Two more observations: 1) The seccheck-autologout.timer has the same bug, I did not notice it before: grep WantedBy /usr/lib/systemd/system/seccheck-autologout.timer WantedBy=seccheck-autologout.service should also read WantedBy=timers.target 2) when you update the seccheck package, maybe you could also correct bug 985802 (the here document in security-control.sh for weekly and monthly mails uses space instead of tabs for indentation of the line 'From: $SECCHK_FROM' resulting in mail headers which are not properly recognized).