www/47.html - diff

<li>Eliminate spurious <a href="http://man.openbsd.org?query=dhclient&sektion=">dhclient(8)</a> error messages when the specified interface does not exist.

<li>Eliminate spurious <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=softraid&sektion=">softraid(4)</a> error messages for removable devices without media.

<li>Eliminate spurious <a href="http://man.openbsd.org?query=softraid&sektion=">softraid(4)</a> error messages for removable devices without media.

</ul>

<li>New tools:

<ul>

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=newfs_ext2fs&sektion=8">newfs_ext2fs(8)</a> for creating ext2 filesystems.

<li><a href="http://man.openbsd.org?query=newfs_ext2fs&sektion=8">newfs_ext2fs(8)</a> for creating ext2 filesystems.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mkuboot&sektion=8">mkuboot(8)</a> for creating U-Boot boot loader images.

<li><a href="http://man.openbsd.org?query=mkuboot&sektion=8">mkuboot(8)</a> for creating U-Boot boot loader images.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=midicat&sektion=1">midicat(1)</a> MIDI server allowing MIDI programs to communicate

<li><a href="http://man.openbsd.org?query=midicat&sektion=1">midicat(1)</a> MIDI server allowing MIDI programs to communicate

<li>POSIX-compliant <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=fuser&sektion=1">fuser(1)</a> to identify process IDs holding a file open

<li>POSIX-compliant <a href="http://man.openbsd.org?query=fuser&sektion=1">fuser(1)</a> to identify process IDs holding a file open

</ul>

Line 204

</ul>

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pf&sektion=4">pf(4)</a> improvements:

<li><a href="http://man.openbsd.org?query=pf&sektion=4">pf(4)</a> improvements:

<ul>

<li>nat-to, rdr-to, binat-to options replace the nat, rdr and binat

translation rules. See

Line 215

pf(4) route-to/reply-to syntax change</a> for more info.

<li>pf(4) can now translate packets between different routing

domains.

<li>Added -S and -L options to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8&format=html">pfctl(8)</a> to store and load pf state table from a file.

<li>Added -S and -L options to <a href="http://man.openbsd.org?query=pfctl&sektion=8&format=html">pfctl(8)</a> to store and load pf state table from a file.

<li>Added support for IPV4 and IPv6 divert sockets.

</ul>

<li>OpenBGPD, OpenOSPFD and other routing daemon improvements:

<ul>

<li>Update capability code in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8&format=html">bgpd(8)</a> to follow RFC 5492.

<li>Update capability code in <a href="http://man.openbsd.org?query=bgpd&sektion=8&format=html">bgpd(8)</a> to follow RFC 5492.

<li>BGP MPLS VPN (RFC 4364) support added to the bgpd RIB.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpd&sektion=8&format=html">bgpd(8)</a>, implement the RFC4486 BGP Cease Notification Message subcodes.

<li>In <a href="http://man.openbsd.org?query=bgpd&sektion=8&format=html">bgpd(8)</a>, implement the RFC4486 BGP Cease Notification Message subcodes.

<li>It is now possible to enable/disable specific BGP capabilities.

<li>Update <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=bgpctl&sektion=8&format=html">bgpctl(8)</a> irrfilter to support IPv6 and 4-byte AS numbers.

<li>Update <a href="http://man.openbsd.org?query=bgpctl&sektion=8&format=html">bgpctl(8)</a> irrfilter to support IPv6 and 4-byte AS numbers.

<li>Minimal router-dead-time of 1 second and sub-second hello intervals

added to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ospfd&sektion=8">ospfd(8)</a>.

added to <a href="http://man.openbsd.org?query=ospfd&sektion=8">ospfd(8)</a>.

Additionally it is now possible to specify sub-second SPF timers for faster

route fail-over.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ospf6d&sektion=8">ospf6d(8)</a> is now installed by default.

<li><a href="http://man.openbsd.org?query=ospf6d&sektion=8">ospf6d(8)</a> is now installed by default.

The RIB can be synced with the kernel routing table now.

Support for AS-ext LSA has been added.

This is still work-in-progress but testing is highly appreciated.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ldpd&sektion=8">ldpd</a> -- the MPLS label distribution protocol daemon -- is now installed by default. A custom kernel with option MPLS is needed to use it.

<li><a href="http://man.openbsd.org?query=ldpd&sektion=8">ldpd</a> -- the MPLS label distribution protocol daemon -- is now installed by default. A custom kernel with option MPLS is needed to use it.

</ul>

<li>Generic network stack improvements:

<ul>

<li>brconfig is now integrated into

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a>

<a href="http://man.openbsd.org?query=ifconfig&sektion=8">ifconfig(8)</a>

<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=vether&sektion=4&format=html">vether(4)</a>, a virtual Ethernet device.

<li>Added <a href="http://man.openbsd.org?query=vether&sektion=4&format=html">vether(4)</a>, a virtual Ethernet device.

<li>Two bugs in IPsec/HMAC-SHA2 were fixed, resulting in an incompatibility

with the HMAC-SHA-256/384/512 hash algorithms with previous versions of

OpenBSD and other IPsec implementations sharing the bugs.

