I have attached the vendor release notes .
The www.scientificlinux.org site should be visible on Friday. It was
blocked at our firewall before.
-connie sieh
On Wed, 8 Sep 2004, csieh wrote:
> Scientific Linux (SL) Release 30rolling September 8, 2004
>
> Please send bug reports to the bug tracker that is at
>
> http://www.scientificlinux.org
>
> and suggestions to
>
> [log in to unmask]
>
> This is the first test release based on Update 3. Please test and let us know
> what to fix. We are starting with i386 as it is the most commonly used arch.
> The other arches will follow shortly.
>
> There is a new web page for Scientific Linux. It is a Plone content management
> system. More info on this soon. Have a look around.
>
> http://www.scientificlinux.org
>
> Download location is
>
> ftp://ftp.scientificlinux.org/linux/scientific/30rolling/
>
> RedHat added the following packages in Update 3
>
> amtu-0.1-6RHEL.i386.rpm
> authd-1.4.1-1.rhel3.i386.rpm
> diskdumputils-0.4.0-1.i386.rpm
> eal3-certification-0.7-1.noarch.rpm
> eal3-certification-doc-0.7-1.noarch.rpm
> evolution-connector-1.4.7-5.i386.rpm
> nss_db-2.2-20.4.i386.rpm
> nss_db-compat-2.2-20.4.i386.rpm
> openoffice.org-style-gnome-1.1.0-16.9.EL.i386.rpm
> rpm-libs-4.2.3-10.i386.rpm
> up2date-update-4.2.38-1.i386.rpm
> bind-libs-9.2.4-EL3_10.i386.rpm
> bootparamd-0.17-17.i386.rpm
>
> openafs
>
> kernel-module-openafs-2.4.21-20.EL-1.2.11-15.7.SL.athlon.rpm
> kernel-module-openafs-2.4.21-20.EL-1.2.11-15.7.SL.i686.rpm
> kernel-module-openafs-2.4.21-20.ELsmp-1.2.11-15.7.SL.athlon.rpm
> kernel-module-openafs-2.4.21-20.ELsmp-1.2.11-15.7.SL.i686.rpm
>
> New kernel so new kernel-module-openafs
>
> openafs-1.2.11-15.7.SL.i386.rpm
> openafs-client-1.2.11-15.7.SL.i386.rpm
> openafs-compat-1.2.11-15.7.SL.i386.rpm
> openafs-debuginfo-1.2.11-15.7.SL.i386.rpm
> openafs-devel-1.2.11-15.7.SL.i386.rpm
> openafs-kernel-source-1.2.11-15.7.SL.i386.rpm
> openafs-kpasswd-1.2.11-15.7.SL.i386.rpm
> openafs-krb5-1.2.11-15.7.SL.i386.rpm
> openafs-server-1.2.11-15.7.SL.i386.rpm
>
> release 1.2.11-15.7 has the following changes
>
> Updated CellServDB
>
> -dynroot and -fakestat are on by default.
> To turn these off edit the file /etc/sysconfig/afs
>
> These are all of the updates since 3.0.2 . Most are from Update 3, the
> rest are the erratas since 3.0.2 .
>
> at-3.1.8-48.ent.i386.rpm
> autofs-4.1.3-12.i386.rpm
> bash-2.05b-29.0.3.i386.rpm
> bind-9.2.4-EL3_10.i386.rpm
> bind-utils-9.2.4-EL3_10.i386.rpm
> bison-1.875c-2.EL.i386.rpm
> cdda2wav-2.01.0.a32-0.EL3.1.i386.rpm
> cdrecord-2.01.0.a32-0.EL3.1.i386.rpm
> chkconfig-1.3.11-0.3.i386.rpm
> control-center-2.2.0.1-13.i386.rpm
> cpp-3.2.3-39.i386.rpm
> cpp-3.2.3-42.i386.rpm
> crash-3.8-3.i386.rpm
> cups-1.1.17-13.3.12.i386.rpm
> cups-devel-1.1.17-13.3.12.i386.rpm
> cups-libs-1.1.17-13.3.12.i386.rpm
> cvs-1.11.2-25.i386.rpm
> dev-3.3.12.3-1.i386.rpm
> ethereal-0.10.5-0.30E.2.i386.rpm
> ethereal-gnome-0.10.5-0.30E.2.i386.rpm
> ethtool-1.8-3.3.i386.rpm
> expect-5.38.0-92.2.i386.rpm
> file-roller-2.2.3-6.i386.rpm
> fontconfig-2.2.1-13.i386.rpm
> fontconfig-devel-2.2.1-13.i386.rpm
> FreeWnn-1.11-36.3.i386.rpm
> FreeWnn-libs-1.11-36.3.i386.rpm
> gaim-0.82.1-0.RHEL3.i386.rpm
> gcc-3.2.3-39.i386.rpm
> gcc-3.2.3-42.i386.rpm
> gcc-c++-3.2.3-39.i386.rpm
> gcc-c++-3.2.3-42.i386.rpm
> gcc-c++-ssa-3.5ssa-0.20030801.48.i386.rpm
> gcc-g77-3.2.3-39.i386.rpm
