Le mardi 06 février 2007 à 21:30 +0100, Dr. Markus Waldeck a écrit : > Package: rkhunter > Version: 1.2.9-2 > Severity: normal > > During the execution of rkhunter some files are copied or generated > in $TMPDIR but passwd and groups are the only ones that were not removed.
Hi, It is the standard and normal behaviour, as rkhunter keeps a local copy of these files to be able to report any changes made between 2 rkhunter checks. "Checking for differences in user accounts..." "Checking for differences in user groups..." Cheers, Julien
