Also, you probably need to set AllowSupplementaryGroups in your clamd.conf file: AllowSupplementaryGroups BOOL Initialize a supplementary group access (the process must be started by root). Default: no Paul.