Hi, Please see archived bug #330688[1], where I explained that you can specify allowed hidden files and directories in /etc/rkhunter.conf to avoid such warnings (see ALLOWHIDDENFILES and ALLOWHIDDENDIRS options)
A list of common hidden files and directories known to set off false alarms in rkhunter is included in the package in /usr/share/doc/rkhunter/README.Debian udev is not in the base install, and we cannot take the responsibility to ignore these files & directories. However, I propose to set these entries commented out in default rkhunter.conf, what do you think? Cheers, Julien 1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330688 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]