For rkhunter 1.4.2-6+deb9u1 % cat /var/lib/dpkg/info/rkhunter.conffiles /etc/apt/apt.conf.d/90rkhunter /etc/cron.daily/rkhunter /etc/cron.weekly/rkhunter /etc/logcheck/ignore.d.server/rkhunter /etc/logrotate.d/rkhunter /etc/rkhunter.conf
% dpkg -S /etc/default/rkhunter dpkg-query: no path found matching pattern /etc/default/rkhunter # debconf-get-selections | grep rkhunter # Automatically update rkhunter's file properties database? rkhunter rkhunter/apt_autogen boolean true # Activate weekly update of rkhunter's databases? rkhunter rkhunter/cron_db_update boolean true # Activate daily run of rkhunter? rkhunter rkhunter/cron_daily_run boolean true If I build 1.4.6-4 from git, the conffiles list is the same. The file is still heavily used by the maintainer scripts but managed by ucf - I don't see how it is marked as a conffile. Cheers Vince
