On Sat, 14 Sep 2019 13:30:48 -0600 @lbutlr wrote: > What is starting spamd as nobody instead of root like the other > processes?
Most likely it's caused by something running spamc as root or trying to scan an email for the root user. When child processes are running as root they switch to the unix user running spamc (or specified with spamc -u) for processing the scan. If that would still result in root being used the child process switches to nobody instead.