Table of Contents
- Title and Copyright Information
- Preface
- 1 About Oracle Linux 10
-
2
New Features and Changes
- Installation and Boot
- Kernel and System Libraries
- Operating System and Software Management
- Shells and Command Line Tools
- Compilers and Development Tools
- File Systems and Storage
- Infrastructure Services
- Networking
-
Security
- SELinux Enhancements Prevent fapolicyd Service Interruption
- New libreswan-minimal Subpackage Reduces Container Image Size
- SELinux Policy Now Confines the redfish-finder Service
- SELinux Policy Now Confines the systemd-oomd Service
- OpenSSH Adds Support for Hybrid ML-KEM NIST Key Exchange
- OpenSSH Supports Hybrid ML-KEM Key Exchange in FIPS Mode
- libssh Adds Support for Hybrid ML-KEM Key Exchange
- System-Wide Cryptographic Policies Now Enable ML-KEM for libssh
- System-Wide Cryptographic Policies Now Enable Hybrid ML-KEM Key Exchange for OpenSSH in FIPS Mode
- System-Wide Cryptographic Policies Now Prioritize mlkem768x25519-sha256 for libssh
- New p11-kit-client Subpackage Simplifies Client Deployments
- restorecon Adds -c Option to Report Relabeled Files
- Additional SELinux Services Now Run in Enforcing Mode
- SELinux Policy Updated for the New OpenSSH Architecture
- setfiles Adds Option to Reduces Memory Usage
- capnproto Now Available in the CodeReady Builder Repository
- setools Updated to 4.6.0
- fapolicyd Updated to 1.4.5
- capnproto Updated to 1.3
- libssh Updated to 0.12.0
- p11-kit Updated to 0.26.2
- New clevis-pin-trustee Package Enables Remote Attestation for LUKS Volumes
- Keylime Updated to 7.14.1
- keylime-agent Updated to 0.2.9
- OpenSCAP Updated to 1.4.3
- SCAP Security Guide updated to 0.1.80
- sudo Updated to sudo-1.9.17p2
- Cockpit Web Console
- Containers
- 3 Deprecated Features
-
4
Removed Features
-
Installer and Image Creation
- Authconfig Commands
- Inst.xdriver and Inst.usefbx Options
- Capturing Screenshots from the Anaconda GUI
- Removed Boot Options
- Automatic Bug Reporting System
- Timezone Kickstart Command Options
- Logging Kickstart Command Parameter
- Support for %anaconda Kickstart Command
- Pwpolicy Kickstart Command
- Support for Adding Additional Repositories from GUI
- Support for LUKS Version Selection from Anaconda
- Initial-Setup Package
- Anaconda Built-in Help
- Teaming Options from the Network Kickstart Command
- NVDIMM Reconfiguration Support during the Installation Process
- Options from %packages
-
Security
- Scap-Workbench
- Oscap-Anaconda-Addon
- DSA and SEED Algorithms
- Fips-Mode-Setup
- /etc/system-fips
- TLS HeartBeat
- SRP Authentication
- Keylime HTTP
- DEFAULT Cryptographic Policy
- Ca-Certificates Trust Store
- LEGACY Cryptographic Policy
- Pam_Ssh_Agent_Auth
- OpenSSL SHA-1 in TLS
- Stunnel OpenSSL ENGINE API
- OpenSSL Engines
- Libsss_Simpleifp Subpackage
- SSSD Files Provider
- Ad-Allow-Remote-Domain-Local-Groups Option
- Reconnection_Retries Option
- Software Management
- Infrastructure Services
- Networking
- Kernel
- File Systems and Storage
- High Availability and Clusters
- Compilers and Development Tools
- Containers
-
Installer and Image Creation
- 5 Known Issues
-
6
Package Changes From the Upstream Release
-
Changes to Binary Packages
- Added Binary Packages for BaseOS by Oracle
- Added Binary Packages for AppStream by Oracle
- Added Binary Packages for CodeReady Linux Builder by Oracle
- Modified BaseOS Binary Packages
- Modified Binary Packages for CodeReady Linux Builder by Oracle
- Modified AppStream Binary Packages
- Removed BaseOS Binary Packages
- Removed AppStream Binary Packages
- Removed CodeReady Linux Builder Binary Packages
- Changes to Source Packages
-
Changes to Binary Packages