Annotation of www/32.html, Revision 1.15
1.1 miod 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
4: <title>OpenBSD 3.2 Release</title>
1.2 mpech 5: <link rev=made href="mailto:www@openbsd.org">
1.1 miod 6: <meta name="resource-type" content="document">
7: <meta name="description" content="OpenBSD 3.2">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1999-2002 by OpenBSD.">
11: </head>
12:
13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#24248E">
14:
15: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
16: <hr>
17:
18: <p>
1.2 mpech 19: <a href="images/bepatientguys.jpg"><img align="left" width="255" height="323"
1.1 miod 20: src="images/bepatientguys.jpg"></a>
21: <h2><font color="#0000e0">The OpenBSD 3.2 Release:</font></h2>
22: <p>
23:
24: Released November 1, 2002<br>
25: Copyright 1997-2002, Theo de Raadt.<br>
26: <font color="#e00000">ISBN 0-9731791-0-4</font>
27: <p>
28:
29: <a href="#new">What's New</a><br>
30: <a href="#install">How to install</a><br>
31: <a href="#ports">How to use the ports tree</a><br>
32: <a href="orders.html">Ordering a CD set</a><br>
33:
34: <p>
35: <h3><font color="#0000e0">
36: To get the files for this release:
37: <ul>
38: <li>Order a CDROM from our ordering system.
39: <li>See the information on <a href="ftp.html">The FTP page</a> for
40: a list of mirror machines.
41: <li>Go to the <font color="#e00000">pub/OpenBSD/3.2/</font> directory on
42: one of the mirror sites.
43: <li>Briefly read the rest of this document.
44: <!--
45: <li>Have a look at <a href="errata.html">The 3.2 Errata page</a> for a list
46: of bugs and workarounds.
47: -->
1.15 ! miod 48: <li>See a <a href="plus32.html">detailed log of changes</a> between the
1.1 miod 49: 3.1 and 3.2 releases.
50: </ul>
51: </font></h3>
52: <br clear=all>
53: <br>
54: <p>
55:
56: <strong>Note:</strong> All applicable copyrights and credits can be found
57: in the applicable file sources found in the files src.tar.gz, srcsys.tar.gz,
58: XF4.tar.gz, or in the files fetched via ports.tar.gz. The distribution
59: files used to build packages from the ports.tar.gz file are not included on
60: the CDROM because of lack of space.
61: <p>
62:
63: <a name="new"></a>
64: <hr>
65: <p>
66: <h3><font color="#0000e0">What's New</font></h3>
67: <p>
68: This is a partial list of new features and systems included in OpenBSD 3.2.
1.15 ! miod 69: For a comprehensive list, see the <a href="plus32.html">changelog</a> leading
1.1 miod 70: to 3.2.
71: <p>
72:
73: <ul>
74: <li><a href="http://www.OpenSSH.com">OpenSSH</a> (supporting both the
1.2 mpech 75: SSH1 and SSH2 protocols) is now at version 3.5. Privilege separation is
1.1 miod 76: now enabled by default for greater robustness.
77: <p>
78:
1.12 deraadt 79: <li>Non-executable stack on i386, sparc, sparc64, alpha, powerpc.
80: No-exec data and bss on sparc, sparc64, and alpha. This makes some
81: classes of future potential buffer overflows unexploitable.
82: <p>
83:
84: <li>Apache runs chroot'd by default. To disable this, see the new <b>-u</b>
85: option.
86: <p>
87:
1.13 deraadt 88: <li>A very significant reduction in setuid binaries. Many of those binaries
89: which still retain setuid have been modified so the operations needing root
1.14 deraadt 90: are done early on, and then privilege is revoked immediately after that.
1.13 deraadt 91: <p>
92:
1.11 deraadt 93: <li>Asymmetric and symmetric hardware encryption support is now enabled by
1.10 deraadt 94: default, if you have such devices in your machine.
95: <p>
96:
1.1 miod 97: <li>As usual, improvements to the documentation, notably the man pages and
98: the Web FAQ. A larger part of the website is now available in several
99: languages.
100: <p>
101:
102: <li>More complete collection and better tested set of "ports".
103: <p>
104:
105: <li>Over 1500 pre-built and tested packages.
106: <p>
107:
108: <li>Better video and X11 support for the
109: <a href="sparc.html">OpenBSD/sparc</a>,
110: <a href="sparc64.html">OpenBSD/sparc64</a> and
111: <a href="alpha.html">OpenBSD/alpha</a> ports.
