1 \u5b89\u88c5
\nKdump \uff0c kernel crash dumping\u53ef\u4ee5\u5728\u5b89\u88c5\u65f6\u914d\u7f6e\u4e86\uff0c\u4f60\u53ef\u4ee5\u914d\u7f6e\u662f\u5426\u542f\u7528\uff0c\u4ee5\u53ca\u5b83\u7684\u5927\u5c0f\u7b49
\nkickstart \u652f\u6301\u4e86–profile=\u9009\u9879\uff0c\u8be5\u9009\u9879\u53ef\u4ee5\u8ba9\u4f60\u8bbe\u7f6e\u201c\u7626\u201d\u903b\u8f91\u5377\u3002\uff08Thin Logical volumes\uff09\u5982\u679c\u4f7f\u7528\uff0c\u8981\u5305\u62ecdata\u548cmetadata\u3002\u6240\u8c13\u7626\u5377\u662f\u6307\u4f60\u53ef\u4ee5\u9884\u5206\u914d\u4e00\u4e2a\u865a\u62df\u7684\u903b\u8f91\u5377\u5bb9\u91cf\u5927\u5c0f\uff0c\u8fd9\u4e2a\u5bb9\u91cf\u4e5f\u53ea\u662f\u5728\u4f60\u5199\u5165\u5b9e\u9645\u6570\u636e\u65f6\u624d\u5206\u914d\u7269\u7406\u7a7a\u95f4\u7ed9\u8be5\u5377\u3002data\u662f\u7528\u6765\u5b58\u50a8\u5b9e\u9645\u7684\u6570\u636e\uff0c\u800cmetadata\u5143\u6570\u636e\u5377\u662f\u8bb0\u5f55\u4e00\u4e9b\u7626\u5377\u4e2d\u6bcf\u4e2a\u5757\u6570\u636e\u7684\u6240\u5c5e\u5173\u7cfb\u3002\uff08\u7d22\u5f15\uff09
\nkickstart –autoscreenshot \u9009\u9879\u662f\u652f\u6301\u5b89\u88c5\u8fc7\u7a0b\u4e2d\u7684\u622a\u56fe\u529f\u80fd
\n–bridgeslaves= \u9009\u9879\u53ef\u4ee5\u5c06\u8bbe\u5907\u6dfb\u52a0\u5230\u6865\u8bbe\u5907\u4e0a\u3002\u5982\u679c\u542f\u7528–device.
\nbootloader –disabled \u53ef\u4ee5\u4e0d\u5b89\u88c5bootloader
\n%packages –nocore \u8be5\u9009\u9879\u53ef\u4ee5\u4e0d\u5b89\u88c5core\u7ec4\uff08@core\uff0c\u5e94\u8be5\u662f\u4e3acontainer\u51c6\u5907\u7684\uff09
\n2 \u5b58\u50a8
\nLVM-cache\u7684\u652f\u6301\u3002\u652f\u6301\u5c06\u5feb\u7167\u5efa\u7acb\u5728\u4e00\u4e2a\u5feb\u901f\u8bbe\u5907\u4e0a\uff08SSD)
\nlibStorageMgmt \u7684\u652f\u6301\uff0c
\n\u652f\u6301LSI Syncro \u8be5\u6280\u672f\u662f\u5b9e\u73b0\u76f4\u8fde\u5b58\u50a8(\u7b80\u79f0DAS)\u7684\u5171\u4eab\u5316\u3002\u4f60\u53ef\u4ee5\u770b\u5230megaraid_sas\u7684\u9a71\u52a8\u6a21\u5757\u5728\u4f7f\u7528\u8be5\u8bbe\u5907\u65f6\u3002
\nDIF\/DIX \u7684\u652f\u6301\uff08SCSI\u7684\u534f\u8bae\uff09\uff0cDIF\uff08Data Integrity Field \u6570\u636e\u5b8c\u6574\u6027\u57df\uff09DIX\uff08Data Integrity Extension\uff0c\u6570\u636e\u5b8c\u6574\u6027\u6269\u5c55\uff09
\n3 \u6587\u4ef6\u7cfb\u7edf
\nBtrfs (B-Tree) \u6280\u672f\u9884\u89c8\u7248\u672c\u3002
\nParallel NFS \u6280\u672f\u652f\u6301\u3002\u5e76\u884c NFS (pNFS) \u6807\u51c6\u662f NFS \u7248\u672c 4.1 \u534f\u8bae\u89c4\u8303 (RFC 5661) \u7684\u4e00\u4e2a\u5b50\u529f\u80fd\uff0c\u53ef\u4ee5\u89e3\u51b3\u5355\u4e2a\u670d\u52a1\u5668\u74f6\u9888\u95ee\u9898\u5e76\u4e14\u6781\u6709\u5e0c\u671b\u6210\u4e3a\u5e76\u884c\u6570\u636e\u8bbf\u95ee\u7684\u6807\u51c6\u5316\u89e3\u51b3\u65b9\u6848
\n4 Kernel
\nlibcepth.ko rbd.ko \u88ab\u6b63\u5f0f\u52a0\u5165\u4e86\u8fdb\u6765\u3002
\nMicrocode level upgrades (MCL)
\nkpatch \u8fd8\u662f\u9884\u89c8\u7248
\nCrashkernel \u652f\u6301>1 CPU \u3002\u9884\u89c8\u7248
