[clamav-users] Clam user has read permissions, but I still get "lstat() failed: Permission denied"

[Scott Kitterman]

Apparmor/SE Linux is another possibility.

Scott K

On October 30, 2018 9:29:28 PM UTC, SCOTT PACKARD <Scott.Packard at raytheon.com> wrote:
>You'd want to:
>ls -ld /
>ls -ld /var
>ls -ld /var/www
>l s-ld /var/www/nc_data
>and make sure user www-data has at least read and execute permissions
>to the parent directories.
>You probably have removed read and execute from other, so clamdscan
>can't go down in the
>directory hierarchy to get to /var/www/nc_data/.
>
>Regards, Scott
>
>
>From: clamav-users [mailto:clamav-users-bounces at lists.clamav.net] On
>Behalf Of Doug Ingham
>Sent: Tuesday, October 30, 2018 2:23 PM
>To: clamav-users at lists.clamav.net
>Subject: [External] [clamav-users] Clam user has read permissions, but
>I still get "lstat() failed: Permission denied"
>
>Hi all,
>For some reason, clamdscan is returning a permissions error for files
>it has read access to.
>I've copied some output below to help show the situation...
>
>==============================================
>root at arquivos0:/var/www# grep User /etc/clamav/clamd.conf
>User clamav
>
>root at arquivos0:/var/www# grep clamav /etc/group
>www-data:x:33:clamav
>clamav:x:121:
>
>root at arquivos0:/var/www# ls -ld nc_data/
>drwxrwx--- 59 www-data www-data 4096 Out 22 08:40 nc_data/
>
>root at arquivos0:/var/www# clamdscan -v
>--config-file=/etc/clamav/clamd.conf nc_data/
>/var/www/nc_data: lstat() failed: Permission denied. ERROR
>----------- SCAN SUMMARY -----------
>Infected files: 0
>Total errors: 1
>Time: 0.000 sec (0 m 0 s)
>root at arquivos0:/var/www# sudo -u clamav ls nc_data/
>[correct directory contents listed]
>
>root at arquivos0:/var/www# ls -al /var/log/clamav/
>total 20
>drwxr-xr-x  2 clamav clamav    45 Out 30 12:29 .
>drwxrwxr-x 16 root   syslog  4096 Out 30 15:41 ..
>-rw-r-----  1 clamav adm    10914 Out 30 17:12 clamav.log
>-rw-r-----  1 clamav adm     2352 Out 30 15:17 freshclam.log
>
>root at arquivos0:/var/www# clamdscan -v
>--config-file=/etc/clamav/clamd.conf /var/log/clamav/
>/var/log/clamav: lstat() failed: Permission denied. ERROR
>----------- SCAN SUMMARY -----------
>Infected files: 0
>Total errors: 1
>Time: 0.000 sec (0 m 0 s)
>==============================================
>To quote Aristotle, "WTF?"
>
>Any help appreciated!
>
>--
>Doug