We have a patch in development which fixes some platform-specific perl setuid brokenness, but it needs testing on those 3 platforms with spamd. The patch is at:
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5518#c18 and applies to SpamAssassin 3.2.1. It should be possible to start a spamd using something like spamd --virtual-config-dir=/tmp -u nobody -D , and then see it setuid to "nobody" safely without issuing the 'spamd: initial attempt to change real uid failed, trying BSD workaround' warning. On windows, probably more complex however ;) If you *already* have spamd running on windows, I'd appreciate it if you could try running it, the same way as you're currently using it -- if it doesn't die, that's good enough for me! ;) thanks, --j.
