release-notes/devel/en_US Security.xml, 1.25, 1.26 Xorg.xml, 1.25, 1.26 WebServers.xml, 1.14, 1.15 Virtualization.xml, 1.21, 1.22 SystemDaemons.xml, 1.8, 1.9
Karsten Wade (kwade)
fedora-docs-commits at redhat.com
Mon Mar 17 20:32:54 UTC 2008
Author: kwade
Update of /cvs/docs/release-notes/devel/en_US
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv22260
Modified Files:
Security.xml Xorg.xml WebServers.xml Virtualization.xml
SystemDaemons.xml
Log Message:
xmlformat clean-up
Index: Security.xml
===================================================================
RCS file: /cvs/docs/release-notes/devel/en_US/Security.xml,v
retrieving revision 1.25
retrieving revision 1.26
diff -u -r1.25 -r1.26
--- Security.xml 17 Mar 2008 20:21:19 -0000 1.25
+++ Security.xml 17 Mar 2008 20:32:52 -0000 1.26
@@ -1,153 +1,226 @@
<?xml version="1.0"?>
+
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN" "http://www.docbook.org/xml/4.4/docbookx.dtd">
<section id="sn-Security">
<title>Security</title>
-
<tip>
<title>Latest Release Notes on the Web</title>
<para>
- These release notes may be updated. Visit <ulink url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink>
+ These release notes may be updated. Visit
+ <ulink url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink>
to view the latest release notes for Fedora.
- </para>
+ </para>
</tip>
-
<para>
This section highlights various security items from Fedora.
</para>
<section id="sn-Security-Enhancements">
<title>Security Enhancements</title>
- <para>Fedora continues to improve its many proactive <ulink url="http://fedoraproject.org/wiki/Security/Features">security features</ulink>.
+
+ <para>
+ Fedora continues to improve its many proactive
+ <ulink url="http://fedoraproject.org/wiki/Security/Features">security
+ features</ulink>.
</para>
- <para>The <package>glibc</package> package in Fedora 8 had support for passwords using SHA-256 and SHA-512 hashing. Previously, only DES and MD5 were available. These tools have been extended in Fedora 9. Password hashing using the SHA-256 and SHA-512 hash functions is now supported.
+
+ <para>
+ The <package>glibc</package> package in Fedora 8 had support for
+ passwords using SHA-256 and SHA-512 hashing. Previously, only DES
+ and MD5 were available. These tools have been extended in Fedora
+ 9. Password hashing using the SHA-256 and SHA-512 hash functions
+ is now supported.
</para>
- <para>To switch to SHA-256 or SHA-512 on an installed system, use <command>authconfig --passalgo=sha256 --update</command> or <command>authconfig --passalgo=sha512 --update</command>. Alternatively, use the <command>authconfig-gtk</command> GUI tool to configure the hashing method. Existing user accounts will not be affected until their passwords are changed.
+
+ <para>
+ To switch to SHA-256 or SHA-512 on an installed system, use
+ <command>authconfig --passalgo=sha256 --update</command> or
+ <command>authconfig --passalgo=sha512 --update</command>.
+ Alternatively, use the <command>authconfig-gtk</command> GUI tool
+ to configure the hashing method. Existing user accounts will not
+ be affected until their passwords are changed.
</para>
+
+ <para>
+ SHA-512 is used by default on newly installed systems. Other
+ algorithms can be configured only for kickstart installations, by
+ using the <option>--passalgo</option> or
+ <option>--enablemd5</option> options for the kickstart
+ <option>auth</option> command. If your installation does not use
+ kickstart, use <command>authconfig</command> as described above,
+ and then change the root user password, and passwords for other
+ users created after installation.
+ </para>
+
<para>
- SHA-512 is used by default on newly installed systems. Other algorithms can be configured only for kickstart installations, by using the <option>--passalgo</option> or <option>--enablemd5</option> options for the kickstart <option>auth</option> command. If your installation does not use kickstart, use <command>authconfig</command> as described above, and then change the root user password, and passwords for other users created after installation.
+ New options now appear in <package>libuser</package>,
+ <package>pam</package>, and <package>shadow-utils</package> to
+ support these password hashing algorithms. Running
+ <command>authconfig</command> configures all these options
+ automatically, so it is not necessary to modify them manually.
