> Hello > My FC4 server also reports such message. > > --------------- > /dev/.udevdb /etc/.pwd.lock > --------------- > Please inspect: /dev/.udevdb (directory) > > -- > Raina Otoni <ro3159@xxxxxxxxx> > Raina, At the moment, i am in touch with rootkit.nl about this. I hope to get those out for FC5 at least. Some articles/FAQ's say, we can also whitelist some directories for rkhunter. Roger