[clamav-users] Clam user has read permissions, but I still get "lstat() failed: Permission denied"

[Pierre Dehaen]

Hi,

I would try:

# ps -ef | grep clamd
==> see owner (as you are running clamdscan): if it is not clamav it means there is another 
config file or an option in the startup procedure...

# sudo -u clamav clamscan -v --config-file=/etc/clamav/clamd.conf nc_data/
==> it should work as we are running as clamav

# strace -o /tmp/strace.out -fp "`pgrep clamd`" &
# clamdscan -v --config-file=/etc/clamav/clamd.conf nc_data/
# kill %1
# more /tmp/strace.out
==> analyze

Pierre

On 30 Oct 2018 at 18:22, Doug Ingham wrote:

Hi all,
For some reason, clamdscan is returning a permissions error for files it has read access to.

I've copied some output below to help show the situation...

==============================================
root at arquivos0:/var/www# grep User /etc/clamav/clamd.conf
User clamav 

root at arquivos0:/var/www# grep clamav /etc/group
www-data:x:33:clamav
clamav:x:121:

root at arquivos0:/var/www# ls -ld nc_data/
drwxrwx--- 59 www-data www-data 4096 Out 22 08:40 nc_data/

root at arquivos0:/var/www# clamdscan -v --config-file=/etc/clamav/clamd.conf nc_data/
/var/www/nc_data: lstat() failed: Permission denied. ERROR
----------- SCAN SUMMARY -----------
Infected files: 0
Total errors: 1
Time: 0.000 sec (0 m 0 s) 

root at arquivos0:/var/www# sudo -u clamav ls nc_data/
[correct directory contents listed]

root at arquivos0:/var/www# ls -al /var/log/clamav/
total 20
drwxr-xr-x 2 clamav clamav 45 Out 30 12:29 .
drwxrwxr-x 16 root syslog 4096 Out 30 15:41 ..
-rw-r----- 1 clamav adm 10914 Out 30 17:12 clamav.log
-rw-r----- 1 clamav adm 2352 Out 30 15:17 freshclam.log

root at arquivos0:/var/www# clamdscan -v --config-file=/etc/clamav/clamd.conf 
/var/log/clamav/
/var/log/clamav: lstat() failed: Permission denied. ERROR
----------- SCAN SUMMARY -----------
Infected files: 0
Total errors: 1
Time: 0.000 sec (0 m 0 s)
==============================================

To quote Aristotle, "WTF?"

Any help appreciated!

-- 
Doug













-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.clamav.net/pipermail/clamav-users/attachments/20181031/237d6970/attachment.htm>