$ getenforce Permissive $ grep User /etc/clamd.conf User root $ clamdscan /home/centos: OK ----------- SCAN SUMMARY ----------- Infected files: 0 Time: 0.055 sec (0 m 0 s) $ sudo cat /var/log/audit/audit.log | grep type=AVC type=AVC msg=audit(1348152119.154:72): avc: denied { search } for pid=1362 comm="clamd" name="home" dev=dm-0 ino=261634 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir type=AVC msg=audit(1348152119.154:72): avc: denied { getattr } for pid=1362 comm="clamd" path="/home/centos" dev=dm-0 ino=262466 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir type=AVC msg=audit(1348152119.154:73): avc: denied { read } for pid=1362 comm="clamd" name="centos" dev=dm-0 ino=262466 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir type=AVC msg=audit(1348152119.154:73): avc: denied { open } for pid=1362 comm="clamd" name="centos" dev=dm-0 ino=262466 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir type=AVC msg=audit(1348152119.154:74): avc: denied { search } for pid=1362 comm="clamd" name="centos" dev=dm-0 ino=262466 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir type=AVC msg=audit(1348152119.154:74): avc: denied { getattr } for pid=1362 comm="clamd" path="/home/centos/.ssh" dev=dm-0 ino=262470 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=dir type=AVC msg=audit(1348152119.155:75): avc: denied { read } for pid=1362 comm="clamd" name=".bash_profile" dev=dm-0 ino=262467 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file type=AVC msg=audit(1348152119.155:76): avc: denied { open } for pid=1362 comm="clamd" name=".bash_profile" dev=dm-0 ino=262467 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file type=AVC msg=audit(1348152119.207:77): avc: denied { read } for pid=1362 comm="clamd" name=".ssh" dev=dm-0 ino=262470 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=dir type=AVC msg=audit(1348152119.207:77): avc: denied { open } for pid=1362 comm="clamd" name=".ssh" dev=dm-0 ino=262470 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=dir type=AVC msg=audit(1348152119.207:78): avc: denied { search } for pid=1362 comm="clamd" name=".ssh" dev=dm-0 ino=262470 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=dir