</para>
- <para>New options now appear in <package>libuser</package>, <package>pam</package>, and <package>shadow-utils</package> to support these password hashing algorithms. Running <command>authconfig</command> configures all these options automatically, so it is not necessary to modify them manually.
- </para>
- <itemizedlist>
+
+ <itemizedlist>
<listitem>
- <para>New values for the <option>crypt_style</option> option, and the new options <option>hash_rounds_min</option>, and <option>hash_rounds_max</option>, are now supported in the <option>[defaults]</option> section of <filename>/etc/libuser.conf</filename>. Refer to the <command>libuser.conf(5)</command> man page for details.
- </para>
+ <para>
+ New values for the <option>crypt_style</option> option, and
+ the new options <option>hash_rounds_min</option>, and
+ <option>hash_rounds_max</option>, are now supported in the
+ <option>[defaults]</option> section of
+ <filename>/etc/libuser.conf</filename>. Refer to the
+ <command>libuser.conf(5)</command> man page for details.
+ </para>
</listitem>
<listitem>
- <para>New options, <option>sha256</option>, <option>sha512</option>, and <option>rounds</option>, are now supported by the <filename>pam_unix</filename> PAM module. Refer to the <command>pam_unix(8)</command> man page for details.
- </para>
+ <para>
+ New options, <option>sha256</option>, <option>sha512</option>,
+ and <option>rounds</option>, are now supported by the
+ <filename>pam_unix</filename> PAM module. Refer to the
+ <command>pam_unix(8)</command> man page for details.
+ </para>
</listitem>
<listitem>
- <para>New options, <option>ENCRYPT_METHOD</option>, <option>SHA_CRYPT_MIN_ROUNDS</option>, and <option>SHA_CRYPT_MAX_ROUNDS</option>, are now supported in <filename>/etc/login.defs</filename>. Refer to the <command>login.defs(5)</command> man page for details. Corresponding options were added to <command>chpasswd(8)</command> and <command>newusers(8)</command>.
- </para>
+ <para>
+ New options, <option>ENCRYPT_METHOD</option>,
+ <option>SHA_CRYPT_MIN_ROUNDS</option>, and
+ <option>SHA_CRYPT_MAX_ROUNDS</option>, are now supported in
+ <filename>/etc/login.defs</filename>. Refer to the
+ <command>login.defs(5)</command> man page for details.
+ Corresponding options were added to
+ <command>chpasswd(8)</command> and
+ <command>newusers(8)</command>.
+ </para>
</listitem>
</itemizedlist>
</section>
<section id="sn-General-Information">
<title>General Information</title>
+
<para>
A general introduction to the many proactive security features in
Fedora, current status, and policies is available at
<ulink url='http://fedoraproject.org/wiki/Security'>http://fedoraproject.org/wiki/Security</ulink>.
</para>
-</section>
- <section id="SELinux">
- <title>SELinux</title>
- <para>
- The SELinux project pages have troubleshooting tips,
- explanations, and pointers to documentation and references.
- Some useful links include the following:
- </para>
- <itemizedlist>
- <listitem>
- <para>
- New SELinux project pages:
- <ulink url='http://fedoraproject.org/wiki/SELinux'>http://fedoraproject.org/wiki/SELinux</ulink>
- </para>
- </listitem>
- <listitem>
- <para>
- Troubleshooting tips:
- <ulink url='http://fedoraproject.org/wiki/SELinux/Troubleshooting'>http://fedoraproject.org/wiki/SELinux/Troubleshooting</ulink>
- </para>
- </listitem>
- <listitem>
- <para>
- Frequently Asked Questions:
- <ulink url='http://docs.fedoraproject.org/selinux-faq/'>http://docs.fedoraproject.org/selinux-faq/</ulink>
- </para>
- </listitem>
- <listitem>
- <para>
- Listing of SELinux commands:
- <ulink url='http://fedoraproject.org/wiki/SELinux/Commands'>http://fedoraproject.org/wiki/SELinux/Commands</ulink>
- </para>
- </listitem>
- <listitem>
- <para>
- Details of confined domains:
- <ulink url='http://fedoraproject.org/wiki/SELinux/Domains'>http://fedoraproject.org/wiki/SELinux/Domains</ulink>
- </para>
- </listitem>
- </itemizedlist>
-</section>
-<section id="sn-Free-IPA">
- <title>Free IPA</title>
- <para>
- Free IPA is a centrally managed identity, policy, and audit installation.
