annathepiper | Spamassassin guidance needed! (Reply)

solarbird showed me tonight, folks, something of a system log from lodestone (she gets mailed these things) from just before the attack. In this, there is unusual activity tagged from spamd, the daemon that runs spamassassin on a system-wide basis. What was shown in the log was a bunch of spamd doing setuid's over to various users and processing their mail, and either finding spam or not. This by itself is not unusual--this is what spamd is supposed to do. However, Dara tells me that having this activity show up in the logs AT ALL is the part that isn't normal.

So. What I need to find out is how spamd's behavior might have been modified such that suddenly it's showing up as unusual activity in the system logs. I haven't done a damned thing with spamd since I installed it other than stopping or starting it.

Since Dara and I have to pack and get ready to move, if I can summon an army of monkeys to go find what I need to know on this, that would be incredibly helpful. How about it, folks? Can anybody find me information on what the heck might have happened to spamd, if anything?