112: <p>
113:
114: <li>A lot of enhancements and stability improvements to our packet filter, <a
1.8 henning 115: href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf</a>:
116: <ul>
117: <li>new "antispoof" keyword: spoofing protection made easy
118: <li>much simplified rule file language
119: <li>extended filtering capabilities
120: <li>control state table entries on a per-rule granularity
121: <li>support dynamic interface expansion. No more need to reload the ruleset
122: on IP changes.
123: </ul>
1.1 miod 124: <p>
125:
126: <li>A new tool,
1.2 mpech 127: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=systrace&sektion=4">systrace</a>,
1.1 miod 128: for controlling in detail applications behaviour and rights at the system call
129: level.
1.7 jufi 130: <p>
1.1 miod 131:
132: <li>The system includes the following major components from outside suppliers:
133: <p>
134: <ul>
135: <li>XFree86 4.2.1 (and i386 contains 3.3.X servers also, thus providing support for all chipsets)</li>
136: <li>gcc 2.95.3 (+ patches)</li>
137: <li>perl 5.6.1 (+ patches)</li>
1.9 markus 138: <li>Apache 1.3.26, mod_ssl 2.8.10, DSO support</li>
139: <li>OpenSSL 0.9.7beta3 (+ patches)</li>
1.1 miod 140: <li>groff 1.15</li>
141: <li>sendmail 8.12.6</li>
142: <li>lynx 2.8.2rel.1 with HTTPS support added</li>
143: <li>sudo 1.6.6</li>
144: <li>ncurses 5.2</li>
145: <li>Latest KAME IPv6</li>
146: <li>KTH Kerberos 1.0.8</li>
147: <li>Heimdal 0.4e (+ patches)</li>
148: <li>OpenSSH 3.5</li>
149: </ul>
150: <p>
151:
152: <li>Many improvements for security and reliability (look for the red
1.15 ! miod 153: print in the <a href="plus32.html">complete changelog</a>).
1.1 miod 154: <p>
155: </ul>
156:
157: <a name="install"></a>
158: <hr>
159: <p>
160: <h3><font color="#0000e0">How to install</font></h3>
161: <p>
162: Following this are the instructions which you would have on a piece of
163: paper if you had purchased a CDROM set instead of doing an alternate
164: form of install. The instructions for doing an ftp (or other style
165: of) install are very similar; the CDROM instructions are left intact
166: so that you can see how much easier it would have been if you had
167: purchased a CDROM instead.
168: <p>
169:
170: <hr>
171: Please refer to the following files on the three CDROMs for extensive
172: details on how to install OpenBSD 3.2 on your machine:
173: <p>
174: <ul>
175: <li> CD1:3.2/i386/INSTALL.i386</li>
176: <li> CD1:3.2/alpha/INSTALL.alpha</li>
177: <p>
178: <li> CD2:3.2/macppc/INSTALL.macppc</li>
179: <li> CD2:3.2/vax/INSTALL.vax</li>
180: <p>
181: <li> CD3:3.2/sparc/INSTALL.sparc</li>
182: <li> CD3:3.2/sparc64/INSTALL.sparc64</li>
183: <p>
184: Only available via FTP:<br>
185: <li> CD4:3.2/mvme68k/INSTALL.mvme68k</li>
186: <li> CD4:3.2/amiga/INSTALL.amiga</li>
187: <li> CD4:3.2/mac68k/INSTALL.mac68k</li>
188: <li> CD4:3.2/hp300/INSTALL.hp300</li>
189: </ul>
190: <hr>
191:
192: <p>
193: Quick installer information for people familiar with OpenBSD, and the
194: use of the "disklabel -E" command. If you are at all confused when
195: installing OpenBSD, read the relevant INSTALL.* file as listed above!
196: <p>
197:
198: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
199: <ul>
200: <p>
201: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
202: release is on CD1. If your BIOS does not support booting from CD, you will need
203: to create a boot floppy to install from. To create a boot floppy write
1.3 jufi 204: <i>CD1:3.2/i386/floppy32.fs</i> to a floppy and boot via the floppy drive.
1.1 miod 205:
206: <p>
1.3 jufi 207: Use <i>CD1:3.2/i386/floppyB32.fs</i> instead for greater scsi controller
208: support, or <i>CD1:3.2/i386/floppyC32.fs</i> for better laptop support.
1.1 miod 209:
210: <p>
211: If you are planning on dual booting OpenBSD with another OS, you will need to read the included INSTALL.i386 document.