<li>In <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcpd&sektion=8&format=html">dhcpd(8)</a>, echo back the Relay Agent Information option if present, and add support for the ipsec-tunnel hardware type.

<li>In <a href="http://man.openbsd.org?query=dhcpd&sektion=8&format=html">dhcpd(8)</a>, echo back the Relay Agent Information option if present, and add support for the ipsec-tunnel hardware type.

<li>Make <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8&format=html">dhcrelay(8)</a> pick up the routing domain from the specified interface and use that rdomain for relaying the packets to the server.

<li>Make <a href="http://man.openbsd.org?query=dhcrelay&sektion=8&format=html">dhcrelay(8)</a> pick up the routing domain from the specified interface and use that rdomain for relaying the packets to the server.

<li>Added support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dhcrelay&sektion=8&format=html">dhcrelay(8)</a> for RFC3046 "DHCP-over-ipsec".

<li>Added support in <a href="http://man.openbsd.org?query=dhcrelay&sektion=8&format=html">dhcrelay(8)</a> for RFC3046 "DHCP-over-ipsec".

<li>Make the <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcpdump&sektion=8&format=html">tcpdump(8)</a> BGP OPEN capability parser RFC 5492 compliant.

<li>Make the <a href="http://man.openbsd.org?query=tcpdump&sektion=8&format=html">tcpdump(8)</a> BGP OPEN capability parser RFC 5492 compliant.

<li>Added an exec command to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=route&sektion=8&format=html">route(8)</a> to run a process and its children in a specified routing domain.

<li>Added an exec command to <a href="http://man.openbsd.org?query=route&sektion=8&format=html">route(8)</a> to run a process and its children in a specified routing domain.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ifconfig&sektion=8">ifconfig(8)</a> now deals with more than 64 alias addresses.

<li><a href="http://man.openbsd.org?query=ifconfig&sektion=8">ifconfig(8)</a> now deals with more than 64 alias addresses.

<li>Various fixes to mbuf defragmenting and mbuf chain copying improve reliability.

</ul>

<li>Assorted improvements:

<ul>

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=malloc&sektion=3">malloc(3)</a>

<li><a href="http://man.openbsd.org?query=malloc&sektion=3">malloc(3)</a>

now has an <tt>S</tt> flag to turn on the options that help debugging

and improve security.

<li>Updated <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=terminfo&sektion=3">terminfo(3)</a>

<li>Updated <a href="http://man.openbsd.org?query=terminfo&sektion=3">terminfo(3)</a>

database and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ncurses&sektion=3">ncurses(3)</a>

database and <a href="http://man.openbsd.org?query=ncurses&sektion=3">ncurses(3)</a>

library.

<li>Added support for lazy binding in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ld.so&sektion=1">ld.so(1)</a>

<li>Added support for lazy binding in <a href="http://man.openbsd.org?query=ld.so&sektion=1">ld.so(1)</a>

on hppa.

<li>Added POSIX silent check option (<tt>-C</tt>) to

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sort&sektion=1">sort(1)</a>.

<a href="http://man.openbsd.org?query=sort&sektion=1">sort(1)</a>.

<li>Added POSIX extended regular expression support to

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sed&sektion=1">sed(1)</a> (<tt>-E</tt> option).

<a href="http://man.openbsd.org?query=sed&sektion=1">sed(1)</a> (<tt>-E</tt> option).

<li>Added GNU-compatible macro prefix option (<tt>-P</tt>) to

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=m4&sektion=1">m4(1)</a>.

<a href="http://man.openbsd.org?query=m4&sektion=1">m4(1)</a>.

<li>Make it possible to specify a port in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=resolv.conf&sektion=5&format=html">resolv.conf(5)</a>.

<li>Make it possible to specify a port in <a href="http://man.openbsd.org?query=resolv.conf&sektion=5&format=html">resolv.conf(5)</a>.

<li>Improved FILE locking support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stdio&sektion=3">stdio(3)</a>.

<li>Improved FILE locking support in <a href="http://man.openbsd.org?query=stdio&sektion=3">stdio(3)</a>.

<li>Added SO_SNDTIMEO and SO_RCVTIMEO support in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pthreads&sektion=3">pthreads(3)</a>.

<li>Added SO_SNDTIMEO and SO_RCVTIMEO support in <a href="http://man.openbsd.org?query=pthreads&sektion=3">pthreads(3)</a>.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cdio&sektion=1">cdio(1)</a> no longer prints bogus information if no TOC is found on the disk.

<li><a href="http://man.openbsd.org?query=cdio&sektion=1">cdio(1)</a> no longer prints bogus information if no TOC is found on the disk.

<li>New -v flag causes <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=cdio&sektion=1">cdio(1)</a> to print profile and feature information.

<li>New -v flag causes <a href="http://man.openbsd.org?query=cdio&sektion=1">cdio(1)</a> to print profile and feature information.

<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=whois&sektion=1">whois(1)</a> no longer attempts to keep the memory of 6Bone alive.

