Branch 'f12' - en-US/Multimedia.xml
by Rüdiger Landmann
en-US/Multimedia.xml | 30 +++++++++++++++---------------
1 file changed, 15 insertions(+), 15 deletions(-)
New commits:
commit 9afd613d56eca2495c00efc820026607d60fa2d3
Author: Ruediger Landmann <r.landmann(a)redhat.com>
Date: Mon Sep 14 11:12:15 2009 +1000
More markup in Multimedia
diff --git a/en-US/Multimedia.xml b/en-US/Multimedia.xml
index 95ca7b3..c789a91 100644
--- a/en-US/Multimedia.xml
+++ b/en-US/Multimedia.xml
@@ -20,17 +20,17 @@
<primary>Thusnelda</primary>
</indexterm>
<para>
- In support of Free Culture, the open web and to reduce the
- hold of proprietary and patent encumbered codecs, Red Hat
+ In support of free culture, the open web, and to reduce the
+ hold of proprietary and patent-encumbered codecs, Red Hat
has been sponsoring improvements on the open Ogg Theora
- video codec implementation codenamed Thusnelda via
+ video codec implementation codenamed <application>Thusnelda</application> via
Christopher Montgomery (xiphmont), who created the format
and work has resulted in drastic improvements to the
codec. This release features this next generation codec,
- compared to libtheora 1.0, the new encoder can produce
+ compared to <application>libtheora 1.0</application>, the new encoder can produce
comparable quality encodings at a lower bitrate, or better
quality at the same bitrate. All applications using
- libtheora library including all the Gstreamer applications
+ <application>libtheora</application> library including all the <application>GStreamer</application> applications
will automatically and transparently be taking advantage of
the improvements.
</para>
@@ -45,13 +45,13 @@
</indexterm>
<para>
Fedora developers have been made several improvements to the
- PulseAudio system. More details here. These include the
+ <application>PulseAudio</application> system. More details are available from <ulink url="http://0pointer.de/blog/projects/oh-nine-sixteen.html"></ulink>. These include the
following:
<itemizedlist>
- <listitem><para>A New Mixer Logic</para></listitem>
- <listitem><para>UPnP MediaServer Support</para></listitem>
- <listitem><para>Hotplug Support Improved</para></listitem>
- <listitem><para>Surround Sound Support for Event Sounds
+ <listitem><para>new mixer logic</para></listitem>
+ <listitem><para>UPnP MediaServer support</para></listitem>
+ <listitem><para>hotplug support improved</para></listitem>
+ <listitem><para>surround sound support for event sounds
</para></listitem>
</itemizedlist>
</para>
@@ -65,12 +65,12 @@
<primary>Fedora Studio</primary>
</indexterm>
<para>
- Fedora Studio is an optional multimedia-menus package to
- provided the user who want to have their audio & video
+ <application>Fedora Studio</application> is an optional multimedia menus package that
+ allows users to have their audio and video
applications classified in their desktop menu. In previous
- versions of Fedora all multimedia applications were in one
- large group, this package makes it easier for users to
- navigate audio & video applications.
+ versions of Fedora, all multimedia applications were in one
+ large group. This package makes it easier for users to
+ navigate audio and video applications.
</para>
</listitem>
</varlistentry>
14 years, 8 months
Branch 'f12' - en-US/Virtualization.xml
by Rüdiger Landmann
en-US/Virtualization.xml | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
New commits:
commit e42487e962326a3111e3f15bf917b48e7836bddb
Author: Ruediger Landmann <r.landmann(a)redhat.com>
Date: Mon Sep 14 11:03:28 2009 +1000
More markup in Virtualization
diff --git a/en-US/Virtualization.xml b/en-US/Virtualization.xml
index dfdf013..6d33577 100644
--- a/en-US/Virtualization.xml
+++ b/en-US/Virtualization.xml
@@ -15,12 +15,12 @@
<indexterm><primary>libvirt</primary></indexterm>
<indexterm><primary>libguestfs</primary></indexterm>
<indexterm><primary>guestfish</primary></indexterm>
- Virtualization in Fedora 12 includes major changes, and new
+ Virtualization in Fedora 12 includes major changes, and new
features, that continue to support KVM, Xen, and many other
virtual machine platforms.
</para>
<para>
- KVM and qemu have gained a number of new features in this
+ KVM and QEMU have gained a number of new features in this
release. KVM guest memory usage and performance is improved by the
addition of KSM and KVM Huge Page Backed Memory. The performance
of the qcow2 image format is greatly improved. Support for both
@@ -29,11 +29,11 @@
</para>
<para>
On the libvirt side, APIs have been added for storage management
- and network interface management. libvirt now also runs qemu
+ and network interface management. libvirt now also runs QEMU
processes unprivileged.