212:
213: <p>
214: To make a boot floppy under MS-DOS, use the "rawrite" utility located
215: at <i>CD:/3.2/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS, use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a> utility. The following is an example usage of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a>, where the device could be "floppy", "rfd0c", or "rfd0a".
216:
217: <ul><pre>
218: # <strong>dd if=<file> of=/dev/<device> bs=32k</strong>
219: </pre></ul>
220:
221: <p>
222: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or your install will most likely fail. For more information on creating a boot floppy and installing OpenBSD/i386 please refer to <a href="faq/faq4.html#4.1">FAQ4.1</a>.
223: </ul>
224:
225: <p>
226: <h3><font color="#e00000">OpenBSD/alpha:</font></h3>
227: <ul>
228: <p>
229: At the SRM prompt, enter <i>boot -fi 3.2/alpha/bsd.rd dka6</i> where <i>dka6</i>
230: is the short name for the CDROM drive (you can check with <i>show dev</i>).
231:
1.3 jufi 232: <p>If you can't boot from CDROM, write <i>CD1:3.2/alpha/floppy32.fs</i> or
233: <i>CD1:3.2/alpha/floppyB32.fs</i> (depending on your machine) to a diskette and
1.1 miod 234: enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.
235:
236: <p>
237: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail.
238:
239: </ul>
240:
241: <p>
242: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
243: <ul>
244: <p>
245: Put the CD2 in your CDROM drive and poweron your machine while holding down the
246: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
247:
248: <p>
249: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
250: /3.2/macppc/bsd.rd</i>
251: </ul>
252:
253: <p>
254: <h3><font color="#e00000">OpenBSD/hp300:</font></h3>
255: <ul>
256: <p>
257: Put the CD4 in your CDROM drive and press the spacebar during the poweron
258: self-test. Enter the boot choice that corresponds to <i>SYS_CDBOOT</i>.
259:
260: <p>
261: Alternatively, you can boot over the network by following the instructions in
262: INSTALL.hp300.
263: </ul>
264:
265: <p>
266: <h3><font color="#e00000">OpenBSD/amiga:</font></h3>
267: <ul>
268: <p>
269: Create BSD partitions according to INSTALL.amiga's preparation section.
270: Mount the CD4 under AmigaOS as device CD0: Next, execute the following
271: CLI command: "CD0:3.2/amiga/utils/loadbsd CD0:3.2/amiga/bsd.rd".
272: </ul>
273:
274: <p>
275: <h3><font color="#e00000">OpenBSD/mac68k:</font></h3>
276: <ul>
277: <p>
278: Boot MacOS as normal and partition your disk with the appropriate A/UX
279: configurations. Then, extract the Macside utilities from
280: CD4:3.2/mac68k/utils onto your hard disk. Run Mkfs to create your
281: filesystems on the A/UX partitions you just made. Then, use the
282: BSD/Mac68k Installer to copy all the sets in CD4:3.2/mac68k/ onto your
283: partitions. Finally, you will be ready to configure the BSD/Mac68k
284: Booter with the location of your kernel and boot the system.
285: </ul>
286:
287: <p>
288: <h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>
289: <ul>
290: <p>
291: You can create a bootable installation tape or boot over the network.<br>
292: The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>
293: and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k
294: for more details.
295: </ul>
296:
297: <p>
298: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
299: <ul>
300: <p>
301: Boot over the network via mopbooting as described in INSTALL.vax.
302: </ul>
303:
304: <p>
305: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
306: <ul>
307: <p>
308: The 3.2 release of OpenBSD/sparc is located on CD3. To boot off of this CD you can use one of the two commands listed below, depending on the version of your ROM.
309:
310: <ul><pre>
311: > <strong>boot cdrom 3.2/sparc/bsd.rd</strong>
312: or
313: > <strong>b sd(0,6,0)3.2/sparc/bsd.rd</strong>
314: </pre></ul>
315:
316: <p>
317: If your sparc does not have a CD drive, you can alternatively boot from floppy.
1.3 jufi 318: To do so you need to write "CD3:3.2/sparc/floppy32.fs" to a floppy. For more information see <a href="faq/faq4.html#4.1">FAQ4.1</a>. To boot from the floppy use one of the two commands listed below, depending on the version of your ROM.
1.1 miod 319:
320: <ul><pre>
321: > <strong>boot floppy</strong>
322: or
323: > <strong>boot fd()</strong>
324: </pre></ul>
325:
326: <p>
327: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail.
328:
329: <p>
330: If your sparc doesn't have a floppy drive nor a CD drive, you can either
331: setup a bootable tape, or install via network, as told in the
332: INSTALL.sparc file.
