You'd want to:

ls -ld /

ls -ld /var

ls -ld /var/www

l s-ld /var/www/nc_data

and make sure user www-data has at least read and execute permissions to the parent directories.

You probably have removed read and execute from other, so clamdscan can't go down in the

directory hierarchy to get to /var/www/nc_data/.

 

Regards, Scott

 

 

From: clamav-users [mailto:clamav-users-bounces@lists.clamav.net] On Behalf Of Doug Ingham
Sent: Tuesday, October 30, 2018 2:23 PM
To: clamav-users@lists.clamav.net
Subject: [External] [clamav-users] Clam user has read permissions, but I still get "lstat() failed: Permission denied"

 

Hi all,

 For some reason, clamdscan is returning a permissions error for files it has read access to.

I've copied some output below to help show the situation...

==============================================

root@arquivos0:/var/www# grep User /etc/clamav/clamd.conf
User clamav

root@arquivos0:/var/www# grep clamav /etc/group
www-data:x:33:clamav
clamav:x:121:

root@arquivos0:/var/www# ls -ld nc_data/
drwxrwx--- 59 www-data www-data 4096 Out 22 08:40 nc_data/

root@arquivos0:/var/www# clamdscan -v --config-file=/etc/clamav/clamd.conf nc_data/
/var/www/nc_data: lstat() failed: Permission denied. ERROR
----------- SCAN SUMMARY -----------
Infected files: 0
Total errors: 1
Time: 0.000 sec (0 m 0 s)

root@arquivos0:/var/www# sudo -u clamav ls nc_data/

[correct directory contents listed]


root@arquivos0:/var/www# ls -al /var/log/clamav/
total 20
drwxr-xr-x  2 clamav clamav    45 Out 30 12:29 .
drwxrwxr-x 16 root   syslog  4096 Out 30 15:41 ..
-rw-r-----  1 clamav adm    10914 Out 30 17:12 clamav.log
-rw-r-----  1 clamav adm     2352 Out 30 15:17 freshclam.log

root@arquivos0:/var/www# clamdscan -v --config-file=/etc/clamav/clamd.conf /var/log/clamav/
/var/log/clamav: lstat() failed: Permission denied. ERROR
----------- SCAN SUMMARY -----------
Infected files: 0
Total errors: 1
Time: 0.000 sec (0 m 0 s)
==============================================

To quote Aristotle, "WTF?"

 

Any help appreciated!


--

Doug