> gcc-g77-3.2.3-42.i386.rpm
> gcc-g77-ssa-3.5ssa-0.20030801.48.i386.rpm
> gcc-gnat-3.2.3-39.i386.rpm
> gcc-gnat-3.2.3-42.i386.rpm
> gcc-java-3.2.3-39.i386.rpm
> gcc-java-3.2.3-42.i386.rpm
> gcc-java-ssa-3.5ssa-0.20030801.48.i386.rpm
> gcc-objc-3.2.3-39.i386.rpm
> gcc-objc-3.2.3-42.i386.rpm
> gcc-objc-ssa-3.5ssa-0.20030801.48.i386.rpm
> gcc-ssa-3.5ssa-0.20030801.48.i386.rpm
> gdb-6.1post-1.20040607.17.i386.rpm
> glibc-2.3.2-95.27.i386.rpm
> glibc-2.3.2-95.27.i686.rpm
> glibc-common-2.3.2-95.27.i386.rpm
> glibc-devel-2.3.2-95.27.i386.rpm
> glibc-headers-2.3.2-95.27.i386.rpm
> glibc-kernheaders-2.4-8.34.1.i386.rpm
> glibc-profile-2.3.2-95.27.i386.rpm
> glibc-utils-2.3.2-95.27.i386.rpm
> gnome-panel-2.2.2.1-8.i386.rpm
> gnome-vfs2-2.2.5-2E.1.i386.rpm
> gnome-vfs2-devel-2.2.5-2E.1.i386.rpm
> grep-2.5.1-24.1.i386.rpm
> grub-0.93-4.3.i386.rpm
> gtk+-1.2.10-31.i386.rpm
> gtk+-devel-1.2.10-31.i386.rpm
> gtkhtml3-3.0.9-7.i386.rpm
> httpd-2.0.46-32.ent.3.i386.rpm
> httpd-2.0.46-38.ent.i386.rpm
> httpd-devel-2.0.46-32.ent.3.i386.rpm
> httpd-devel-2.0.46-38.ent.i386.rpm
> hwdata-0.101.12-1.noarch.rpm
> ImageMagick-5.5.6-5.1.i386.rpm
> imap-2002d-9.i386.rpm
> imap-utils-2002d-9.i386.rpm
> initscripts-7.31.16.EL-1.i386.rpm
> ipsec-tools-0.2.5-0.5.i386.rpm
> itcl-3.2-92.2.i386.rpm
> jpackage-utils-1.5.38-1jpp_1rh.noarch.rpm
> kernel-2.4.21-15.0.4.EL.athlon.rpm
> kernel-2.4.21-15.0.4.EL.i686.rpm
> kernel-2.4.21-20.EL.athlon.rpm
> kernel-2.4.21-20.EL.i686.rpm
> kernel-BOOT-2.4.21-15.0.4.EL.i386.rpm
> kernel-BOOT-2.4.21-20.EL.i386.rpm
> kernel-doc-2.4.21-15.0.4.EL.i386.rpm
> kernel-doc-2.4.21-20.EL.i386.rpm
> kernel-hugemem-2.4.21-15.0.4.EL.i686.rpm
> kernel-hugemem-2.4.21-20.EL.i686.rpm
> kernel-hugemem-unsupported-2.4.21-15.0.4.EL.i686.rpm
> kernel-hugemem-unsupported-2.4.21-20.EL.i686.rpm
> kernel-module-openafs-2.4.21-15.0.4.EL-1.2.11-15.5.SL.athlon.rpm
> kernel-module-openafs-2.4.21-15.0.4.EL-1.2.11-15.5.SL.i686.rpm
> kernel-module-openafs-2.4.21-15.0.4.ELsmp-1.2.11-15.5.SL.athlon.rpm
> kernel-module-openafs-2.4.21-15.0.4.ELsmp-1.2.11-15.5.SL.i686.rpm
> kernel-smp-2.4.21-15.0.4.EL.athlon.rpm
> kernel-smp-2.4.21-15.0.4.EL.i686.rpm
> kernel-smp-2.4.21-20.EL.athlon.rpm
> kernel-smp-2.4.21-20.EL.i686.rpm
> kernel-smp-unsupported-2.4.21-15.0.4.EL.athlon.rpm
> kernel-smp-unsupported-2.4.21-15.0.4.EL.i686.rpm
> kernel-smp-unsupported-2.4.21-20.EL.athlon.rpm
> kernel-smp-unsupported-2.4.21-20.EL.i686.rpm
> kernel-source-2.4.21-15.0.4.EL.i386.rpm
> kernel-source-2.4.21-20.EL.i386.rpm
> kernel-unsupported-2.4.21-15.0.4.EL.athlon.rpm
> kernel-unsupported-2.4.21-15.0.4.EL.i686.rpm
> kernel-unsupported-2.4.21-20.EL.athlon.rpm
> kernel-unsupported-2.4.21-20.EL.i686.rpm
> kernel-utils-2.4-8.37.6.i386.rpm
> kudzu-1.1.22.4-1.i386.rpm
> kudzu-devel-1.1.22.4-1.i386.rpm
> laus-0.1-65RHEL3.i386.rpm
> laus-devel-0.1-65RHEL3.i386.rpm
> laus-libs-0.1-65RHEL3.i386.rpm
> lha-1.14i-10.4.i386.rpm
> libcap-1.10-15.1.i386.rpm
> libcap-devel-1.10-15.1.i386.rpm
> libf2c-3.2.3-39.i386.rpm
> libf2c-3.2.3-42.i386.rpm
> libgcc-3.2.3-39.i386.rpm
> libgcc-3.2.3-42.i386.rpm
> libgcc-ssa-3.5ssa-0.20030801.48.i386.rpm
> libgcj-3.2.3-39.i386.rpm
> libgcj-3.2.3-42.i386.rpm
> libgcj-devel-3.2.3-39.i386.rpm
> libgcj-devel-3.2.3-42.i386.rpm
> libgcj-ssa-3.5ssa-0.20030801.48.i386.rpm
> libgcj-ssa-devel-3.5ssa-0.20030801.48.i386.rpm
> libgnat-3.2.3-39.i386.rpm
