LinuxWorld.com - sys-con.com's archive of magazines - SYS-CON ...

SYSTEMSFor Java, Fedora Core 5 now includes afree Open Source Java-like environmentconsisting of three packages: GNU Javaruntime (libgcj), the Eclipse Java compiler(ecj), and a compatibility package containingwrappers and links (java-gcj-compat).This lets applications like OpenOffice andEclipse support Java without having toinstall the Java Runtime Environment fromSun. For Java runtime support install thejava-1.4.2-gcj-compat package; for developmentuse the development package. Seewww.fedoraproject.org/wiki/JavaFAQ formore details.FIGURE 3FEDORA CORE 5 DESKTOP WITH NEW FEDORA LOGOS, AND BEAGLE, DESKBAR AND EKIGAFedora Core 5 will use Gnome 2.14. Gnome2.14 features include interface changes tonew applications like Ekiga (voice/video IP)and Deskbar (filesearch) as well as efficienciesin load time and memory use makingfor a faster response time. GEdit has beenreworked to adhere to the Multiple DocumentationInterface specs. New tools likeF-Spot image and camera mangers andBeagle search tool are emphasized (both are.NET Mono-supported packages).Browsing Windows shares and remoteprinters with Samba is now enabled fromGnome through the Gnome virtual filemanager. In Fedora Core 5, the firewall andSamba Windows browsing are compatible.You can now use system-config-securitylevelto enable Samba Windows browsing(the default setting).The terminal window is no longer part ofthe desktop menu. You’ll find it in Applications|Accessories. A recommended terminalpackage is nautilus-open-terminal, easilyinstalled with YUM.Screensavers are no longer installed bydefault. They’re available from the Extrasrepository.New ApplicationsThe F-Spot Photo Manager provides asimple and powerful way to manage, display,and import your photos and images.Photos can be organized by different categoriessuch as events, people, and places.You can do standard display operationslike rotation or full-screen viewing, alongwith slide shows. Image editing support isprovided. (see Figure 4)For administration, you have System Tapfor analyzing performance bottlenecks andFrysk for analyzing running processes.With system-config-cluster, you can nowmanage GFS file systems using a simpleGUI interface.A preview release of the Gnome PowerManager is available, useful for managinglaptop power usage.FIGURE 4F-SPOT APPLICATIONSThe SE Linux Reference PolicySE Linux on Fedora Core 5 provides threepossible policies: MLS, strict, and targeted.All are variations of a basic reference policyinstead of the two separate targeted andstrict policies used in previous editions (seeserefpolicy.sourceforge.net). The SE Linuxreference policy project aims to provide abasic policy that can be easily adapted andexpanded as needed. The SE Linux referencepolicy configures SE Linux into modulesthat can be handled separately. You stillhave strict and targeted directories in your/etc/selinux, but they now each contain amodules directory. It is here that you’ll findyour SE Linux configurations. You can alsohave an mls policy for multi-layer security.The targeted policy is installed by default.To do your own configuration, you nowhave to download the source code fileselinux-policy from the SRPMS directoryfrom the Fedora Core repository. Documentationfor using the source files is in anothersource SRPMS file called selinux-doc.SE Linux for Fedora Core 5 now featuresboth multi-layer and multi-category security.Multi-layer security (MLS) provides amore refined security access method. MLSadds a security level value to resources.Only users with access to certain levels canaccess the corresponding files and applications.Access becomes more refined, insteadof an all or nothing situation. Multi-categorysecurity (MCS) extends SE Linux to useby both administrators and users. Users canset categories that can restrict and controlaccess to their files and applications.For GUI SELinux tools you have apol,the Security Policy Analysis Tool, sediffxfor policy differences, and seaudit forexamining the audit logs. All are listed inthe Administration menu and are part theAPRIL 2006 26 www.LinuxWorld.com