- </para>
- <para>
- The IPA server installer assumes a relatively clean system, installing and configuring several services:
- </para>
- <itemizedlist>
- <listitem>
- <para>
- a Fedora Directory Server instance
- </para>
- </listitem>
- <listitem>
- <para>
- KDC
- </para>
- </listitem>
- <listitem>
- <para>
- Apache
- </para>
- </listitem>
- <listitem>
- <para>
- ntpd
- </para>
- </listitem>
- <listitem>
- <para>
- TurboGears
- </para>
- </listitem>
- </itemizedlist>
- <para>
- Some effort is made to be able to roll back the changes made but they are not guaranteed. Similarly the <command>ipa-client-install</command> tool overwrites PAM (<filename>/etc/pam.conf</filename>) and Kerberos (<filename>/etc/krb5.conf</filename>) configurations.
- </para>
- <para>
- IPA does not support other instances of Fedora Directory Server on the same machine at install time, even listening on different ports. In order to install IPA, other instances must be removed. IPA itself can handle this removal.
- </para>
- <para>
- There is currently no mechanism for migrating existing users into an IPA server.
- </para>
+ </section>
+
+ <section id="SELinux">
+ <title>SELinux</title>
+
<para>
- The server self-configures to be a client of itself. If the
+ The SELinux project pages have troubleshooting tips, explanations,
+ and pointers to documentation and references. Some useful links
+ include the following:
+ </para>
+
+ <itemizedlist>
+ <listitem>
+ <para>
+ New SELinux project pages:
+ <ulink url='http://fedoraproject.org/wiki/SELinux'>http://fedoraproject.org/wiki/SELinux</ulink>
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Troubleshooting tips:
+ <ulink url='http://fedoraproject.org/wiki/SELinux/Troubleshooting'>http://fedoraproject.org/wiki/SELinux/Troubleshooting</ulink>
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Frequently Asked Questions:
+ <ulink url='http://docs.fedoraproject.org/selinux-faq/'>http://docs.fedoraproject.org/selinux-faq/</ulink>
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Listing of SELinux commands:
+ <ulink url='http://fedoraproject.org/wiki/SELinux/Commands'>http://fedoraproject.org/wiki/SELinux/Commands</ulink>
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Details of confined domains:
+ <ulink url='http://fedoraproject.org/wiki/SELinux/Domains'>http://fedoraproject.org/wiki/SELinux/Domains</ulink>
+ </para>
+ </listitem>
+ </itemizedlist>
+ </section>
+
+ <section id="sn-Free-IPA">
+ <title>Free IPA</title>
+
+ <para>
+ Free IPA is a centrally managed identity, policy, and audit
+ installation.
+ </para>
+
+ <para>
+ The IPA server installer assumes a relatively clean system,
+ installing and configuring several services:
+ </para>
+
+ <itemizedlist>
+ <listitem>
+ <para>
+ a Fedora Directory Server instance
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ KDC
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Apache
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ ntpd
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ TurboGears
+ </para>
+ </listitem>
+ </itemizedlist>
+
+ <para>
+ Some effort is made to be able to roll back the changes made but
+ they are not guaranteed. Similarly the
+ <command>ipa-client-install</command> tool overwrites PAM
+ (<filename>/etc/pam.conf</filename>) and Kerberos
+ (<filename>/etc/krb5.conf</filename>) configurations.
+ </para>
+
+ <para>
+ IPA does not support other instances of Fedora Directory Server on
+ the same machine at install time, even listening on different
+ ports. In order to install IPA, other instances must be removed.
+ IPA itself can handle this removal.
+ </para>
+
+ <para>
+ There is currently no mechanism for migrating existing users into
+ an IPA server.
+ </para>
+
+ <para>
+ The server self-configures to be a client of itself. If the
Directory Server or KDC fail to start on bootup, boot into
single-user mode in order to resolve the issue.
