Frank asks:
What is your yum update schedule?
I run "yum update" manually every Wednesday evening.
Ed says:
See...
http://www.freedesktop.org/software/systemd/man/systemd-readahead-replay....
ok. Thank-you, Ed. But "/" seems like a strange place to put that
file. It can spook some non-sysadmins (like me!).
John asks:
So what happened when you ran 'rpm -V ...'? It will probably
show that
the package has changed in some way.
I checked several. In every case, it says "package [whatever] is not
installed"! (But I checked, and the packages are where rkhunter is
looking.)
Michael says:
It's a false positive.
See
https://bugzilla.redhat.com/1045116 for the /dev/dev case.
And /.readahead ist from the readahead service. Systemd nowadays.
Thank-you Michael.
I consider parts 2 and 3 of my original post closed. But I remain
puzzled that rpm doesn't find packages that "whereis" finds in the
places that rkhunter has rpm looking.
Bill.