Strange question on file permission

[Dario Lesca]

A strange question:

1) Process /usr/sbin/clamd run with user qscand
# ps -fe |grep clamd
qscand   32117     1  0 19:19 ?        00:00:00 /usr/sbin/clamd

2) User "qscand" have this ID:
# id qscand
uid=111(qscand) gid=111(qscand) gruppi=111(qscand),46(clamav)

3) the log file have this permission:
# ll /var/log/clamav/clamd.log
-rw-r-----  1 clamav clamav 2581 14 set 19:19 /var/log/clamav/clamd.log

4) When i restart the process the message logs enter in to clamd.log
file
# date
mar set 14 19:33:58 CEST 2004
# service clamd restart
Stopping Clam AV daemon:                                   [  OK  ]
Starting Clam AV daemon:                                   [  OK  ]
# tail -1 /var/log/clamav/clamd.log
Tue Sep 14 19:34:02 2004 -> Self checking every 3600 seconds.

Question: How can the process /usr/sbin/clamd write in this file???

On RedHat 9 the process it does not succeed to write in to file
clamd.log since i do a "chmod g+w clamd.log"

Please .... some suggest...

Many thanks

-- 
Dario Lesca <d.lesca at solinos.it>