rkhunter showing false positives? Why .pwd.lock?

[Roger Grosswiler]

> Hello
> My FC4 server also reports such message.
>
> ---------------
>  /dev/.udevdb  /etc/.pwd.lock
> ---------------
> Please inspect:  /dev/.udevdb (directory)
>
> --
> Raina Otoni <ro3159 at gmail.com>
>
Raina,

At the moment, i am in touch with rootkit.nl about this. I hope to get
those out for FC5 at least.

Some articles/FAQ's say, we can also whitelist some directories for rkhunter.

Roger