Annotation of www/33.html, Revision 1.13
1.1 miod 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
2: <html>
3: <head>
4: <title>OpenBSD 3.3 Release</title>
5: <link rev=made href="mailto:www@openbsd.org">
6: <meta name="resource-type" content="document">
7: <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
8: <meta name="description" content="OpenBSD 3.3">
9: <meta name="keywords" content="openbsd,main">
10: <meta name="distribution" content="global">
11: <meta name="copyright" content="This document copyright 2003 by OpenBSD.">
12: </head>
13:
14: <body bgcolor="#ffffff" text="#000000" link="#24248E">
15:
16: <a href="index.html">
17: <img alt="[OpenBSD]" height="30" width="141" hspace="24" src="images/smalltitle.gif" border="0"></a>
18: <hr>
19:
20: <p>
1.5 deraadt 21: <a href="images/Barbarian.gif">
22: <img align="left" width="255" height="343" hspace="24"
23: src="images/Barbarian.gif" alt="OpenBSD 3.3 logo"></a>
1.1 miod 24: <h2><font color="#0000e0">The OpenBSD 3.3 Release:</font></h2>
25: <p>
26:
27: Released May 1, 2003<br>
28: Copyright 1997-2003, Theo de Raadt.<br>
29: <font color="#e00000">ISBN 0-9731791-1-2</font>
30: <p>
31:
32: <a href="#new">What's New</a><br>
33: <a href="#install">How to install</a><br>
34: <a href="#ports">How to use the ports tree</a><br>
35: <a href="orders.html">Ordering a CD set</a><br>
36:
37: <p>
38: <h3><font color="#0000e0">
39: To get the files for this release:
40: <ul>
41: <li>Order a CDROM from our <a href="orders.html">ordering system</a>.
42: <li>See the information on <a href="ftp.html">The FTP page</a> for
43: a list of mirror machines.
44: <li>Go to the <font color="#e00000">pub/OpenBSD/3.3/</font> directory on
45: one of the mirror sites.
46: <li>Briefly read the rest of this document.
47: <!-- change to errata33.html when available -->
48: <li>Have a look at <a href="errata.html">The 3.3 Errata page</a> for a list
49: of bugs and workarounds.
50: <!-- change ALL refs to plus.html to plus33.html when available -->
51: <li>See a <a href="plus.html">detailed log of changes</a> between the
52: 3.2 and 3.3 releases.
53: </ul>
54: </font></h3>
55: <br clear=all>
56: <br>
57: <p>
58:
59: <strong>Note:</strong> All applicable copyrights and credits can be found
60: in the applicable file sources found in the files src.tar.gz, srcsys.tar.gz,
61: XF4.tar.gz, or in the files fetched via ports.tar.gz. The distribution
62: files used to build packages from the ports.tar.gz file are not included on
63: the CDROM because of lack of space.
64: <p>
65:
66: <a name="new"></a>
67: <hr>
68: <p>
69: <h3><font color="#0000e0">What's New</font></h3>
70: <p>
71: This is a partial list of new features and systems included in OpenBSD 3.3.
72: For a comprehensive list, see the <a href="plus.html">changelog</a> leading
73: to 3.3.
74: <p>
75:
76: <ul>
77: <li>Integration of the
78: <a href="http://www.trl.ibm.com/projects/security/ssp">ProPolice</a>
79: stack protection technology into the system compiler. This protection is
80: enabled by default.
1.2 deraadt 81: <p>
1.1 miod 82:
1.10 deraadt 83: <li>W^X (pronounced: "W xor X") binaries on architectures capable of
84: pure execute-bit support in the MMU (sparc, sparc64, alpha,
85: hppa). This is a fine-grained memory permissions layout, ensuring that
86: memory which can be written to by application programs can not be
87: executable at the same time and vice versa. This raises the bar on
88: potential buffer overflows and other attacks.
1.1 miod 89: <p>
90:
1.2 deraadt 91: <li>Still more reduction in setuid and setgid binaries, and more chroot
92: use throughout the system.
