Spamassassin Error - safe_lock: cannot create tmp lockfile

[pandora]

Hello,

I'm running 3.1.7-1.fc5 on a recently upgraded FC5 system (from FC3). The /etc/mail directory and subdirectories were recreated as was the /etc/aliases and /etc/procmailrc. All the user accounts were recreated from backups of /home and automated insertions into /etc/passwd and /etc/shadow.

Users are not complaining about not being able to log in. Here is the output of uname -a.

Linux web-001 2.6.18-1.2200.fc5smp #1 SMP Sat Oct 14 17:15:35 EDT 2006 i686 i686 i386 GNU/Linux

When I receive mail to users listed in the /etc/mail/virtusertable, I get a lot of permission denied and safe_lock errors in the logs. I'm also running greylisting, but I don't think that's the problem.

Dec  1 17:51:05 mail-001 milter-greylist: kB21p46d019173: addr 74.52.105.242 from <contact@cyclone.senderdomain.com> rcpt <pandora@receiverdomain.com>: autowhitelisted for 30:00:00
Dec  1 17:51:05 mail-001 sendmail[19173]: kB21p46d019173: from=<contact@cyclone.senderdomain.com>, size=2460, class=0, nrcpts=1, msgid=<E1GqK1y-0006aY-3k@cyclone.senderdomain.com>, proto=SMTP, daemon=MTA, relay=cyclone.senderdomain.com [74.52.105.242]
Dec  1 17:51:05 mail-001 sendmail[19173]: kB21p46d019173: Milter add: header: X-Greylist: Delayed for 00:16:03 by milter-greylist-2.0.2 (mail-001.receiverdomain.com [96.12.36.25]); Fri, 01 Dec 2006 17:51:05 -0800 (PST)
Dec  1 17:51:07 mail-001 spamd[19169]: spamd: connection from mail-001.receiverdomain.com [127.0.0.1] at port 55796 
Dec  1 17:51:07 mail-001 spamd[19169]: spamd: setuid to root succeeded 
Dec  1 17:51:07 mail-001 spamd[19169]: spamd: still running as root: user not specified with -u, not found, or set to root, falling back to nobody at /usr/bin/spamd line 1147, <GEN5> line 4. 
Dec  1 17:51:07 mail-001 spamd[19169]: spamd: processing message <E1GqK1y-0006aY-3k@cyclone.senderdomain.com> for root:99 
Dec  1 17:51:10 mail-001 spamd[19169]: mkdir /root/.spamassassin: Permission denied at /usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin.pm line 1530 
Dec  1 17:51:10 mail-001 spamd[19169]: locker: safe_lock: cannot create tmp lockfile /root/.spamassassin/auto-whitelist.lock.mail-001.receiverdomain.com.19169 for /root/.spamassassin/auto-whitelist.lock: Permission denied 
Dec  1 17:51:10 mail-001 spamd[19169]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /root/.spamassassin/auto-whitelist.lock.mail-001.receiverdomain.com.19169 for /root/.spamassassin/auto-whitelist.lock: Permission denied 
Dec  1 17:51:10 mail-001 spamd[19169]: bayes: locker: safe_lock: cannot create tmp lockfile /root/.spamassassin/bayes.lock.mail-001.receiverdomain.com.19169 for /root/.spamassassin/bayes.lock: Permission denied 
Dec  1 17:51:10 mail-001 spamd[19169]: spamd: clean message (0.0/2.1) for root:99 in 2.4 seconds, 2952 bytes. 
Dec  1 17:51:10 mail-001 spamd[19169]: spamd: result: . 0 - scantime=2.4,size=2952,user=root,uid=99,required_score=2.1,rhost=mail-001.receiverdomain.com,raddr=127.0.0.1,rport=55796,mid=<E1GqK1y-0006aY-3k@cyclone.senderdomain.com>,autolearn=failed 
Dec  1 17:51:10 mail-001 sendmail[19175]: kB21p46d019173: to=<pandora@receiverdomain.com>, delay=00:00:05, xdelay=00:00:05, mailer=local, pri=32835, dsn=2.0.0, stat=Sent
Dec  1 17:51:10 mail-001 spamd[19167]: prefork: child states: II

I've checked Google for the

auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp

error and some of the forums say it's because the email account for the virtuser doesn't exist, but in my case it does, and the user can log in fine.

Virtusers only get mail correctly when spamd is shutdown. Running "spamassassin --lint" gives no errors. I've run "make" in /etc/mail and restarted sendmail and spamd a number of times. No luck.

Any help would be greatly appreciated.

[tuxette]

Sometimes sendmail.mc is slightly different between versions. Do you have any sendmail errors in the syslog files?

[kurius]

Check /etc/procmailrc. They added a DROPPRIVS statement that gets around that permission denied / privileges error. It should look like this:

DROPPRIVS=yes
:0fw
| /usr/bin/spamc

[pandora]

That fixed it. Thanks!