A security audit team has set up File intergrity management solution on some of the linux servers handled by the company I work with. They are questioning us about some alerts they've got regarding /var/lib/rpm/__db.xxx files being deleted and altered.
I have to give them the reason for these files being changed/deleted. Can someone explain what these files are and why they are frequently changed.