Comment 2 for bug 1404762

Please add
    capability setgid,
to the clamd profile and re-enable it ("aa-enforce clamd").

If it still doesn't work, set it to complain mode ("aa-complain clamd") so that it permits everything and logs what would be denied. Then use clamd for a while and provide the clamd-related entries from /var/log/audit/audit.log.

You can also update the profile yourself using aa-logprof, and set the profile back to enforce mode with "aa-enforce clamd".