\ndm-era Target \u9884\u89c8\u7248\uff0cdm-era \u53ef\u8ddf\u8e2a\u5728\u7528\u6237\u5b9a\u4e49\u7684\u65f6\u95f4\u6bb5\uff08\u5373\u201cera\u201d\uff09\u5185\u5199\u5165\u7684\u5757
\nCisco VIC kernel driver \u9884\u89c8\u7248
\nentropy management in hwrng
\n5 \u865a\u62df\u5316
\n\u589e\u52a0 kvm\u7684 vcpus\u652f\u6301\u6570\u76ee
\nkvm \u652f\u6301 usb3.0
\nOpen Virtual Machine Firmware \u9884\u89c8\u7248\u3002\u652f\u6301UEFI\u7684\u652f\u6301
\n\u589e\u5f3aHyper-V\u7684\u7f51\u7edc\u6027\u80fd
\nhypervfcopyd \u8fdb\u7a0b\u52a0\u5165\u5230hyperv-daemons
\nlibguestfs\u4e00\u4e9b\u65b0\u7279\u6027
\n\u4e00\u4e9b\u5de5\u5177\uff1avirt-builder\uff0cvirt-customize,virt-diff ,virt-log,virt-v2v
\n6 Cluster
\nDynamic token timeout for Corosync (Corosync \u662f\u4e00\u4e2a\u96c6\u7fa4\u6846\u67b6)
\nEnhancements for Red Hat High Availability
\n7 \u7f16\u8bd1\u5668\u548c\u5de5\u5177
\nPerformance Application Programming Interface \uff08PAPI\uff0c\u662f\u4e00\u7ec4\u7528\u4e8e\u8bbf\u95ee\u5904\u7406\u5668\u786c\u4ef6\u6027\u80fd\u8ba1\u6570\u5668\u7684\u672c\u5730\u63a5\u53e3\uff09
\nOProfile oprofile \u662fLinux \u5e73\u53f0\u4e0a\u7684\u6027\u80fd\u5206\u6790\u5de5\u5177
\nOpenJDK8
\nsosreport replaces snap\uff0c\u6536\u96c6\u786c\u4ef6\u4fe1\u606f\u7684
\n8 \u7f51\u7edc
\nTrusted Network Connect \u9884\u89c8\u7248\u3002
\nSR-IOV qlcnic Driver\u3002SR-IOV \u6280\u672f\u662f\u4e00\u79cd\u57fa\u4e8e\u786c\u4ef6\u7684\u865a\u62df\u5316\u89e3\u51b3\u65b9\u6848\uff0c\u53ef\u63d0\u9ad8\u6027\u80fd\u548c\u53ef\u4f38\u7f29\u6027\u3002SR-IOV \u6807\u51c6\u5141\u8bb8\u5728\u865a\u62df\u673a\u4e4b\u95f4\u9ad8\u6548\u5171\u4eabPCIe
\nBerkeley Packet Filter (BPF)\u652f\u6301\uff0c
\nClock Stability \u589e\u5f3a\u4e86\u3002
\n\u652f\u6301libnetfilter_queue\uff0c\u8be5\u5305\u662f\u7528\u6237\u5c42\u7684\u9632\u706b\u5899
\nIntel QuickAssist Technology (QAT)
\nLinuxPTP and timemaster
\nNetwork initscripts – \u652f\u6301ustom VLAN names
\n\u652f\u6301\u914d\u7f6eTCP Delayed ACK
\nNetworkManager bond\u7684lacp_rate\u9009\u9879
\nNetwork namespaces and VTI
\n9 linux \u5bb9\u5668\u548cDocker
\nDocker \u5bb9\u5668\u7ec4\u4ef6
\n10 \u8ba4\u8bc1\u548c\u4e92\u7528\u6027
\nManual backup and restore functionality
\nCertificate Authority management tool
\nIncreased access control granularity
\nLimited domain access for unprivileged users
\nSSSD untegration for the Common Internet File System (CIFS)
\nSupport for migration from WinSync to Trust
\nAutomatic data provider configuration
\nUse of AD and LDAP sudo Providers
\n11 \u5b89\u5168
