Yomi sandbox: sandbox force_actions rule disables existing config

[nrauso]

The nethserver-yomi package installation overrides the force_actions rules in rspamd introduced with the #6665 issue.
This behavior disables the actions used by rspamd to reject e-mails from blacklisted senders and to temporary reject e-mails for which ClamAV scan fails.
This happens because we use a file into override.d path of rspamd to configure the Yomi Sandbox rule and, as stated into the rspamd documenation, this override completely the default force_actions configuration.
We need to move the Yomi Sendbox rule into the local.d/force_actions.conf template to merge it with the existing ones.

Steps to reproduce

• Install E-mail server from Software Center;
• Check the active force_actions rules in rspamd using the command:
  rspamadm configdump force_actions
• Install Yomi Sandbox package (nethserver-yomi) on the same server;
• Check again the active force_actions rules in rspamd:
  rspamadm configdump force_actions

Expected behavior

There should be 3 force_actions rules: REJECT_FROM_BLACKLIST, CLAM_VIRUS_FAIL, YOMI_FAIL

Actual behavior

Only YOMI_FAIL rule is present.

Components

nethserver-mail-filter-2.32.1-1.ns7.noarch
nethserver-yomi-2.2.1-1.ns7.noarch

[nrauso]

We could remove the /etc/rspamd/override.d/force_actions.conf static file and add a fragment to the /etc/rspamd/local.d/force_actions.conf template, for example:

cat /etc/e-smith/templates/etc/rspamd/local.d/force_actions.conf/40YOMI_SOFTREJECT
    YOMI_FAIL \{
        action = "soft reject";
        message = "Yomi cannot validate the message now. Try again later";
        expression = "YOMI_FAIL";
    \}

[nethbot]

in 7.9.2009/nethesis-testing:

• nethserver-yomi-2.2.1-1.3.g07b5624.ns7.noarch.rpm x86_64

[nrauso]

test: VERIFIED

[nethbot]

in 7.9.2009/nethesis-updates:

• nethserver-yomi-2.2.2-1.ns7.noarch.rpm x86_64