Personally, I'd have to advise you not to use third party software like 'swaret', 'slapt-get' and 'Dropline-Gnome.' These programs replace a lot of internal files, and can lead to problems when 'auto-updating.' This may be out-of-line for this topic, but i'd suggest just using pkgtool.

Found this on the rkhunter site:

[Howto] Responding to false positives

What is a false positive?
False positives are warnings which indicates there is a problem, but aren't really a problem. Example: some Linux distro updated a few common used binaries like `ls` and `ps`. You (as a good sysadmin) update the new packages and run (ofcourse) daily Rootkit Hunter. Rootkit Hunter isn't yet aware of these new files and while scanning it resports some "bad" files. In this case we have a false positive.



In most times false positives can be eliminated easily by filling in the contact form.

what "internal files" does swaret update besides anything from --current or --version? I agree about DL GNOME though... never used slapt-get...

Try version 10.0. I was having a hell of a time when the version was at 10.

lupin_the_3rd-

SWareT can replace all kinds of stuff that you may not want it to. I used to use the linuxpackages.net repositories. When I was doing that, I would frequently find that I had "broken" stuff when I did a "swaret --upgrade -a". I recommend that anyone using SWareT either not use third party repositories, which can upgrade core software with their packages, or don't use the -a option, making sure not to upgrade core packages with the repositories versions.

Don't know if that addresses your question, but I've found it to be pretty good advice.

I only use it for keeping current with the --current mirror... anything else I use pkgtool for... I can see how using linuxpackages repos could cause problems... I'm just too lazy to install everything to stay current manually

Same here, Lupin.