Comment 5 for bug 1404762

some further info:
I now have installed auditd to have the log in /var/log/audit/audit.log.
I added to usr.bin.clamd:
  capability setgid,
  capability setuid,
and used aa-logprof to add some more items:
  capability chown,
  capability dac_override,
  capability fsetid,
  capability sys_admin,
But, after reload apparmor, aa-enforce clamd, and restart clamd
I still have "ERROR: initgroups() failed" at clamd start.
It still needs aa-complain clamd to successfully start clamd