Please do not reply directly to this email. All additional comments should be made in the comments box of this bug.
https://bugzilla.redhat.com/show_bug.cgi?id=537587
--- Comment #41 from Nathanael Noblet nathanael@gnat.ca 2010-01-07 18:11:52 EDT --- I've checked and the odd permissions on /var/lib/dspam in necessary for security purposes.
The dspam binary is setgid on purpose. It isn't strictly necessary in *all* ways it can be configured, however the most common ways use that. I'll get more clarification as to what it does setgid vs non setgid methods of operation. We use it on our production servers in that mode.
Is there anything else left?