> libgnat-3.2.3-42.i386.rpm
> libgtop2-2.0.2-3.i386.rpm
> libmudflap-3.5ssa-0.20030801.48.i386.rpm
> libmudflap-devel-3.5ssa-0.20030801.48.i386.rpm
> libobjc-3.2.3-39.i386.rpm
> libobjc-3.2.3-42.i386.rpm
> libpng10-1.0.13-15.i386.rpm
> libpng-1.2.2-25.i386.rpm
> libpng-devel-1.2.2-25.i386.rpm
> libstdc++-3.2.3-39.i386.rpm
> libstdc++-3.2.3-42.i386.rpm
> libstdc++-devel-3.2.3-39.i386.rpm
> libstdc++-devel-3.2.3-42.i386.rpm
> libstdc++-ssa-3.5ssa-0.20030801.48.i386.rpm
> libstdc++-ssa-devel-3.5ssa-0.20030801.48.i386.rpm
> ltrace-0.3.32-3.EL.i386.rpm
> lvm-1.0.8-5.i386.rpm
> MAKEDEV-3.3.12.3-1.i386.rpm
> mdadm-1.5.0-9.i386.rpm
> metacity-2.4.55-7.1.i386.rpm
> mkisofs-2.01.0.a32-0.EL3.1.i386.rpm
> mod_auth_pgsql-2.0.1-4.ent.i386.rpm
> mod_authz_ldap-0.22-5.i386.rpm
> mod_ssl-2.0.46-32.ent.3.i386.rpm
> mod_ssl-2.0.46-38.ent.i386.rpm
> modutils-2.4.25-13.EL.i386.rpm
> modutils-devel-2.4.25-13.EL.i386.rpm
> ncompress-4.2.4-38.i386.rpm
> net-snmp-5.0.9-2.30E.6.i386.rpm
> net-snmp-devel-5.0.9-2.30E.6.i386.rpm
> net-snmp-perl-5.0.9-2.30E.6.i386.rpm
> net-snmp-utils-5.0.9-2.30E.6.i386.rpm
> nfs-utils-1.0.6-31EL.i386.rpm
> nptl-devel-2.3.2-95.27.i686.rpm
> nscd-2.3.2-95.27.i386.rpm
> nss_ldap-207-11.i386.rpm
> ntsysv-1.3.11-0.3.i386.rpm
> openldap-2.0.27-15.i386.rpm
> openldap-2.0.27-17.i386.rpm
> openldap-clients-2.0.27-15.i386.rpm
> openldap-clients-2.0.27-17.i386.rpm
> openldap-devel-2.0.27-15.i386.rpm
> openldap-devel-2.0.27-17.i386.rpm
> openldap-servers-2.0.27-15.i386.rpm
> openldap-servers-2.0.27-17.i386.rpm
> openmotif-2.2.3-3.RHEL3.i386.rpm
> openmotif-devel-2.2.3-3.RHEL3.i386.rpm
> openoffice.org-1.1.0-16.13.EL.i386.rpm
> openoffice.org-i18n-1.1.0-16.13.EL.i386.rpm
> openoffice.org-libs-1.1.0-16.13.EL.i386.rpm
> openssl-0.9.7a-33.12.i386.rpm
> openssl-0.9.7a-33.12.i686.rpm
> openssl-devel-0.9.7a-33.12.i386.rpm
> pam-0.75-58.i386.rpm
> pam-devel-0.75-58.i386.rpm
> parted-1.6.3-29.3.i386.rpm
> passwd-0.68-3.1.i386.rpm
> perl-5.8.0-88.7.i386.rpm
> perl-CGI-2.81-88.7.i386.rpm
> perl-CPAN-1.61-88.7.i386.rpm
> perl-DB_File-1.804-88.7.i386.rpm
> php-4.3.2-11.1.ent.i386.rpm
> php-4.3.2-14.ent.i386.rpm
> php-devel-4.3.2-11.1.ent.i386.rpm
> php-devel-4.3.2-14.ent.i386.rpm
> php-imap-4.3.2-11.1.ent.i386.rpm
> php-imap-4.3.2-14.ent.i386.rpm
> php-ldap-4.3.2-11.1.ent.i386.rpm
> php-ldap-4.3.2-14.ent.i386.rpm
> php-mysql-4.3.2-11.1.ent.i386.rpm
> php-mysql-4.3.2-14.ent.i386.rpm
> php-odbc-4.3.2-11.1.ent.i386.rpm
> php-odbc-4.3.2-14.ent.i386.rpm
> php-pgsql-4.3.2-11.1.ent.i386.rpm
> php-pgsql-4.3.2-14.ent.i386.rpm
> popt-1.8.2-10.i386.rpm
> postfix-2.0.16-14.RHEL3.i386.rpm
> ppp-2.4.1-14.1.i386.rpm
> procps-2.0.17-10.i386.rpm
> pvm-3.4.4-22.i386.rpm
> qt-3.1.2-13.4.i386.rpm
> qt-designer-3.1.2-13.4.i386.rpm
> qt-devel-3.1.2-13.4.i386.rpm
> qt-MySQL-3.1.2-13.4.i386.rpm
> rdist-6.1.5-35.30.1.i386.rpm
> readline-4.3-5.2.i386.rpm
> readline-devel-4.3-5.2.i386.rpm
> redhat-config-bind-2.0.0-14.2.noarch.rpm
> redhat-config-network-1.2.63-1.noarch.rpm
> redhat-config-network-tui-1.2.63-1.noarch.rpm
> redhat-config-samba-1.0.16-2.noarch.rpm
> redhat-config-securitylevel-1.2.9-2.i386.rpm
> redhat-config-securitylevel-tui-1.2.9-2.i386.rpm
> rhnlib-1.8-6.p22.noarch.rpm
> rhpl-0.110.6-1.i386.rpm
> rh-postgresql-7.3.6-7.i386.rpm
> rh-postgresql-contrib-7.3.6-7.i386.rpm
> rh-postgresql-devel-7.3.6-7.i386.rpm
> rh-postgresql-docs-7.3.6-7.i386.rpm