</para>
- <para>
- For more information, refer to this feature page:
- </para>
- <para>
- <ulink url="http://fedoraproject.org/wiki/Features/freeIPA"></ulink>
- </para>
-</section>
-</section>
+ <para>
+ For more information, refer to this feature page:
+ </para>
+
+ <para>
+ <ulink url="http://fedoraproject.org/wiki/Features/freeIPA"></ulink>
+ </para>
+ </section>
+</section>
Index: Xorg.xml
===================================================================
RCS file: /cvs/docs/release-notes/devel/en_US/Xorg.xml,v
retrieving revision 1.25
retrieving revision 1.26
diff -u -r1.25 -r1.26
--- Xorg.xml 17 Mar 2008 01:57:40 -0000 1.25
+++ Xorg.xml 17 Mar 2008 20:32:52 -0000 1.26
@@ -1,93 +1,138 @@
<?xml version="1.0"?>
+
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN" "http://www.docbook.org/xml/4.4/docbookx.dtd">
<section id="sn-Xorg">
<title>X Window System (Graphics)</title>
-
<tip>
<title>Latest Release Notes on the Web</title>
<para>
- These release notes may be updated. Visit <ulink
- url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink>
- to view the latest release notes for Fedora.</para>
+ These release notes may be updated. Visit
+ <ulink
+ url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink>
+ to view the latest release notes for Fedora.
+ </para>
</tip>
-
<para>
- This section contains information related to the X Window System implementation, X.Org, provided with Fedora.
+ This section contains information related to the X Window System
+ implementation, X.Org, provided with Fedora.
</para>
+
<section id="sn-Faster-X-Start-up-and-Shutdown">
- <title>Faster X Start-up and Shutdown</title>
- <para>
- Fedora 9 features a number of changes designed to make X faster in starting and shutting down and to make other improvements. Full details of the project can be found through this feature page:
- </para>
- <para>
- <ulink url="http://fedoraproject.org/wiki/Features/OneSecondX" />.
- </para>
+ <title>Faster X Start-up and Shutdown</title>
+
+ <para>
+ Fedora 9 features a number of changes designed to make X faster in
+ starting and shutting down and to make other improvements. Full
+ details of the project can be found through this feature page:
+ </para>
+
+ <para>
+ <ulink url="http://fedoraproject.org/wiki/Features/OneSecondX" />.
+ </para>
</section>
<section id="sn-X-Configuration-Changes">
<title>X Configuration Changes</title>
+
<para>
- The X.Org 1.4.99 X server has been modified to automatically detect and configure most hardware, eliminating the need to modify the <filename>/etc/X11/xorg.conf</filename> configuration file. The only hardware configured by default in the <filename>xorg.conf</filename> configuration file written by <application>Anaconda</application> is:
+ The X.Org 1.4.99 X server has been modified to automatically
+ detect and configure most hardware, eliminating the need to modify
+ the <filename>/etc/X11/xorg.conf</filename> configuration file.
+ The only hardware configured by default in the
+ <filename>xorg.conf</filename> configuration file written by
+ <application>Anaconda</application> is:
</para>
+
<itemizedlist>
<listitem>
- <para>
- the graphics driver, and
- </para>
+ <para>
+ the graphics driver, and
+ </para>
</listitem>
<listitem>
- <para>
- the keyboard map
- </para>
+ <para>
+ the keyboard map
+ </para>
</listitem>
</itemizedlist>
+
<para>
All other hardware, such as monitors (both LCD and CRT), USB mice,
and touchpads, should be detected and configured automatically.
</para>
+
<para>
- The X server queries the attached monitor for supported resolution ranges,
- and attempts to pick the highest resolution available with the correct
- aspect ratio for the display. Set the preferred resolution in
- <menuchoice>
-<guimenu>System</guimenu><guisubmenu>Preferences</guisubmenu><guimenuitem>Screen
- Resolution</guimenuitem></menuchoice>, and the default resolution for the system in <menuchoice>
-<guimenu>System</guimenu><guisubmenu>Administration</guisubmenu><guimenuitem>Display</guimenuitem></menuchoice>.
+ The X server queries the attached monitor for supported resolution
+ ranges, and attempts to pick the highest resolution available with
+ the correct aspect ratio for the display. Set the preferred
+ resolution in <menuchoice>
+ <guimenu>System</guimenu><guisubmenu>Preferences</guisubmenu><guimenuitem>Screen
+ Resolution</guimenuitem></menuchoice>, and the default resolution
+ for the system in <menuchoice>
+ <guimenu>System</guimenu><guisubmenu>Administration</guisubmenu><guimenuitem>Display</guimenuitem></menuchoice>.
</para>
+
<para>
- If the <filename>/etc/X11/xorg.conf</filename> configuration file is not
- present, X automatically detects the appropriate driver, and assumes
- a 105-key US keyboard layout.
