A strange question: 1) Process /usr/sbin/clamd run with user qscand # ps -fe |grep clamd qscand 32117 1 0 19:19 ? 00:00:00 /usr/sbin/clamd 2) User "qscand" have this ID: # id qscand uid=111(qscand) gid=111(qscand) gruppi=111(qscand),46(clamav) 3) the log file have this permission: # ll /var/log/clamav/clamd.log -rw-r----- 1 clamav clamav 2581 14 set 19:19 /var/log/clamav/clamd.log 4) When i restart the process the message logs enter in to clamd.log file # date mar set 14 19:33:58 CEST 2004 # service clamd restart Stopping Clam AV daemon: [ OK ] Starting Clam AV daemon: [ OK ] # tail -1 /var/log/clamav/clamd.log Tue Sep 14 19:34:02 2004 -> Self checking every 3600 seconds. Question: How can the process /usr/sbin/clamd write in this file??? On RedHat 9 the process it does not succeed to write in to file clamd.log since i do a "chmod g+w clamd.log" Please .... some suggest... Many thanks -- Dario Lesca <d.lesca@xxxxxxxxxx>