www/34.html - diff

Return to 34.html CVS log

Up to [local] / www

Diff for /www/34.html between version 1.64 and 1.65

version 1.64, 2019/04/24 15:54:53

version 1.65, 2019/05/27 22:55:18

Line 1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<!doctype html>

<html>

<head>

<title>OpenBSD 3.4</title>

</head>

<style>

#sourcecode h3 {

color: var(--red);

}

#sourcecode p {

margin-left: 2.75em;

}

<h2>

#sourcecode blockquote {

margin-left: 4.5em;

}

</style>

3.4

</h2>

<table>

<tr>

<td>

<img align="left" width="255" height="343" hspace="24"

<img width="255" height="343"

src="images/Hood.gif" alt="OpenBSD 3.4 logo"></a>

src="images/Hood.gif" alt="Hood"></a>

<p>

<td>

Released Nov 1, 2003<br>

<br>

3.4 Song: <a href="lyrics.html#34">"The Legend of Puffy Hood"</a>

<br>

Line 33

Line 45

<ul>

<li>See the information on <a href="ftp.html">The FTP page</a> for

a list of mirror machines.

<li>Go to the <font color="#e00000">pub/OpenBSD/3.4/</font> directory on

<li>Go to the <code class=reldir>pub/OpenBSD/3.4/</code> directory on

one of the mirror sites.

<li>Have a look at <a href="errata34.html">The 3.4 Errata page</a> for a list

of bugs and workarounds.

Line 44

Line 56

All applicable copyrights and credits are in the src.tar.gz,

sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the

files fetched via ports.tar.gz.

</table>

<hr>

<p>

<p>

This is a partial list of new features and systems included in OpenBSD 3.4.

For a comprehensive list, see the <a href="plus34.html">changelog</a> leading

to 3.4.

Line 59

Line 72

<ul>

<li>The i386 architecture has been switched to the

executable format.

<p>

Line 69

Line 82

effort limit on code execution.

<p>

on ELF platforms now loads libraries in a random order for

greater resistance to attacks. The i386 architecture also maps libraries

into somewhat randomized addresses. Together with W^X and

Line 81

Line 94

<li>A static bounds checker has been added to the compiler to perform basic

checks on functions which accept buffers and sizes. The checker aims to

find common mistakes in the use of library functions such as

<a href="https://man.openbsd.org/?query=strlcpy">strlcpy(3)</a>

<a href="https://man.openbsd.org/strlcpy">strlcpy(3)</a>

or <a href="https://man.openbsd.org/?query=sscanf">sscanf(3)</a>

or <a href="https://man.openbsd.org/sscanf">sscanf(3)</a>

without emitting any false positives. Running it over the source and ports

trees revealed over a hundred real bugs, which were fixed and submitted back

to the original authors where possible.

<p>

<li>Privilege separation has been implemented for the

<a href="https://man.openbsd.org/?query=syslogd">syslogd(8)</a>

<a href="https://man.openbsd.org/syslogd">syslogd(8)</a>

daemon, making it much more robust against future errors. The child which

listens to network traffic now runs as a normal user and chroots itself,

while the parent process tracks the state of the child and performs

Line 99

Line 112

<li>Many unsafe string functions have been removed from the kernel and userland

utilities. This audit is one of the most comprehensive OpenBSD has ever

done, with thousands of occurrences of

<a href="https://man.openbsd.org/?query=strcpy">strcpy(3)</a>,

<a href="https://man.openbsd.org/strcpy">strcpy(3)</a>,

<a href="https://man.openbsd.org/?query=strcat">strcat(3)</a>,

<a href="https://man.openbsd.org/strcat">strcat(3)</a>,

<a href="https://man.openbsd.org/?query=sprintf">sprintf(3)</a>,

<a href="https://man.openbsd.org/sprintf">sprintf(3)</a>,

and

<a href="https://man.openbsd.org/?query=vsprintf">vsprintf(3)</a>

<a href="https://man.openbsd.org/vsprintf">vsprintf(3)</a>

being replaced with safer, bounded alternatives such as

<a href="https://man.openbsd.org/?query=strlcpy">strlcpy(3)</a>,

<a href="https://man.openbsd.org/strlcpy">strlcpy(3)</a>,

<a href="https://man.openbsd.org/?query=strlcat">strlcat(3)</a>,

<a href="https://man.openbsd.org/strlcat">strlcat(3)</a>,

<a href="https://man.openbsd.org/?query=snprintf">snprintf(3)</a>,

<a href="https://man.openbsd.org/snprintf">snprintf(3)</a>,

<a href="https://man.openbsd.org/?query=vsnprintf">vsnprintf(3)</a>,

<a href="https://man.openbsd.org/vsnprintf">vsnprintf(3)</a>,

and

<a href="https://man.openbsd.org/?query=asprintf">asprintf(3)</a>.

