version 1.118, 2019/04/24 15:54:53 |
version 1.119, 2019/05/27 22:55:18 |
|
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> |
<!doctype html> |
<html> |
<html lang=en id=release> |
<head> |
<meta charset=utf-8> |
|
|
<title>OpenBSD 3.5</title> |
<title>OpenBSD 3.5</title> |
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> |
|
<meta name="description" content="OpenBSD 3.5"> |
<meta name="description" content="OpenBSD 3.5"> |
<meta name="copyright" content="This document copyright 2004 by OpenBSD."> |
|
<meta name="viewport" content="width=device-width, initial-scale=1"> |
<meta name="viewport" content="width=device-width, initial-scale=1"> |
<link rel="stylesheet" type="text/css" href="openbsd.css"> |
<link rel="stylesheet" type="text/css" href="openbsd.css"> |
<link rel="canonical" href="https://www.openbsd.org/35.html"> |
<link rel="canonical" href="https://www.openbsd.org/35.html"> |
</head> |
<style> |
|
#sourcecode h3 { |
|
color: var(--red); |
|
} |
|
|
<body bgcolor="#ffffff" text="#000000" link="#24248E"> |
#sourcecode p { |
|
margin-left: 2.75em; |
|
} |
|
|
<h2> |
#sourcecode blockquote { |
|
margin-left: 4.5em; |
|
} |
|
</style> |
|
|
|
<h2 id=OpenBSD> |
<a href="index.html"> |
<a href="index.html"> |
<font color="#0000ff"><i>Open</i></font><font color="#000084">BSD</font></a> |
<i>Open</i><b>BSD</b></a> |
<font color="#e00000">3.5</font> |
3.5 |
</h2> |
</h2> |
|
|
|
<table> |
|
<tr> |
|
<td> |
<a href="images/Carp.gif"> |
<a href="images/Carp.gif"> |
<img align="left" width="255" height="343" hspace="24" |
<img width="255" height="343" |
src="images/Carp.gif" alt="OpenBSD 3.5 logo"></a> |
src="images/Carp.gif" alt="Carp"></a> |
<p> |
<td> |
Released May 1, 2004<br> |
Released May 1, 2004<br> |
Copyright 1997-2004, Theo de Raadt.<br> |
Copyright 1997-2004, Theo de Raadt.<br> |
<font color="#e00000">ISBN 0-9731791-3-9</font> |
<cite class=isbn>ISBN 0-9731791-3-9</cite> |
<br> |
<br> |
3.5 Song: <a href="lyrics.html#35">"CARP License" and "Redundancy must be free"</a> |
3.5 Song: <a href="lyrics.html#35">"CARP License" and "Redundancy must be free"</a> |
<br> |
<br> |
|
|
<ul> |
<ul> |
<li>See the information on <a href="ftp.html">The FTP page</a> for |
<li>See the information on <a href="ftp.html">The FTP page</a> for |
a list of mirror machines. |
a list of mirror machines. |
<li>Go to the <font color="#e00000">pub/OpenBSD/3.5/</font> directory on |
<li>Go to the <code class=reldir>pub/OpenBSD/3.5/</code> directory on |
one of the mirror sites. |
one of the mirror sites. |
<li>Have a look at <a href="errata35.html">The 3.5 Errata page</a> for a list |
<li>Have a look at <a href="errata35.html">The 3.5 Errata page</a> for a list |
of bugs and workarounds. |
of bugs and workarounds. |
|
|
All applicable copyrights and credits are in the src.tar.gz, |
All applicable copyrights and credits are in the src.tar.gz, |
sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the |
sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the |
files fetched via ports.tar.gz. |
files fetched via ports.tar.gz. |
<br clear="all"> |
</table> |
|
|
<hr> |
<hr> |
<a name="new"></a> |
|
|
<section id=new> |
|
<h3>What's New</h3> |
|
|
<p> |
<p> |
<h3><font color="#0000e0">What's New</font></h3> |
|
<p> |
|
This is a partial list of new features and systems included in OpenBSD 3.5. |
This is a partial list of new features and systems included in OpenBSD 3.5. |
For a comprehensive list, see the <a href="plus35.html">changelog</a> leading |
For a comprehensive list, see the <a href="plus35.html">changelog</a> leading |
to 3.5. |
to 3.5. |
|
|
<p> |
<p> |
|
|
<li>Replacement of the GNU |
<li>Replacement of the GNU |
<a href="https://man.openbsd.org/?query=bc">bc(1)</a>, |
<a href="https://man.openbsd.org/bc">bc(1)</a>, |
<a href="https://man.openbsd.org/?query=dc">dc(1)</a>, |
<a href="https://man.openbsd.org/dc">dc(1)</a>, |
<a href="https://man.openbsd.org/?query=nm">nm(1)</a> and |
<a href="https://man.openbsd.org/nm">nm(1)</a> and |
<a href="https://man.openbsd.org/?query=size">size(1)</a> |
<a href="https://man.openbsd.org/size">size(1)</a> |
commands with BSD licensed equivalents. |
commands with BSD licensed equivalents. |
<p> |
<p> |
|
|
<li>A large number of bug fixes, changes, and optimizations to our packet filter |
<li>A large number of bug fixes, changes, and optimizations to our packet filter |
<a href="https://man.openbsd.org/?query=pf">pf(4)</a> |
<a href="https://man.openbsd.org/pf">pf(4)</a> |
including: |
including: |
<ul> |
<ul> |
<li>Atomic commits of ruleset changes (reduce the chance of ending up in an |
<li>Atomic commits of ruleset changes (reduce the chance of ending up in an |
|
|
<li>New tools for filtering gateway failover: |
<li>New tools for filtering gateway failover: |
<ul> |
<ul> |
<li>CARP (the Common Address Redundancy Protocol) |
<li>CARP (the Common Address Redundancy Protocol) |
<a href="https://man.openbsd.org/?query=carp">carp(4)</a> |
<a href="https://man.openbsd.org/carp">carp(4)</a> |
