I'm rather puzzled by the statement "There seems to be no satisfactory workaround".
The posting referenced by Douglas (which is essentially the same one I originally referenced, on a different site) says,
"I have put a fix into the CVS code so that ALLOWHIDDENFILE should work
correctly.
I will email you (off list) a fixed 'rkhunter' program with this fix,
which you should be able to just use as a drop-in replacement. In your
RKH config file you should use 'ALLOWHIDDENFILE=/dev/.initramfs'."
...which is saying that the maintainer has patched the rkhunter code SPECIFICALLY for this bug.
I'm rather puzzled by the statement "There seems to be no satisfactory workaround".
The posting referenced by Douglas (which is essentially the same one I originally referenced, on a different site) says,
"I have put a fix into the CVS code so that ALLOWHIDDENFILE should work E=/dev/ .initramfs' ."
correctly.
I will email you (off list) a fixed 'rkhunter' program with this fix,
which you should be able to just use as a drop-in replacement. In your
RKH config file you should use 'ALLOWHIDDENFIL
...which is saying that the maintainer has patched the rkhunter code SPECIFICALLY for this bug.