> rh-postgresql-jdbc-7.3.6-7.i386.rpm
> rh-postgresql-libs-7.3.6-7.i386.rpm
> rh-postgresql-pl-7.3.6-7.i386.rpm
> rh-postgresql-python-7.3.6-7.i386.rpm
> rh-postgresql-server-7.3.6-7.i386.rpm
> rh-postgresql-tcl-7.3.6-7.i386.rpm
> rh-postgresql-test-7.3.6-7.i386.rpm
> rpm-4.2.3-10.i386.rpm
> rpm-build-4.2.3-10.i386.rpm
> rpm-devel-4.2.3-10.i386.rpm
> rpm-python-4.2.3-10.i386.rpm
> rp-pppoe-3.5-4.1.i386.rpm
> rsync-2.5.7-5.3E.i386.rpm
> rusers-0.17-40.30.1.i386.rpm
> rusers-server-0.17-40.30.1.i386.rpm
> samba-3.0.4-6.3E.i386.rpm
> samba-3.0.6-2.3E.i386.rpm
> samba-client-3.0.4-6.3E.i386.rpm
> samba-client-3.0.6-2.3E.i386.rpm
> samba-common-3.0.4-6.3E.i386.rpm
> samba-common-3.0.6-2.3E.i386.rpm
> schedutils-1.3.0-5.i386.rpm
> sendmail-8.12.11-4.RHEL3.1.i386.rpm
> sendmail-cf-8.12.11-4.RHEL3.1.i386.rpm
> shadow-utils-4.0.3-20.05.i386.rpm
> sox-12.17.4-4.3.i386.rpm
> strace-4.5.6-1.EL.i386.rpm
> sysklogd-1.4.1-12.3.i386.rpm
> sysreport-1.3.7.2-1.noarch.rpm
> sysstat-4.0.7-4.EL3.3.i386.rpm
> tcl-8.3.5-92.2.i386.rpm
> tcllib-1.3-92.2.i386.rpm
> tclx-8.3-92.2.i386.rpm
> tix-8.1.4-92.2.i386.rpm
> tk-8.3.5-92.2.i386.rpm
> tk-devel-8.3.5-92.2.i386.rpm
> tux-3.2.19-2.i386.rpm
> up2date-4.2.33-1.i386.rpm
> up2date-4.2.38-1.i386.rpm
> up2date-gnome-4.2.33-1.i386.rpm
> up2date-gnome-4.2.38-1.i386.rpm
> vixie-cron-3.0.1-75.1.i386.rpm
> XFree86-100dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-4.3.0-68.EL.i386.rpm
> XFree86-75dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-base-fonts-4.3.0-68.EL.i386.rpm
> XFree86-cyrillic-fonts-4.3.0-68.EL.i386.rpm
> XFree86-devel-4.3.0-68.EL.i386.rpm
> XFree86-doc-4.3.0-68.EL.i386.rpm
> XFree86-font-utils-4.3.0-68.EL.i386.rpm
> XFree86-ISO8859-14-100dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-ISO8859-14-75dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-ISO8859-15-100dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-ISO8859-15-75dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-ISO8859-2-100dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-ISO8859-2-75dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-ISO8859-9-100dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-ISO8859-9-75dpi-fonts-4.3.0-68.EL.i386.rpm
> XFree86-libs-4.3.0-68.EL.i386.rpm
> XFree86-libs-data-4.3.0-68.EL.i386.rpm
> XFree86-Mesa-libGL-4.3.0-68.EL.i386.rpm
> XFree86-Mesa-libGLU-4.3.0-68.EL.i386.rpm
> XFree86-syriac-fonts-4.3.0-68.EL.i386.rpm
> XFree86-tools-4.3.0-68.EL.i386.rpm
> XFree86-truetype-fonts-4.3.0-68.EL.i386.rpm
> XFree86-twm-4.3.0-68.EL.i386.rpm
> XFree86-xauth-4.3.0-68.EL.i386.rpm
> XFree86-xdm-4.3.0-68.EL.i386.rpm
> XFree86-xfs-4.3.0-68.EL.i386.rpm
> XFree86-Xnest-4.3.0-68.EL.i386.rpm
> XFree86-Xvfb-4.3.0-68.EL.i386.rpm
> xinetd-2.3.12-6.3E.i386.rpm
> xscreensaver-4.10-6.i386.rpm
> ypserv-2.8-7.i386.rpm
>
> -Connie Sieh
> -Troy Dawson
>
Scientific Linux 3.0.3 Release Notes
----------------------------------------------------------------------
Introduction
The following topics are covered in this document:
o Changes to the Scientific Linux installation program
(Anaconda)
o General information
o Kernel-related information
o Changes to drivers and hardware support
o Changes to packages
Changes to the Scientific Linux Installation Program (Anaconda)
The following section includes information specific to the Scientific
Linux installation program, Anaconda.
