Installing with Security-Enhanced Linux

If Security-Enhanced Linux® (SELinux) is enabled, you must either disable it or change the security context of the Java™ Runtime Environments (JREs) that are used for installing and running the server to allow text relocation.

• To disable SELinux, complete one of these procedures:
  1. From the windowing system, follow these steps:
     1. Click System > Administration > Security Level and Firewall.
     2. Click the SELinux tab.
     3. Change the SELinux setting to Disabled.
     4. Click OK to save the new setting.
  2. From the command line, follow these steps:
     1. Run the setup command: /usr/bin/setup.
     2. Select Firewall Configuration and press Enter.
     3. Use the Tab and Arrow keys to change the SELinux to Disabled.
     4. Click OK and press Enter.
• To change the security context of the JREs:
  1. If you are installing directly from DVD media; skip to step 2. Otherwise, change the security context of the installation JRE.
     1. In the installation files directory, locate the jre directory, for example, im/linux.gtk.x86/jre_7.0.100035.20181115_1352/jre. If you extracted the installation files to the /tmp/jts then the directory jre is located at /tmp/jts/linux.gtk.x86/jre_7.0.100035.20181115_1352/jre.
     2. Run the command chcon -R -t textrel_shlib_t against the jre directory. This command recursively processes the files and allows text relocation. For example, if you extracted the installation files to the /tmp/rtc directory, run this command:

     chcon -R -t textrel_shlib_t /tmp/rtc/linux.gtk.x86/jre_7.0.100035.20181115_1352/jre

  2. Install Jazz® Team Server, the Engineering Workflow Management client and connectors, but do not start them.
  3. Before you start Jazz Team Server, you must change the security context of the product JREs. For each product that you install, run the same command (chcon -R -t textrel_shlib_t) with the appropriate product-specific JRE directory. The list of default directories follows.
     Note: The list includes the default paths if you installed the product as user root. If you installed as a non-root user, look for these directories inside an opt/IBM structure in the installation home directory for that user.

     • IBM® Installation Manager:
       • /opt/IBM/InstallationManager/eclipse/jre_7.0.100035.20181115_1352/jre
     • Jazz Team Server:
       • /opt/IBM/JazzTeamServer/server/jre
     • Engineering Workflow Management - Client: (run chcon on all four directories)
       • /opt/IBM/TeamConcert/jdk/bin
       • /opt/IBM/TeamConcert/jdk/lib
       • /opt/IBM/TeamConcert/jdk/jre/bin
       • /opt/IBM/TeamConcert/jdk/jre/lib
     • Engineering Workflow Management - Build System Toolkit:
       • not applicable (no JRE included)
     • Engineering Workflow Management - ClearCase Synchronizer: (run chcon on all four directories)
       • /opt/IBM/ClearCaseSynchronizer/jdk/bin
       • /opt/IBM/ClearCaseSynchronizer/jdk/lib
       • /opt/IBM/ClearCaseSynchronizer/jdk/jre/bin
       • /opt/IBM/ClearCaseSynchronizer/jdk/jre/lib
     • Engineering Workflow Management - ClearQuest® Synchronizer:
       • /opt/IBM/ClearQuestSynchronizer/gateway/linux/ibm-java2-i386-50/jre