Notes Client Installation on Fedora 7 with SELinux

On a Fedora 7 Linux install with SELinux enabled and enforcing, the installation of ibm_lotus_cae-8.5.i586.rpm and ibm_lotus_activities-8.5.i586.rpm will fail due to the enforcing nature of SELinux.

Exitcode installations:

– Provisioning status 99

Error Message:

SELinux denied access requested by /opt/ibm/lotus/notes/framework/rcp/eclipse/plugins/com.ibm.rcp.j2se.linux.x86_1.6.0.20080522-200805251412/jre/bin/notes2. It is not expected that this access is required by /opt/ibm/lotus/notes/framework/rcp/eclipse/plugins/com.ibm.rcp.j2se.linux.x86_1.6.0.20080522-200805251412/jre/bin/notes2 and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access.

Raw Audit Messages:

avc: denied { execmem } for comm=“notes2” egid=0 euid=0 exe=“/opt/ibm/lotus/notes/framework/rcp/eclipse/plugins/com.ibm.rcp.j2se.linux.x86_1.6.0.20080522-200805251412/jre/bin/notes2” exit=0 fsgid=0 fsuid=0 gid=0 items=0 pid=4707 scontext=root:system_r:rpm_script_t:s0-s0:c0.c1023 sgid=0 subj=root:system_r:rpm_script_t:s0-s0:c0.c1023 suid=0 tclass=process tcontext=root:system_r:rpm_script_t:s0-s0:c0.c1023 tty=pts2 uid=0

Solution:

For now the solution is to set SELinux to permissive mode and turn it back on to enforcing after the installation.

Using rpm -ivh --force works then.

Subject: FYI, Notes client is supported on particular Linux platforms

You may be aware of this already, but for those that don’t know, the Notes client is supported on specific Linux platforms. From the Release Notes, the Notes 8.5 “standard” client is supported on:- SUSE Enterprise Desktop (SLED) 10 XGL

  • RedHat Enterprise Linux (RHEL) 5.2 Desktop

  • Ubuntu 8.04 LTS Desktop Edition

The new one for 8.5 is Ubuntu (SLED and RHEL were supported in 8.0.x).

Outside of the ones listed, you’ll be depending on community cooperation or your own tweaks to get things going.