what? exim and ACL?

[puppetm]

Dec 14 04:05:19 [kernel] grsec: From 10.0.0.14: attempt to open /var/spool/mail/puppet.lock.kjamiz.puppet.nu.3dfa9fef.00005238 for writing by (exim:21048) UID(1000) EUID(1000), parent (exim:5866) UID(0) EUID(8)

and exim is in learning-mode...