My Oracle Support Banner

When Attempting to Run Dbenv.sh Shell Script to Install Siebel Database It Fails With "regautobackup: error while loading shared libraries: libkernel32.so: cannot enable executable stack as shared object requires: Permission denied" (Doc ID 2954903.1)

Last updated on AUGUST 31, 2023

Applies to:

Siebel CRM - Version 17.0 [IP2017] and later
Information in this document applies to any platform.

Symptoms

When attempting to dbenv.sh shell script for a new Siebel 23.5 installation on Oracle Linux 8 UEK7 SELinux enforcing environment, MainWin regautoback errors out with the following error: 

/siebel/home/siebsrvr/mw/bin/regautobackup: error while loading shared libraries: libkernel32.so: cannot enable executable stack as shared object requires: Permission denied

As Root user, executing "journalctl -xe" command the following alert is observed: 

Jun 08 17:21:52 linux setroubleshoot[12942]: SELinux is preventing regautobackup from using the execstack access on a process.
  
***** Plugin allow_execstack (53.1 confidence) suggests *******************

If you do not think regautobackup should need to map stack memory that is both writable and ex>
Then you need to report a bug.
This is a potentially dangerous access.
Do
contact your security administrator and report this issue.

***** Plugin catchall_boolean (42.6 confidence) suggests ******************

If you want to allow unconfined executables to make their stack executable. This should never>
Then you must tell SELinux about this by enabling the 'selinuxuser_execstack' boolean.

Do
setsebool -P selinuxuser_execstack 1

***** Plugin catchall (5.76 confidence) suggests **************************

If you believe that regautobackup should be allowed execstack access on processes labeled unco>
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'regautobackup' --raw | audit2allow -M my-regautobackup
# semodule -X 300 -i my-regautobackup.pp

SElinux enforcing status is verified as follows:

$ sestatus
SELinux status: enabled
SELinuxfs mount: /sys/fs/selinux
SELinux root directory: /etc/selinux
Loaded policy name: targeted
Current mode: enforcing
Mode from config file: enforcing
Policy MLS status: enabled
Policy deny_unknown status: allowed
Memory protection checking: actual (secure)
Max kernel policy version: 33

 

As per Oracle internal tests the "cannot enable executable stack as shared object requires: Permission denied" error is also observed with siebctl executable.


STEPS

1. Install Oracle Linux 8 UEKR7
2. Enable SELinux enforcing, see documentation here
3. Install Siebel binaries
4. Create the dbenv.sh, see documentation here
5. Disable "executable stack as shared object" by running the following steps as Root user

setsebool -P selinuxuser_execstack off
touch /.autorelabel

6. Restart the machine
7. Try to source dbenv.sh shell script located under siebsrvr directory, this shell script runs Main regautobackup command: 

$ cd siebsrvr
$ . ./dbenv.sh 

8. The above reported error with the libkernel32.so library is encountered

Changes

New Siebel installation with Oracle Linux 8 SELinux enforcing  

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.