I've lost it -- sorry for bleating for urgent help. Slight panic, can't remember what to do:
in /etc/clamd.conf and /etc/freshclam.conf the user/database owner is usually "root" when you have asl installed.
These files get created via a template in /var/asl/data/templates/template-freshclam|clamd.conf
For both user an database owner, there's a @@USER@@ placeholder.
Where the heck does that @@USER@@ data come from? On one of my systems, it has become qscand when it should be root, and this is causing problems as the owner of the logs, tmp and so on is going wrong and I'm having lots of problems.
I've had a look in /etc/asl/config but I can't find anything obvious.
It appears to be fine on another system, with everyting owned by root.