IMHO that is a bugwith "bayes_auto_learn 0" there is no reason to lock the bayes database and the spamd-service should be happy with "ReadOnlyDirectories=/var/lib"
training and sa-update is done on a shell independent of network aware services
Jan 27 02:52:58 testserver spamd[2794]: bayes: cannot write to /var/lib/spamass-milter/.spamassassin/bayes_journal, bayes db update ignored: Read-only file system Jan 27 02:52:58 testserver spamd[2794]: spamd: clean message (0.5/5.5) for sa-milt:189 in 0.5 seconds, 804 bytes. Jan 27 02:52:58 testserver spamd[2794]: spamd: result: . 0 - ALL_TRUSTED,BAYES_50,T_RP_MATCHES_RCVD scantime=0.5,size=804,user=sa-milt,uid=189,required_score=5.5,rhost=localhost,raddr=127.0.0.1,rport=20782,mid=<54c6ef78.8090...@testserver.rhsoft.net>,bayes=0.499990,autolearn=disabled
signature.asc
Description: OpenPGP digital signature