Note
In order to upgrade an already-installed Scientific Linux 3.0.x system
to 3.0.3, you must use yum or apt to update those packages that
have changed. The use of Anaconda to upgrade to 3.0.3 is not supported.
Use Anaconda only to perform a fresh install of Scientific Linux 3.0.3.
General Information
This section contains general information not specific to any other
section of this document.
o The autofs package, which controls the operation of the automount
daemons running on Scientific Linux 3.0.x, has been updated to
version 4. This update provides full backward compatibility with
version 3. Additionally, it adds the following features:
o Browsable mounts (ghosting) -- Ghosting of map directories allows
you to see the directories in the autofs map without mounting
them. When they are accessed (such as when a directory listing is
requested) the map entry is mounted so that it is seen.
o Replicated Server support -- Replicated server functionality
allows the administrator to specify map entries that point to
multiple, replicated servers. The automount daemon attempts to
determine the best server to use for mounts by testing the
latency of an rpc_ping to each available server. Weights may also
be assigned to the servers, allowing for more administrator
control. Refer to the
/usr/share/doc/autofs-4.1.3/README.replicated-server file for
additional map format information.
o Executable maps -- A map can now be marked as executable. The
initscript that parses the auto.master map passes this as a
program map to the auto-mounter. A program map is called as a
script with the key as an argument. It may return no lines of
output if there is an error, or one or more lines containing a
map (with \ quoting line breaks). This feature is useful for
implementing /net functionality.
o Multi-mounts -- This feature allows the automount daemon to seek
multiple lookup methods in succession. For example, a lookup
could query NIS and file maps.
o Scientific Linux 3.0.3 has all the same code as 3.0.2 in the area of
Evaluated Assurance Level (EAL) 3+/Controlled Access Protection
Profile (CAPP) on the following platforms:
o Scientific Linux on the x86 architecture
o Scientific Linux on the x86, AMD64
For additional information regarding the auditing subsystem, refer to
the laus(7) man page.
Since its initial deployment in the Scientific Linux 3.0.2
kernel, the kernel for 3.0.3 contains additional modifications
that enable system-call auditing on additional architectures. When
auditing is not in use, these modifications are performance-neutral.
The kernel component provides access to the auditing facilities
through the character-special device /dev/audit. Through this device,
a user-space daemon (auditd) can enable or disable auditing and can
provide the kernel with the rulesets to be used to determine when a
system-call invocation must be logged. This device is also used by
auditd to retrieve audit records from the kernel for transfer to the
audit log. Refer to the audit(4) man page for information concerning
supported ioctl calls and /proc/ interfaces for managing and tuning
auditing behavior.
o The version of the httpd Web server included as part of
Scientific Linux 3.0.3 includes several significant changes:
o The mod_cgi module has been enhanced to correctly handle
concurrent output on stderr and stdout
o SSL environment variables defined by mod_ssl can be used directly
from mod_rewrite using the %{SSL:...} syntax. For example,
"%{SSL:SSL_CIPHER_USEKEYSIZE}" may expand to "128".
Similarly, SSL environment variables can be used directly from
mod_headers using the %{...}s syntax.
o The mod_ext_filter module is now included
o The minimal acceptable group id that will be used by suexec has
been lowered from 500 to 100. This allows the use of suexec with
users belonging to the "users" group.
Kernel-Related Information
This section contains information related to the Scientific Linux 3.0.3 kernel.
o Scientific Linux 3.0.3 includes a new kernel feature that
can ease the process of diagnosing system hangs. It uses the
hardware's NMI (Non-Maskable Interrupt) capability to force a kernel
panic.
