spamassassin-4.0.1-bp160.1.14

- fix iXhash2-meta-rules.patch

- update to patch release version 4.0.1
  - Incompatibilities with some versions of perl and some perl modules
    that have been released since the release of SpamAssassin 4.0.0
  - Problems using cpan to install SpamAssassin when certain required
    or optional modules are not already installed
  - Support for space characters in the path name of some executables
    used by certain plugins
  - Improved handling of URL shortener link redirects
  - Improved TxRep locking management
  - Added Mail::SpamAssassin::Plugin::AuthRes plugin to use
    Authentication-Results header fields in other plugins
  - Added a Pyzor Perl implementation
  - Perl crash when certain uri_detail rules processed some messages
    with UTF-8 characters
  - Inconsistent handling of newlines in header rules
  - Text or HTML content placed in octet-stream attachments by
    spammers to bypass SpamAssassin scanning
  - Implemented TCP fallback for truncated DNS UDP replies
- Refresh patch-URIDNSBL
- Drop undocumented patch-SQL_ASCII_SORT breaking sqlite
- Drop most of iXhash2-meta-rules.patch (additional services no longer exist)

- Use %patch -P N instead of deprecated %patchN.

- Remove the dependency on perl(IO::Socket::INET6) as it has been
  deprecated by upstream, is no longer suitable for use and its not
  being maintained. A compatible replacement for this package is
  perl(IO::Socket::IP) which is shipped by the perl-base package.

- Add BuildRequires Text::Diff that was accidentally removed from
  original submission
- Update known warnings
  % spamassassin-rpmlintrc

- Update to spamassissin 4.0.0:
  * Notable internal changes:
  - Meta rules no longer use priority values, they are evaluated
    dynamically when the rules they depend on are finished
  - DNS and other asynchronous lookups like DCC or Razor2 plugins
    are now launched when priority -100 is reached. This allows
    short circuiting at lower priority without sending unneeded
    DNS queries
  - New internal Mail::SpamAssassin::GeoDB module supporting
    RelayCountry and URILocalBL plugins provides a unified
    interface to Geographic IP modules. These include:
    MaxMind::DB::Reader (GeoIP2)
    Geo::IP
    IP::Country::DB_File
    IP::Country::Fast.
  * New plugins:
  - Mail::SpamAssassin::Plugin::ExtractText
  - Mail::SpamAssassin::Plugin::DMARC
  - Mail::SpamAssassin::Plugin::DecodeShortURLs
  * HashCash module has been removed completely
  * Full detailed changelog:
    https://svn.apache.org/repos/asf/spamassassin/trunk/Changes
- Update to iXhash2 4.00:
  * Minimum required version: SpamAssassin 4.0.0
- Update to spampd 2.61:
  * Performance and diagnostic improvements, quicker startups, and
    a lot of documentation updates.
  * Add support for configuration files (examples included in /misc
    folder and in POD).
  * Add optional "scalable mode" using Net::Server::PreFork module
    (16-year TODO!). More info in POD.
  * Add --logfile option to control logging destination(s) (syslog,
    stderr, and/or file/device).
  * Add --logident, --logfacility options for syslog.
  * Add multiple levels of help, including full "man" output with
    optional HTML formatting.
  * Add --show <thing> argument for printing default option values
    and other debug.
  * Fix SpamAssassin debug logging with versions 3.1+ (output
    was going to stderr/wrong syslog/null).
  * Fix for IPv6 addresses being used on --host and --relayhost
    options (was not possible due to ":<port>" check).
  * SIGHUP will now reload SpamAssassin and SpamPD configuration files
    (and all module code), still with graceful child process shutdown.
  * Use SpamAssassin::Logger module (with SA 3.1+) for all logging.
  * Log to stderr by default if running non-daemonized
  * Child processes are now renamed to "spampd child"
    to distinguish them from the parent in task lists.
  * Now requires Net::Server v0.89+ (though latest 2.009 is recommended).
  * The --auto-whitelist option is no longer allowed with SpamAssassin v3+.
  * Improve --debug option, adding ability to specify
    SpamAssassin (v3.1+) debug areas (aka channels/facilities).
  * All boolean options can take 0/1 argument and be negated
    with "no-" prefix.
  * The --children (-c) option is now more formally named
  - -max-servers (-mxs), but still accepted.
  * IO::Socket::UNIX and ::IP are only required if actually
    needed for --relaysocket / --relayhost options.

- Drop ProtectHome from spamd.service and spampd.service. Unfortunately
  spamassing writes there, so ProtectHome=read-only doesn't work.
  Whitelisting a specific part has a too high chance of breaking for
  this package (bsc#1193248)

- Set ProtectHome=false for spampd.service, as this breaks loading
  and storing data files in /home/vscan.

- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * spamd.service
  * spampd.service

- spamassassin: sa-update.timer does not work
  (bsc#1175375)
  Remove sence less SPAM_SA_UPDATE
  Document how to use sa-update.service