Spamassasin running as root!

[lyd mc]

Hi guys,

My maillog complain like this:

Jul 25 09:40:06 MAIL spamd[67623]: spamd: still running as root: user not specified with -u, not found, or set to root, falling back to nobody

Jul 25 09:40:13 MAIL spamd[67623]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /nonexistent/.spamassassin/auto-whitelist.lock.MAIL.67623 for /nonexistent/.spamassassin/auto-whitelist.lock: No such file or directory

I google it and found out that i need to run spamd with '-u <user>' flag.

>From BSD guide website spamd has a flag of  '-u qscand'. However, there is no detail on how the qscand user has been created.

How to create a user for spamd correctly or securely?