i switched from "noatime,nodiratime" to "relatime,nodiratime,lazytime" which seems to lead in unexpected mtime changes for a lot of files leading in rkhunter alerts and likely rsync problems
May 15 13:35:51 Installed: kernel-core-4.0.3-201.fc21.x86_64 May 15 13:35:54 Installed: kernel-modules-4.0.3-201.fc21.x86_64 May 15 13:35:55 Updated: kernel-headers-4.0.3-201.fc21.x86_64
Warning: Package manager verification has failed: File: /usr/bin/vmstat The file modification time has changed Warning: Package manager verification has failed: File: /usr/sbin/fsck The file modification time has changed Warning: Package manager verification has failed: File: /usr/sbin/nologin The file modification time has changed
[root@rh:~]$ stat /usr/sbin/fsck File: '/usr/sbin/fsck' Size: 37168 Blocks: 80 IO Block: 4096 regular file Device: 901h/2305d Inode: 1309455 Links: 1 Access: (0755/-rwxr-xr-x) Uid: ( 0/ root) Gid: ( 0/ root) Access: 2015-05-18 11:30:07.909951123 +0200 Modify: 2015-05-15 13:34:47.037194874 +0200 Change: 2015-05-15 13:34:47.037194874 +0200