To enable this feature, set the following system control parameter as
follows:
kernel.unknown_nmi_panic = 1
This can be done using the sysctl command (sysctl -w
kernel.unknown_nmi_panic=1) or by adding the above line to
/etc/sysctl.conf.
Once this feature is enabled (and the system is rebooted), a panic can
be forced by pressing the system's NMI button.
Systems that lack a button capable of generating a NMI can continue to
use the NMI watchdog, which will generate a NMI if the system should
lock up.
Note
This feature is not compatible with OProfile; should OProfile be
active, pressing the NMI button (or the use of the NMI watchdog) will
not result in a panic.
o Hardware IRQ balancing is enabled for Lindenhurst (Intel(R) E7520 and
Intel(R) E7320) and Tumwater (Intel(R) E7525) based chipset platforms.
Therefore, software IRQ balancing is disabled for these platforms in
the Scientific Linux 3.0.3 kernel.
o The Scientific Linux 3.0.3 kernel includes a new security
feature known as Exec-shield. Exec-shield is a security-enhancing
modification to the Linux kernel that makes large parts of
specially-marked programs -- including their stack -- not executable.
This can reduce the potential damage of some security holes, such as
buffer overflow exploits.
Exec-shield can also randomize the virtual memory addresses at which
certain binaries are loaded. This randomized VM mapping makes it more
difficult for a malicious application to improperly access code or
data based on knowledge of the code or data's virtual address.
Exec-shield's behavior can be controlled via the proc file system. Two
files are used:
o /proc/sys/kernel/exec-shield
o /proc/sys/kernel/exec-shield-randomize
The /proc/sys/kernel/exec-shield file controls overall Exec-shield
functionality, and can be manipulated using the following command:
echo <value> > /proc/sys/kernel/exec-shield
Where <value> is one of the following:
o 0 -- Exec-shield (including randomized VM mapping) is disabled
for all binaries, marked or not
o 1 -- Exec-shield is enabled for all marked binaries
o 2 -- Exec-shield is enabled for all binaries, regardless of
marking (To be used for testing purposes ONLY)
The default value for /proc/sys/kernel/exec-shield is 1.
The /proc/sys/kernel/exec-shield-randomize file controls whether
Exec-shield randomizes VM mapping, and can be manipulated using the
following command:
echo <value> > /proc/sys/kernel/exec-shield-randomize
Where <value> is one of the following:
o 0 -- Randomized VM mapping is disabled
o 1 -- Randomized VM mapping is enabled
The default value for /proc/sys/kernel/exec-shield-randomize is 1.
It is also possible to configure Exec-shield by including one (or
both) of the following lines in the /etc/sysctl.conf file:
kernel.exec-shield=<value>
kernel.exec-shield-randomize=<value>
(Where <value> is as previously described.)
Exec-shield can also be disabled at a system level by means of a
kernel boot option. Appending the following parameter to the "kernel"
line(s) in the /etc/grub.conf file will disable Exec-shield:
exec-shield=0
Note
Exec-shield functionality is available only to binaries that have been
built (and marked) using the toolchain (compiler, assembler, linker)
available with Scientific Linux 3.0.3. Binaries that have
been built using a different version of the toolchain can still be
used, but since they will not be marked, they will not take advantage
of Exec-shield.
Application developers should keep in mind that, in the majority of
cases, GCC correctly marks its generated code as being capable of
using Exec-shield. In the few instances (usually caused by inline
assembler or other nonportable code) where GCC non-optimally (or, more
rarely, incorrectly) marks generated code, it is possible to pass GCC
options to obtain the desired result.
The options controlling binary marking at the assembler level are:
-Wa,--execstack
-Wa,--noexecstack
The options controlling binary marking at the linker level are:
-Wl,-z,execstack
-Wl,-z,noexecstack
It is also possible to exert more fine-grained control by explicitly
disabling Exec-shield for a specific binary at run time. This is done
using the setarch command:
setarch i386 <binary>
(Where <binary> represents the binary to be run.) The binary is then
run without Exec-shield functionality.
The proc file /proc/self/maps can be used to observe Exec-shield's
effects. By using cat to display the current process's VM mapping, you
can see Exec-shield at work. Similarly, you can use setarch in
conjunction with cat to see how normal VM mapping differs from
Exec-shield's mapping.
o Scientific Linux 3.0.3 includes a new security-related
feature -- kernel support for certain new Intel CPUs that include the
NX (No eXecute) capability. NX technology restricts execution of
program code, making it significantly more difficult for hackers to
insert malicious code into the system by means of a buffer overrun.
When specific pages are marked as nonexecutable, the CPU is prevented
from executing code in those pages. This can be used to mark areas of
memory such as the stack or the heap (typical places where buffers are
stored.)
Note
Scientific Linux 3.0.x (originally available June-2004)
included NX support for the AMD64 platform.
Changes to Drivers and Hardware Support
This update includes bug fixes for a number of drivers. The more
significant driver updates are listed below. In some cases, the original
driver has been preserved under a different name, and is available as a
non-default alternative for organizations that wish to migrate their
driver configuration to the latest versions at a later time.
Note
The migration to the latest drivers should be completed before the next
Scientific Linux 3.0.x update is applied, because in most cases only one
older-revision driver will be preserved for each update.