allows multiple machines to share responsibility for a given IP address or |
allows multiple machines to share responsibility for a given IP address or |
addresses. If the owner of the address fails, another member of the group |
addresses. If the owner of the address fails, another member of the group |
will take over for it. A discussion of the history of CARP can be found |
will take over for it. A discussion of the history of CARP can be found |
<a href="lyrics.html">here</a>. |
<a href="lyrics.html">here</a>. |
<li>Additions to the |
<li>Additions to the |
<a href="https://man.openbsd.org/?query=pfsync">pfsync(4)</a> |
<a href="https://man.openbsd.org/pfsync">pfsync(4)</a> |
interface allow it to synchronise state table entries between two or more |
interface allow it to synchronise state table entries between two or more |
firewalls which are operating in parallel, allowing stateful connections |
firewalls which are operating in parallel, allowing stateful connections |
to cross any of the firewalls regardless of where the state was initially |
to cross any of the firewalls regardless of where the state was initially |
|
|
|
|
<li> New functionality: |
<li> New functionality: |
<ul> |
<ul> |
<li><a href="https://man.openbsd.org/?query=pty&sektion=4">pty(4)</a> devices are now allocated on demand, up to a configurable limit. |
<li><a href="https://man.openbsd.org/pty.4">pty(4)</a> devices are now allocated on demand, up to a configurable limit. |
<li>New ptm device (see <a href="https://man.openbsd.org/?query=pty&sektion=4">pty(4)</a>) |
<li>New ptm device (see <a href="https://man.openbsd.org/pty.4">pty(4)</a>) |
that allows non-privileged processes to allocate a properly-permissioned pty.<br> |
that allows non-privileged processes to allocate a properly-permissioned pty.<br> |
As a result any process can now open a pty easily, meaning |
As a result any process can now open a pty easily, meaning |
<a href="https://man.openbsd.org/?query=xterm&sektion=1">xterm(1)</a> |
<a href="https://man.openbsd.org/xterm.1">xterm(1)</a> |
and |
and |
<a href="https://man.openbsd.org/?query=xconsole&sektion=1">xconsole(1)</a> |
<a href="https://man.openbsd.org/xconsole.1">xconsole(1)</a> |
are no longer setuid root. (In 3.4 they were setuid root, but privilege revoking). |
are no longer setuid root. (In 3.4 they were setuid root, but privilege revoking). |
<li>The <a href="https://man.openbsd.org/?query=closefrom&sektion=2">closefrom(2)</a> |
<li>The <a href="https://man.openbsd.org/closefrom.2">closefrom(2)</a> |
system call has been added. |
system call has been added. |
<li>TCP MD5 signatures (used by <a href="https://man.openbsd.org/?query=nc&sektion=1">nc(1)</a> |
<li>TCP MD5 signatures (used by <a href="https://man.openbsd.org/nc.1">nc(1)</a> |
and <a href="https://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>). |
and <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>). |
<li>Network boot support for i386 and amd64, using |
<li>Network boot support for i386 and amd64, using |
<a href="https://man.openbsd.org/?query=pxeboot&sektion=8&arch=i386">pxeboot(8)</a>. |
<a href="https://man.openbsd.org/i386/pxeboot.8">pxeboot(8)</a>. |
<li>The i386 8GB boot loader limitation has been removed. |
<li>The i386 8GB boot loader limitation has been removed. |
<li><a href="https://man.openbsd.org/?query=spamd&sektion=8">spamd(8)</a> |
<li><a href="https://man.openbsd.org/spamd.8">spamd(8)</a> |
gains <a href="http://projects.puremagic.com/greylisting/">greylisting</a> support. This allows greylisting (a very powerful spam reduction technique) to be |
gains <a href="http://projects.puremagic.com/greylisting/">greylisting</a> support. This allows greylisting (a very powerful spam reduction technique) to be |
done on a firewall for many mail hosts, no matter what MTA is being used. |
done on a firewall for many mail hosts, no matter what MTA is being used. |
<li>Interface 'cloning', accessed by |
<li>Interface 'cloning', accessed by |
<a href="https://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a> |
<a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> |
commands <em>create</em> and <em>destroy</em>. E.g. `ifconfig vlan100 create'. |
commands <em>create</em> and <em>destroy</em>. E.g. 'ifconfig vlan100 create'. |
<li> |
<li> |
<a href="https://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a> |
<a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a> |
can now be used with a generic <em>interface</em> name, for listing all such configured interfaces. E.g. `ifconfig carp'. |
can now be used with a generic <em>interface</em> name, for listing all such configured interfaces. E.g. 'ifconfig carp'. |
<li>The MAKEDEV(8) manual pages are now generated, and hence, accurate. |
<li>The MAKEDEV(8) manual pages are now generated, and hence, accurate. |
<li>Complete rewrite of <a href="https://man.openbsd.org/?query=pkg_add&sektion=1">package</a> tools in perl. |
<li>Complete rewrite of <a href="https://man.openbsd.org/pkg_add.1">package</a> tools in perl. |
