New release note:
64-bit time_t on FreeBSD/sparc64, em(4) hiccup during ifconfig em0 alias fixed, ng_vlan(4) netgraph node type, umass(4) ATAPI MMC commands support, rc.d/gbde_swap and gbde_swap_enable in rc.conf, mountd(8) -p <port> option, nologin(8) syslog support, OpenBSD's pf and the related userland utils imported, SIZE attribute in distinfo enabled by default. (when you find errors or inappropriate descriptions, please let me know.)
This commit is contained in:
Hiroki Sato
parent
191ac18641
commit
ce6fa90bd5
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=126924
@ -195,6 +195,21 @@
|
||||
<para>The kernel's file descriptor allocation code has been
|
||||
updated, and is now derived from similar code in OpenBSD.</para>
|
||||
|
||||
<para arch="sparc64">On &os;/sparc64 <varname>time_t</varname>
|
||||
has been changed from a 32-bit value to a 64-bit value.
|
||||
|
||||
<note>
|
||||
<para>Since this change is not backward-compatible,
|
||||
any programs which are built on the older system using
|
||||
the 32-bit <varname>time_t</varname> as well as
|
||||
call system-routines for handling
|
||||
<varname>time_t</varname> values, will have to be recompiled.
|
||||
More detail information and notice on upgrading from
|
||||
the source can be found in
|
||||
<filename>/usr/src/UPDATING.64BTT</filename>.</para>
|
||||
</note>
|
||||
</para>
|
||||
|
||||
<!-- Above this line, sort kernel changes by manpage/keyword-->
|
||||
|
||||
<sect3 id="proc">
|
||||
@ -232,6 +247,9 @@
|
||||
driver has been removed due to breakage. Its functionality
|
||||
has been subsumed into the &man.en.4; driver.</para>
|
||||
|
||||
<para>A short hiccup in the &man.em.4; during parameter
|
||||
reconfiguration, has been fixed. &merged;</para>
|
||||
|
||||
<para arch="i386">The lmc (LAN Media Corp. PCI WAN adapter) driver has been
|
||||
removed due to breakage and lack of maintainership.</para>
|
||||
|
||||
@ -246,6 +264,9 @@
|
||||
For more information, see the &man.ndis.4; and
|
||||
&man.ndiscvt.8; manual pages.</para>
|
||||
|
||||
<para>The &man.ng.vlan.4; NetGraph node type, which supports
|
||||
IEEE 802.1Q VLAN tagging has been added. &merged;</para>
|
||||
|
||||
<para>Several bugs related to multicast and promiscuous mode
|
||||
handling in the &man.sk.4; driver have been fixed.</para>
|
||||
|
||||
@ -295,7 +316,6 @@
|
||||
for authenticating TCP sessions. &man.setkey.8; now includes
|
||||
support for the TCP-MD5 class of security associations.
|
||||
&merged;</para>
|
||||
|
||||
</sect3>
|
||||
|
||||
<sect3 id="disks">
|
||||
@ -306,6 +326,8 @@
|
||||
work better, and some problems with timeouts should be
|
||||
resolved.</para>
|
||||
|
||||
<para>The &man.umass.4; driver now supports the missing
|
||||
ATAPI MMC commands and handles the timeout properly.</para>
|
||||
</sect3>
|
||||
|
||||
<sect3 id="fs">
|
||||
@ -339,6 +361,16 @@
|
||||
if the server requires it; this may eventually become an
|
||||
option to &man.mount.smbfs.8;.</para>
|
||||
|
||||
<para>A support for gbde-enabled swap devices has been added.
|
||||
When <varname>gbde_swap_enable</varname> is specified
|
||||
in &man.rc.conf.5;, a swap device named
|
||||
<filename>/dev/foo.bde</filename> in &man.fstab.5;
|
||||
is automatically attached at boot time with the device
|
||||
<filename>/dev/foo</filename> and a random key, which
|
||||
generated by computing the MD5 checksum of 512 bytes read
|
||||
from <filename>/dev/random</filename>.
|
||||
Note that this prevents recovery of kernel dumps.</para>
|
||||
|
||||
</sect3>
|
||||
|
||||
<sect3 id="mm">
|
||||
@ -412,11 +444,18 @@
|
||||
</note>
|
||||
<para>
|
||||
|
||||
<para>&man.mountd.8; now supports the <option>-p</option> option,
|
||||
which allows users to specify a known port for use
|
||||
in firewall rulesets.</para>
|
||||
|
||||
<para>&man.newfs.8; and &man.mdmfs.8; now support a
|
||||
<option>-l</option> flag to enable them to set the MAC
|
||||
multilabel flag on new filesystems without requiring the use of
|
||||
&man.tunefs.8;.</para>
|
||||
|
||||
<para>&man.nologin.8; now support reporting login attempts via
|
||||
&man.syslogd.8;.</para>
|
||||
|
||||
<para>A bugfix has been applied to NSS support, which fixes
|
||||
problems when using third-party NSS modules (such as <filename
|
||||
role="package">net/nss_ldap</filename>) and groups with large
|
||||
@ -507,6 +546,31 @@
|
||||
|
||||
</para>
|
||||
|
||||
<para><application>pf</application>, OpenBSD's packet filter as of
|
||||
OpenBSD 3.4 has been imported into &os; source tree and installed
|
||||
by default. A new user <username>proxy</username>, and two new
|
||||
groups <username>authpf</username> and <username>proxy</username>,
|
||||
which <application>pf</application> needs are added as well.
