ACC SHELL

 <h1>openSUSE 11.3 Release Notes</h1>

 <p>Copyright © 2010 Novell, Inc.</p>
 <p>Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included as the file <tt>fdl.txt</tt>.</p>


 



 <p>The release notes are under constant development. Download the newest version as part of the Internet test or refer to <tt>http://www.suse.com/relnotes/i386/openSUSE/11.3/RELEASE-NOTES.en.html</tt>. </p>
<p>If you upgrade from an older version to this openSUSE release, see previous release notes listed here: <tt>http://en.opensuse.org/Release_Notes</tt></p>


 
 

 <p>These release notes cover the following areas:</p>

 <ul>
  
 <li>
   <p>Installation: Read this if you want to install the system from scratch.</p>
  </li>

 <li>
   <p>General: Information that everybody should read.</p>
  </li>

  <li><p>System Upgrade: Issues related to the process if you run a system upgrade from the previous release to this openSUSE version.</p></li>

  <li><p>Technical: This section contains a number of technical changes and enhancements for the experienced user.</p></li>
 </ul>




 
  <h2>Installation</h2>
  <p>N/A</p>
  

 
  <h2>General</h2>

  
  
   <h3>openSUSE Documentation</h3>

   <ul>
    <li><p>Installation Quick Start guides you step-by-step through the installation process.</p></li>
    <li><p>In Start-Up, find information about installation and basic system configuration.</p></li>
    <li><p>Reference covers deployment, administration, and system configuration in detail and explains how to set up various network services.</p></li>
    <li><p>KDE and GNOME Quick Start give a short introduction to the desktops and some key applications running on it.</p></li>
    <li><p>The KDE and GNOME User Guide guide you through using and configuring the desktops and help you perform key tasks.</p></li>

    <li>
     <p>The Application Guide introduces you to the key desktop applications such as browsers. e-mail clients, office applications and collaboration tools as well as graphics and multimedia applications.</p>
    </li>

    <li><p>The Security Guide introduces basic concepts of system security, covering both local and network security aspects.</p></li>
   </ul>
  

  
  
   <h3>LXDE—a New Desktop Environment</h3>

   <p>LXDE provides a lightweight desktop environment for old and obsolete computers with limited hardware resources.</p>

   <p>pcmanfm and libfm (LXDE File Manager and its main library) are released as RC1 versions and will get updated with the official updates (stable versions) as soon as possible.</p>

  

 


 
  <h2>System Upgrade</h2>

  
  
  <h3>Samba: smbfs Service Renamed to cifs</h3>
  
  <p>Since quite some time, smbfs is no longer part of the kernel. The cifs component has replaced it. To avoid confusion with the name of the service, we finally renamed it accordingly.</p>

  <p>During the upgrade of a system with an installed samba-client package, the state of the service will be saved, <tt>/etc/samba/smbfstab</tt> migrated to <tt>/etc/samba/cifstab</tt>, and the state of the service restored, if required.</p>
  

  
  
   <h3>Incompatible IPsec and strongSwan Changes</h3>

   <p>The "sha256"/"sha2_256" keywords now configure the kernel with 128-bit truncation, not the non-standard 96-bit truncation used by previous releases. If you depend on the 96-bit truncation scheme, use the new "sha256_96" keyword—this might be necessary, if you want to establish a connection with an old kernel (openSUSE 11.2 or earlier).</p>

   <p>In those case modify the connection settings to the old and non-standard 96-bit truncation in the <tt>ipsec.conf</tt> of the new system:</p>

   <pre>esp=aes128-sha256_96</pre>

   <p>There is also an incompatible strongSwan change. IPComp in tunnel mode was fixed to strip out the duplicated outer header. This change makes IPComp tunnel mode connections incompatible with previous releases. Disable compression on such tunnels.</p>
  

 


 
  <h2>Technical</h2>

  
  
   <h3>Initializing Graphics with KMS (Kernel Mode Setting)</h3>

   <p>With openSUSE 11.3 we are switching to KMS (Kernel Mode Setting) for Intel, ATI and NVIDIA graphics, which now is our default. If you encounter problems with the KMS driver support (intel, radeon, nouveau), disable KMS by adding <tt>nomodeset</tt> to the kernel boot command line. To set this permanently, add it to the kernel command line in <tt>/boot/grub/menu.lst</tt>. This option makes sure the appropriate kernel module (intel, radeon, nouveau) is loaded with <tt>modeset=0</tt> in <tt>initrd</tt>, i.e. KMS is disabled.</p>

   <p>In the rare cases when loading the DRM module from <tt>initrd</tt> is a general problem and unrelated to KMS, it is even possible to disable loading of the DRM module in <tt>initrd</tt> completely. For this set the <tt>NO_KMS_IN_INITRD</tt> sysconfig variable to <tt>yes</tt> via YAST, which then recreates <tt>initrd</tt> afterwards. Reboot your machine.</p>

   <p>On Intel without KMS the Xserver falls back to the <tt>fbdev</tt> driver (the <tt>intel</tt> driver only supports KMS); alternatively, there is the "intellegacy" driver (<tt>xorg-x11-driver-video-intel-legacy</tt> package) which still supports UMS (User Mode Setting). To use it, edit <tt>/etc/X11/xorg.conf.d/50-device.conf</tt> and change the driver entry to <tt>intellegacy</tt>.</p>

   <p>On ATI for current GPUs it falls back to <tt>radeonhd</tt>. On NVIDIA without KMS the <tt>nv</tt> driver is used (the <tt>nouveau</tt> driver only supports KMS).</p>
  


  
  
  
   <h3>Samba: mount.cifs setuid root</h3>

   <p>The setuid root capability of <tt>mount.cifs</tt> is re-enabled, because known security bugs in <tt>mount.cifs</tt> have been fixed.</p>
  

  
  
   <h3>SSH Public Key Authentication</h3>

   <p>In <tt>/etc/ssh/sshd_config</tt> relative paths are no longer allowed. When pointing to the <tt>authorized_keys</tt> file, use <tt>%h/</tt> in front of the path. Otherwise logging in using SSH Public Key Authentication will fail with openSSH 5.4 and later.</p>

   <p>Example:</p>

<pre>PubkeyAuthentication yes
AuthorizedKeysFile %h/.ssh/authorized_keys
</pre>