<li><a href="https://man.openbsd.org/?query=syslogd&sektion=8">syslogd(8)</a> |
<li><a href="https://man.openbsd.org/syslogd.8">syslogd(8)</a> |
now supports logging to memory buffers, to be read using |
now supports logging to memory buffers, to be read using |
<a href="https://man.openbsd.org/?query=syslogc&sektion=8">syslogc(8)</a>. |
<a href="https://man.openbsd.org/syslogc.8">syslogc(8)</a>. |
This is useful for diskless or flash-based computers. |
This is useful for diskless or flash-based computers. |
<li><a href="https://man.openbsd.org/?query=ipsec&sektion=4">IPsec</a> ESP in UDP encapsulation. |
<li><a href="https://man.openbsd.org/ipsec.4">IPsec</a> ESP in UDP encapsulation. |
<li><a href="https://man.openbsd.org/?query=malloc&sektion=3"> |
<li><a href="https://man.openbsd.org/malloc.3"> |
malloc(3)</a> chunk randomization and guard pages. This helps to detect out-of-bounds |
malloc(3)</a> chunk randomization and guard pages. This helps to detect out-of-bounds |
reads and writes. |
reads and writes. |
<li><a href="https://man.openbsd.org/?query=authpf&sektion=8"> |
<li><a href="https://man.openbsd.org/authpf.8"> |
authpf(8)</a> now tags traffic in |
authpf(8)</a> now tags traffic in |
<a href="https://man.openbsd.org/?query=pflog&sektion=4"> |
<a href="https://man.openbsd.org/pflog.4"> |
pflog(4)</A> so that users may be associated with traffic through a NAT setup. |
pflog(4)</A> so that users may be associated with traffic through a NAT setup. |
<li>hw.setperf sysctl allows controlling the speed of many new i386 |
<li>hw.setperf sysctl allows controlling the speed of many new i386 |
<a href="https://man.openbsd.org/?query=cpu&arch=i386">CPUs</a>, |
<a href="https://man.openbsd.org/cpu&arch=i386">CPUs</a>, |
great for prolonged battery life. |
great for prolonged battery life. |
<li>XFS has been added to the GENERIC kernels so that |
<li>XFS has been added to the GENERIC kernels so that |
<a href="https://man.openbsd.org/?query=afsd&sektion=8">afsd(8) |
<a href="https://man.openbsd.org/afsd.8">afsd(8) |
</a> may be started easily, eliminating the need to recompile the kernel |
</a> may be started easily, eliminating the need to recompile the kernel |
to use AFS.<br> |
to use AFS.<br> |
AFS can now be used anonymously by enabling it in |
AFS can now be used anonymously by enabling it in |
<a href="https://man.openbsd.org/?query=rc.conf&sektion=8">rc.conf(8)</a> |
<a href="https://man.openbsd.org/rc.conf.8">rc.conf(8)</a> |
with no further configuration. |
with no further configuration. |
<li>The <a href="https://man.openbsd.org/?query=ps&sektion=1">ps</a>, <a href="https://man.openbsd.org/?query=top&sektion=1">top</a> and <a href="https://man.openbsd.org/?query=w&sektion=1">w</a> utilities no longer break when changes are made in kernel structures. |
<li>The <a href="https://man.openbsd.org/ps.1">ps</a>, <a href="https://man.openbsd.org/top.1">top</a> and <a href="https://man.openbsd.org/w.1">w</a> utilities no longer break when changes are made in kernel structures. |
<li>A <a href="https://man.openbsd.org/?query=poll&sektion=2">poll</a> interface has been added to the <a href="https://man.openbsd.org/?query=rpc&sektion=3">rpc</a> routines in the standard C library. Use of <a href="https://man.openbsd.org/?query=poll&sektion=2">poll</a> over <a href="https://man.openbsd.org/?query=select&sektion=2">select</a> can result in better performance for programs with a large number of open file descriptors. |
<li>A <a href="https://man.openbsd.org/poll.2">poll</a> interface has been added to the <a href="https://man.openbsd.org/rpc.3">rpc</a> routines in the standard C library. Use of <a href="https://man.openbsd.org/poll.2">poll</a> over <a href="https://man.openbsd.org/select.2">select</a> can result in better performance for programs with a large number of open file descriptors. |
<li><a href="https://man.openbsd.org/?query=dhclient&sektion=8" |
<li><a href="https://man.openbsd.org/dhclient.8" |
>dhclient(8)</a> now detects when the interface it configured is modified and |
>dhclient(8)</a> now detects when the interface it configured is modified and |
gracefully exits. |
gracefully exits. |
e.g. repeatedly running it against the same interface leaves only the |
e.g. repeatedly running it against the same interface leaves only the |
|
|
|
|
<li> Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process, resulting in much greater security for the following processes: |
<li> Privilege separation added to allow complex operations to occur in an untrusted, unprivileged process, resulting in much greater security for the following processes: |
<ul> |
<ul> |
<li><a href="https://man.openbsd.org/?query=isakmpd&sektion=8">isakmpd(8)</a> |
<li><a href="https://man.openbsd.org/isakmpd.8">isakmpd(8)</a> |
<li><a href="https://man.openbsd.org/?query=named&sektion=8">named(8)</a> |
<li><a href="https://man.openbsd.org/named.8">named(8)</a> |
(Previously privilege revoking, but this had a small breakage). |
(Previously privilege revoking, but this had a small breakage). |
