On Mon, 2006-05-01 at 10:16 -0400, Bob Goodwin wrote: > > Of course I'm not certain of the validity of either check when > chkrootkit and rkhunter are installed "after the fact?" I also have a /dev/.udev directory. And I have /usr/share/man/man1/..1.gz - owned by bash. I don't have /etc/.java - but I did not install the java stuff on this box.