333: </ul>
334:
335: <p>
336: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
337: <ul>
338: <p>
339: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
340:
341: <p>
342: If this doesn't work, or if you don't have a CDROM drive, you can write
1.3 jufi 343: <i>CD3:3.2/sparc64/floppy32.fs</i> to a floppy and boot it with <i>boot
1.1 miod 344: floppy</i>.<br>
345: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail.
346:
347: <p>
1.4 henning 348: You can also write <i>CD3:3.2/sparc64/miniroot32.fs</i> to the swap partition on
1.1 miod 349: the disk and boot with <i>boot disk:b</i>.
350:
351: <p>
352: If nothing works, you can boot over the network as described in INSTALL.sparc64
353: </ul>
354:
355: <p>
356: <h3><font color="#e00000">Notes about the source code:</font></h3>
357: <ul>
358: <p>
359: src.tar.gz contains a source archive starting at /usr/src. This file
360: contains everything you need except for the kernel sources, which are
361: in a separate archive. To extract:
362: <p>
363: <ul><pre>
364: # <strong>mkdir -p /usr/src</strong>
365: # <strong>cd /usr/src</strong>
366: # <strong>tar xvfz /tmp/src.tar.gz</strong>
367: </pre></ul>
368: <p>
369: srcsys.tar.gz contains a source archive starting at /usr/src/sys.
370: This file contains all the kernel sources you need to rebuild kernels.
371: To extract:
372: <p>
373: <ul><pre>
374: # <strong>mkdir -p /usr/src/sys</strong>
375: # <strong>cd /usr/src</strong>
376: # <strong>tar xvfz /tmp/srcsys.tar.gz</strong>
377: </pre></ul>
378: <p>
379: Both of these trees are a regular CVS checkout. Using these trees it
380: is possible to get a head-start on using the anoncvs servers as
1.5 miod 381: described at <a href="anoncvs.html">http://www.OpenBSD.org/anoncvs.html</a>.
1.1 miod 382: Using these files
383: results in a much faster initial CVS update than you could expect from
384: a fresh checkout of the full OpenBSD source tree.
385: <p>
386: </ul>
387: <a name="ports"></a>
388: <hr>
389: <p>
390: <h3><font color="#0000e0">Ports Tree</font></h3>
391: <p>
392: A ports tree archive is also provided. To extract:
393: <p>
394: <ul><pre>
395: # <strong>cd /usr</strong>
396: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
397: # <strong>cd ports</strong>
398: </pre></ul>
399: <p>
400: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go
401: read <a href="ports.html">http://www.OpenBSD.org/ports.html</a>
402: if you know nothing about ports
403: at this point. This text is not a manual of how to use ports.
404: Rather, it is a set of notes meant to kickstart the user on the
405: OpenBSD ports system.
406: <p>
407: Certainly, the OpenBSD ports system is not complete. It is doubtful it
408: will ever be. However, it is growing very fast and getting more stable.
409: Almost all ports provided with this release should build without problems
410: on most architectures (over 2000 packages build on i386, for instance).
411: <p>
412: The <i>ports/</i> directory represents a CVS (see the manpage for
413: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html">
414: cvs(1)</a> if
415: you aren't familiar with CVS) checkout of our ports. As with our complete
416: source tree, our ports tree is available via anoncvs. So, in
417: order to keep current with it, you must make the <i>ports/</i> tree
418: available on a read-write medium and update the tree with a command
419: like:
420: <p>
421: <ul><pre>
422: # <strong>cd [portsdir]/; cvs -d anoncvsserver.openbsd.org:/cvs update -Pd -rOPENBSD_3.2</strong>
423: </pre></ul>
424: <p>
425: [Of course, you must replace the local directory and server name here
426: with the location of your ports collection and a nearby anoncvs
427: server.]
428: <p>
429: Note that most ports are available as packages through ftp. Updated
430: packages for the 3.2 release will be made available if problems arise.
431: <p>
432: If you're interested in seeing a port added, would like to help out, or just
433: would like to know more, the mailing list ports@openbsd.org is a good
434: place to know.
435: <p>
436:
437: <hr>
438: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
439: alt="OpenBSD"></a>
1.2 mpech 440: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.6 jufi 441: <br><small>
1.15 ! miod 442: $OpenBSD: 32.html,v 1.14 2002/10/17 00:50:26 deraadt Exp $
1.6 jufi 443: </small>
1.1 miod 444:
445: </body>
446: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to 32.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www