Specifications
New features since Xubuntu 9.04
Xfce 4.6.1
The latest release of Xfce is included which contains the newest bugfixes to ensure a smooth desktop experience.
Multimedia
Xubuntu 9.10 includes the Exaile 0.3.0.x music player to make enjoying podcasts, streaming radio, audio books, and music library easier than ever before. On the go? No problem! Exaile's portable media player device manager lets you take your favorite songs with you.
Power Management
New to Xubuntu 9.10 is the Xfce4 power manager which will replace the Gnome Power Manager on the Xubuntu desktop to provide a more integrated power management experience.
Desktop Notifications
Be notified both in style and consistency thanks to improved notify-osd integration with the Xfce4 desktop and numerous applications included with the default Xubuntu desktop.
Upstart
As part of our boot performance work, we have now transitioned to Upstart. If you are testing on your primary machine, we strongly suggest having an Ubuntu Karmic Alpha 5 LiveCD available, or creating an Alpha 5 USB startup disk before doing an upgrade. This will allow us to help you recover in the case that something goes wrong during the boot of your system after upgrade. We request that all bugs affecting the performance or functionality of boot be tagged with ubuntu-boot in Launchpad.
Boot Experience
We've done some work on improving the overall look and feel of booting the system. Please open bugs with the tag "ubuntu-boot-experience" on any messages you see flashed after grub loads and before the new Xubuntu Splash screen (which uses the new xsplash) displays. If you have trouble catching them before the splash screen loads, you can also check vt1 or dmesg output for copies of these messages. We also accept photos or video attachments if that's easier, however please make sure the text is readable.
Performance
After enjoying a faster and smoother startup, you can also expect faster application load times and reduced memory footprint for a number of your favorite Xfce4 applications thanks to improvements in library linking provided by ld's --as-needed flag.
hal deprecation
Xubuntu 9.10 underlying technology for power management, laptop hotkeys, and handling of storage devices and cameras maps has moved from "hal" (which is in the process of being deprecated) to "DeviceKit-power", "DeviceKit-disks" and "udev". When testing Xubuntu 9.10, please be alert for regressions in those areas and report any bugs you find.
New Intel video driver architecture available for testing
The Intel video driver has switched from the "EXA" acceleration method to the new "UXA", solving major performance problems of Xubuntu 9.04. Xubuntu 9.10 also features kernel mode setting by default on Intel hardware, which reduces boot-time flickering and dramatically speeds up suspend/resume.
ext4 by default
The new "ext4" filesystem is used by default for new installations with Xubuntu 9.10; of course, other filesystems are still available via the manual partitioner. Existing filesystems will not be upgraded.
If you have full backups and are confident, you can upgrade an existing ext3 filesystem to ext4 by following directions in the Ext4 Howto. (Note that the comments on that page at the time of writing about Xubuntu's use of vol_id vs. blkid are out of date and are not applicable to Xubuntu 9.10 RC.) Maximum performance will typically only be achieved on new filesystems, not on filesystems that have been upgraded from ext3.
GRUB 2 by default
GRUB 2 is the default boot loader for new installations with Xubuntu 9.10 RC, replacing the previous GRUB "Legacy" boot loader. Existing systems will not be upgraded to GRUB 2 at this time, as automatically reinstalling the boot loader is an inherently risky operation.
If you wish to upgrade your system to GRUB 2, then see the GRUB 2 testing page for instructions. See also the upstream draft manual.
Some features are still missing relative to GRUB Legacy. Notable among these are lock/password support, an equivalent of grub-reboot, and Xen handling.
iSCSI installation
The iSCSI installation process has been improved, and no longer requires iscsi=true as a boot parameter; the installer will offer you the option of logging into iSCSI targets if there are no local disks, or you can select "Configure iSCSI" in the manual partitioner.
Putting the root filesystem on iSCSI is now supported.
AppArmor
AppArmor in Xubuntu 9.10 RC features an improved parser that uses cache files, greatly speeding up AppArmor initialisation on boot. AppArmor also now supports 'pux' which, when specified, means a process can transition to an existing profile if one exists or simply run unconfined if one does not.
New profiles
In addition to the above changes to AppArmor itself, several profiles were added. Enforcing profiles for ntpd, the Evince document viewer (evince), and libvirt are enabled by default. Complain mode profiles for Dovecot are now available in the apparmor-profiles package. A new profile is provided for Firefox as well, though it is disabled by default. Users can enable AppArmor sandboxing of their browser by running:
$ sudo aa-enforce /etc/apparmor.d/usr.bin.firefox-3.5
Please see the SecurityTeam/KnowledgeBase for a full listing of readily available profiles in Xubuntu.
Libvirt
Libvirt now contains AppArmor integration when using KVM or QEMU. Libvirtd is configured to launch virtual machines that are confined by uniquely restrictive AppArmor profiles. This feature significantly improves virtualisation in Xubuntu by providing user-space host protection as well as guest isolation.
Uncomplicated Firewall
The Uncomplicated Firewall now has support for filtering by interface and egress filtering when using the ufw command. Documentation for ufw is also improved to help users better utilise the ufw framework and take full advantage of Linux netfilter's power and flexibility. See UbuntuFirewall#Features for a full list of features.
Non-eXecutable Emulation
Non-eXecutable (NX) memory protection, also known as eXecute-Disable (XD), has always been available in Xubuntu for any systems that had the hardware to support it and ran the 64-bit kernel or the 32-bit server kernel. The 32-bit PAE desktop kernel (linux-image-generic-pae) now also provides the PAE mode needed for hardware with the NX CPU feature.
For systems that lack NX hardware, the 32-bit kernels now provide an approximation of the NX CPU feature via software emulation that can help block many exploits an attacker might run from stack or heap memory.
Blocking Module Loading
To block the loading of any further modules after boot (generally for servers with unchanging hardware), the /proc/sys/kernel/modules_disabled one-way sysctl flag now exists to add another layer of protections against attackers loading kernel rootkits.
Position-Independent Executables
Building on the work done in Xubuntu 8.10 and 9.04 to proactively protect Xubuntu from unknown threats by using strict compiler flags, more applications have been built as Position-Independent Executables (PIE) to take advantage of the Address Space Layout Randomisation (ASLR) available in the Xubuntu kernel.
In addition to the growing program list, PIE programs are now also built with the BIND_NOW linker flag to take full advantage of the existing RELRO linker flag. This results in PIE programs having fewer places in their memory that can be controlled to redirect program flow when an attacker attempts memory-corruption exploits.
