openSUSE Factory Release Notes

Copyright © 2010 Novell, Inc.

Tätä dokumenttia saa kopioida, levittää ja/tai muokata GNU Free Documentation License -lisenssin ehtojen mukaisesti, kuten mainittu versiossa 1.2 tai missä tahansa myöhemmässä versiossa, jonka Free Software Foundation on julkaissut. Dokumentissa ei saa olla muuttumattomia osioita, eikä se saa olla etu- tai takakannen teksti. Kopio käyttöoikeussopimuksesta löytyy tiedostosta fdl.txt.

The release notes are under constant development. Download the newest version as part of the Internet test or refer to http://www.suse.com/relnotes/i386/openSUSE/11.3/RELEASE-NOTES.en.html.

Nämä julkaisutiedot sisältävät seuraavat kohdat:

Asennus
  1. N/A
Yleistä
  1. openSUSE dokumentaatio
  2. LXDE—a New Desktop Environment
System Upgrade
  1. Samba: smbfs Service Renamed to cifs
Tekninen
  1. Initializing Graphics with KMS (Kernel Mode Setting)
  2. Samba: mount.cifs no longer setuid root

Asennus

N/A

Yleistä

openSUSE dokumentaatio

LXDE—a New Desktop Environment

LXDE provides a lightweight desktop environment for old and obsolete computers with limited hardware resources.

System Upgrade

Samba: smbfs Service Renamed to cifs

Since quite some time, smbfs is no longer part of the kernel. The cifs component has replaced it. To avoid confusion with the name of the service, we finally renamed it accordingly.

During the upgrade of a system with an installed samba-client package, the state of the service will be saved, /etc/samba/smbfstab migrated to /etc/samba/cifstab, and the state of the service restored, if required.

Tekninen

Initializing Graphics with KMS (Kernel Mode Setting)

With openSUSE 11.3 we are switching to KMS (Kernel Mode Setting) for Intel, ATI and NVIDIA graphics, which now is our default. If you encounter problems with the KMS driver support (intel, radeon, nouveau), disable KMS by adding nomodeset to the kernel boot command line. To set this permanently, add it to the kernel command line in /boot/grub/menu.lst. This option makes sure the appropriate kernel module (intel, radeon, nouveau) is loaded with modeset=0 in initrd, i.e. KMS is disabled.

In the rare cases when loading the DRM module from initrd is a general problem and unrelated to KMS, it is even possible to disable loading of the DRM module in initrd completely. For this set the NO_KMS_IN_INITRD sysconfig variable to yes via YAST, which then recreates initrd afterwards. Reboot your machine.

On Intel without KMS the Xserver falls back to the fbdev driver (the intel driver only supports KMS). On ATI for current GPUs it falls back to radeonhd. On NVIDIA without KMS the nv driver is used (the nouveau driver only supports KMS).

Samba: mount.cifs no longer setuid root

The mount.cifs program that is being used to mount Samba/CIFS shares will not be allowed to be run as a setuid root program. mount.cifs has been the subject of several security bugs that have arisen due to some of the users using it as a setuid root program. For e.g., tools like smb4k on the distribution require mount.cifs setuid root. So there is a chance that users of such tools set the setuid bit. This program has not been properly audited for security and the Samba team strongly recommends that it not be installed as a setuid root program at this time.

To make that very clear, this release forcibly disables the ability for mount.cifs to run as a setuid root program. People are welcome to trivially patch this out, by setting CIFS_DISABLE_SETUID_CHECK to 1, but they do so at their own peril.

A security audit and redesign of this program is in progress by the Samba Team.