I've come to the preliminary conclusion that this is a problem with --lint only. I'm not seeing any complaints from clamd in warn unless I do a -- lint. --lint must be setting ownership/permisssions slightly different from the worker code - e.g. it's a bug in the --lint code. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com