1.1 miod 93: <p>
94:
95: <li>The X window system uses privilege separation, for better security.
96: <p>
97:
98: <li>As usual, improvements to the documentation, notably the man pages and
1.7 jsyn 99: the Web FAQ. An increasingly large part of the website is available in several
1.1 miod 100: languages.
101: <p>
102:
103: <li>More complete collection and better tested set of "ports".
104: setuid/setgid ports have been significantly reduced as well. Many of the
105: ones that remain setuid have been modified to revoke privileges as early
106: as possible.
107: <p>
108:
109: <li>Over 2000 pre-built and tested packages.
110: <p>
111:
112: <li>Significant improvements to the pthread library.
113: <p>
114:
115: <li>An incredible amount of enhancements and stability improvements to
116: our packet filter, <a
117: href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf</a>,
1.8 henning 118: including:
1.1 miod 119: <ul>
1.8 henning 120: <li>the merge of altq, a bandwidth management system
121: <li>anchors, allowing subrulesets which can be loaded and modified independently
122: <li>tables, a very efficient way for large address lists in rules
1.9 henning 123: <li>address pools, redirect/NAT to multiple addresses and thus load balancing
1.8 henning 124: <li>a highly flexibilized configuration language
1.1 miod 125: </ul>
1.11 jason 126:
127: <p>
128:
129: <li>Much improved <a href="sparc64.html">sparc64</a> support: support for
1.13 ! miod 130: more models and several major bugs eradicated.
1.8 henning 131:
1.1 miod 132: <p>
133:
134: <li>The system includes the following major components from outside suppliers:
135: <p>
136: <ul>
137: <li>XFree86 4.2.1 (and i386 contains 3.3.X servers also, thus providing support for all chipsets)
1.4 miod 138: <li>Gcc 2.95.3 (+ patches)
139: <li>Perl 5.8.0 (+ patches)
1.3 henning 140: <li>Apache 1.3.27, mod_ssl 2.8.12, DSO support (+ patches)
1.1 miod 141: <li>OpenSSL 0.9.7beta3 (+ patches)
1.4 miod 142: <li>Groff 1.15
143: <li>Sendmail 8.12.8
144: <li>Bind 9.2.2 (+ patches)
145: <li>Lynx 2.8.2rel.1 with HTTPS support added
146: <li>Sudo 1.6.7
147: <li>Ncurses 5.2
1.1 miod 148: <li>Latest KAME IPv6
1.12 hin 149: <li>KTH Kerberos 1.1.1
1.1 miod 150: <li>Heimdal 0.4e (+ patches)
151: <li>OpenSSH 3.6
152: </ul>
153: <p>
154:
155: <li>Many improvements for security and reliability (look for the red
156: print in the <a href="plus.html">complete changelog</a>).
157: <p>
1.11 jason 158: <li> and much more.
159:
1.1 miod 160: </ul>
161:
162: <a name="install"></a>
163: <hr>
164: <p>
165: <h3><font color="#0000e0">How to install</font></h3>
166: <p>
167: Following this are the instructions which you would have on a piece of
168: paper if you had purchased a CDROM set instead of doing an alternate
169: form of install. The instructions for doing an ftp (or other style
170: of) install are very similar; the CDROM instructions are left intact
171: so that you can see how much easier it would have been if you had
172: purchased a CDROM instead.
173: <p>
174:
175: <hr>
176: Please refer to the following files on the three CDROMs for extensive
177: details on how to install OpenBSD 3.3 on your machine:
178: <p>
179: <ul>
180: <li> CD1:3.3/i386/INSTALL.i386
181: <p>
182: <li> CD2:3.3/macppc/INSTALL.macppc
183: <li> CD2:3.3/vax/INSTALL.vax
184: <p>
185: <li> CD3:3.3/sparc/INSTALL.sparc
186: <li> CD3:3.3/sparc64/INSTALL.sparc64
187: </ul>
188: <hr>
189:
190: <p>
191: Quick installer information for people familiar with OpenBSD, and the
192: use of the "disklabel -E" command. If you are at all confused when
193: installing OpenBSD, read the relevant INSTALL.* file as listed above!