<li><a href="https://man.openbsd.org/?query=pflogd&sektion=8">pflogd(8)</a> |
<li><a href="https://man.openbsd.org/pflogd.8">pflogd(8)</a> |
<li><a href="https://man.openbsd.org/?query=tcpdump&sektion=8">tcpdump(8)</a> |
<li><a href="https://man.openbsd.org/tcpdump.8">tcpdump(8)</a> |
</ul> |
</ul> |
<p> |
<p> |
|
|
<li> New tools: |
<li> New tools: |
<ul> |
<ul> |
<li><a href="https://man.openbsd.org/?query=sensorsd&sektion=8">sensorsd(8)</a>, monitoring hardware sensors. |
<li><a href="https://man.openbsd.org/sensorsd.8">sensorsd(8)</a>, monitoring hardware sensors. |
<li><a href="https://man.openbsd.org/?query=procmap&sektion=1">procmap(1)</a>, to examine a process' memory map. |
<li><a href="https://man.openbsd.org/procmap.1">procmap(1)</a>, to examine a process' memory map. |
<li><a href="https://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>, implementing the <a href="https://www.rfc-editor.org/rfc/rfc1771.txt">BGP-4</a> routing protocol. |
<li><a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>, implementing the <a href="https://www.rfc-editor.org/rfc/rfc1771.txt">BGP-4</a> routing protocol. |
<li><a href="https://man.openbsd.org/?query=pkill&sektion=1">pkill(1)</a> and |
<li><a href="https://man.openbsd.org/pkill.1">pkill(1)</a> and |
<a href="https://man.openbsd.org/?query=pgrep&sektion=1">pgrep(1)</a>, finding or signalling processes by name. |
<a href="https://man.openbsd.org/pgrep.1">pgrep(1)</a>, finding or signalling processes by name. |
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
<li>Implemented TCP adjustments recommended by |
<li>Implemented TCP adjustments recommended by |
<a href="https://www.rfc-editor.org/rfc/rfc3390.txt">RFC3390</a>, |
<a href="https://www.rfc-editor.org/rfc/rfc3390.txt">RFC3390</a>, |
controllable via |
controllable via |
<a href="https://man.openbsd.org/?query=sysctl&sektion=8">sysctl</a>. |
<a href="https://man.openbsd.org/sysctl.8">sysctl</a>. |
<li>OpenSSL speedup on i386, up to 100% improvement for md5, sha1, blowfish, |
<li>OpenSSL speedup on i386, up to 100% improvement for md5, sha1, blowfish, |
des, 3des, rsa, dsa and bn. |
des, 3des, rsa, dsa and bn. |
<li>OpenSSL now directly uses the new AES instructions some VIA C3 processors |
<li>OpenSSL now directly uses the new AES instructions some VIA C3 processors |
|
|
</ul> |
</ul> |
<p> |
<p> |
|
|
<li><a href="https://man.openbsd.org/?query=scsi&sektion=4">SCSI(4)</a> improvements: |
<li><a href="https://man.openbsd.org/scsi.4">SCSI(4)</a> improvements: |
<ul> |
<ul> |
<li>Bus probe made faster by skipping non-existent LUNs. |
<li>Bus probe made faster by skipping non-existent LUNs. |
<li>Bus probe made saner by elimination of spurious commands. |
<li>Bus probe made saner by elimination of spurious commands. |
|
|
<li>Improved hardware support, including: |
<li>Improved hardware support, including: |
<ul> |
<ul> |
<li>The <a href="hppa.html">hppa</a> architecture gets support for many |
<li>The <a href="hppa.html">hppa</a> architecture gets support for many |
<a href="https://man.openbsd.org/?query=pci">PCI</a> |
<a href="https://man.openbsd.org/pci">PCI</a> |
based machines w/ addition of <a href="https://man.openbsd.org/?query=dino&sektion=4&arch=hppa">dino(4)</a> GSC-PCI bridge. |
based machines w/ addition of <a href="https://man.openbsd.org/hppa/dino.4">dino(4)</a> GSC-PCI bridge. |
<li>New <a href="https://man.openbsd.org/?query=oosiop&sektion=4">oosiop(4)</a> driver for NCR 53C700 SCSI host adapters. |
<li>New <a href="https://man.openbsd.org/oosiop.4">oosiop(4)</a> driver for NCR 53C700 SCSI host adapters. |
<li>Major improvements to <a href="https://man.openbsd.org/?query=ahc&sektion=4">ahc(4)</a>, bringing support for many new models. |
<li>Major improvements to <a href="https://man.openbsd.org/ahc.4">ahc(4)</a>, bringing support for many new models. |
<li>New <a href="https://man.openbsd.org/?query=bce&sektion=4">bce(4)</a> driver, supporting the Broadcom BCM4401 FastEthernet chipset. |
<li>New <a href="https://man.openbsd.org/bce.4">bce(4)</a> driver, supporting the Broadcom BCM4401 FastEthernet chipset. |
<li>New <a href="https://man.openbsd.org/?query=mpt&sektion=4">mpt(4)</a> driver for LSI Fusion-MPT SCSI and FibreChannel host adapters. |
<li>New <a href="https://man.openbsd.org/mpt.4">mpt(4)</a> driver for LSI Fusion-MPT SCSI and FibreChannel host adapters. |
<li>New <a href="https://man.openbsd.org/?query=snapper&arch=macppc&sektion=4&">snapper(4)</a> audio driver for recent iBook (since May 02) and PowerBook (since Apr 02) models. |
<li>New <a href="https://man.openbsd.org/macppc/snapper.4">snapper(4)</a> audio driver for recent iBook (since May 02) and PowerBook (since Apr 02) models. |
<li>Improved stability of the <a href="https://man.openbsd.org/?query=wi&sektion=4">wi(4)</a> driver as well as support for USB-based adapters and software WEP. |
<li>Improved stability of the <a href="https://man.openbsd.org/wi.4">wi(4)</a> driver as well as support for USB-based adapters and software WEP. |
