/cat xi
	/bin/egrep rxi
	/bin/grep xi
	/bin/ls xi
	/bin/rm xi
	/bin/run-parts xi
	/dev 
	/dev/null rw
	/dev/tty rw
	/dev/urandom r
	/etc h
	/etc/ld.so.cache r
	/etc/logcheck rx
	/etc/mtab r
	/lib 
	/lib/ld-*.so x
	/lib/libc-*.so rx
	/lib/libdl-*.so rx
	/lib/libncurses.so.* rx
	/lib/libm-*.so rx
	/lib/librt-*.so rx
	/lib/libpthread-*.so rx
	/lib/libacl.so* rx
	/lib/libcrypt-*.so rx
	/lib/libattr.so.* rx
	/lib/tls/librt-*.so rx
	/lib/tls/libcrypt-*.so rx
	/lib/tls/libpthread-*.so rx
	/lib/tls/libm-*.so rx
	/usr/share/perl/5.8.3 rx
	/proc
	/proc/meminfo r
	/proc/sys/kernel/version r
	/tmp rw
	/usr/bin x
	/usr/bin/lockfile-create xi
	/usr/bin/lockfile-touch xi
	/usr/bin/lockfile-remove xi
	/usr/lib 
	/usr/lib/liblockfile.so.* rx
	/usr/sbin/logcheck rx
	/usr/sbin/logtail rxi
	/var 
	/var/lib/logcheck rw
	/var/log r
	/var/lock rw
	/var/tmp rw
	-CAP_ALL

	connect {
		disabled
	}

	bind {
		disabled
	}

}
