Apparmor/SE Linux is another possibility. Scott K
On October 30, 2018 9:29:28 PM UTC, SCOTT PACKARD <[email protected]> wrote: >You'd want to: >ls -ld / >ls -ld /var >ls -ld /var/www >l s-ld /var/www/nc_data >and make sure user www-data has at least read and execute permissions >to the parent directories. >You probably have removed read and execute from other, so clamdscan >can't go down in the >directory hierarchy to get to /var/www/nc_data/. > >Regards, Scott > > >From: clamav-users [mailto:[email protected]] On >Behalf Of Doug Ingham >Sent: Tuesday, October 30, 2018 2:23 PM >To: [email protected] >Subject: [External] [clamav-users] Clam user has read permissions, but >I still get "lstat() failed: Permission denied" > >Hi all, >For some reason, clamdscan is returning a permissions error for files >it has read access to. >I've copied some output below to help show the situation... > >============================================== >root@arquivos0:/var/www# grep User /etc/clamav/clamd.conf >User clamav > >root@arquivos0:/var/www# grep clamav /etc/group >www-data:x:33:clamav >clamav:x:121: > >root@arquivos0:/var/www# ls -ld nc_data/ >drwxrwx--- 59 www-data www-data 4096 Out 22 08:40 nc_data/ > >root@arquivos0:/var/www# clamdscan -v >--config-file=/etc/clamav/clamd.conf nc_data/ >/var/www/nc_data: lstat() failed: Permission denied. ERROR >----------- SCAN SUMMARY ----------- >Infected files: 0 >Total errors: 1 >Time: 0.000 sec (0 m 0 s) >root@arquivos0:/var/www# sudo -u clamav ls nc_data/ >[correct directory contents listed] > >root@arquivos0:/var/www# ls -al /var/log/clamav/ >total 20 >drwxr-xr-x 2 clamav clamav 45 Out 30 12:29 . >drwxrwxr-x 16 root syslog 4096 Out 30 15:41 .. >-rw-r----- 1 clamav adm 10914 Out 30 17:12 clamav.log >-rw-r----- 1 clamav adm 2352 Out 30 15:17 freshclam.log > >root@arquivos0:/var/www# clamdscan -v >--config-file=/etc/clamav/clamd.conf /var/log/clamav/ >/var/log/clamav: lstat() failed: Permission denied. ERROR >----------- SCAN SUMMARY ----------- >Infected files: 0 >Total errors: 1 >Time: 0.000 sec (0 m 0 s) >============================================== >To quote Aristotle, "WTF?" > >Any help appreciated! > >-- >Doug _______________________________________________ clamav-users mailing list [email protected] http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/contact.html#ml