<li><a href="https://man.openbsd.org/?query=wi&sektion=4">wi(4)</a> in HostAP mode now supports SSID hiding and newer prism firmware revisions. |
<li><a href="https://man.openbsd.org/wi.4">wi(4)</a> in HostAP mode now supports SSID hiding and newer prism firmware revisions. |
<li>Fixed several firmware incompatibility issues in <a href="https://man.openbsd.org/?query=an&sektion=4">an(4)</a>. |
<li>Fixed several firmware incompatibility issues in <a href="https://man.openbsd.org/an.4">an(4)</a>. |
<li>Improved ATA and SATA support. |
<li>Improved ATA and SATA support. |
<li>Support for i835 AGP GART in <a href="https://man.openbsd.org/?query=vga&sektion=4">vga(4)</a>. |
<li>Support for i835 AGP GART in <a href="https://man.openbsd.org/vga.4">vga(4)</a>. |
<li>Improved Gigabit Ethernet support for <a href="https://man.openbsd.org/?query=em&sektion=4">em(4)</a>, <a href="https://man.openbsd.org/?query=sk&sektion=4">sk(4)</a> & <a href="https://man.openbsd.org/?query=bge&sektion=4">bge(4)</a>. |
<li>Improved Gigabit Ethernet support for <a href="https://man.openbsd.org/em.4">em(4)</a>, <a href="https://man.openbsd.org/sk.4">sk(4)</a> & <a href="https://man.openbsd.org/bge.4">bge(4)</a>. |
<li>Several fixes for <a href="https://man.openbsd.org/?query=apm&sektion=4">apm(4)</a>. |
<li>Several fixes for <a href="https://man.openbsd.org/apm.4">apm(4)</a>. |
<li>Support for Intel 852/855/865 AGP chipsets. |
<li>Support for Intel 852/855/865 AGP chipsets. |
<li>Many more USB Flash and other |
<li>Many more USB Flash and other |
<a href="https://man.openbsd.org/?query=umass&sektion=4">umass(4)</a> devices work as a result of SCSI improvements. |
<a href="https://man.openbsd.org/umass.4">umass(4)</a> devices work as a result of SCSI improvements. |
</ul> |
</ul> |
<p> |
<p> |
|
|
<li> This release ships with Firefox for all major architectures. |
<li> This release ships with Firefox for all major architectures. |
<p> |
<p> |
|
|
<li> Major improvements in <a href="https://man.openbsd.org/?query=pthreads&sektion=3">pthreads(3)</a>. |
<li> Major improvements in <a href="https://man.openbsd.org/pthreads.3">pthreads(3)</a>. |
<p> |
<p> |
|
|
<li> Over 2500 ports, 2300 pre-built packages. |
<li> Over 2500 ports, 2300 pre-built packages. |
|
|
<li>OpenSSH 3.8.1: |
<li>OpenSSH 3.8.1: |
<ul> |
<ul> |
<li> |
<li> |
<a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a> |
<a href="https://man.openbsd.org/sshd.8">sshd(8)</a> |
now supports forced changes of expired passwords via |
now supports forced changes of expired passwords via |
<a href="https://man.openbsd.org/?query=passwd&sektion=1">passwd(1)</a>. |
<a href="https://man.openbsd.org/passwd.1">passwd(1)</a>. |
<li> |
<li> |
<a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> |
<a href="https://man.openbsd.org/ssh.1">ssh(1)</a> |
now uses untrusted cookies for X11-Forwarding. |
now uses untrusted cookies for X11-Forwarding. |
Some X11 applications might need full access to the X11 server, |
Some X11 applications might need full access to the X11 server, |
see ForwardX11Trusted in |
see ForwardX11Trusted in |
<a href="https://man.openbsd.org/?query=ssh_config&sektion=5">ssh_config(5)</a> |
<a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a> |
and |
and |
<a href="https://man.openbsd.org/?query=xauth&sektion=1">xauth(1)</a>. |
<a href="https://man.openbsd.org/xauth.1">xauth(1)</a>. |
<li> |
<li> |
<a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a> |
<a href="https://man.openbsd.org/ssh.1">ssh(1)</a> |
now supports sending application layer |
now supports sending application layer |
keep-alive messages to the server. See ServerAliveInterval in |
keep-alive messages to the server. See ServerAliveInterval in |
<a href="https://man.openbsd.org/?query=ssh_config&sektion=5">ssh_config(5)</a>. |
<a href="https://man.openbsd.org/ssh_config.5">ssh_config(5)</a>. |
<li> Improved |
<li> Improved |
<a href="https://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a> |
<a href="https://man.openbsd.org/sftp.1">sftp(1)</a> |
batch file support. |
batch file support. |
<li> New KerberosGetAFSToken option for |
<li> New KerberosGetAFSToken option for |
<a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>. |
<a href="https://man.openbsd.org/sshd.8">sshd(8)</a>. |
<li> Updated /etc/moduli file and improved performance for |
<li> Updated /etc/moduli file and improved performance for |
protocol version 2. |
protocol version 2. |
<li> Support for host keys in DNS. |
<li> Support for host keys in DNS. |
|
|
<p> |
<p> |
|
|
</ul> |
</ul> |
|
</section> |
|
|
<a name="install"></a> |
|
<hr> |
<hr> |
|
|
|
<section id=install> |
|
<h3>How to install</h3> |
|
|
<p> |
<p> |
<h3><font color="#0000e0">How to install</font></h3> |
|
<p> |
|
Following this are the instructions which you would have on a piece of |
Following this are the instructions which you would have on a piece of |
paper if you had purchased a CDROM set instead of doing an alternate |
paper if you had purchased a CDROM set instead of doing an alternate |
