package: libreoffice-core version: 1:3.4.3-4 severity: normal libreoffice has a hidden file in /usr, which is flagged as suspicious by chkrootkit. See /usr/lib/libreoffice/basis3.4/program/.services.rdb. There is also /usr/lib/libreoffice/basis3.4/program/services.rdb, which looks similar, but differs.