/var/spool/mqueue problems

[Paul Mezzanini <paul mezzanini saintleo edu>]

Ok, this is really starting to bug me.  I recently built the new mail
server here.  Somewhere along the line I seem to have broken
/var/spool/mqueue.  Whenever any local user/process tries to send mail
(e.g. cron)  I get this error:

queuename: Cannot create "qfEAA03518" in "/var/spool/mqueue" (euid=9):
Permission denied

Now, I can fix it by making /var/spool/mqueue 777, but then I have this
nifty security hole there and newaliases yells at me about it to boot.

here is a ls -l of /var/spool  (I sure hope netscape mail does screw
this up)

[root omega spool]# ls -l
total 36
drwx------   3 daemon   daemon       1024 Apr 25 00:16 at
drwx------   2 root     root         1024 Apr 29 14:58 cron
drwxrwxr-x   2 root     daemon       1024 Apr 15 14:33 lpd
drwxrwxr-x   3 root     mail        23552 Apr 30 09:15 mail
drwxr-xr-x   2 root     root         4096 Apr 30 09:15 mqueue
drwxrwxr-x   7 news     news         1024 Apr 15 10:23 news
drwxr-xr-x   2 root     root         1024 May  5  1998 rwho
drwxrwxrwx   2 root     root         1024 Oct 12  1998 samba
drwxr-xr-x   2 uucp     root         1024 Sep 10  1998 uucp
drwxr-xr-x   2 uucp     root         1024 Sep 10  1998 uucppublic
[root omega spool]#

The only things broken is if a local user (as in local ON the machine
running, say, pine) tries to send mail, or any other locally generated
email.

sendmail works great on the box.. it actually is our live mail server
right now.

Ideas?
thx
paul