Clamav doesn't scan mails: ERROR: Could not connect to clamd on LocalSocket /run/clamd.scan/clamd.sock: Permission denied

SYSTEM INFORMATION
OS type and version AlmaLinux 10.2
Virtualmin version 8.3 pro

In the procmail.log file I find the message ERROR: Could not connect to clamd on LocalSocket /run/clamd.scan/clamd.sock: Permission denied
before every processed email. I have read some earlier posts about this problem, but I can’t yet really figure out what isn’t right. The file clamd.sock exists, and it should be accessible:

# ls -al /run/clamd.scan 
insgesamt 0 
drwxr-xr--  2 clamscan virusgroup   60 17. Okt 14:02 **.** 
drwxr-xr-x 55 root     root       1400 17. Okt 14:54 **..** 
srw-rw-rw-  1 clamscan clamscan      0 17. Okt 14:02 **clamd.sock**

Looking at it, it seems to me the access rights are too extensive, but maybe this is the way it should be. I’m not familiar with the requirements for the socket. But according to this, the error message doesn’t make sense, because there are sufficient access rights.

The status of clamd@scan is ok (“loaded” and “active”), the status of clamd@service is “loaded” and “inactive”. What else do I miss?