These release notes also indicate which older-revision drivers have been
removed from this kernel update. These drivers have the base driver name
with the revision digits appended; for example, megaraid_2002.o. You must
remove these drivers from /etc/modules.conf before installing this kernel
update.
Keep in mind that the only definitive way to determine what drivers are
being used is to review the contents of /etc/modules.conf. Use of the
lsmod command is not a substitute for examining this file.
Adaptec RAID (aacraid driver)
o The aacraid driver has been updated from 1.1.2 to 1.1.5-2339
o The new driver is scsi/aacraid/aacraid.o
o The older driver has been preserved as
addon/aacraid_10102/aacraid_10102.o
LSI Logic RAID (megaraid driver)
Note
The megaraid2 driver includes support for a number of new host bus
adapters (certain PERC4 and Serial ATA products) that are not supported by
the megaraid driver. If your system contains these newer products
exclusively, the megaraid2 driver is loaded by default. If you have the
older products exclusively, the megaraid driver will continue to be the
default.
However, if you have a mix of old and new MegaRAID adapters, then the
driver that is selected depends on the order in which the adapters are
scanned. (Note that you cannot have both the megaraid and megaraid2
drivers loaded at the same time.) If the default driver on your system is
not the desired one, take one of the following actions:
o If you are installing the system, type the following command at the
boot prompt:
expert noprobe
Next, select the desired driver from the subsequent menu.
o If the system is already installed, edit /etc/modules.conf and change
the "alias scsi_hostadapter" lines referring to the megaraid or the
megaraid2 driver to the desired driver. Note that after making any
changes to /etc/modules.conf you must rebuild the initrd image; refer
to the mkinitrd man page for further details.
o The megaraid2 driver has been updated from v2.10.1.1 to v2.10.6-RH1
o The new driver is scsi/megaraid2.o
o The older driver has been preserved as
addon/megaraid_2101/megaraid2101.o
o The v2.00.9 driver has been removed
o The default driver remains the v1.18k driver (megaraid.o)
IBM ServeRAID (ips driver)
o The ips driver has been updated from 6.11.07 to 7.00.15
o The new driver is scsi/ips.o
o The older driver has been preserved as addon/ips_61107/ips_61107.o
o The ips 6.10.52 driver (ips_61052.o) has been removed
LSI Logic MPT Fusion (mpt* drivers)
o These drivers have been updated from 2.05.11.03 to 2.05.16
o The new drivers are located in message/fusion/
o The older drivers have been preserved in addon/fusion_20511
o The 2.05.05+ drivers (mpt*_20505.o) have been removed
Compaq SA53xx Controllers (cciss driver)
o The cciss driver has been updated from 2.4.50.RH1 to v2.4.52.RH1
QLogic Fibre Channel (qla2xxx driver)
o These drivers have been updated from 6.07.02-RH2 to 7.00.03-RH1
o The new drivers are located in addon/qla2200
o The older driver has been preserved in addon/qla2200_60702RH2
o The 6.06.00b11 drivers (qla2*00_60600b11.o) have been removed
Note
The QLA2100 adapter has been retired by QLogic. This adapter is no longer
supported by QLogic. Therefore, the driver is located in the
kernel-unsupported package.
Emulex Fibre Channel (lpfc driver)
o This driver has been added to the distribution. The version is 7.0.3
o The driver is located in addon/lpfc
Intel PRO/1000 (e1000 driver)
o This driver has been updated from 5.2.30.1-k1 to 5.2.52-k3
Intel PRO/100 (e100 driver)
o This driver has been updated from version 2.3.30-k1 to 2.3.43-k1
Broadcom Tigon3 (tg3 driver)
o This driver has been updated from v3.1 to v3.6RH
Changes to Packages
This section contains listings of packages that have been updated, added,
or removed from Scientific Linux 3.0.x as part of 3.0.3. Packages
that have been built for multiple architectures are listed with the target
architecture in parentheses.
Note
These package lists include packages from all variants of
Scientific Linux 3.0.x. Your system may not include every one of the packages
listed here.