+ If the <filename>/etc/X11/xorg.conf</filename> configuration file
+ is not present, X automatically detects the appropriate driver,
+ and assumes a 105-key US keyboard layout.
</para>
</section>
<section id="sn-Intel-Driver-Notes">
<title>Intel Driver Notes</title>
+
<para>
- Fedora 9 contains two drivers for Intel Integrated Graphics Controllers:
+ Fedora 9 contains two drivers for Intel Integrated Graphics
+ Controllers:
</para>
+
<itemizedlist>
- <listitem>
- <para>The default <option>i810</option> driver, which contains support for Intel graphic chipsets up to and including i945 and i965.
- </para>
- </listitem>
- <listitem>
- <para>The experimental <option>intel</option> driver, which contains support for Intel graphic chipsets up to and including i945.
- </para>
- </listitem>
+ <listitem>
+ <para>
+ The default <option>i810</option> driver, which contains
+ support for Intel graphic chipsets up to and including i945
+ and i965.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ The experimental <option>intel</option> driver, which contains
+ support for Intel graphic chipsets up to and including i945.
+ </para>
+ </listitem>
</itemizedlist>
- <para>The <option>i810</option> driver is limited to resolutions available in the BIOS. For support for non-standard resolutions, such as those used in certain widescreen displays, use the <option>intel</option> driver. Switch drivers by running the <command>system-config-display</command> command, which is also available in the menu under <menuchoice><guimenu>System</guimenu><guisubmenu>Administration</guisubmenu><guimenuitem>Display</guimenuitem></menuchoice>.
+
+ <para>
+ The <option>i810</option> driver is limited to resolutions
+ available in the BIOS. For support for non-standard resolutions,
+ such as those used in certain widescreen displays, use the
+ <option>intel</option> driver. Switch drivers by running the
+ <command>system-config-display</command> command, which is also
+ available in the menu under
+ <menuchoice><guimenu>System</guimenu><guisubmenu>Administration</guisubmenu><guimenuitem>Display</guimenuitem></menuchoice>.
</para>
+
<para>
- We welcome feedback on the experimental <option>intel</option> driver. Please report success in <ulink url="http://bugzilla.redhat.com/bugzilla/">Bugzilla</ulink>, attaching the full output of the <command>lspci -vn</command> command for your machine. Given success reports, various chipsets may be switched to use the <option>intel</option> driver by default.
+ We welcome feedback on the experimental <option>intel</option>
+ driver. Please report success in
+ <ulink url="http://bugzilla.redhat.com/bugzilla/">Bugzilla</ulink>,
+ attaching the full output of the <command>lspci -vn</command>
+ command for your machine. Given success reports, various chipsets
+ may be switched to use the <option>intel</option> driver by
+ default.
</para>
-</section>
+ </section>
-<section id="sn-Third-Party-Video-Drivers">
+ <section id="sn-Third-Party-Video-Drivers">
<title>Third Party Video Drivers</title>
+
<para>
- Refer to the <ulink url="http://fedoraproject.org/wiki/Xorg/3rdPartyVideoDrivers">Xorg third-party drivers</ulink> page for detailed guidelines on using third-party video drivers.
+ Refer to the
+ <ulink url="http://fedoraproject.org/wiki/Xorg/3rdPartyVideoDrivers">Xorg
+ third-party drivers</ulink> page for detailed guidelines on using
+ third-party video drivers.
</para>
</section>
</section>
Index: WebServers.xml
===================================================================
RCS file: /cvs/docs/release-notes/devel/en_US/WebServers.xml,v
retrieving revision 1.14
retrieving revision 1.15
diff -u -r1.14 -r1.15
--- WebServers.xml 17 Mar 2008 07:14:44 -0000 1.14
+++ WebServers.xml 17 Mar 2008 20:32:52 -0000 1.15
@@ -1,15 +1,20 @@
<?xml version="1.0"?>
+
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN" "http://www.docbook.org/xml/4.4/docbookx.dtd">
<section id="sn-WebServers">
<title>Web Servers</title>
<tip>
- <title>Latest Release Notes on the Web</title>
- <para>
- These release notes may be updated. Visit <ulink url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink> to view the latest release notes for Fedora.</para>
+ <title>Latest Release Notes on the Web</title>
+ <para>
+ These release notes may be updated. Visit
+ <ulink url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink>
+ to view the latest release notes for Fedora.
