Installing Rational workbench for CLM with Security-Enhanced Linux

If Security-Enhanced Linux® (SELinux) is enabled, you must either disable it or change the security context of the Java™ Runtime Environments (JREs) used for installing and running Rational Team Concert™ to allow text relocation.

About this task

If you have setup a machine for the sole purpose of evaluating Rational workbench for Collaborative Lifecycle Management and the SELinux features are not important to you, then the easiest way to proceed is to disable SELinux.

Note:

SELinux is installed and enabled by default on Red Hat Enterprise Linux 5.
SELinux is not installed on Suse Linux Enterprise Server 10 or Suse Linux Enterprise Desktop 10.

Procedure

To disable SELinux do one of the following:
1. From the windowing system:
  1. Select System > Administration > Security Level and Firewall.
  2. Switch to the SELinux tab.
  3. Change the SELinux setting to Disabled.
  4. Click OK to save the new setting.
2. From the command line:
  1. Run the "setup" command (this is /usr/bin/setup)
  2. Select Firewall Configuration and press Enter
  3. Use the Tab and arrow keys to change the SELinux to Disabled
  4. Select OK and press Enter
To change the security context of the JREs:
1. If you are installing directly from DVD media; skip to step 2. Otherwise, change the security context of the installation JRE.
  1. In the installation files directory, locate the jre directory, for example, linux/jre_5.0.2.sr5_20070511/jre. If you extracted the installation files to /tmp/jts then the directory jre is located at /tmp/jts/linux/jre_5.0.2.sr5_20070511/jre.
  2. Run the command chcon -R -t textrel_shlib_t against the jre directory. This command recursively processes the files and allows text relocation. For example, if you extracted the installation files to /tmp/rtc run the following command:
```
chcon -R -t textrel_shlib_t /tmp/rtc/linux/jre_5.0.2.sr5_20070511/jre 
```
2. Install Jazz™ Team Server, the Rational Team Concert client and connectors, but do not start them.
3. Before you start Jazz Team Server, you must change the security context of the product JREs. For each product you install, run the same command (chcon -R -t textrel_shlib_t) with the appropriate product-specific JRE directory. The default directories are listed below.
  Note: The paths are the default if you installed the product as user root. If you installed as a non-root user, look for these directories inside an opt/IBM structure in the installation user's home directory.
  - IBM® Installation Manager:
    - /opt/IBM/InstallationManager/eclipse/jre_5.0.2.sr5_20070511/jre
  - Jazz Team Server:
    - /opt/IBM/JazzTeamServer/server/linux/ibm-java2-i386-50/jre
  - Rational Team Concert - Client: (run chcon on all 4 directories)
    - /opt/IBM/TeamConcert/jdk/bin
    - /opt/IBM/TeamConcert/jdk/lib
    - /opt/IBM/TeamConcert/jdk/jre/bin
    - /opt/IBM/TeamConcert/jdk/jre/lib
  - Rational Team Concert - Build System Toolkit:
    - not applicable (no JRE included)
  - Rational Team Concert - ClearCase® Synchronizer: (run chcon on all 4 directories)
    - /opt/IBM/ClearCaseConnector/jdk/bin
    - /opt/IBM/ClearCaseConnector/jdk/lib
    - /opt/IBM/ClearCaseConnector/jdk/jre/bin
    - /opt/IBM/ClearCaseConnector/jdk/jre/lib
  - Rational Team Concert - ClearQuest® Synchronizer:
    - /opt/IBM/ClearQuestConnector/gateway/linux/ibm-java2-i386-50/jre
  Latest entries in the jazz.net library on installation