security/rkhunter 1.3.8 - false warning?

[Chuck Swiger]

On Jan 4, 2011, at 9:38 AM, Torfinn Ingolfsen wrote:
> rkhunter 1.3.8 from ports complains about the /etc/passwd file.  Why does it do that?

It's buggy?

RKHunter is better known for generating vast numbers of obscure false positives than it is for actually providing a security benefit.  Something like tripwire or a functioning backup system which can provide a comparison of changes against current filesystem state is much more likely to be useful.

Regards,
-- 
-Chuck