From Debian package 0.0.20080702-12 Allow spamd_t the kill capability Index: policy/modules/services/spamassassin.te =================================================================== --- policy/modules/services/spamassassin.te.orig +++ policy/modules/services/spamassassin.te @@ -287,7 +287,7 @@ # setuids to the user running spamc. Comment this if you are not # using this ability. -allow spamd_t self:capability { setuid setgid dac_override sys_tty_config }; +allow spamd_t self:capability { kill setgid setuid dac_override sys_tty_config }; dontaudit spamd_t self:capability sys_tty_config; allow spamd_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap }; allow spamd_t self:fd use;