On Debian 9, installing
default-jre creates a hidden directory
/etc/.java. This is flagged as a warning while I run rkhunter. Looking up online, I found an old bug report against Debian. The bug was closed stating the sysadmin could configure rkhunter to ignore the directory.
Speaking simplistically from the point of view of operating system security, is it a good idea to have a hidden directory under
/etc? Does it make security sense for rkhunter to look for and flag hidden files and directories under
/etc? What's the recommended best practice here?
Edit 2019-05-29T02:42+00:00: What I mean to ask in the last question is if a hidden directory under /etc is a good idea from the point of view of "security usability". As in, it might be disconcerting for a sysadmin to find a hidden file under
/etc and therefore could be bad security practice, especially from the point of view of a package maintainer.