form of install. The instructions for doing an ftp (or other style |
form of install. The instructions for doing an ftp (or other style |
|
|
</ul> |
</ul> |
<hr> |
<hr> |
|
|
|
<section id=quickinstall> |
|
|
<p> |
<p> |
Quick installer information for people familiar with OpenBSD, and the |
Quick installer information for people familiar with OpenBSD, and the |
use of the "disklabel -E" command. If you are at all confused when |
use of the "disklabel -E" command. If you are at all confused when |
installing OpenBSD, read the relevant INSTALL.* file as listed above! |
installing OpenBSD, read the relevant INSTALL.* file as listed above! |
<p> |
|
|
|
<h3><font color="#e00000">OpenBSD/i386:</font></h3> |
<h3>OpenBSD/i386:</h3> |
<ul> |
|
|
<p> |
Play with your BIOS options to enable booting from a CD. The OpenBSD/i386 |
Play with your BIOS options to enable booting from a CD. The OpenBSD/i386 |
release is on CD1. If your BIOS does not support booting from CD, you will need |
release is on CD1. If your BIOS does not support booting from CD, you will need |
to create a boot floppy to install from. To create a boot floppy write |
to create a boot floppy to install from. To create a boot floppy write |
|
|
<p> |
<p> |
To make a boot floppy under MS-DOS, use the "rawrite" utility located |
To make a boot floppy under MS-DOS, use the "rawrite" utility located |
at <i>CD1:3.5/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS, |
at <i>CD1:3.5/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS, |
use the <a href="https://man.openbsd.org/?query= |
use the <a href="https://man.openbsd.org/dd.1">dd(1)</a> |
dd&sektion=1">dd(1)</a> utility. The following is an example usage of |
utility. The following is an example usage of |
<a href="https://man.openbsd.org/?query=dd&sektion=1">dd(1) |
<a href="https://man.openbsd.org/dd.1">dd(1) |
</a>, where the device could be "floppy", "rfd0c", or |
</a>, where the device could be "floppy", "rfd0c", or |
"rfd0a". |
"rfd0a". |
|
|
<ul><pre> |
<blockquote><pre> |
# <strong>dd if=<file> of=/dev/<device> bs=32k</strong> |
# <kbd>dd if=<file> of=/dev/<device> bs=32k</kbd> |
</pre></ul> |
</pre></blockquote> |
|
|
<p> |
<p> |
Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or |
Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or |
your install will most likely fail. For more information on creating a boot |
your install will most likely fail. For more information on creating a boot |
floppy and installing OpenBSD/i386 please refer to |
floppy and installing OpenBSD/i386 please refer to |
<a href="faq/faq4.html#MkFlop">this page</a>. |
<a href="faq/faq4.html#MkFlop">this page</a>. |
</ul> |
|
|
|
|
<h3>OpenBSD/vax:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/vax:</font></h3> |
|
<ul> |
|
Boot over the network via mopbooting as described in INSTALL.vax. |
Boot over the network via mopbooting as described in INSTALL.vax. |
</ul> |
|
|
|
|
<h3>OpenBSD/amd64:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/amd64:</font></h3> |
|
<ul> |
|
The 3.5 release of OpenBSD/amd64 is located on CD2. |
The 3.5 release of OpenBSD/amd64 is located on CD2. |
Boot from the CD to begin the install - you may need to adjust |
Boot from the CD to begin the install - you may need to adjust |
your BIOS options first. |
your BIOS options first. |
|
|
<p> |
<p> |
If you are planning to dual boot OpenBSD with another OS, you will need to |
If you are planning to dual boot OpenBSD with another OS, you will need to |
read INSTALL.amd64. |
read INSTALL.amd64. |
</ul> |
|
|
|
|
<h3>OpenBSD/macppc:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/macppc:</font></h3> |
|
<ul> |
|
Put the CD2 in your CDROM drive and poweron your machine while holding down the |
Put the CD2 in your CDROM drive and poweron your machine while holding down the |
<i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>. |
<i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>. |
|
|
<p> |
<p> |
Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot |
Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot |
/3.5/macppc/bsd.rd</i> |
/3.5/macppc/bsd.rd</i> |
</ul> |
|
|
|
|
<h3>OpenBSD/sparc:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/sparc:</font></h3> |
|
<ul> |
|
The 3.5 release of OpenBSD/sparc is located on CD3. To boot off of this CD you |
The 3.5 release of OpenBSD/sparc is located on CD3. To boot off of this CD you |
can use one of the two commands listed below, depending on the version of your |
can use one of the two commands listed below, depending on the version of your |
ROM. |
ROM. |
|
|
<ul><pre> |
<blockquote><pre> |
ok <strong>boot cdrom 3.5/sparc/bsd.rd</strong> |
ok <kbd>boot cdrom 3.5/sparc/bsd.rd</kbd> |
or |
or |
> <strong>b sd(0,6,0)3.5/sparc/bsd.rd</strong> |
> <kbd>b sd(0,6,0)3.5/sparc/bsd.rd</kbd> |
</pre></ul> |
</pre></blockquote> |
|
|
<p> |
<p> |
If your sparc does not have a CD drive, you can alternatively boot from floppy. |
If your sparc does not have a CD drive, you can alternatively boot from floppy. |
|
|