\nSCAP Security Guide \uff08Security Content Automation Protocol\uff0c\u5b89\u5168\u5185\u5bb9\u81ea\u52a8\u5316\u534f\u8bae\uff0cSCAP\u662f\u4fe1\u606f\u5b89\u5168\u81ea\u52a8\u5316\u8ba1\u5212\u7684\u4e00\u90e8\u5206\uff0c\u4e3b\u8981\u7531\u5f88\u591a\u73b0\u6709\u7684\u6807\u51c6\u7ec4\u6210\uff0c\u8fd9\u4e9b\u6807\u51c6\u5305\u62ec\u6211\u4eec\u5df2\u7ecf\u5f88\u719f\u6089\u7684\u6807\u51c6\uff0c\u4f8b\u5982CVE(\u5e38\u89c1\u6f0f\u6d1e\u5229\u7528)\u548cCVSS(\u5e38\u89c1\u6f0f\u6d1e\u8bc4\u5206\u7cfb\u7edf)\u3002\u6b64\u5916\uff0c\u8fd8\u5305\u62ecCPE(\u901a\u7528\u679a\u4e3e\u5e73\u53f0)\uff0c\u8868\u8ff0\u4e86\u5177\u4f53\u7684\u786c\u4ef6\u3001\u64cd\u4f5c\u7cfb\u7edf\u548c\u8f6f\u4ef6\u914d\u7f6e\u3002\u53ef\u4ee5\u5229\u7528\u8be5\u5e73\u53f0\u5217\u4e3e\u51fa\u5404\u9879\u4f01\u4e1a\u8d44\u4ea7\uff0c\u4e3a\u5404\u9879\u8d44\u4ea7\u7684\u6570\u636e\u63d0\u4f9b\u57fa\u672c\u7684\u7ba1\u7406\u4f9d\u636e;CCE(\u5e38\u89c1\u914d\u7f6e\u679a\u4e3e)\u4e0eCVE\u5f88\u76f8\u4f3c\uff0c\u4f46\u662f\u4e3b\u8981\u7528\u4e8e\u5904\u7406\u9519\u8bef\u914d\u7f6e\u95ee\u9898;OVAL(\u5f00\u653e\u6f0f\u6d1e\u548c\u8bc4\u4f30\u8bed\u8a00)\u80fd\u591f\u63d0\u4f9b\u8bf4\u660e\u8ba1\u7b97\u673a\u76ee\u5f55\u7684\u7ed3\u6784\uff0c\u4ee5\u53ca\u8bf4\u660e\u8ba1\u7b97\u673a\u7684\u914d\u7f6e\u548c\u53d1\u73b0\u7684\u6f0f\u6d1e\u60c5\u51b5;XCCDF(\u53ef\u6269\u5c55\u914d\u7f6e\u6e05\u5355\u8bf4\u660e\u683c\u5f0f)\u662f\u4e00\u79cd\u63cf\u8ff0\u8bed\u8a00\uff0c\u53ef\u4ee5\u5e2e\u52a9\u4f60\u5c06\u4f01\u4e1a\u6280\u672f\u8d44\u4ea7\u548c\u6807\u51c6\u5e94\u7528\u4e8e\u626b\u63cf\u5de5\u5177\u3002\u6240\u8c13SCAP\u5c31\u662f\u4f7f\u7528XCCDF\u548cOVAL\u8bed\u8a00\u5bf9\u6f0f\u6d1e\u548c\u914d\u7f6e\u4fe1\u606f\u8fdb\u884c\u63cf\u8ff0\uff0c\u5e76\u4e14\u63cf\u8ff0\u7684\u6f0f\u6d1e\u548c\u914d\u7f6e\u4fe1\u606f\u548cCVE\u3001CCE\u3001CPE\u3001CVS\u6807\u51c6\u5411\u6620\u5c04\u3002\uff09
\nSELinux Policy \u589e\u52a0\u4e86\u670d\u52a1\u81ea\u5df1\u7684unconfined_service_t \u57df\u7a7a\u95f4\u3002
\nNew Features in OpenSSH \u692d\u5706\u66f2\u7ebfDiffie-Hellman\u5bc6\u94a5\u4ea4\u6362 Ed25519\u7684 signature
\nNew Features in Libreswan\uff08\uff09
\nNew Features in TNC
\nNew Features in GnuTLS \u901a\u8baf\u5e93\u7684\u4e00\u4e9b\u65b0\u7279\u6027\u3002
\n12 \u684c\u9762
\nSupport for Quad-buffered OpenGL Stereo Visuals
\n13 \u652f\u6301\u548c\u7ef4\u62a4
\nABRT authorized micro-reporting<\/p>\n","protected":false},"excerpt":{"rendered":"
1 \u5b89\u88c5 Kdump \uff0c kernel crash…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5],"tags":[124,146],"_links":{"self":[{"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=\/wp\/v2\/posts\/633"}],"collection":[{"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=633"}],"version-history":[{"count":1,"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=\/wp\/v2\/posts\/633\/revisions"}],"predecessor-version":[{"id":634,"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=\/wp\/v2\/posts\/633\/revisions\/634"}],"wp:attachment":[{"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=633"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=633"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.selinuxplus.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=633"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}