The following packages have been updated from Scientific Linux 3.0.2:
o ImageMagick
o ImageMagick-c++
o ImageMagick-c++-devel
o ImageMagick-devel
o ImageMagick-perl
o MAKEDEV
o XFree86
o XFree86-100dpi-fonts
o XFree86-75dpi-fonts
o XFree86-ISO8859-14-100dpi-fonts
o XFree86-ISO8859-14-75dpi-fonts
o XFree86-ISO8859-15-100dpi-fonts
o XFree86-ISO8859-15-75dpi-fonts
o XFree86-ISO8859-2-100dpi-fonts
o XFree86-ISO8859-2-75dpi-fonts
o XFree86-ISO8859-9-100dpi-fonts
o XFree86-ISO8859-9-75dpi-fonts
o XFree86-Mesa-libGL
o XFree86-Mesa-libGLU
o XFree86-Xnest
o XFree86-Xvfb
o XFree86-base-fonts
o XFree86-cyrillic-fonts
o XFree86-devel
o XFree86-doc
o XFree86-font-utils
o XFree86-libs
o XFree86-libs-data
o XFree86-sdk
o XFree86-syriac-fonts
o XFree86-tools
o XFree86-truetype-fonts
o XFree86-twm
o XFree86-xauth
o XFree86-xdm
o XFree86-xfs
o anaconda
o anaconda-runtime
o arpwatch
o at
o autofs
o bash
o bind
o bind-chroot
o bind-devel
o bind-utils
o bison
o cdda2wav
o cdrecord
o cdrecord-devel
o chkconfig
o comps
o control-center
o cpp
o crash
o cups
o cups-devel
o cups-libs
o cvs
o dev
o dhclient
o dhcp
o dhcp-devel
o eclipse
o eclipse-lomboz
o elfutils
o elfutils-devel
o elfutils-libelf
o elfutils-libelf-devel
o ethereal
o ethereal-gnome
o ethtool
o expect
o expect-devel
o expectk
o file-roller
o gcc
o gcc-c++
o gcc-g77
o gcc-gnat
o gcc-java
o gcc-objc
o gdb
o glibc (i386)
o glibc (i686)
o glibc-common
o glibc-debug
o glibc-devel
o glibc-headers
o glibc-kernheaders
o glibc-profile
o glibc-utils
o gnome-panel
o grep
o grub
o gtk+
o gtk+-devel
o gtkhtml3
o gtkhtml3-devel
o httpd
o httpd-devel
o hwdata
o imap
o imap-devel
o imap-utils
o initscripts
o itcl
o jpackage-utils
o kdelibs
o kdelibs-devel
o kernel (athlon)
o kernel (i686)
o kernel-BOOT
o kernel-doc
o kernel-hugemem
o kernel-hugemem-unsupported
o kernel-smp (athlon)
o kernel-smp (i686)
o kernel-smp-unsupported (athlon)
o kernel-smp-unsupported (i686)
o kernel-source
o kernel-unsupported (athlon)
o kernel-unsupported (i686)
o kernel-utils
o krb5-devel
o krb5-libs
o krb5-server
o krb5-workstation
o laus
o laus-devel
o lha
o libcap
o libcap-devel
o libf2c
o libgcc
o libgcj
o libgcj-devel
o libgnat
o libgtop2
o libgtop2-devel
o libobjc
o libpcap
o libpng
o libpng-devel
o libpng10
o libpng10-devel
o libstdc++
o libstdc++-devel
o ltrace
o lvm
o mdadm
o metacity
o mkisofs
o mod_auth_pgsql
o mod_authz_ldap
o mod_ssl
o modutils
o modutils-devel
o ncompress
o net-snmp
o net-snmp-devel
o net-snmp-perl
o net-snmp-utils
o nfs-utils
o nptl-devel
o nscd
o nss_ldap
o ntp
o ntsysv
o openldap
o openldap-clients
o openldap-devel
o openldap-servers
o openmotif
o openmotif-devel
o openoffice.org
o openoffice.org-i18n
o openoffice.org-libs
o openssl (i386)
o openssl (i686)
o openssl-devel
o openssl-perl
o pam
o pam-devel
o parted
o parted-devel
o passwd
o perl
o perl-CGI
o perl-CPAN
o perl-DB_File
o perl-suidperl
o php
o php-devel
o php-imap
o php-ldap
o php-mysql
o php-odbc
o php-pgsql
o popt
o postfix
o ppp
o prelink
o procps
o pvm
o pvm-gui
o qt
o qt-MySQL
o qt-ODBC
o qt-PostgreSQL
o qt-designer
o qt-devel
o rdist
o readline
o readline-devel
o redhat-config-bind
o redhat-config-kickstart
o redhat-config-network
o redhat-config-network-tui
o redhat-config-proc
o redhat-config-securitylevel
o redhat-config-securitylevel-tui
o rh-postgresql
o rh-postgresql-contrib
o rh-postgresql-devel
o rh-postgresql-docs
o rh-postgresql-jdbc
o rh-postgresql-libs
o rh-postgresql-pl
o rh-postgresql-python
o rh-postgresql-server
o rh-postgresql-tcl
o rh-postgresql-test
o rhnlib
o rhpl
o rp-pppoe
o rpm
o rpm-build
o rpm-devel
o rpm-python
o rpmdb-redhat
o rsync
o rusers
o rusers-server
o samba
o samba-client
o samba-common
o samba-swat
o schedutils
o sendmail
o sendmail-cf
o sendmail-devel
o sendmail-doc
o shadow-utils
o squid
o squirrelmail
o strace
o sysklogd
o sysstat
o tcl
o tcl-devel
o tcl-html
o tcllib
o tclx
o tcpdump
o tix
o tk
o tk-devel
o tux
o unixODBC
o unixODBC-devel
o unixODBC-kde
o up2date
o up2date-gnome
o utempter
o vixie-cron
o xemacs
o xemacs-el
o xemacs-info
o xinetd
o xscreensaver
o ypserv
The following packages have been added to Scientific Linux 3.0.3:
o amtu
o anacron
o authd
o bind-libs
o bootparamd
o diskdumputils
o eal3-certification
o eal3-certification-doc
o eclipse-rhaps-develserver
o evolution-connector
o laus-libs
o nss_db
o nss_db-compat
o qt-config
The following packages have been removed from Scientific Linux 3.0.3:
o java-javadoc
( x86 )
|