the floppy use one of the two commands listed below, depending on the version of |
the floppy use one of the two commands listed below, depending on the version of |
your ROM. |
your ROM. |
|
|
<ul><pre> |
<blockquote><pre> |
ok <strong>boot floppy</strong> |
ok <kbd>boot floppy</kbd> |
or |
or |
> <strong>boot fd()</strong> |
> <kbd>boot fd()</kbd> |
</pre></ul> |
</pre></blockquote> |
|
|
<p> |
<p> |
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install |
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install |
|
|
If your sparc doesn't have a floppy drive nor a CD drive, you can either |
If your sparc doesn't have a floppy drive nor a CD drive, you can either |
setup a bootable tape, or install via network, as told in the |
setup a bootable tape, or install via network, as told in the |
INSTALL.sparc file. |
INSTALL.sparc file. |
</ul> |
|
|
|
|
<h3>OpenBSD/sparc64:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/sparc64:</font></h3> |
|
<ul> |
|
Put the CD3 in your CDROM drive and type <i>boot cdrom</i>. |
Put the CD3 in your CDROM drive and type <i>boot cdrom</i>. |
|
|
<p> |
<p> |
|
|
|
|
<p> |
<p> |
If nothing works, you can boot over the network as described in INSTALL.sparc64 |
If nothing works, you can boot over the network as described in INSTALL.sparc64 |
</ul> |
|
|
|
|
<h3>OpenBSD/alpha:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/alpha:</font></h3> |
Write <i>FTP:3.5/alpha/floppy35.fs</i> or |
<ul> |
|
<p>Write <i>FTP:3.5/alpha/floppy35.fs</i> or |
|
<i>FTP:3.5/alpha/floppyB35.fs</i> (depending on your machine) to a diskette and |
<i>FTP:3.5/alpha/floppyB35.fs</i> (depending on your machine) to a diskette and |
enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details. |
enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details. |
|
|
|
|
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install |
Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install |
will most likely fail. |
will most likely fail. |
|
|
</ul> |
<h3>OpenBSD/cats:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/cats:</font></h3> |
|
<ul> |
|
<p> |
|
After updating the firmware to at least ABLE 1.95 if necessary, boot |
After updating the firmware to at least ABLE 1.95 if necessary, boot |
<i>FTP:3.5/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM |
<i>FTP:3.5/cats/bsd.rd</i> from an ABLE-supported device (such as a CD-ROM |
or an existing FFS or EXT2FS partition). |
or an existing FFS or EXT2FS partition). |
</ul> |
|
|
|
|
<h3>OpenBSD/hp300:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/hp300:</font></h3> |
|
<ul> |
|
<p> |
|
Boot over the network by following the instructions in INSTALL.hp300. |
Boot over the network by following the instructions in INSTALL.hp300. |
</ul> |
|
|
|
|
<h3>OpenBSD/hppa:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/hppa:</font></h3> |
|
<ul> |
|
<p> |
|
Boot over the network by following the instructions in INSTALL.hppa or the |
Boot over the network by following the instructions in INSTALL.hppa or the |
<a href="hppa.html#netboot">hppa platform page</a>. |
<a href="hppa.html#netboot">hppa platform page</a>. |
</ul> |
|
|
|
|
<h3>OpenBSD/mac68k:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/mac68k:</font></h3> |
|
<ul> |
|
<p> |
|
Boot MacOS as normal and partition your disk with the appropriate A/UX |
Boot MacOS as normal and partition your disk with the appropriate A/UX |
configurations. Then, extract the Macside utilities from |
configurations. Then, extract the Macside utilities from |
<i>FTP:3.5/mac68k/utils</i> onto your hard disk. Run Mkfs to create your |
<i>FTP:3.5/mac68k/utils</i> onto your hard disk. Run Mkfs to create your |
|
|
"BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.5/mac68k/</i> onto your |
"BSD/Mac68k Installer" to copy all the sets in <i>FTP:3.5/mac68k/</i> onto your |
partitions. Finally, you will be ready to configure the "BSD/Mac68k |
partitions. Finally, you will be ready to configure the "BSD/Mac68k |
Booter" with the location of your kernel and boot the system. |
Booter" with the location of your kernel and boot the system. |
</ul> |
|
|
|
|
<h3>OpenBSD/mvme68k:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/mvme68k:</font></h3> |
|
<ul> |
|
<p> |
|
You can create a bootable installation tape or boot over the network.<br> |
You can create a bootable installation tape or boot over the network.<br> |
The network boot requires a MVME68K BUG version that supports the <i>NIOT</i> |
The network boot requires a MVME68K BUG version that supports the <i>NIOT</i> |
and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k |
and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k |
for more details. |
for more details. |
</ul> |
|
|
|
|
<h3>OpenBSD/mvme88k:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">OpenBSD/mvme88k:</font></h3> |
|
<ul> |
|
<p> |
|
You can create a bootable installation tape or boot over the network.<br> |
You can create a bootable installation tape or boot over the network.<br> |