</para>
<para>
- A new library (libguestfs) and an interactive tool (guestfish) is
+ A new library (<application>libguestfs</application>) and an interactive tool (<application>guestfish</application>) is
now available for accessing and modifying virtual machine disk
images.
</para>
@@ -44,7 +44,7 @@
<indexterm><primary>KSM</primary></indexterm>
<indexterm><primary>KVM</primary></indexterm>
<indexterm><primary>kernel</primary></indexterm>
- Kernel SamePage Merging or KSM, allows identical memory pages to
+ <firstterm>Kernel SamePage Merging</firstterm> (KSM) allows identical memory pages to
be merged by the kernel into a single page shared between one or
more processes. This feature is leveraged by KVM to allow
multiple, similar, guest virtual machines to have a reduced
@@ -53,8 +53,8 @@
</para>
<para>
For further details refer to
- http://fedoraproject.org/wiki/Features/KSM and
- http://lwn.net/Articles/306704/
+ <ulink url="http://fedoraproject.org/wiki/Features/KSM"></ulink> and
+ <ulink url="http://lwn.net/Articles/306704/"></ulink>
</para>
</section>
</section>
14 years, 8 months
Branch 'f12' - en-US/Boot.xml en-US/Security.xml
by Rüdiger Landmann
en-US/Boot.xml | 29 +++++++++++++++++++++++++++++
en-US/Security.xml | 20 ++++++++++++++++++++
2 files changed, 49 insertions(+)
New commits:
commit b02525f33095d1447509038d861ceb6a1be26eb9
Author: Ruediger Landmann <r.landmann(a)redhat.com>
Date: Mon Sep 14 10:56:47 2009 +1000
Boot and Security
diff --git a/en-US/Boot.xml b/en-US/Boot.xml
index 5165314..726b38b 100644
--- a/en-US/Boot.xml
+++ b/en-US/Boot.xml
@@ -5,6 +5,35 @@
<section id="sect-Release_Notes-Fedora_12_Boot_Time">
<title>Fedora 12 Boot Time</title>
<remark>This beat is located here: <ulink type="http" url="https://fedoraproject.org/wiki/Docs/Beats/Boot">https://fedoraproject.org/wiki/Docs/Beats/Boot</ulink></remark>
+
+ <section id="sect-Release_Notes-Fedora_12_Boot_Time-ext4">
+ <title>GRUB with ext4 support</title>
+
+ <para>
+ Fedora 9 originally included experimental support for ext4 and Fedora 11 included ext4 by default. However, <application>GRUB</application> in that version did not support ext4 and hence required a separate boot partition formatted as ext3 or ext2. Fedora 12 now includes a updated version of <application>GRUB</application> with ext4 support. <application>Anaconda</application> (the Fedora installer) will permit this as well.
+ </para>
+ </section>
+
+ <section id="sect-Release_Notes-Fedora_12_Boot_Time-Dracut">
+ <title>Dracut — new booting system</title>
+
+ <para>
+ Up until Fedora 10, the boot system (<firstterm>initial ram disk</firstterm> or <firstterm>initrd</firstterm>) used to boot Fedora was monolithic, very distribution-specific and did not provide much flexibility. This will be replaced with <application>Dracut</application>, an initial ram disk with an event-based framework designed to be distribution-independent. It has been also adopted by the Fedora-derived OLPC project's XO operating system. OLPC modules for <application>Dracut</application> are available in the Fedora repository. Early feedback and testing is welcome.
+ </para>
+ </section>
+
+ <section id="sect-Release_Notes-Fedora_12_Boot_Time-KMS">
+ <title>Faster and smoother graphical startup</title>
+
+ <para>
+ <firstterm>Kernel Mode Setting</firstterm> (KMS) is now enabled by default on NVIDIA systems as well, through the <application>Nouveau</application> driver. Fedora 10 originally included support for KMS, but only for some ATI display cards. In Fedora 11, this was extended to Intel cards as well. This release has extended it further to support NVIDIA cards as well.
+ </para>
+
+ <para>
+ As as result of this improvement, you will get a faster and smoother graphical boot on nearly all systems, via the <application>plymouth</application> graphical boot system developed within Fedora.
