diff --git a/.ci/grep.sh b/.ci/grep.sh
index ff94af044..0d5e37578 100755
--- a/.ci/grep.sh
+++ b/.ci/grep.sh
@@ -120,6 +120,14 @@ if grep -qr '# Maintainer:' -- *; then
 	exit_code=1
 fi
 
+# Disallow sysadmin OpenRC files
+if grep -qr '/etc/local.d' --exclude-dir='archived' -- *; then
+	echo "ERROR: Please replace the '/etc/local.d' script with real OpenRC service files."
+	echo "See https://gitlab.postmarketos.org/postmarketOS/pmaports/-/work_items/4360"
+	grep --color=always -r '/etc/local.d' --exclude-dir='archived' -- *
+	exit_code=1
+fi
+
 if [ -n "$CI_MERGE_REQUEST_DIFF_BASE_SHA" ]; then
 	# Find all added, modified or renamed kernel APKBUILDs in main, community or testing
 	MODIFIED_MAINLINE_KERNEL_PACKAGES=$(git show --pretty="" --name-only --diff-filter=AMR "$CI_MERGE_REQUEST_DIFF_BASE_SHA"..HEAD | grep "device/\(main\|community\|testing\)/linux-.*/APKBUILD" || true)