security(8) reports 
``/home/XXX/Daten/Edv/macs/macs-home/Library/Application''
as ``Setuid additions:'' where the real file name is
``/home/XXX/Daten/Edv/macs/macs-home/Library/Application Support/\
ProxyOnOff/proxyOnOffTool''

I have found the source of the wrong file name report to be in line 437
of /etc/security:
``egrep -av '^[bc]' $LIST | join -o $FIELDS2 -110 -210 -v2 \
/dev/null - > $TMP1'',

with join having space (and tab) characters as field separators and thus
ignoring after first space characters found in field 10.

No quick fix that comes to my mind, using -t to join(1) would help only
if the output of ls(1) in line 430 would be changed to not contain space
characters as output separators. 

Is this known and if yes, would a patch to the man page be accepted?

And no, I do not use space characters voluntarily in file names. It is a
back up of an osx system.