Fedora continues to improve its many proactive security features.

http://fedoraproject.org/wiki/Security/Features

The SELinux project pages have troubleshooting tips, explanations, and pointers to documentation and references. Some useful links include the following:

Different roles are now available, to allow finer-grained access control:

Browser plug-ins wrapped with nspluginwrapper, which is the default, are confined by SELinux policy.

Sectool provides users with a tool that can check their systems for security issues. There are libraries included that allow for the customization of system tests. More information can be found at the project home:

https://fedorahosted.org/sectool

A general introduction to the many proactive security features in Fedora, current status, and policies is available at http://fedoraproject.org/wiki/Security.

Fedora 10 features the Upstart initialization system. All System V init scripts should run fine in compatibility mode. However, users who have made customizations to their /etc/inittab file need to port those modifications to upstart. For information on how upstart works, refer to the init(8) and initctl(8) man pages. For information on writing upstart scripts, refer to the events(5) man page, and also the "Upstart Getting Started Guide":

http://upstart.ubuntu.com/getting-started.html

Due to the change of init systems, it is recommended that users who do an upgrade on a live file system to Fedora 9, reboot soon afterwards.

Fedora 10 features NetworkManager. NetworkManager 0.7 provides improved mobile broadband support, including GSM and CDMA devices, and now supports multiple devices, ad-hoc networking for sharing connections, and the use of system-wide network configuration. It is now enabled by default on all installations. When using NetworkManager, be aware of the following:

Autofs is no longer installed by default. Users who wish to use Autofs can choose it from the System Tools group in the installer, or with the package installation tools.

Varnish is updated to version 2.0. The VCL syntax has changed from version 1.x. Users who upgrade from 1.x must change their vcl files according to README.redhat. The most important changes are:

The kernel-xen package has been obsoleted by the integration of paravirtualization operations in the upstream kernel. The kernel package in Fedora 10 supports booting as a guest domU, but will not function as a dom0 until such support is provided upstream. The most recent Fedora release with dom0 support is Fedora 8.

Booting a Xen domU guest within a Fedora 10 host requires the KVM based xenner. Xenner runs the guest kernel and a small Xen emulator together as a KVM guest.

	KVM requires hardware virtualization features in the host system.
	Systems lacking hardware virtualization do not support Xen guests at this time.

For more information refer to:

Advances in libvirt now provide the ability to list, create, and delete storage volumes on remote hosts. This includes the ability to create raw sparse and non-sparse files in a directory, allocate LVM logical volumes, partition physical disks, and attach to iSCSI targets.

This enables the virt-manager tool to remotely provision new guest domains, and manage the storage associated with them. It provides improved SELinux integration, since the APIs ensure that all storage volumes have the correct SELinux security context when being assigned to a guest.

Features

Improvements in Virtualization storage management have enabled the creation of guests on remote host systems. By leveraging Avahi, systems supporting libvirt can be automatically detected by virt-manager. Upon detection guests can be provisioned on the remote system.

Installations can be automated with the help of cobbler and koan. Cobbler is a Linux installation server that allows for rapid setup of network installation environments. Network installs can be configured for PXE boot, reinstallations, media-based net-installs, and virtualized guest installs. Cobbler uses a helper program, koan, for reinstallation and virtualization support.

For further details refer to:

Fedora also includes the following virtualization improvements:

	virt-mem is experimental.
	Only 32 bit guests are supported at this time.

	Deprecated or out of date content?
	This content may be deprecated or out of date, it has not been updated since the Fedora 9 release notes.

Users of the mod_dbd module should note that the apr-util DBD driver for PostgreSQL is now distributed as a separate dynamically-loaded module. The driver module is now included in the apr-util-pgsql package. A MySQL driver is now also available, in the apr-util-mysql package.

Drupal has been updated to 6.4. For details, refer to:

http://drupal.org/drupal-6.4

If your installation is updated to the 6.4 version in Fedora 9, skip the following step.

When upgrading from earlier versions, remember to log in to your site as the admin user, and disable any third-party modules before upgrading this package. After upgrading the package:

Also, several modules are now available: drupal-date, -cck, -views, and -service_links.

By default, the Sendmail mail transport agent (MTA) does not accept network connections from any host other than the local computer. To configure Sendmail as a server for other clients:

The compat-gcc-34 package has been included for compatibility reasons:

https://www.redhat.com/archives/fedora-devel-list/2006-August/msg00409.html

Refer to Section 8.5, “KDE 3 Development Platform and Libraries”.