|
||||
|
||||
<note>
|
||||
<para>On upgrading from the source, these user accounts must be
|
||||
added in advance. And, the <varname>NO_PF</varname> variable
|
||||
in <filename>make.conf</filename> can be used to prevent
|
||||
<application>pf</application> from building.</para>
|
||||
</note>
|
||||
|
||||
<para>Several userland utilities of OpenBSD's
|
||||
<application>pf</application> have been imported.
|
||||
<filename>libexec/ftp-proxy</filename> is an ftp proxy for
|
||||
<application>pf</application>,
|
||||
<filename>sbin/pfctl</filename> is an equivalent to
|
||||
<filename>sbin/ipf</filename>,
|
||||
<filename>sbin/pflogd</filename>
|
||||
is a daemon logging packets via <literal>if_pflog</literal>
|
||||
in pcap format, and
|
||||
<filename>usr.sbin/authpf</filename> is an authentication shell
|
||||
to modify pf rulesets.</para>
|
||||
|
||||
<para><application>routed</application> has been updated from
|
||||
release 2.22 to release 2.27 from rhyolite.com. Note that for
|
||||
users relying on RIP's MD5 authentication feature,
|
||||
@ -522,8 +586,14 @@
|
||||
<sect2 id="ports">
|
||||
<title>Ports/Packages Collection Infrastructure</title>
|
||||
|
||||
<para></para>
|
||||
|
||||
<para>The <literal>SIZE</literal> attribute for distfiles
|
||||
which can be used for checking file size before fetching,
|
||||
has been added and enabled by default.
|
||||
<varname>DISABLE_SIZE</varname> is a user control knob
|
||||
to disable the distfile size checking. This is especially
|
||||
useful on old &os; versions which didn't have &man.fetch.1;
|
||||
support for this, and for some FTP proxies which always
|
||||
report incorrect or bogus size.</para>
|
||||
</sect2>
|
||||
|
||||
<sect2 id="releng">
|
||||
|
||||
@ -195,6 +195,21 @@
|
||||
<para>The kernel's file descriptor allocation code has been
|
||||
updated, and is now derived from similar code in OpenBSD.</para>
|
||||
|
||||
<para arch="sparc64">On &os;/sparc64 <varname>time_t</varname>
|
||||
has been changed from a 32-bit value to a 64-bit value.
|
||||
|
||||
<note>
|
||||
<para>Since this change is not backward-compatible,
|
||||
any programs which are built on the older system using
|
||||
the 32-bit <varname>time_t</varname> as well as
|
||||
call system-routines for handling
|
||||
<varname>time_t</varname> values, will have to be recompiled.
|
||||
More detail information and notice on upgrading from
|
||||
the source can be found in
|
||||
<filename>/usr/src/UPDATING.64BTT</filename>.</para>
|
||||
</note>
|
||||
</para>
|
||||
|
||||
<!-- Above this line, sort kernel changes by manpage/keyword-->
|
||||
|
||||
<sect3 id="proc">
|
||||
@ -232,6 +247,9 @@
|
||||
driver has been removed due to breakage. Its functionality
|
||||
has been subsumed into the &man.en.4; driver.</para>
|
||||
|
||||
<para>A short hiccup in the &man.em.4; during parameter
|
||||
reconfiguration, has been fixed. &merged;</para>
|
||||
|
||||
<para arch="i386">The lmc (LAN Media Corp. PCI WAN adapter) driver has been
|
||||
removed due to breakage and lack of maintainership.</para>
|
||||
|
||||
@ -246,6 +264,9 @@
|
||||
For more information, see the &man.ndis.4; and
|
||||
&man.ndiscvt.8; manual pages.</para>
|
||||
|
||||
<para>The &man.ng.vlan.4; NetGraph node type, which supports
|
||||
IEEE 802.1Q VLAN tagging has been added. &merged;</para>
|
||||
|
||||
<para>Several bugs related to multicast and promiscuous mode
|
||||
handling in the &man.sk.4; driver have been fixed.</para>
|
||||
|
||||
@ -295,7 +316,6 @@
|
||||
for authenticating TCP sessions. &man.setkey.8; now includes
|
||||
support for the TCP-MD5 class of security associations.
