SUSE Linux Enterprise Desktop Documentation › Security Guide › Documentation Updates
ContentsContents
Security Guide
  1. About This Guide
  2. 1 Security and Confidentiality
  3. I Authentication
    1. 2 Authentication with PAM
    2. 3 Using NIS
    3. 4 Authentication Server and Client
    4. 5 LDAP—A Directory Service
    5. 6 Active Directory Support
    6. 7 Network Authentication with Kerberos
  4. II Local Security
    1. 8 Configuring Security Settings with YaST
    2. 9 Authorization with PolKit
    3. 10 Access Control Lists in Linux
    4. 11 Encrypting Partitions and Files
    5. 12 Certificate Store
    6. 13 Intrusion Detection with AIDE
  5. III Network Security
    1. 14 SSH: Secure Network Operations
    2. 15 Masquerading and Firewalls
    3. 16 Configuring a VPN Server
    4. 17 Managing X.509 Certification
  6. IV Confining Privileges with AppArmor
    1. 18 Introducing AppArmor
    2. 19 Getting Started
    3. 20 Immunizing Programs
    4. 21 Profile Components and Syntax
    5. 22 AppArmor Profile Repositories
    6. 23 Building and Managing Profiles with YaST
    7. 24 Building Profiles from the Command Line
    8. 25 Profiling Your Web Applications Using ChangeHat
    9. 26 Confining Users with pam_apparmor
    10. 27 Managing Profiled Applications
    11. 28 Support
    12. 29 AppArmor Glossary
  7. V The Linux Audit Framework
    1. 30 Understanding Linux Audit
    2. 31 Setting Up the Linux Audit Framework
    3. 32 Introducing an Audit Rule Set
    4. 33 Useful Resources
  8. A Documentation Updates
  9. B GNU Licenses
Navigation←→
SUSE Linux Enterprise Desktop Documentation › Security Guide › Documentation Updates
Top
←→
Applies to SUSE Linux Enterprise Desktop 12

A Documentation Updates

A.1 February 2015 (Documentation Maintenance Update)
A.2 October 2014 (Initial Release of SUSE Linux Enterprise Desktop 12)

This chapter lists content changes for this document since the release of SUSE® Linux Enterprise Desktop 11 SP3.

This manual was updated on the following dates:

A.1 February 2015 (Documentation Maintenance Update)

Bugfixes

A.2 October 2014 (Initial Release of SUSE Linux Enterprise Desktop 12)

General

  • Removed all KDE documentation and references because KDE is no longer shipped.

  • Removed all references to SuSEconfig, which is no longer supported (Fate#100011).

  • Move from System V init to systemd (Fate#310421). Updated affected parts of the documentation.

  • YaST Runlevel Editor has changed to Services Manager (Fate#312568). Updated affected parts of the documentation.

  • Removed all references to ISDN support, as ISDN support has been removed (Fate#314594).

  • Removed all references to the YaST DSL module as it is no longer shipped (Fate#316264).

  • Removed all references to the YaST Modem module as it is no longer shipped (Fate#316264).

  • Btrfs has become the default file system for the root partition (Fate#315901). Updated affected parts of the documentation.

  • The dmesg now provides human-readable time stamps in ctime()-like format (Fate#316056). Updated affected parts of the documentation.

  • syslog and syslog-ng have been replaced by rsyslog (Fate#316175). Updated affected parts of the documentation.

  • MariaDB is now shipped as the relational database instead of MySQL (Fate#313595). Updated affected parts of the documentation.

  • SUSE-related products are no longer available from http://download.novell.com but from http://download.suse.com. Adjusted links accordingly.

  • Novell Customer Center has been replaced with SUSE Customer Center. Updated affected parts of the documentation.

  • /var/run is mounted as tmpfs (Fate#303793). Updated affected parts of the documentation.

  • The following architectures are no longer supported: Itanium and x86. Updated affected parts of the documentation.

  • The traditional method for setting up the network with ifconfig has been replaced by wicked. Updated affected parts of the documentation.

  • A lot of networking commands are deprecated and have been replaced by newer commands (ip in most cases). Updated affected parts of the documentation.

    arp: ip neighbor
    ifconfig: ip addr, ip link
    iptunnel: ip tunnel
    iwconfig: iw
    nameif: ip link, ifrename
    netstat: ss, ip route, ip -s link, ip maddr
    route: ip route

  • Numerous small fixes and additions to the documentation, based on technical feedback.

Chapter 2, Authentication with PAM

The pam_pwcheck module has been replaced with pam_cracklib and pam_pwhistory. Updated chapter to reflect this change.

Chapter 4, Authentication Server and Client

Added a chapter about the new YaST authentication module for Kerberos and LDAP (Fate #316349). The chapter consists of two parts: Section 4.1, “Configuring an Authentication Server” and Section 4.2, “Configuring an Authentication Client with YaST (SSSD)” (Fate #308902).

Chapter 5, LDAP—A Directory Service

Updated chapter to reflect the changes in YaST regarding authentication setup (Fate #316349).

Chapter 7, Network Authentication with Kerberos

Updated chapter to reflect the changes in YaST regarding authentication setup (Fate #316349).

Chapter 9, Authorization with PolKit

Updated chapter to reflect major software updates.

Chapter 14, SSH: Secure Network Operations
Chapter 17, Managing X.509 Certification

The YaST CA module now allows to export key and certificate into different files. See Section 17.2.5, “Changing Default Values” (Fate#305490).

Part IV, “Confining Privileges with AppArmor”
Part V, “The Linux Audit Framework”

Numerous small fixes and additions, based on technical feedback.

Obsolete Content
Bugfixes
→Appendix B GNU Licenses←Chapter 33 Useful Resources
Print this page

© 2015 SUSE