rkhunter warnings - whitelisting

Ditch the quotes:

ALLOWDEVFILE = /dev/.udev/db/*

To suppress the rkhunter warning, you can add a whitelist rule to /etc/rkhunter.conf.local:

ALLOWDEVFILE=/dev/.udev/rules.d/root.rules