- Only run rkhunter --prop-upd on initial install, not upgrades - Include README.urpmi file - Add /etc/.java to list with allowed hidden directories