+ </para>
</tip>
<section id="sn-dbd-driver">
<title>PostgreSQL DBD Driver</title>
+
<para>
Users of the <filename>mod_dbd</filename> module should note that
the <filename>apr-util</filename> DBD driver for PostgreSQL is now
@@ -19,42 +24,56 @@
<package>apr-util-mysql</package> package.
</para>
</section>
+
<section id="sn-turbogears-apps">
<title>TurboGears Applications</title>
- <para>SQLAlchemy has been updated to 0.4.x. TurboGears Applications
+
+ <para>
+ SQLAlchemy has been updated to 0.4.x. TurboGears Applications
developed using SQLAlchemy for their database layer will need to
- update their startup scripts. Instead of:</para>
- <screen><![CDATA[import pkg_resources
+ update their startup scripts. Instead of:
+ </para>
+<screen><![CDATA[import pkg_resources
pkg_resources.require('TurboGears')]]></screen>
- <para>the start script needs to have:</para>
- <screen><![CDATA[__requires__ = 'TurboGears[future]'
+ <para>
+ the start script needs to have:
+ </para>
+<screen><![CDATA[__requires__ = 'TurboGears[future]'
import pkg_resources]]></screen>
</section>
+
<section id="sn-Drupal">
- <title>Drupal</title>
- <para>
- Drupal has been updated from the 5.x series to 6.1. For details, refer to:
- </para>
- <para>
- <ulink url="http://drupal.org/drupal-6.1" />
- </para>
- <para>
- Remember to log in to your site as the admin user, and disable any third-party modules before upgrading this package. After upgrading the package:
- </para>
- <orderedlist>
- <listitem>
- <para>
- Copy <filename>/etc/drupal/default/settings.php.rpmsave</filename> to <filename>/etc/drupal/default/settings.php</filename>, and repeat for any additional sites' settings.php files.
- </para>
- </listitem>
- <listitem>
- <para>
- Browse to <ulink url="http://host/drupal/update.php" /> to run the upgrade script.
- </para>
- </listitem>
- </orderedlist>
- </section>
-</section>
+ <title>Drupal</title>
+ <para>
+ Drupal has been updated from the 5.x series to 6.1. For details,
+ refer to:
+ </para>
+ <para>
+ <ulink url="http://drupal.org/drupal-6.1" />
+ </para>
+ <para>
+ Remember to log in to your site as the admin user, and disable any
+ third-party modules before upgrading this package. After upgrading
+ the package:
+ </para>
+ <orderedlist>
+ <listitem>
+ <para>
+ Copy
+ <filename>/etc/drupal/default/settings.php.rpmsave</filename>
+ to <filename>/etc/drupal/default/settings.php</filename>, and
+ repeat for any additional sites' settings.php files.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Browse to <ulink url="http://host/drupal/update.php" /> to run
+ the upgrade script.
+ </para>
+ </listitem>
+ </orderedlist>
+ </section>
+</section>
Index: Virtualization.xml
===================================================================
RCS file: /cvs/docs/release-notes/devel/en_US/Virtualization.xml,v
retrieving revision 1.21
retrieving revision 1.22
diff -u -r1.21 -r1.22
--- Virtualization.xml 17 Mar 2008 00:50:39 -0000 1.21
+++ Virtualization.xml 17 Mar 2008 20:32:52 -0000 1.22
@@ -1,96 +1,143 @@
<?xml version="1.0"?>
+
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN" "http://www.docbook.org/xml/4.4/docbookx.dtd">
<section id="sn-Virtualization">
<title>Virtualization</title>
-
<tip>
<title>Latest Release Notes on the Web</title>
<para>
- These release notes may be updated. Visit <ulink
- url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink>
- to view the latest release notes for Fedora.</para>
+ These release notes may be updated. Visit
+ <ulink
+ url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink>
+ to view the latest release notes for Fedora.
+ </para>
</tip>
-
<para>
- Virtualization in Fedora 9 includes major changes, and new features, that continue to support the Xen and KVM platforms.
+ Virtualization in Fedora 9 includes major changes, and new features,
+ that continue to support the Xen and KVM platforms.
