Already one result: Warning: Unable to check for passwd file differences: no copy of the passwd file exists. Warning: Unable to check for group file differences: no copy of the group file exists. Warning: The SSH configuration option 'PermitRootLogin' has not been set. The default value may be 'yes', to allow root access. Warning: The SSH configuration option 'Protocol' has not been set. The default value may be '2,1', to allow the use of protocol version 1. Warning: Hidden file found: /usr/bin/.fipscheck.hmac: ASCII text the SSH warning is normal (although I do not know how fitting since rkhunter should maybe set to not warn because the Leap default is 2 only AFAIK) The warning of fipscheck.hmac, however, is astonishing me. Isn't that white-listed too?