Error launching IDL: "cannot restore segment prot after reloc: Permission denied"
Topic:
Some Linux distributions with SELinux enabled may prevent IDL from running under the default security context.
Discussion:
Modern Linux distributions have enabled kernel security extensions from the SELinux project at the NSA. These extensions allow finer-grained control over system security. However, SELinux may affect default system behaviors, such as shared library loading, that can be problematic to third party programs, such as IDL.
If you receive the error message:
"cannot restore segment prot after reloc: Permission denied"
when launching IDL, then your SELinux configuration is preventing IDL from launching.
NOTE
Root or super-user (sudo) privileges will be required to change the SELinux settings. A graphical interface utility may be available on your system to make the equivalent changes.
Contact your system or network administrator before making changes to your system security settings. For more information about SELinux or the effects or details of implementation of these suggested changes, please contact your system administrator or consult your Linux documentation or Linux distribution vendor. |
Possible workarounds:
- Change the default security context for IDL by issuing the command, for example:
chcon -t texrel_shlib_t /usr/local/exelis/idi82/bin/bin.linux.x86_64/*.so
- Or disable SELinux altogether by setting the following line in your "/etc/sysconfig/selinux" file.
(Reference: CRID 41937)