release-notes/devel/en_US Security.xml,1.14,1.15

[Paul W. Frields (pfrields)]

Author: pfrields

Update of /cvs/docs/release-notes/devel/en_US
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv23656

Modified Files:
	Security.xml 
Log Message:
Sync changes from wiki for F8 GA.



Index: Security.xml
===================================================================
RCS file: /cvs/docs/release-notes/devel/en_US/Security.xml,v
retrieving revision 1.14
retrieving revision 1.15
diff -u -r1.14 -r1.15
--- Security.xml	18 May 2007 00:40:19 -0000	1.14
+++ Security.xml	8 Oct 2007 23:10:13 -0000	1.15
@@ -16,6 +16,46 @@
     This section highlights various security items from Fedora.
   </para>
 
+  <section id="sn-Security-Enhancements">
+    <title>Security Enhancements</title>
+    <itemizedlist>
+      <listitem>
+	<para>Fedora continues to improve its many proactive <ulink
+	    url="http://fedoraproject.org/wiki/Security/Features">security 
+	    features</ulink>, and FORTIFY_SOURCE has now been <ulink
+	    url="https://www.redhat.com/archives/fedora-devel-announce/2007-September/msg00015.html">enhanced</ulink> 
+	  to cover C++ in addition to C, which prevents many security
+	  exploits.</para>
+      </listitem>
+      <listitem>
+	<para>A brand new graphical firewall configuration tool,
+	  <package>system-config-firewall</package>, replaces
+	  <package>system-config-securitylevel</package>.</para>
+      </listitem>
+      <listitem>
+	<para>This release offers <ulink
+	    url="http://danwalsh.livejournal.com/13376.html">Kiosk</ulink> 
+	  functionality via SELinux, among many new enhancements and
+	  security policy changes.</para>
+      </listitem>
+      <listitem>
+	<para>The <package>glibc</package> package in Fedora 8 now has
+	  <ulink
+	    url="http://people.redhat.com/drepper/sha-crypt.html">support</ulink> 
+	  for passwords using SHA256 and SHA512 hashing. Before only DES
+	  and MD5 were available. The tools to create passwords have not
+	  been extended yet, but if such passwords are created in others
+	  ways, <package>glibc</package> will recognize and honor
+	  them.</para>
+      </listitem>
+      <listitem>
+	<para>Secure remote management capability is now provided for
+	  Xen, KVM, and QEMU in Fedora 8 <ulink
+	    url="http://berrange.com/personal/diary/2007/08/fedora-8-virtualization-work-in">virtualization</ulink>.</para>
+      </listitem>
+    </itemizedlist>
+  </section>
+
   <section id="sn-General-Information">
     <title>General Information</title>
     <para>