Notes Client doesn't start up on Fedora 7 with SELinux enabled

HCL Domino Domino Forum
1

The start up of the notes client (opt/ibm/lotus/notes/notes) fails with a lot of errors: java.lang.UnsatisfiedLinkError: /opt/ibm/lotus/notes/framework/rcp/eclipse/plugins/com.ibm.rcp.os.linux_6.2.0.200805251412/os/linux/x86/libos.so (/opt/ibm/lotus/notes/framework/rcp/eclipse/plugins/com.ibm.rcp.os.linux_6.2.0.200805251412/os/linux/x86/libos.so: cannot restore segment prot after reloc: Permission denied)

Errors within SELinux:

The /opt/ibm/lotus/notes/framework/rcp/eclipse/plugins/com.ibm.rcp.j2se.linux.x86_1.6.0.20080522-200805251412/jre/bin/notes2 application attempted to load /opt/ibm/lotus/notes/framework/rcp/eclipse/plugins/com.ibm.rcp.os.linux_6.2.0.200805251412/os/linux/x86/libos.so which requires text relocation. This is a potential security problem. Most libraries do not need this permission. Libraries are sometimes coded incorrectly and request this permission. The SELinux Memory Protection Tests web page explains how to remove this requirement. You can configure SELinux temporarily to allow /opt/ibm/lotus/notes/framework/rcp/eclipse/plugins/com.ibm.rcp.os.linux_6.2.0.200805251412/os/linux/x86/libos.so to use relocation as a workaround, until the library is fixed. Please file a bug report against this package.

Solution:

SELinux allows you to give access to the library:

chcon -t textrel_shlib_t /opt/ibm/lotus/notes/framework/rcp/eclipse/plugins/com.ibm.rcp.os.linux_6.2.0.200805251412/os/linux/x86/libos.so

2

Subject: you should really stay with the supported Linux distributions. this is the same for the client and for the server

on the client side it is far more critical and you are really on your own with those kind of problems if you are not running a supported OS. Don’t expect anyone to help you.

All distros are different. Linux is not Linux. And there are changes in the kernel, in the thread libs and also specially the Java area is very sensitive to different implementations.

For example in D8 it worked on an earlier Open SuSE 10.2 but does break with 10.3 for some changes that have been introduced. What about trying Ubuntu?

There are plans to support “8.0.2 and 8.5” with Ubuntu 8.04

– Daniel (nsh@nashcom.de)

3

Subject: not supported configuration. please refer supported platform in the release note.

SELinux is not supported in 8.5 Public Beta1, but our target is to support SELinux on these Linux platform in the future.

  • SUSE Enterprise Desktop (SLED) 10 XGL

  • RedHat Enterprise Linux (RHEL) 5.2 Desktop

  • Ubuntu 8.04 LTS Desktop Edition