diff --git a/logwatch-secure.patch b/logwatch-secure.patch
index 26891b8..060b8bb 100644
--- a/logwatch-secure.patch
+++ b/logwatch-secure.patch
@@ -1,5 +1,14 @@
 --- logwatch-svn50.dist/scripts/services/secure	2011-02-25 02:21:40.000000000 +1100
-+++ logwatch-svn50/scripts/services/secure	2011-04-26 14:04:50.000000000 +1000
++++ logwatch-svn50/scripts/services/secure	2011-04-26 14:30:58.000000000 +1000
+@@ -218,7 +218,7 @@
+       ( $ThisLine =~ /com.apple.SecurityServer: Entering service/) or
+       ( $ThisLine =~ /^(xinetd|xinetd-ipv6)\[\d+\]: EXIT: /) or
+       ( $ThisLine =~ /^crond\(\w+\)\[\d+\]: session /) or
+-      ( $ThisLine =~ /pam_systemd\(\w+:session\): Moving/) or
++      ( $ThisLine =~ /pam_systemd\(.+:session\): Moving/) or
+       ( $ThisLine =~ /^sshd\(\w+\)\[\d+\]: authentication failure/) or
+       ( $ThisLine =~ /^sshd\(\w+\)\[\d+\]: check pass; user unknown/) or
+       ( $ThisLine =~ /^sshd\(\w+\)\[\d+\]: session /) or
 @@ -243,10 +243,12 @@
        ( $ThisLine =~ /PAM pam_set_item: attempt to set conv\(\) to NULL/) or
        ( $ThisLine =~ /PAM pam_get_item: nowhere to place requested item/) or
diff --git a/logwatch.spec b/logwatch.spec
index 74f96d7..08009db 100644
--- a/logwatch.spec
+++ b/logwatch.spec
@@ -1,7 +1,7 @@
 Summary: A log file analysis program
 Name: logwatch
 Version: 7.4.0
-Release: 3.20110328svn50%{?dist}
+Release: 4.20110328svn50%{?dist}
 License: MIT
 Group: Applications/System
 URL: http://www.logwatch.org/
@@ -135,6 +135,9 @@ echo "# Configuration overrides for specific logfiles/services may be placed her
 %{_mandir}/man*/*
 
 %changelog
+* Tue Apr 26 2011 Frank Crawford <frank@crawford.emu.id.au> - 7.4.0-4.20110328svn50
+- Updated -secure patch to match more pam_systemd messages
+
 * Tue Apr 26 2011 Frank Crawford <frank@crawford.emu.id.au> - 7.4.0-3.20110328svn50
 - Updated -secure patch for pam_systemd messages (rhbz#699558)
 - Updated -dovecot patch for extended starting message from upstream