/usr/bin/lockfile in procmail is setgid root, should be setgid mail
Don't touch the restrict checkboxes if you don't know what they mean.
Net-Mail, what's the status here?
This is fixed in procmail-3.22-r9.