/var/lib/rkhunter/db/(mirrors|rkhunter_prop_list)\.dat$ VarTime
/var/lib/rkhunter/db/rkhunter\.dat(\.old)?$ InodeData
/var/lib/rkhunter/tmp/(group|passwd)$ VarFile
/var/lib/rkhunter/(db|tmp)$ VarDir
/var/log/rkhunter\.log$ Log
/var/log/rkhunter\.log\.old$ LowLog
