Missing link causes "no read permission" in file analysis

[Jose]

I just installed autopsy and sleuthkit to analyse a disk image, but couldn't view contents of any file as it always prompted "no read permission".

I found this link [1] which tells you to make a symlink to the icat binary to make it work:

ln -s /usr/bin/icat /usr/bin/icat-sleuthkit

After I created the symlink I was able to see all file contents.

Either a symlink must be created when autopsy is installed or autopsy code must be modified to look for the correct binary.

This happened in a fresh Ubuntu 16.04.1 LTS Mate computer after installing autopsy 2.24-1.1 and sleuthkit 4.2.0-3.

Thanks.

[1] http://www.dacodam.com/imaging-a-hard-disk-drive-using-kali-linux/

[Jose (jovimon)]

Also happened with mactime when trying to create a timeline:
sh: 1: /usr/bin/mactime-sleuthkit: not found

Solution: sudo ln -s /usr/bin/mactime /usr/bin/mactime-sleuthkit

[Launchpad Janitor (janitor)]

This bug was fixed in the package autopsy - 2.24-3

---------------
autopsy (2.24-3) unstable; urgency=medium

  * QA upload.
  * debian/control:
      - Added Homepage field.
  * debian/copyright:
      - Update to format standard machine-readable.
      - Updated file.
  * debian/patches:
      - Disabled the 02-sleuthkit.patch because this patch broken the
        path the Sleuthkit commands: ils, icat and mactime.
        (LP: #1482976, LP: #1645312)

 -- Marcio de Souza Oliveira <email address hidden> Fri, 16 Jun 2017 04:09:53 +0000

[Timothy (timothy-wong)]

This happens to me too even in Autopsy 2.24-3. The normal files can be read, but the deleted files still have the "no read permission" error. Is it meant to be this way?