+ </para>
+ </section>
+
</section>
diff --git a/en-US/Security.xml b/en-US/Security.xml
index 745b9a5..daa0a5a 100644
--- a/en-US/Security.xml
+++ b/en-US/Security.xml
@@ -9,6 +9,26 @@
This section highlights various security items from Fedora.
</para>
+
+ <section id="sect-Release_Notes-Security-Lower_process_capabilities">
+ <title>Lower process capabilities</title>
+ <para>
+ Daemons running as root have been reviewed and patched to run with lower process capabilities. This reduces the desirability of using these daemons for privilege escalation. Additionally, the shadow file permissions have been changed to <literal>000</literal> and several directories in <filename>$PATH</filename> have been set to <literal>555</literal> in order to prevent daemons without <literal>DAC_OVERRIDE</literal> from being able to access the shadow file or write to the <filename>$PATH</filename> directories.
+ </para>
+
+ <para>
+ When someone attacks a system, they normally can not do much unless they can escalate privileges. This feature reduces the number of attack targets that can be used to escalate privileges. If root processes do not have all capabilities, they will be harder to use to subvert the system.
+ </para>
+
+ <para>
+ Processes with the root uid can still damage a system, because they can write to nearly any file and of course read the <filename>/etc/shadow file</filename>. However, if the system is hardened so that root requires the <literal>DAC_OVERRIDE</literal> capability, then only a limited number of processes can damage the system. This will not affect any admin abilities because they always get full privileges which includes <literal>DAC_OVERRIDE</literal>. Therefore, even if someone does successfully attack a root process, it is now harder for them to take advantage of this attack.
+ </para>
+
+ <para>
+ A hardened system would have permissions like: <literal>555</literal> <filename>/bin</filename>, <literal>555</literal> <filename>/lib</filename>, <literal>000</literal> <filename>/etc/shadow</filename> and so on. The current scope is to cover the directories in <filename>$PATH</filename> variable, library dirs, <filename>/boot</filename>, and <filename>/root</filename>. This scheme does not affect SELinux in any way and complements it since capabilities are DAC controls and they have first vote on allowing an access.
+ </para>
+ </section>
+
</section>
14 years, 8 months
Branch 'f12' - en-US/Release_Notes.xml
by Rüdiger Landmann
en-US/Release_Notes.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
New commits:
commit 5261e739aa31f0f0883bc585ffc1ffc26376e0b2
Author: Ruediger Landmann <r.landmann(a)redhat.com>
Date: Mon Sep 14 10:20:01 2009 +1000
Nothing new for Live Images in F12 so far
diff --git a/en-US/Release_Notes.xml b/en-US/Release_Notes.xml
index 51d73fb..4574e53 100644
--- a/en-US/Release_Notes.xml
+++ b/en-US/Release_Notes.xml
@@ -27,7 +27,7 @@
<!-- <xi:include href="I18n.xml" xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include> -->
<xi:include href="Multimedia.xml" xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
<!-- <xi:include href="Entertainment.xml" xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include> -->
- <xi:include href="Live.xml" xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include>
+ <!-- <xi:include href="Live.xml" xmlns:xi="http://www.w3.org/2001/XInclude"></xi:include> -->
</section>
<section id="sect-Release_Notes-Changes_in_Fedora_for_System_Administrators">
14 years, 8 months
Branch 'f12' - en-US/Networking.xml
by Rüdiger Landmann
en-US/Networking.xml | 66 +++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 66 insertions(+)
New commits:
commit c7b089c687dcdbfe87b13a1ff89cc2a093214cf3
Author: Ruediger Landmann <r.landmann(a)redhat.com>
Date: Mon Sep 14 09:22:31 2009 +1000
Networking
diff --git a/en-US/Networking.xml b/en-US/Networking.xml
index 01a682c..f8f3a58 100644
--- a/en-US/Networking.xml
+++ b/en-US/Networking.xml
@@ -6,6 +6,72 @@
<title>Networking</title>
<remark>This beat is located here: <ulink type="http" url="https://fedoraproject.org/wiki/Docs/Beats/Networking">https://fedoraproject.org/wiki/Docs/Beats/Networking</ulink></remark>
+<section id="sect-Release_Notes-Networking-System_wide">
+ <title><application>NetworkManager</application> with system-wide connections and enhanced support for mobile broadband</title>
+
+ <para>
+ <application>NetworkManager</application> can now create and edit system-wide network connections in <filename>/etc/sysconfig</filename>. <application>NetworkManager</application> has been able to read information about system-wide network connections from <filename>/etc/sysconfig</filename> for a while. Now we have enabled full read-write support for system connections. The ability to create or modify new system connections will be controlled by <application>PolicyKit</application> policies. Initially, only wired and wireless connections will be supported. Later on, vpn connections will follow. For connections that require secrets, those will be stored in <filename>.keys</filename> files in <filename>/etc/sysconfig</filename>.
