IBM Support

Security Enhanced Linux (SELinux) in enforcing mode interrupts with Rational Insight installation or use

Troubleshooting


Problem

Shared libraries needed for the installation and use of IBM Rational Insight fail to load if Security Enhanced Linux (SELinux) is in enforcing mode.

Symptom

A notification pops up on the top-right side of the Gnome GUI screen. Double-clicking the notification shows an SELinux log. Here is an example of the error summary:


    "SELinux is preventing sqlplus from loading /u01/app/oracle/product/11.2.0/dbhome_1/lib/libclntsh.so.11.1 which requires text relocation".

Errors occur during the execution of db2 (IBM DB2), sqlplus (Oracle), or java commands. These commands fail to execute only if SELinux is in enforcing mode.

Resolving The Problem

A suggested workaround is to set SELinux to permissive mode or disabled mode. In permissive mode, notifications still appear when the libraries are loaded which require text relocation. The commands, however, complete successfully. Use either of the following two ways to modify the SELinux level:

  • Console

    • $ setenforce 0

    Sets SELinux to permissive mode

  • GUI (Fedora Core and Red Hat)

    • $ system-config-securitylevel


To install and use Rational Insight with SELinux in enforcing mode, enable text relocation for the Rational Insight related libraries. Here are the steps:

Step 1: Before installing Rational Insight, run the following commands:

For the IBM Installation Manager JRE:



$ chcon -t textrel_shlib_t /opt/IBM/InstallationManager/eclipse/jre_5.0.3.sr8a_20080811b/jre/bin/classic/*

$ chcon -t textrel_shlib_t /opt/IBM/InstallationManager/eclipse/jre_5.0.3.sr8a_20080811b/jre/bin/*

Where /opt/IBM/InstallationManager is the default installation directory for Installation Manager.

For DB2:

$ chcon -t textrel_shlib_t /opt/ibm/db2/V9.5/bin/routine/*
$ chcon -t textrel_shlib_t /opt/ibm/db2/V9.5/lib32/*
$ chcon -t textrel_shlib_t /opt/ibm/db2/V9.5/lib64/*
$ chcon -t textrel_shlib_t /opt/ibm/db2/V9.5/function/unfenced/*
$ chcon -t textrel_shlib_t /opt/ibm/db2/V9.5/security64/plugin/IBM/server/*
$ chcon -t textrel_shlib_t /opt/ibm/db2/V9.5/security64/plugin/IBM/group/*
$ chcon -t textrel_shlib_t /opt/ibm/db2/V9.5/security64/plugin/IBM/client/*
$ chcon -t textrel_shlib_t /opt/ibm/db2/V9.5/itma/JRE/lx8266/bin/*
        Notes:
        • /opt/ibm/db2/V9.5 is the default installation directory for DB2 version 9.5.
        • lib32 applies to both 32-bit and 64-bit systems.
        • lib64 applies to only 64-bit systems.
        • security64 applies to only 64-bit systems. Use security32 on 32-bit systems.

For Oracle server:

$ chcon -t textrel_shlib_t /u01/app/oracle/product/11.2.0/dbhome_1/lib/*

Where /u01/app/oracle/product/11.2.0/dbhome_1 is the default installation directory of Oracle 11g.

Step 2: After installing Rational Insight, run the following commands:

$ chcon -t textrel_shlib_t /opt/ibm/RationalInsight/etl/odbc/lib/*
$ chcon -t textrel_shlib_t /opt/ibm/RationalInsight/cognos/bin/*


Where /opt/ibm/RationalInsight is the default installation directory of Rational Insight 1.0.1.

[{"Product":{"code":"SSRL5J","label":"Rational Insight"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"Installation","Platform":[{"code":"PF016","label":"Linux"}],"Version":"1.0.1","Edition":"All Editions","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
16 June 2018

UID

swg21454550

Page Feedback