https://bugzilla.redhat.com/show_bug.cgi?id=1177819
--- Comment #1 from Peter Bieringer pb@bieringer.de --- Update on that issue: it will not happen using a VM inside VirtualBox...also the shown URL points to a Strato vServer (which is also here the case).
Can it be that the issue is cased by Parallels Virtuozzo?
# uname -r -v -m 3.10.0-042stab092.3 #1 SMP Sun Jul 20 13:27:24 MSK 2014 x86_64
Also a grep -r shows that amavisd is currently the only one which defines in systemd config the "NoNewPrivileges" parameter - no other service does this so far.
# LANG=C grep NoNewPrivileges /usr/lib/systemd/* -r /usr/lib/systemd/system/amavisd-clean-tmp.service:NoNewPrivileges=true /usr/lib/systemd/system/amavisd.service:NoNewPrivileges=true /usr/lib/systemd/system/amavisd-clean-quarantine.service:NoNewPrivileges=true Binary file /usr/lib/systemd/systemd matches
BTW: also the amavisd-clean-tmp.service is claiming:
Jan 3 18:23:01 *** tmpwatch[720]: Failed at step NO_NEW_PRIVILEGES spawning /usr/sbin/tmpwatch: Invalid argument Jan 3 18:23:01 *** tmpwatch[719]: Failed at step NO_NEW_PRIVILEGES spawning /usr/sbin/tmpwatch: Invalid argument