<a href="https://man.openbsd.org/asprintf">asprintf(3)</a>.

<p>

<li>Many improvements to and bugs fixed in the

Line 131

Line 144

<p>

<li>Emulation support for binary compatibility is now controlled via

<a href="https://man.openbsd.org/?query=sysctl&sektion=8">sysctl(8)</a>.

<a href="https://man.openbsd.org/sysctl.8">sysctl(8)</a>.

Emulation is now disabled by default to limit exposure to malicious

binaries, and can be enabled in

sysctl.conf(5)</a>.

<p>

Line 142

Line 155

<p>

<li>The ports tree now supports building programs under

systrace(1)</a>, preventing the possibility of applications harming the

system at compile-time via trojaned configuration scripts or otherwise.

<p>

<li>Symbol caching in

reduces the startup time of large applications.

<p>

Line 157

Line 170

<p>

<li>Replacement of GNU

<a href="https://man.openbsd.org/?query=diff">diff(1)</a>,

<a href="https://man.openbsd.org/diff">diff(1)</a>,

<a href="https://man.openbsd.org/?query=diff3">diff3(1)</a>,

<a href="https://man.openbsd.org/diff3">diff3(1)</a>,

<a href="https://man.openbsd.org/?query=grep">grep(1)</a>,

<a href="https://man.openbsd.org/grep">grep(1)</a>,

<a href="https://man.openbsd.org/?query=egrep">egrep(1)</a>,

<a href="https://man.openbsd.org/egrep">egrep(1)</a>,

<a href="https://man.openbsd.org/?query=fgrep">fgrep(1)</a>,

<a href="https://man.openbsd.org/fgrep">fgrep(1)</a>,

<a href="https://man.openbsd.org/?query=zgrep">zgrep(1)</a>,

<a href="https://man.openbsd.org/zgrep">zgrep(1)</a>,

<a href="https://man.openbsd.org/?query=zegrep">zegrep(1)</a>,

<a href="https://man.openbsd.org/zegrep">zegrep(1)</a>,

<a href="https://man.openbsd.org/?query=zfgrep">zfgrep(1)</a>,

<a href="https://man.openbsd.org/zfgrep">zfgrep(1)</a>,

<a href="https://man.openbsd.org/?query=gzip">gzip(1)</a>,

<a href="https://man.openbsd.org/gzip">gzip(1)</a>,

<a href="https://man.openbsd.org/?query=zcat">zcat(1)</a>,

<a href="https://man.openbsd.org/zcat">zcat(1)</a>,

<a href="https://man.openbsd.org/?query=gunzip">gunzip(1)</a>,

<a href="https://man.openbsd.org/gunzip">gunzip(1)</a>,

<a href="https://man.openbsd.org/?query=gzcat">gzcat(1)</a>,

<a href="https://man.openbsd.org/gzcat">gzcat(1)</a>,

<a href="https://man.openbsd.org/?query=zcmp">zcmp(1)</a>,

<a href="https://man.openbsd.org/zcmp">zcmp(1)</a>,

<a href="https://man.openbsd.org/?query=zmore">zmore(1)</a>,

<a href="https://man.openbsd.org/zmore">zmore(1)</a>,

<a href="https://man.openbsd.org/?query=zdiff">zdiff(1)</a>,

<a href="https://man.openbsd.org/zdiff">zdiff(1)</a>,

<a href="https://man.openbsd.org/?query=zforce">zforce(1)</a>,

<a href="https://man.openbsd.org/zforce">zforce(1)</a>,

<a href="https://man.openbsd.org/?query=gzexe">gzexe(1)</a>,

<a href="https://man.openbsd.org/gzexe">gzexe(1)</a>,

and

commands with BSD licensed equivalents.

<p>

<li>Addition of read-only support for

file systems.

<p>

<li>Reliability improvements to layered file systems, enabling

<a href="https://man.openbsd.org/?query=mount_null">NULLFS</a>

<a href="https://man.openbsd.org/mount_null">NULLFS</a>

to work again.