</para>
-<section id="sn-Kernel-Integration-Imrpovements">
- <title>Kernel Integration Improvements</title>
- <para>
- Previously, the Xen kernel was created by forward-porting Xen bits from the 2.6.18 kernel into the current Fedora kernel. This task was arduous and labor intensive, and resulted in the Xen kernel being several releases behind the bare-metal kernel. The inclusion of paravirt ops now makes this process unnecessary. Once paravirt ops is merged upstream, Xen will no longer require a separate kernel.
- </para>
- <para>
- Fullyvirtualized Linux guests now have 3 possible installation methods:
- </para>
- <itemizedlist>
- <listitem>
- <para>
- PXE boot from the network.
- </para>
- </listitem>
- <listitem>
- <para>
- Local CDROM drive / ISO image.
- </para>
- </listitem>
- <listitem>
- <para>
- Network install from a FTP/HTTP/NFS hosted distribution tree.
- </para>
- </listitem>
- </itemizedlist>
- <para>
- The latter allows for fully automated installation through the use of kickstart files. This provides parity between Xen HVM and KVM guests in terms of installation methods.
- </para>
- <para>
- For more information refer to: <ulink url="http://fedoraproject.org/wiki/Features/XenFullvirtKernelBoot" />.
- </para>
-</section>
-<section id="sn-Improved-Storage-Management">
- <title>Improved Storage Management</title>
- <para>
- Previously, Fedora introduced the ability to manage existing guest domains remotely using <package>libvirt</package>. It was not possible to create new guests due to the lack of storage management capabilities. In Fedora 9, new storage management can create and delete storage volumes from a remote host using <package>libvirt</package>.
- </para>
-</section>
-<section id="sn-PolicyKit-Integration">
- <title>PolicyKit Integration</title>
- <para>
- Previously, the <command>virt-manager</command> application ran as root when managing a local hypervisor, and used <command>consolehelper</command> to authenticate from a desktop session. Running GTK applications as root is bad practice. PolicyKit integration now permits running <command>virt-manager</command> as a regular user.
- </para>
-</section>
-<section id="sn-Improved-Remote-Authentication">
- <title>Improved Remote Authentication</title>
- <para>
- Previously, Fedora introduced support for secure remote management using TLS/SSL, and x509 certificates. Fedora 9 improves remote management capabilities by adding support for authentication by password database, Kerberos domain controller, or system authentication using PAM. This feature applies to all tools using <package>libvirt</package>.
- </para>
-</section>
-<section id="sn-Other-Improvements">
- <title>Other Improvements</title>
- <para>
- Fedora also includes the following virtualization improvements:
- </para>
- <itemizedlist>
- <listitem>
- <para>
- a new P2V tool, shipping as a Live CD, for converting a bare-metal install to a virtual guest
- </para>
- </listitem>
- <listitem>
- <para>
- a new tool, <command>xenner</command>, for running Xen-paravirtual kernels on top of KVM
- </para>
- </listitem>
- <listitem>
- <para>
- storage and network paravirtual-drivers for KVM guests
- </para>
- </listitem>
- <listitem>
- <para>
- full support for monitoring network and block statistics of QEMU and KVM in <package>libvirt</package> and <package>virt-top</package>, bringing parity with statistics monitoring, previously only available to Xen guests
- </para>
- </listitem>
- </itemizedlist>
-</section>
+
+ <section id="sn-Kernel-Integration-Imrpovements">
+ <title>Kernel Integration Improvements</title>
+
+ <para>
+ Previously, the Xen kernel was created by forward-porting Xen bits
+ from the 2.6.18 kernel into the current Fedora kernel. This task
+ was arduous and labor intensive, and resulted in the Xen kernel
+ being several releases behind the bare-metal kernel. The inclusion
+ of paravirt ops now makes this process unnecessary. Once paravirt
+ ops is merged upstream, Xen will no longer require a separate
+ kernel.
+ </para>
+
+ <para>
+ Fullyvirtualized Linux guests now have 3 possible installation
+ methods:
+ </para>
+
+ <itemizedlist>
+ <listitem>
+ <para>
+ PXE boot from the network.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Local CDROM drive / ISO image.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Network install from a FTP/HTTP/NFS hosted distribution tree.
+ </para>
+ </listitem>
+ </itemizedlist>
+
+ <para>
+ The latter allows for fully automated installation through the use
+ of kickstart files. This provides parity between Xen HVM and KVM
+ guests in terms of installation methods.
+ </para>
+
+ <para>
+ For more information refer to:
+ <ulink url="http://fedoraproject.org/wiki/Features/XenFullvirtKernelBoot" />.
