Installing Rational Team Concert with Security-Enhanced Linux

If Security-Enhanced Linux® (SELinux) is enabled, you must either disable it or change the security context of the Java™ Runtime Environments (JREs) used for installing and running Rational® Team Concert to allow text relocation.

If you have setup a machine for the sole purpose of evaluating Rational Team Concert and the SELinux features are not important to you, then the easiest way to proceed is to disable SELinux.

Note:

SELinux is installed and enabled by default on Red Hat Enterprise Linux 5.
SELinux is not installed on Suse Linux Enterprise Server 10 or Suse Linux Enterprise Desktop 10.

To disable SELinux do one of the following:
1. From the windowing system:
  1. Select System > Administration > Security Level and Firewall.
  2. Switch to the SELinux tab.
  3. Change the SELinux setting to Disabled.
  4. Click OK to save the new setting.
2. From the command line:
  1. Run the "setup" command (this is /usr/bin/setup)
  2. Select Firewall Configuration and press Enter
  3. Use the Tab and arrow keys to change the SELinux to Disabled
  4. Select OK and press Enter
To change the security context of the JREs:
1. If you are installing directly from DVD media; skip to step 2. Otherwise, change the security context of the installation JRE.
  1. In the installation files directory, locate the directory jre. linux/jre_5.0.2.sr5_20070511/jre. If you extracted the installation files to /tmp/rtc then the directory jre is located at /tmp/rtc/linux/jre_5.0.2.sr5_20070511/jre.
  2. Run the command chcon -R -t textrel_shlib_t against the jre directory. This command recursively processes the files and allows text relocation. For example, if you extracted the installation files to /tmp/rtc run the following command:
```
chcon -R -t textrel_shlib_t /tmp/rtc/linux/jre_5.0.2.sr5_20070511/jre 
```
2. Install the Rational Team Concert server, client and connectors, but do not start them.
3. Before you start Rational Team Concert, you must change the security context of the product JREs. For each product you install, run the same command (chcon -R -t textrel_shlib_t) with the appropriate product-specific JRE directory. The default directories are listed below.
  Note: The paths are the default if you installed the product as user root. If you installed as a non-root user, look for these directories inside an opt/IBM structure in the installation user's home directory.
  - IBM® Installation Manager:
    - /opt/IBM/InstallationManager/eclipse/jre_5.0.2.sr5_20070511/jre
  - Jazz™ Team Server:
    - /opt/IBM/JazzTeamServer/server/linux/ibm-java2-i386-50/jre
  - Rational Team Concert - Client: (run chcon on all 4 directories)
    - /opt/IBM/TeamConcert/jdk/bin
    - /opt/IBM/TeamConcert/jdk/lib
    - /opt/IBM/TeamConcert/jdk/jre/bin
    - /opt/IBM/TeamConcert/jdk/jre/lib
  - Rational Team Concert - Build System Toolkit:
    - not applicable (no JRE included)
  - Rational Team Concert - ClearCase® Connector: (run chcon on all 4 directories)
    - /opt/IBM/ClearCaseConnector/jdk/bin
    - /opt/IBM/ClearCaseConnector/jdk/lib
    - /opt/IBM/ClearCaseConnector/jdk/jre/bin
    - /opt/IBM/ClearCaseConnector/jdk/jre/lib
  - Rational Team Concert - ClearQuest® Connector:
    - /opt/IBM/ClearQuestConnector/gateway/linux/ibm-java2-i386-50/jre

Feedback

Did this help? You can provide feedback at Jazz.net (registration required): Comment in the forums or submit a bug