Starting clamd.exim: ERROR: Can't open /var/log/clamd.exim in append mode (check permissions!). ERROR: Problem with internal logger. Please check the permissions on the /var/log/clamd.exim file. type=AVC msg=audit(1213004173.692:15501): avc: denied { append } for pid=31721 comm="clamd.exim" name="clamd.exim" dev=dm-1 ino=1802252 scontext=unconfined_u:system_r:clamd_t:s0 tcontext=unconfined_u:object_r:var_log_t:s0 tclass=file type=SYSCALL msg=audit(1213004173.692:15501): arch=40000003 syscall=5 success=no exit=-13 a0=9def3e0 a1=441 a2=1b6 a3=440 items=0 ppid=31720 pid=31721 auid=0 uid=93 gid=93 euid=93 suid=93 fsuid=93 egid=93 sgid=93 fsgid=93 tty=pts2 ses=135 comm="clamd.exim" exe="/usr/sbin/clamd" subj=unconfined_u:system_r:clamd_t:s0 key=(null) Advice on how I should fix this would be welcome. I'm not wonderfully happy with how clamd works for various uses, including exim.
restorecon -R -v /var/log Something recreated this file with the wrong context. Not sure what did it but this will fix for now.