<p>

<li>Import of

<a href="https://man.openbsd.org/?query=growfs">growfs(8)</a>

<a href="https://man.openbsd.org/growfs">growfs(8)</a>

utility, allowing expansion of existing file systems.

<p>

<li>Improvements to

<a href="https://man.openbsd.org/?query=compat_linux">linux emulation</a>

<a href="https://man.openbsd.org/compat_linux">linux emulation</a>

enabling more applications to run.

<p>

<li>Significant improvements to the

<a href="https://man.openbsd.org/?query=pthreads">pthreads(3)</a>

<a href="https://man.openbsd.org/pthreads">pthreads(3)</a>

library.

<p>

<li>Replace many static fd_set uses, to instead use

or dynamic allocation.

<p>

Line 220

Line 233

<p>

<li>A large number of bug fixes, changes, and optimizations to our packet filter

including:

<ul>

<li>packet tagging (e.g. filter on tags added by bridge based on MAC address)

Line 234

Line 247

<li>Improved hardware support, including:

<ul>

<li>Kauai ATA controllers (Apple ATA100 wdc)

kauaiata(4)</a> enabling support for Powerbook 12" and 17" models.

<li>Support for controlling LongRun registers on Transmeta CPUs.

<li>Many fixes to

<a href="https://man.openbsd.org/?query=aac">aac(4)</a>,

<a href="https://man.openbsd.org/aac">aac(4)</a>,

<a href="https://man.openbsd.org/?query=ahc">ahc(4)</a>,

<a href="https://man.openbsd.org/ahc">ahc(4)</a>,

<a href="https://man.openbsd.org/?query=osiop">osiop(4)</a>,

<a href="https://man.openbsd.org/osiop">osiop(4)</a>,

and <a href="https://man.openbsd.org/?query=siop">siop(4)</a>

and <a href="https://man.openbsd.org/siop">siop(4)</a>

SCSI drivers.

<li>New

<a href="https://man.openbsd.org/?query=it">it(4)</a>,

<a href="https://man.openbsd.org/it">it(4)</a>,

<a href="https://man.openbsd.org/?query=lm">lm(4)</a>, and

<a href="https://man.openbsd.org/lm">lm(4)</a>, and

<a href="https://man.openbsd.org/?query=viaenv">viaenv(4)</a>

<a href="https://man.openbsd.org/viaenv">viaenv(4)</a>

hardware monitor drivers.

<li>New

driver for SafeNet crypto accelerators.

<li>New

driver for Myson Technologies network cards.

<li>More ethernet cards supported by

<a href="https://man.openbsd.org/?query=sk">sk(4)</a>,

<a href="https://man.openbsd.org/sk">sk(4)</a>,

<a href="https://man.openbsd.org/?query=wi">wi(4)</a>,

<a href="https://man.openbsd.org/wi">wi(4)</a>,

<a href="https://man.openbsd.org/?query=fxp">fxp(4)</a>,

<a href="https://man.openbsd.org/fxp">fxp(4)</a>,

and <a href="https://man.openbsd.org/?query=dc&sektion=4">dc(4)</a>.

and <a href="https://man.openbsd.org/dc.4">dc(4)</a>.

<li>Massive overhaul and sync with NetBSD of the entire

support system.

<li>New and better support for various controllers in

<a href="https://man.openbsd.org/?query=pciide">pciide(4)</a>,

<a href="https://man.openbsd.org/pciide">pciide(4)</a>,

including experimental support for Serial ATA.

<li>New drivers to support

mgx(4)</a> and

pninek(4)</a> SPARC framebuffers. The

vigra(4)</a> driver also supports more models.

<li><a href="https://man.openbsd.org/?query=pcmcia">pcmcia(4)</a>

<li><a href="https://man.openbsd.org/pcmcia">pcmcia(4)</a>

support for Tadpole SPARCBooks and SPARCs with pcmcia-sbus bridges.

<li>Watchdog support for

<a href="https://man.openbsd.org/?query=elansc&arch=i386">elansc(4)</a>

<a href="https://man.openbsd.org/elansc&arch=i386">elansc(4)</a>

and

<a href="https://man.openbsd.org/?query=geodesc&arch=i386">geodesc(4)</a>

<a href="https://man.openbsd.org/geodesc&arch=i386">geodesc(4)</a>

as used on Soekris boards.

</ul>

<p>

Line 310

Line 323

<li> and much more.