+ </para>
+ </section>
+
+ <section id="sn-Improved-Storage-Management">
+ <title>Improved Storage Management</title>
+
+ <para>
+ Previously, Fedora introduced the ability to manage existing guest
+ domains remotely using <package>libvirt</package>. It was not
+ possible to create new guests due to the lack of storage
+ management capabilities. In Fedora 9, new storage management can
+ create and delete storage volumes from a remote host using
+ <package>libvirt</package>.
+ </para>
+ </section>
+
+ <section id="sn-PolicyKit-Integration">
+ <title>PolicyKit Integration</title>
+
+ <para>
+ Previously, the <command>virt-manager</command> application ran as
+ root when managing a local hypervisor, and used
+ <command>consolehelper</command> to authenticate from a desktop
+ session. Running GTK applications as root is bad practice.
+ PolicyKit integration now permits running
+ <command>virt-manager</command> as a regular user.
+ </para>
+ </section>
+
+ <section id="sn-Improved-Remote-Authentication">
+ <title>Improved Remote Authentication</title>
+
+ <para>
+ Previously, Fedora introduced support for secure remote management
+ using TLS/SSL, and x509 certificates. Fedora 9 improves remote
+ management capabilities by adding support for authentication by
+ password database, Kerberos domain controller, or system
+ authentication using PAM. This feature applies to all tools using
+ <package>libvirt</package>.
+ </para>
+ </section>
+
+ <section id="sn-Other-Improvements">
+ <title>Other Improvements</title>
+
+ <para>
+ Fedora also includes the following virtualization improvements:
+ </para>
+
+ <itemizedlist>
+ <listitem>
+ <para>
+ a new P2V tool, shipping as a Live CD, for converting a
+ bare-metal install to a virtual guest
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ a new tool, <command>xenner</command>, for running
+ Xen-paravirtual kernels on top of KVM
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ storage and network paravirtual-drivers for KVM guests
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ full support for monitoring network and block statistics of
+ QEMU and KVM in <package>libvirt</package> and
+ <package>virt-top</package>, bringing parity with statistics
+ monitoring, previously only available to Xen guests
+ </para>
+ </listitem>
+ </itemizedlist>
+ </section>
</section>
Index: SystemDaemons.xml
===================================================================
RCS file: /cvs/docs/release-notes/devel/en_US/SystemDaemons.xml,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -r1.8 -r1.9
--- SystemDaemons.xml 17 Mar 2008 06:20:49 -0000 1.8
+++ SystemDaemons.xml 17 Mar 2008 20:32:52 -0000 1.9
@@ -1,16 +1,28 @@
<?xml version="1.0"?>
+
<!DOCTYPE section PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN" "http://www.docbook.org/xml/4.4/docbookx.dtd">
<section id="sn-System-Services">
- <title>System Services</title>
- <tip>
- <para>
- These release notes may be updated. Visit <ulink url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink> to view the latest release notes for Fedora.</para>
- </tip>
- <section id="sn-Upstart">
- <title>Upstart</title>
- <para>
- Fedora 9 features the Upstart initialization system. All System V init scripts should run fine in compatibility mode. However, users who have made customizations to their <filename>/etc/inittab</filename> file will need to port those modifications to upstart. For information on writing upstart scripts, see the <ulink url="http://upstart.ubuntu.com/getting-started.html">Upstart Getting Started Guide</ulink>.
- </para>
- </section>
-</section>
\ No newline at end of file
+ <title>System Services</title>
+ <tip>
+ <para>
+ These release notes may be updated. Visit
+ <ulink url='http://docs.fedoraproject.org/release-notes/'>http://docs.fedoraproject.org/release-notes/</ulink>
+ to view the latest release notes for Fedora.
+ </para>
+ </tip>
+ <section id="sn-Upstart">
+ <title>Upstart</title>
+
+ <para>
+ Fedora 9 features the Upstart initialization system. All System V
+ init scripts should run fine in compatibility mode. However, users
+ who have made customizations to their
+ <filename>/etc/inittab</filename> file will need to port those
+ modifications to upstart. For information on writing upstart
+ scripts, see the
+ <ulink url="http://upstart.ubuntu.com/getting-started.html">Upstart
+ Getting Started Guide</ulink>.
+ </para>
+ </section>
+</section>
More information about the Fedora-docs-commits
mailing list