On 2015-11-09 16:42 +0100, Antony Stone wrote: > What did Jessie install it as? > > > > /var/mail/.spamassassin/user_prefs
This is very strange. Are you really sure it is not operator error? I run wheezy, so I can't flat out exclude it, but it flies in the face of too much Debian tradition. /var/mail is just for the spool mailboxes. > 1. I seriously doubt that on a Debian system exim is running as root. Indeed: [6+0]~$ ps axl | fgrep 'exim4 -bd' 5 101 3230 1 20 0 46824 2860 ? Ss ? 0:06 /usr/sbin/exim4 -bd -q30m 0 1000 8368 8311 20 0 7800 1760 - S+ pts/1 0:00 fgrep exim4 -bd [7+0]~$ awk 'BEGIN { FS=":" } ( $3 == "101" ) { print $0 }' < /etc/passwd Debian-exim:x:101:103::/var/spool/exim4:/bin/false > 2. It sounds like we're talking slightly at cross-purposes here. Exim may be > calling spamassassin (PS: how?) It matters a good deal. If it's called from the content filtering hook or the ACLs, spamassassin runs as the exim UID (unless it is itself setuid, of course). But if it's called as a "transport filter", it runs as the destination user. -- Please *no* private copies of mailing list or newsgroup messages. Rule 420: All persons more than eight miles high to leave the court.