[CentOS] trying to get amavid to work on centos 7

hey folks, trying to migrate my faithful old centos6 server over to centos 7 and as part of my email server,
I have amavisd, clamd, postfix, etc..
The amavisd seems to be failing with some funky (systemd) error.. 

Mar  6 11:39:03 monster-new systemd: amavisd.service failed.
Mar  6 11:39:03 monster-new systemd: amavisd.service holdoff time over, scheduling restart.
Mar  6 11:39:03 monster-new systemd: Cannot add dependency job for unit firewalld.service, ignoring: Unit firewalld.service is masked.
Mar  6 11:39:03 monster-new systemd: Starting Amavisd-new is an interface between MTA and content checkers....
Mar  6 11:39:03 monster-new amavisd: Error reading config file "/etc/amavisd/amavisd.conf": Permission denied at /usr/sbin/amavisd line 2163.
Mar  6 11:39:03 monster-new systemd: amavisd.service: control process exited, code=exited status=13
Mar  6 11:39:03 monster-new systemd: Failed to start Amavisd-new is an interface between MTA and content checkers..
Mar  6 11:39:03 monster-new systemd: Unit amavisd.service entered failed state.

yes, I did shut off the new-fangled firewalld so that I can use iptables the way I'm to.. 
sooo what should I do to make amavisd behave? 

Jason