diff --git a/cfg/posix.cfg b/cfg/posix.cfg
index 4fbff131f..0c1f6e430 100644
--- a/cfg/posix.cfg
+++ b/cfg/posix.cfg
@@ -1719,6 +1719,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <arg nr="1">
       <not-uninit/>
     </arg>
+    <arg nr="5"/>
   </function>
   <!-- struct passwd *getpwuid(uid_t uid); -->
   <function name="getpwuid">
@@ -1732,19 +1733,23 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <!-- int getpwuid_r(uid_t, struct passwd *, char *, size_t, struct passwd **); -->
   <function name="getpwuid_r">
     <noreturn>false</noreturn>
+    <arg nr="1">
+      <not-uninit/>
+    </arg>
+    <arg nr="4"/>
   </function>
   <!-- void setpwent(void); -->
   <function name="setpwent">
     <noreturn>false</noreturn>
   </function>
-  <!-- int       catclose(nl_catd); -->
+  <!-- int catclose(nl_catd); -->
   <function name="catclose">
     <noreturn>false</noreturn>
     <arg nr="1">
       <not-uninit/>
     </arg>
   </function>
-  <!-- char     *catgets(nl_catd, int, int, const char *); -->
+  <!-- char *catgets(nl_catd, int, int, const char *); -->
   <function name="catgets">
     <use-retval/>
     <noreturn>false</noreturn>
@@ -1761,7 +1766,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
       <not-uninit/>
     </arg>
   </function>
-  <!-- nl_catd   catopen(const char *, int); -->
+  <!-- nl_catd catopen(const char *, int); -->
   <function name="catopen">
     <noreturn>false</noreturn>
     <arg nr="1">
@@ -2001,7 +2006,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     </arg>
   </function>
   <!-- http://pubs.opengroup.org/onlinepubs/009695399/basedefs/stdlib.h.html -->
-  <!-- double        drand48(void); -->
+  <!-- double drand48(void); -->
   <function name="drand48">
     <use-retval/>
     <noreturn>false</noreturn>
@@ -2542,6 +2547,16 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <leak-ignore/>
     <warn severity="portability">Non reentrant function 'getgrent' called. For threadsafe applications it is recommended to use the reentrant replacement function 'getgrent_r'.</warn>
   </function>
+  <!-- int getgrent_r(struct group *gbuf, char *buf, size_t buflen, struct group **gbufp) -->
+  <function name="getgrent_r">
+    <use-retval/>
+    <noreturn>false</noreturn>
+    <leak-ignore/>
+    <arg nr="2">
+      <not-uninit/>
+    </arg>
+    <arg nr="4"/>
+  </function>
   <!-- struct group *fgetgrent(FILE *stream); -->
   <function name="fgetgrent">
     <use-retval/>