Hi, thanks for your prompt answer!
> It is the standard and normal behaviour, as rkhunter keeps a local copy > of these files to be able to report any changes made between 2 rkhunter > checks. > > "Checking for differences in user accounts..." > "Checking for differences in user groups..." I checked /etc/rkhunter.conf. It contains the line "TMPDIR=/var/lib/rkhunter/tmp". My tests revealed that the value of the enviroment variable TMPDIR is used if it exists. This could result in an unexpected behavior. For the correct behavior I will specify "--tempdir"! Dr. Markus Waldeck -- "Feel free" - 5 GB Mailbox, 50 FreeSMS/Monat ... Jetzt GMX ProMail testen: http://www.gmx.net/de/go/promail?ac=OM.GX.GX003K11711T4781a -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]