+ </para>
+
+ <para>
+ By providing a database of preconfigured mobile broadband providers, supporting more hardware, and permitting scanning of GSM networks, <application>NetworkManager</application> makes the use of mobile broadband much easier. Your broadband provider will be automatically recognized by <application>NetworkManager</application> and it will make it easy to just plug it your USB device and get you online within minutes.
+ </para>
+</section>
+
+<section id="sect-Release_Notes-Networking-IPv6">
+ <title>Enhanced IPv6 support in <application>NetworkManager</application></title>
+
+ <para>
+ For non-GUI users, and those that use <filename>ifcfg</filename> files directly, <application>NetworkManager</application> should bring up the interface with IPv6 connectivity correctly at boot. No modification of the <filename>ifcfg</filename> files should be necessary.
+ </para>
+
+ <para>
+ For GUI users, a new IPv6 tab will appear in the connection editor which will allow for control if the IPv6 settings similar to control of IPv4 settings already. After selecting the configuration method (<literal>auto</literal> is the default, which will honor router-advertisements and attempt to retrieve DNS information with DHCPv6 information-only mode) and entering any additional settings they may wish to use, then saving the connection, activating that connection should configure the interface fully with IPv6 as requested by the user.
+ </para>
</section>
+<section id="sect-Release_Notes-Networking-Network_Interface_Management">
+ <title>Network Interface Management</title>
+
+ <para>
+ Configuring the network interfaces on a machine for moderately complicated yet common scenarios is generally only accessible to advanced users, and very poorly supported by existing tools. Such scenarios include creating a bridge and enslaving a physical NIC to it, or bonding two NICs, adding a VLAN interface to the bond and enslaving that to a bridge.
+ </para>
+
+ <para>
+ Complicated bridge setups are commonly needed on virtualized hosts, and often have to be performed remotely by higher-level management tools, rather than a human user.
+ </para>
+
+ <para>
+ This feature addresses these needs by providing a general-purpose network configuration library (<application>netcf</application>) and additions to the <application>libvirt</application> API to expose <application>netcf</application>'s local API through <application>libvirt</application>'s remoting facilities.
+ </para>
+
+ <para>
+ With <application>netcf</application>, a logical network interface (for example, a bridge and its slaves) is described as a unit, and <application>netcf</application> takes care of translating that description into the appropriate <filename>ifcfg-*</filename> files. To guarantee the happy coexistence of <application>netcf</application> with other network configuration utilities, including <application>vi</application>, <application>netcf</application> is bidirectional: it modifies <filename>ifcfg-*</filename> files based on a <application>netcf</application> interface description, but also reads <filename>ifcfg-*</filename> files to generate such a description. It is therefore possible to use <application>netcf</application> side-by-side with any other method of changing network configuration, and many of the pitfalls of earlier attempts to do this — for example, the Xen networking scripts — are avoided.
+ </para>
+
+ <para>
+ It is planned to switch <application>NetworkManager</application> to <application>netcf</application> as the backend for system-wide network configuration in a future release; while it is not part of this feature, it will further unify the user experience around network configuration. Similarly, it is planned to expose network configuration functionality in a future release of <application>virt-manager</application>.
+ </para>
+</section>
+
+<section id="sect-Release_Notes-Networking-Bluetooth">
+ <title>Bluetooth Service On Demand</title>
+
+ <para>
+ In order to support Bluetooth devices, the Bluetooth background service was started by default in previous versions of Fedora. In this release, the Bluetooth service is started on demand when needed and automatically stops 30 seconds after last device use instead. This reduces initial startup time and resources.
+ </para>
+</section>
+
+<section id="sect-Release_Notes-Networking-NFS">
+ <title>NFS V4 Default</title>
+
+ <para>
+ The latest version of the NFS protocol is version 4, which was first introduced in Fedora Core 2 (the first distro to have such support). Previously, the default NFS version was version 3. Therefore, when an simple NFS mount was done (<command>mount server:/export /mnt</command>) version 3 is the first protocol version that was tried.
+ </para>
+
+ <para>
+ In Fedora 12, version 4 is tried first. If the server does not support version 4, the mount then tries version 3.
+ </para>
+</section>
+</section>
\ No newline at end of file
14 years, 8 months