</ul>

</section>

<hr>

<h3>How to install</h3>

<p>

<h3><font color="#0000e0">How to install</font></h3>

<p>

Following this are the instructions which you would have on a piece of

paper if you had purchased a CDROM set instead of doing an alternate

form of install. The instructions for doing an ftp (or other style

Line 345

Line 360

</ul>

<hr>

<p>

Quick installer information for people familiar with OpenBSD, and the

use of the "disklabel -E" command. If you are at all confused when

installing OpenBSD, read the relevant INSTALL.* file as listed above!

<p>

<h3><font color="#e00000">OpenBSD/i386:</font></h3>

<h3>OpenBSD/i386:</h3>

<ul>

<p>

Play with your BIOS options to enable booting from a CD. The OpenBSD/i386

release is on CD1. If your BIOS does not support booting from CD, you will need

to create a boot floppy to install from. To create a boot floppy write

Line 369

Line 386

<p>

To make a boot floppy under MS-DOS, use the "rawrite" utility located

at <i>CD:/3.4/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,

use the <a href="https://man.openbsd.org/?query=

use the <a href="https://man.openbsd.org/dd.1">dd(1)</a>

dd&sektion=1">dd(1)</a> utility. The following is an example usage of

utility. The following is an example usage of

<a href="https://man.openbsd.org/?query=dd&sektion=1">dd(1)

<a href="https://man.openbsd.org/dd.1">dd(1)

</a>, where the device could be "floppy", "rfd0c", or

"rfd0a".

# <strong>dd if=<file> of=/dev/<device> bs=32k</strong>

# <kbd>dd if=<file> of=/dev/<device> bs=32k</kbd>

</pre></ul>

</pre></blockquote>

<p>

Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or

your install will most likely fail. For more information on creating a boot

floppy and installing OpenBSD/i386 please refer to

<a href="faq/faq4.html#MkFlop">this page</a>.

</ul>

<h3>OpenBSD/macppc:</h3>

<p>

<h3><font color="#e00000">OpenBSD/macppc:</font></h3>

<ul>

Put the CD2 in your CDROM drive and poweron your machine while holding down the

<i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.

<p>

Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot

/3.4/macppc/bsd.rd</i>

</ul>

<h3>OpenBSD/vax:</h3>

<p>

<h3><font color="#e00000">OpenBSD/vax:</font></h3>

<ul>

Boot over the network via mopbooting as described in INSTALL.vax.

</ul>

<h3>OpenBSD/sparc:</h3>

<p>

<h3><font color="#e00000">OpenBSD/sparc:</font></h3>

<ul>

The 3.4 release of OpenBSD/sparc is located on CD3. To boot off of this CD you

can use one of the two commands listed below, depending on the version of your

ROM.

> <strong>boot cdrom 3.4/sparc/bsd.rd</strong>

> <kbd>boot cdrom 3.4/sparc/bsd.rd</kbd>

> <strong>b sd(0,6,0)3.4/sparc/bsd.rd</strong>

> <kbd>b sd(0,6,0)3.4/sparc/bsd.rd</kbd>

</pre></ul>

</pre></blockquote>

<p>

If your sparc does not have a CD drive, you can alternatively boot from floppy.

Line 423

Line 437

the floppy use one of the two commands listed below, depending on the version of

your ROM.

> <strong>boot floppy</strong>

> <kbd>boot floppy</kbd>

> <strong>boot fd()</strong>

> <kbd>boot fd()</kbd>

</pre></ul>

</pre></blockquote>

<p>

Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install

Line 437

Line 451

If your sparc doesn't have a floppy drive nor a CD drive, you can either

setup a bootable tape, or install via network, as told in the

INSTALL.sparc file.

</ul>

<h3>OpenBSD/sparc64:</h3>

<p>

<h3><font color="#e00000">OpenBSD/sparc64:</font></h3>

<ul>

Put the CD3 in your CDROM drive and type <i>boot cdrom</i>.

<p>

Line 457

Line 470

<p>

If nothing works, you can boot over the network as described in INSTALL.sparc64

</ul>

<h3>OpenBSD/alpha:</h3>

<p>

<h3><font color="#e00000">OpenBSD/alpha:</font></h3>

Write <i>FTP:3.4/alpha/floppy34.fs</i> or

<ul>

<p>Write <i>FTP:3.4/alpha/floppy34.fs</i> or

<i>FTP:3.4/alpha/floppyB34.fs</i> (depending on your machine) to a diskette and

enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.