194: <p>
195:
196: <h3><font color="#e00000">OpenBSD/i386:</font></h3>
197: <ul>
198: Play with your BIOS options to enable booting from a CD. The OpenBSD/i386
199: release is on CD1. If your BIOS does not support booting from CD, you will need
200: to create a boot floppy to install from. To create a boot floppy write
201: <i>CD1:3.3/i386/floppy33.fs</i> to a floppy and boot via the floppy drive.
202:
203: <p>
204: Use <i>CD1:3.3/i386/floppyB33.fs</i> instead for greater scsi controller
205: support, or <i>CD1:3.3/i386/floppyC33.fs</i> for better laptop support.
206:
207: <p>
208: If you are planning on dual booting OpenBSD with another OS, you will need to read the included INSTALL.i386 document.
209:
210: <p>
211: To make a boot floppy under MS-DOS, use the "rawrite" utility located
212: at <i>CD:/3.3/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS, use the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a> utility. The following is an example usage of <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a>, where the device could be "floppy", "rfd0c", or "rfd0a".
213:
214: <ul><pre>
215: # <strong>dd if=<file> of=/dev/<device> bs=32k</strong>
216: </pre></ul>
217:
218: <p>
219: Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or your install will most likely fail. For more information on creating a boot floppy and installing OpenBSD/i386 please refer to <a href="faq/faq4.html#4.1">FAQ4.1</a>.
220: </ul>
221:
222: <p>
223: <h3><font color="#e00000">OpenBSD/macppc:</font></h3>
224: <ul>
225: Put the CD2 in your CDROM drive and poweron your machine while holding down the
226: <i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.
227:
228: <p>
229: Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot
230: /3.3/macppc/bsd.rd</i>
231: </ul>
232:
233: <p>
234: <h3><font color="#e00000">OpenBSD/vax:</font></h3>
235: <ul>
236: Boot over the network via mopbooting as described in INSTALL.vax.
237: </ul>
238:
239: <p>
240: <h3><font color="#e00000">OpenBSD/sparc:</font></h3>
241: <ul>
242: The 3.3 release of OpenBSD/sparc is located on CD3. To boot off of this CD you can use one of the two commands listed below, depending on the version of your ROM.
243:
244: <ul><pre>
245: > <strong>boot cdrom 3.3/sparc/bsd.rd</strong>
246: or
247: > <strong>b sd(0,6,0)3.3/sparc/bsd.rd</strong>
248: </pre></ul>
249:
250: <p>
251: If your sparc does not have a CD drive, you can alternatively boot from floppy.
252: To do so you need to write "CD3:3.3/sparc/floppy33.fs" to a floppy. For more information see <a href="faq/faq4.html#4.1">FAQ4.1</a>. To boot from the floppy use one of the two commands listed below, depending on the version of your ROM.
253:
254: <ul><pre>
255: > <strong>boot floppy</strong>
256: or
257: > <strong>boot fd()</strong>
258: </pre></ul>
259:
260: <p>
261: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail.
262:
263: <p>
264: If your sparc doesn't have a floppy drive nor a CD drive, you can either
265: setup a bootable tape, or install via network, as told in the
266: INSTALL.sparc file.
267: </ul>
268:
269: <p>
270: <h3><font color="#e00000">OpenBSD/sparc64:</font></h3>
271: <ul>
272: Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.
273:
274: <p>
275: If this doesn't work, or if you don't have a CDROM drive, you can write
276: <i>CD3:3.3/sparc64/floppy33.fs</i> to a floppy and boot it with <i>boot
277: floppy</i>.<br>
278: Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install will most likely fail.
279:
280: <p>
281: You can also write <i>CD3:3.3/sparc64/miniroot33.fs</i> to the swap partition on
282: the disk and boot with <i>boot disk:b</i>.