|
||||
&merged;</para>
|
||||
|
||||
</sect3>
|
||||
|
||||
<sect3 id="disks">
|
||||
@ -306,6 +326,8 @@
|
||||
work better, and some problems with timeouts should be
|
||||
resolved.</para>
|
||||
|
||||
<para>The &man.umass.4; driver now supports the missing
|
||||
ATAPI MMC commands and handles the timeout properly.</para>
|
||||
</sect3>
|
||||
|
||||
<sect3 id="fs">
|
||||
@ -339,6 +361,16 @@
|
||||
if the server requires it; this may eventually become an
|
||||
option to &man.mount.smbfs.8;.</para>
|
||||
|
||||
<para>A support for gbde-enabled swap devices has been added.
|
||||
When <varname>gbde_swap_enable</varname> is specified
|
||||
in &man.rc.conf.5;, a swap device named
|
||||
<filename>/dev/foo.bde</filename> in &man.fstab.5;
|
||||
is automatically attached at boot time with the device
|
||||
<filename>/dev/foo</filename> and a random key, which
|
||||
generated by computing the MD5 checksum of 512 bytes read
|
||||
from <filename>/dev/random</filename>.
|
||||
Note that this prevents recovery of kernel dumps.</para>
|
||||
|
||||
</sect3>
|
||||
|
||||
<sect3 id="mm">
|
||||
@ -412,11 +444,18 @@
|
||||
</note>
|
||||
<para>
|
||||
|
||||
<para>&man.mountd.8; now supports the <option>-p</option> option,
|
||||
which allows users to specify a known port for use
|
||||
in firewall rulesets.</para>
|
||||
|
||||
<para>&man.newfs.8; and &man.mdmfs.8; now support a
|
||||
<option>-l</option> flag to enable them to set the MAC
|
||||
multilabel flag on new filesystems without requiring the use of
|
||||
&man.tunefs.8;.</para>
|
||||
|
||||
<para>&man.nologin.8; now support reporting login attempts via
|
||||
&man.syslogd.8;.</para>
|
||||
|
||||
<para>A bugfix has been applied to NSS support, which fixes
|
||||
problems when using third-party NSS modules (such as <filename
|
||||
role="package">net/nss_ldap</filename>) and groups with large
|
||||
@ -507,6 +546,31 @@
|
||||
|
||||
</para>
|
||||
|
||||
<para><application>pf</application>, OpenBSD's packet filter as of
|
||||
OpenBSD 3.4 has been imported into &os; source tree and installed
|
||||
by default. A new user <username>proxy</username>, and two new
|
||||
groups <username>authpf</username> and <username>proxy</username>,
|
||||
which <application>pf</application> needs are added as well.
|
||||
|
||||
<note>
|
||||
<para>On upgrading from the source, these user accounts must be
|
||||
added in advance. And, the <varname>NO_PF</varname> variable
|
||||
in <filename>make.conf</filename> can be used to prevent
|
||||
<application>pf</application> from building.</para>
|
||||
</note>
|
||||
|
||||
<para>Several userland utilities of OpenBSD's
|
||||
<application>pf</application> have been imported.
|
||||
<filename>libexec/ftp-proxy</filename> is an ftp proxy for
|
||||
<application>pf</application>,
|
||||
<filename>sbin/pfctl</filename> is an equivalent to
|
||||
<filename>sbin/ipf</filename>,
|
||||
<filename>sbin/pflogd</filename>
|
||||
is a daemon logging packets via <literal>if_pflog</literal>
|
||||
in pcap format, and
|
||||
<filename>usr.sbin/authpf</filename> is an authentication shell
|
||||
to modify pf rulesets.</para>
|
||||
|
||||
<para><application>routed</application> has been updated from
|
||||
release 2.22 to release 2.27 from rhyolite.com. Note that for
|
||||
users relying on RIP's MD5 authentication feature,
|
||||
@ -522,8 +586,14 @@
|
||||
<sect2 id="ports">
|
||||
<title>Ports/Packages Collection Infrastructure</title>
|
||||
|
||||
<para></para>
|
||||
|
||||
<para>The <literal>SIZE</literal> attribute for distfiles
|
||||
which can be used for checking file size before fetching,
|
||||
has been added and enabled by default.
|
||||
<varname>DISABLE_SIZE</varname> is a user control knob
|
||||
to disable the distfile size checking. This is especially
|
||||
useful on old &os; versions which didn't have &man.fetch.1;
|
||||
support for this, and for some FTP proxies which always
|
||||
report incorrect or bogus size.</para>
|
||||
</sect2>
|
||||
|
||||
<sect2 id="releng">
|
||||
|
||||
Loading…
Reference in New Issue
Block a user