Line 470

Line 482

Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install

will most likely fail.

</ul>

<h3>OpenBSD/hp300:</h3>

<p>

<h3><font color="#e00000">OpenBSD/hp300:</font></h3>

<ul>

<p>

Boot over the network by following the instructions in INSTALL.hp300.

</ul>

<h3>OpenBSD/hppa:</h3>

<p>

<h3><font color="#e00000">OpenBSD/hppa:</font></h3>

<ul>

<p>

Boot over the network by following the instructions in INSTALL.hppa or the

<a href="hppa.html#netboot">hppa platform page</a>.

</ul>

<h3>OpenBSD/mac68k:</h3>

<p>

<h3><font color="#e00000">OpenBSD/mac68k:</font></h3>

<ul>

<p>

Boot MacOS as normal and partition your disk with the appropriate A/UX

configurations. Then, extract the Macside utilities from

<i>FTP:3.4/mac68k/utils</i> onto your hard disk. Run Mkfs to create your

Line 498

Line 503

"BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.4/mac68k/</i> onto your

partitions. Finally, you will be ready to configure the "BSD/Mac68k

Booter" with the location of your kernel and boot the system.

</ul>

<h3>OpenBSD/mvme68k:</h3>

<p>

<h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>

<ul>

<p>

You can create a bootable installation tape or boot over the network.<br>

The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>

and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k

for more details.

</ul>

</section>

<h3>Notes about the source code:</h3>

<p>

<h3><font color="#e00000">Notes about the source code:</font></h3>

<ul>

src.tar.gz contains a source archive starting at /usr/src. This file

contains everything you need except for the kernel sources, which are

in a separate archive. To extract:

# <kbd>mkdir -p /usr/src</kbd>

# <kbd>cd /usr/src</kbd>

# <kbd>tar xvfz /tmp/src.tar.gz</kbd>

</pre></blockquote>

<p>

# <strong>mkdir -p /usr/src</strong>

# <strong>cd /usr/src</strong>

# <strong>tar xvfz /tmp/src.tar.gz</strong>

</pre></ul>

<p>

sys.tar.gz contains a source archive starting at /usr/src/sys.

This file contains all the kernel sources you need to rebuild kernels.

To extract:

# <kbd>mkdir -p /usr/src/sys</kbd>

# <kbd>cd /usr/src</kbd>

# <kbd>tar xvfz /tmp/sys.tar.gz</kbd>

</pre></blockquote>

<p>

# <strong>mkdir -p /usr/src/sys</strong>

# <strong>cd /usr/src</strong>

# <strong>tar xvfz /tmp/sys.tar.gz</strong>

</pre></ul>

<p>

Both of these trees are a regular CVS checkout. Using these trees it

is possible to get a head-start on using the anoncvs servers as

described <a href="anoncvs.html">here</a>.

Using these files

results in a much faster initial CVS update than you could expect from

a fresh checkout of the full OpenBSD source tree.

<p>

</ul>

</section>

</section>

<hr>

<h3>Ports Tree</h3>

<p>

<h3><font color="#0000e0">Ports Tree</font></h3>

<p>

A ports tree archive is also provided. To extract:

<p>

# <strong>cd /usr</strong>

# <kbd>cd /usr</kbd>

# <strong>tar xvfz /tmp/ports.tar.gz</strong>

# <kbd>tar xvfz /tmp/ports.tar.gz</kbd>

# <strong>cd ports</strong>

# <kbd>cd ports</kbd>

</pre></ul>

</pre></blockquote>

<p>

The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go

read the <a href="faq/faq15.html">ports</a> page

Line 562

Line 571

OpenBSD ports system.

<p>

The <i>ports/</i> directory represents a CVS (see the manpage for

cvs(1)</a> if

you aren't familiar with CVS) checkout of our ports. As with our complete

source tree, our ports tree is available via anoncvs. So, in

Line 570

Line 579

available on a read-write medium and update the tree with a command

like:

<p>

# <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_3_4</strong>

# <kbd>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_3_4</kbd>

</pre></ul>

</pre></blockquote>

<p>

[Of course, you must replace the local directory and server name here

with the location of your ports collection and a nearby anoncvs

Line 584

Line 593

If you're interested in seeing a port added, would like to help out, or just

would like to know more, the mailing list ports@openbsd.org is a good

place to know.

<p>

</section>

</body>

</html>