283:
284: <p>
285: If nothing works, you can boot over the network as described in INSTALL.sparc64
286: </ul>
287:
288: <p>
289: <h3><font color="#e00000">Notes about the source code:</font></h3>
290: <ul>
291: src.tar.gz contains a source archive starting at /usr/src. This file
292: contains everything you need except for the kernel sources, which are
293: in a separate archive. To extract:
294: <p>
295: <ul><pre>
296: # <strong>mkdir -p /usr/src</strong>
297: # <strong>cd /usr/src</strong>
298: # <strong>tar xvfz /tmp/src.tar.gz</strong>
299: </pre></ul>
300: <p>
301: srcsys.tar.gz contains a source archive starting at /usr/src/sys.
302: This file contains all the kernel sources you need to rebuild kernels.
303: To extract:
304: <p>
305: <ul><pre>
306: # <strong>mkdir -p /usr/src/sys</strong>
307: # <strong>cd /usr/src</strong>
308: # <strong>tar xvfz /tmp/srcsys.tar.gz</strong>
309: </pre></ul>
310: <p>
311: Both of these trees are a regular CVS checkout. Using these trees it
312: is possible to get a head-start on using the anoncvs servers as
313: described at <a href="anoncvs.html">http://www.OpenBSD.org/anoncvs.html</a>.
314: Using these files
315: results in a much faster initial CVS update than you could expect from
316: a fresh checkout of the full OpenBSD source tree.
317: <p>
318: </ul>
319: <a name="ports"></a>
320: <hr>
321: <p>
322: <h3><font color="#0000e0">Ports Tree</font></h3>
323: <p>
324: A ports tree archive is also provided. To extract:
325: <p>
326: <ul><pre>
327: # <strong>cd /usr</strong>
328: # <strong>tar xvfz /tmp/ports.tar.gz</strong>
329: # <strong>cd ports</strong>
330: </pre></ul>
331: <p>
332: The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go
333: read <a href="ports.html">http://www.OpenBSD.org/ports.html</a>
334: if you know nothing about ports
335: at this point. This text is not a manual of how to use ports.
336: Rather, it is a set of notes meant to kickstart the user on the
337: OpenBSD ports system.
338: <p>
339: Certainly, the OpenBSD ports system is not complete. It is doubtful it
340: will ever be. However, it is growing very fast and getting more stable.
341: Almost all ports provided with this release should build without problems
342: on most architectures (over 2000 packages build on i386, for instance).
343: <p>
344: The <i>ports/</i> directory represents a CVS (see the manpage for
345: <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cvs&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html">
346: cvs(1)</a> if
347: you aren't familiar with CVS) checkout of our ports. As with our complete
348: source tree, our ports tree is available via anoncvs. So, in
349: order to keep current with it, you must make the <i>ports/</i> tree
350: available on a read-write medium and update the tree with a command
351: like:
352: <p>
353: <ul><pre>
354: # <strong>cd [portsdir]/; cvs -d anoncvsserver.openbsd.org:/cvs update -Pd -rOPENBSD_3.3</strong>
355: </pre></ul>
356: <p>
357: [Of course, you must replace the local directory and server name here
358: with the location of your ports collection and a nearby anoncvs
359: server.]
360: <p>
361: Note that most ports are available as packages through ftp. Updated
362: packages for the 3.3 release will be made available if problems arise.
363: <p>
364: If you're interested in seeing a port added, would like to help out, or just
365: would like to know more, the mailing list ports@openbsd.org is a good
366: place to know.
367: <p>
368:
369: <hr>
370: <a href="index.html"><img height="24" width="24" src="back.gif" border="0"
371: alt="OpenBSD"></a>
372: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
373: <br><small>
1.13 ! miod 374: $OpenBSD: 33.html,v 1.12 2003/03/26 00:52:20 hin Exp $
1.1 miod 375: </small>
376:
377: </body>
378: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to 33.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www