AFAIK you do not need to set the primary group for all your users to 'users'. Just add them to the 'users' group in /etc/group. Or better yet, create a seperate group (eg. mail_users) for it and assign write permissions to that group.
I always thought that was the case, but it just doesn't work that way. As I indicated above - when I set the permissions -rwxrwxr-x root:users /usr/local/var/FuzzyOcr/FuzzyOcr.hashdb I get a "permission denied" error. I agree it should work. Both of my distros run spamd as root and change permissions to the recipient of the message, when spamc runs through procmail. Here is part of my .procmailrc (on both machines): $ cat /etc/procmailrc DROPPRIVS=yes :0fw: spamassassin.lock * < 256000 | /usr/bin/spamc Is there something here that can be changed??