mysterious files on a fedora system but not from rpm

[Dave Burns]

Naturally there are a few that I created myself. But I am surprised by
the number of files that exist on one of my fedora systems, files that
did not arrive as part of an rpm.

#find / -type f -print|grep -v '^/proc/'|while read file; do rpm -qf
"$file" >/dev/null || echo "$file"; done > notinrpm
wc -l notinrpm
1521 notinrpm

Let's take an example:

#rpm  -qf /usr/share/firstboot/modules/language.pyc
file /usr/share/firstboot/modules/language.pyc is not owned by any package

#file /usr/share/firstboot/modules/language.pyc
/usr/share/firstboot/modules/language.pyc: python 2.4 byte-compiled
# stat /usr/share/firstboot/modules/language.pyc
  File: `/usr/share/firstboot/modules/language.pyc'
  Size: 8618            Blocks: 32         IO Block: 4096   regular file
Device: 302h/770d       Inode: 7365629     Links: 1
Access: (0644/-rw-r--r--)  Uid: (    0/    root)   Gid: (    0/    root)
Access: 2007-11-17 20:43:55.000000000 -1000
Modify: 2007-06-25 12:45:32.000000000 -1000
Change: 2007-06-25 12:45:32.000000000 -1000
# ls -la /usr/share/firstboot/modules/language.pyc
-rw-r--r-- 1 root root 8618 Jun 25 12:45
/usr/share/firstboot/modules/language.pyc

Could this have been left behind when I erased some package? If not,
where the heck did it come from? any way I can find out? When I google
that filename I get one hit only, an ancient reference to FC1.

# md5sum  /usr/share/firstboot/modules/language.pyc
98449dfce4aa4b36c67a52e1a1f6dac6  /usr/share/firstboot/modules/language.pyc

Hmm, wonder if you can get a result from googling an md5 sum. Not this
one, at least.

I have two rpms related to firstboot installed (well, two with
'firstboot' in the name), neither has anything named 'language' in it:

# rpm -qa|grep firstboot
firstboot-tui-1.4.23-1
firstboot-1.4.23-1
# rpm -q --filesbypkg firstboot|grep language
# rpm -q --filesbypkg firstboot-tui|grep language

Should I be getting paranoid at this point (or rather, allowing my
pre-existing paranoia free range)?

Thanks,
Dave