The network boot requires a MVME88K BUG version that supports the <i>NIOT</i> |
The network boot requires a MVME88K BUG version that supports the <i>NIOT</i> |
and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k |
and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k |
for more details. |
for more details. |
</ul> |
|
|
|
|
</section> |
|
|
|
<section id=sourcecode> |
|
<h3>Notes about the source code:</h3> |
|
|
<p> |
<p> |
<h3><font color="#e00000">Notes about the source code:</font></h3> |
|
<ul> |
|
src.tar.gz contains a source archive starting at /usr/src. This file |
src.tar.gz contains a source archive starting at /usr/src. This file |
contains everything you need except for the kernel sources, which are |
contains everything you need except for the kernel sources, which are |
in a separate archive. To extract: |
in a separate archive. To extract: |
|
|
|
<blockquote><pre> |
|
# <kbd>mkdir -p /usr/src</kbd> |
|
# <kbd>cd /usr/src</kbd> |
|
# <kbd>tar xvfz /tmp/src.tar.gz</kbd> |
|
</pre></blockquote> |
|
|
<p> |
<p> |
<ul><pre> |
|
# <strong>mkdir -p /usr/src</strong> |
|
# <strong>cd /usr/src</strong> |
|
# <strong>tar xvfz /tmp/src.tar.gz</strong> |
|
</pre></ul> |
|
<p> |
|
sys.tar.gz contains a source archive starting at /usr/src/sys. |
sys.tar.gz contains a source archive starting at /usr/src/sys. |
This file contains all the kernel sources you need to rebuild kernels. |
This file contains all the kernel sources you need to rebuild kernels. |
To extract: |
To extract: |
|
|
|
<blockquote><pre> |
|
# <kbd>mkdir -p /usr/src/sys</kbd> |
|
# <kbd>cd /usr/src</kbd> |
|
# <kbd>tar xvfz /tmp/sys.tar.gz</kbd> |
|
</pre></blockquote> |
|
|
<p> |
<p> |
<ul><pre> |
|
# <strong>mkdir -p /usr/src/sys</strong> |
|
# <strong>cd /usr/src</strong> |
|
# <strong>tar xvfz /tmp/sys.tar.gz</strong> |
|
</pre></ul> |
|
<p> |
|
Both of these trees are a regular CVS checkout. Using these trees it |
Both of these trees are a regular CVS checkout. Using these trees it |
is possible to get a head-start on using the anoncvs servers as |
is possible to get a head-start on using the anoncvs servers as |
described <a href="anoncvs.html">here</a>. |
described <a href="anoncvs.html">here</a>. |
Using these files |
Using these files |
results in a much faster initial CVS update than you could expect from |
results in a much faster initial CVS update than you could expect from |
a fresh checkout of the full OpenBSD source tree. |
a fresh checkout of the full OpenBSD source tree. |
<p> |
|
</ul> |
</section> |
<a name="ports"></a> |
</section> |
|
|
<hr> |
<hr> |
|
|
|
<section id=ports> |
|
<h3>Ports Tree</h3> |
<p> |
<p> |
<h3><font color="#0000e0">Ports Tree</font></h3> |
|
<p> |
|
A ports tree archive is also provided. To extract: |
A ports tree archive is also provided. To extract: |
<p> |
<p> |
<ul><pre> |
<blockquote><pre> |
# <strong>cd /usr</strong> |
# <kbd>cd /usr</kbd> |
# <strong>tar xvfz /tmp/ports.tar.gz</strong> |
# <kbd>tar xvfz /tmp/ports.tar.gz</kbd> |
# <strong>cd ports</strong> |
# <kbd>cd ports</kbd> |
</pre></ul> |
</pre></blockquote> |
<p> |
<p> |
The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go |
The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go |
read the <a href="faq/faq15.html">ports</a> page |
read the <a href="faq/faq15.html">ports</a> page |
|
|
OpenBSD ports system. |
OpenBSD ports system. |
<p> |
<p> |
The <i>ports/</i> directory represents a CVS (see the manpage for |
The <i>ports/</i> directory represents a CVS (see the manpage for |
<a href="https://man.openbsd.org/?query=cvs&apropos=0&sektion=1&manpath=OpenBSD+Current&arch=i386&format=html"> |
<a href="https://man.openbsd.org/cvs.1"> |
cvs(1)</a> if |
cvs(1)</a> if |
you aren't familiar with CVS) checkout of our ports. As with our complete |
you aren't familiar with CVS) checkout of our ports. As with our complete |
source tree, our ports tree is available via anoncvs. So, in |
source tree, our ports tree is available via anoncvs. So, in |
|
|
available on a read-write medium and update the tree with a command |
available on a read-write medium and update the tree with a command |
like: |
like: |
<p> |
<p> |
<ul><pre> |
<blockquote><pre> |
# <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_3_5</strong> |
# <kbd>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_3_5</kbd> |
</pre></ul> |
</pre></blockquote> |
<p> |
<p> |
[Of course, you must replace the local directory and server name here |
[Of course, you must replace the local directory and server name here |
with the location of your ports collection and a nearby anoncvs |
with the location of your ports collection and a nearby anoncvs |
|
|
If you're interested in seeing a port added, would like to help out, or just |
If you're interested in seeing a port added, would like to help out, or just |
would like to know more, the mailing list ports@openbsd.org is a good |
would like to know more, the mailing list ports@openbsd.org is a good |
place to know. |
place to know. |
<p> |
</section> |
|
|
</body> |
|
</html> |
|