to better debug this I think you want to move the

fd.hasSafePermissions()

call here: https://github.com/osquery/osquery/blob/a9770451c527eba4cf321fe23c5306beff6ac20b/osquery/filesystem/filesystem.cpp#L527 outside the if, store the status and print

status.getMessage()

in VLOG(), because the function returns a message with the failure case, but it's currently ignored

Or PR a better error

yeah that was a following action since I do really want to be able to see all error messages 😄