I have a symlink at /etc/elasticsearch/analysis that points to a mounted drive at /elasticdata/fileshare/analysis on Ubuntu 16.04 LTS Azure VM. When I try and start elasticsearch I am getting the following permissions error:

Caused by: java.security.AccessControlException: access denied ("java.io.FilePermission" "/etc/elasticsearch/analysis" "read")

The mounted drive has the following permissions:
drwxrwxrwx 2 elasticsearch elasticsearch 0 May 22 22:44 analysis

The symlink has the following permissions:

lrwxrwxrwx 1 elasticsearch elasticsearch    43 May 22 22:49 analysis -> /elasticdata/fileshare/analysis/

TLDR: Symlink is owned by elasticsearch user and group with what seems to be read permissions, yet I still get read permission error on elasticsearch startup.

How can I resolve this permissions error?


here are permissions for each step in the path:

/etc => drwxr-xr-x
/etc/elasticsearch => drwxr-S---
/etc/elasticsearch/analysis => lrwxrwxrwx
/elasticdata => drwxrwxrwx
/elasticdata/fileshare => drwxrwxrwx
/elasticdata/fileshare/analysis => drwxrwxrwx
  • can you share mount output for that partition with lsattr output on that dir?
    – asktyagi
    Commented May 29, 2019 at 16:59

1 Answer 1


You need to verify the permissions for each step in the path, as well es the destination of the symlink:

  • see edit please
    – Joe
    Commented May 28, 2019 at 19:39
  • The permissions for /etc/elasticsearch are strange but would work if the owner is elasticsearch. Another possible cause my be something like AppArmor or something similar restricting access.
    – RalfFriedl
    Commented May 28, 2019 at 20:28
  • owner is indeed elasticsearch for /etc/elasticsearch. still no luck though
    – Joe
    Commented May 28, 2019 at 20:30

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .