The dspam daemon does not honor the umask from the environment it inherits. See
src/daemon.c, line 133:
It sets the umask to 000, hence /var/run/dspam/dspam.sock is srwxrwxrwx, which can be undesirable.
The socket permissions should ideally be configurable via dspam.conf, but a quicker fix might be to use the inherited umask, making it up to the init script and hence the user/distro to provide the desired umask before starting dspam.