Dear, in some ispconfig 3 node, thanks to rkhunter we see several file like these: Code: -rw-r--r-- 1 root root 5026 Dec 20 2020 .#group0mUYgt -rw-r--r-- 1 root root 5026 Dec 20 2020 .#group0PuP9w -rw-r--r-- 1 root root 5026 Apr 25 2021 .#group0srZPw -rw-r--r-- 1 root root 5026 Nov 10 2020 .#group0W2XcI -rw-r--r-- 1 root root 5026 Jan 24 2021 .#group0wMBh2 -rw-r--r-- 1 root root 5026 Apr 25 2021 .#group10Nzf6 [...] and the following, empty [...] -rw-r----- 1 root shadow 0 Jan 24 2021 .#gshadow0597qk -rw-r----- 1 root shadow 0 Dec 21 2020 .#gshadow08vWgC -rw-r----- 1 root shadow 0 Dec 20 2020 .#gshadow0b82pt -rw-r----- 1 root shadow 0 Dec 20 2020 .#gshadow0PDjlU -rw-r----- 1 root shadow 0 Dec 20 2020 .#gshadow0ragMm as far as i known, this kind of file are not required by any so (in that case it's a debian 10). Can you confirm that ispconfig does not use any of this hidden file?
These are not files from ISPConfig either. ISPConfig uses the normal Linux commands like adduser etc. to manage passwd, group and shadow file. Where are these files located, in /etc/ ?
FWIW, I see those files once in a while, and just remove them. I did brief searching and never determined which specific utility generates them, nor why they were left behind (possible fault when creating an account or something?)
