Questions about spamassassin

I’m running spamassassin (SA) 3.4, postfix 3.9.0-1, and dovecot 2.2.36-8 on a linux server. I have some questions about SA that I can’t seem to find answers for on the web.

The SA conf files are /etc/mail/spamassassin. The bayes files are in /usr/local/etc/mail/spamassassin/bayes.

I’m running spamd as the content_filter in postfix. spamassassin unix -      n       n       -       -      pipe
    user=spamd argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}

Everything is working as expected, but I have some questions about permissions. Should spamd be the owner of /etc/mail/spamassassin? Of /usr/local/etc/mail/spamassassin?

Today I got a warning about the unsafe perms on sa-update-keys. Who should own those and what should the perms be?

Finally, I’m seeing this in my maillogs.
config: failed to parse line, skipping, in "/etc/mail/spamassassin/local.cf": bayes_

This is the config in local.cf: 
bayes_path /usr/local/etc/mail/spamassassin/bayes/bayes

This is the contents of the bayes folder:
# ls -lsah /usr/local/etc/mail/spamassassin/bayes/
total 632K
   0 drwxrwxr-x 2 spamd spamd   63 Jun 20 11:36 .
   0 drwxrwxr-x 3 spamd spamd   19 Jun 13 06:00 ..
 96K -rw------- 1 spamd spamd  95K Jun 20 14:44 bayes_journal
 12K -rwxrwxrwx 1 spamd spamd  12K Jun 20 11:32 bayes_seen
524K -rwxrwxrwx 1 spamd spamd 664K Jun 20 11:32 bayes_toks

spamd owns the directory /usr/local/etc/mail/spamassassin and all subdirectories. The perms are 775 for the directories and 777 for all files.  (I did this for testing purposes. They normally would be 755 and 644.) 

Spam that are not caught by SA are moved to my junk folder, and I croned a script that parses those and feeds them into bayes_seen. That script is working, and the bayes_seen file is being updated. (I checked the timestamp on the file after running the script manually.)

I can’t make sense out of this error message. What am I missing?

Paul Schmehl
[email protected]