<li><a href="http://man.openbsd.org?query=whois&sektion=1">whois(1)</a> no longer attempts to keep the memory of 6Bone alive.

<li>Added per-application MIDI-controlled volume knob to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aucat&sektion=1">aucat(1)</a>

<li>Added per-application MIDI-controlled volume knob to <a href="http://man.openbsd.org?query=aucat&sektion=1">aucat(1)</a>

<li>Added MMC and MTC support to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=aucat&sektion=1">aucat(1)</a> making possible MIDI-to-audio synchronization

<li>Added MMC and MTC support to <a href="http://man.openbsd.org?query=aucat&sektion=1">aucat(1)</a> making possible MIDI-to-audio synchronization

<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mio_open&sektion=3">mio_open(3)</a> interface to access hardware and software MIDI ports

<li>Added <a href="http://man.openbsd.org?query=mio_open&sektion=3">mio_open(3)</a> interface to access hardware and software MIDI ports

<li>Many memory leaks found by parfait and eliminated.

<li>Make handling of floppy disk disklabels more reliable by properly

initializing starting label.

Line 313

<li>Add support for certificate authentication of users and hosts using

a new, minimal OpenSSH certificate format (not X.509).

<li>Added a 'netcat mode' to

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.

<a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>.

<li>Add the ability to revoke keys in

and

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>.

<a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>.

<li>Rewrite the

multiplexing support to support non-blocking operation of the mux

master.

<li>Add a 'read-only' mode to

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a>

<a href="http://man.openbsd.org?query=sftp-server&sektion=8">sftp-server(8)</a>

that disables open in write mode and all other fs-modifying

protocol methods. (bz#430)

<li>Allow setting an explicit umask on the

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a>

<a href="http://man.openbsd.org?query=sftp-server&sektion=8">sftp-server(8)</a>

commandline to override whatever default the user has. (bz#1229)

<li>Many improvements to the

client.

<li>New RSA keys will be generated with a public exponent of 65537

instead of the previous value 35.

Line 346

existence of the user's shell inside the chroot and not outside.

(bz#1679)

<li>Cache user and group name lookups in sftp-server using

to improve performance on hosts where these operations are slow.

(bz#1495)

<li>Fix problem that prevented passphrase reading from being

Line 362

log the reason why the open failed to debug. (bz#1693)

<li>Document that the PubkeyAuthentication directive is

allowed in a

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>

<a href="http://man.openbsd.org?query=sshd_config&sektion=5">sshd_config(5)</a>

Match block. (bz#1577)

<li>When converting keys, truncate key comments at 72 chars as per

RFC4716. (bz#1630)

<li>Do not allow logins if /etc/nologin exists but is not

readable by the user logging in.

<li>Output a debug log if

can't open an existing authorized_keys. (bz#1694)

<li>Quell

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcsetattr&sektion=3">tc[gs]etattr(3)</a>

<a href="http://man.openbsd.org?query=tcsetattr&sektion=3">tc[gs]etattr(3)</a>

warnings when forcing a tty (ssh -tt), since we usually don't

actually have a tty to read/set. (bz#1686)

<li>Prevent

from crashing when given a "-" without a command; also, allow

whitespace to follow a "-". (bz#1691)

<li>After

receives a SIGHUP, ignore subsequent HUPs while

re-execs itself; prevents two HUPs in quick succession from

resulting in

dying. (bz#1692)

<li>Clarify in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd_config&sektion=5">sshd_config(5)</a>

<a href="http://man.openbsd.org?query=sshd_config&sektion=5">sshd_config(5)</a>

that StrictModes does not apply to

ChrootDirectory; permissions and ownership are always

checked when chrooting. (bz#1532)

Line 401

with ForceCommand=internal-sftp with a shell session.

(bz#1606)

<li>Warn but do not fail if

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=stat&sektion=2">stat(2)</a>ing

<a href="http://man.openbsd.org?query=stat&sektion=2">stat(2)</a>ing

the subsystem binary fails. (bz#1599)

<li>Change "Connecting to host..." message to "Connected to host."

and delay it until after the sftp protocol connection has been

Line 410

on the commandline when prompting for passwords. (bz#1039)

<li>Correct off-by-one in percent_expand(). (bz#1607)

<li>Fix passing of empty options from

and

to the underlying

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a>;

<a href="http://man.openbsd.org?query=ssh&sektion=1">ssh(1)</a>;

also add support for the stop option "--".

<li>Fix an incorrect magic number and typo in PROTOCOL. (bz#1688)

<li>Don't escape backslashes when displaying the SSH2 banner. (bz#1533)

<li>Don't unnecessarily dup() the in and out fds for

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sftp-server&sektion=8">sftp-server(8)</a>.

<a href="http://man.openbsd.org?query=sftp-server&sektion=8">sftp-server(8)</a>.

(bz#1566)

<li>Force use of the correct hash function for random-art signature

display. (bz#1611)

<li>Do not fall back to adding keys without constraints when the agent

refuses the constrained add request. (bz#1612)

<li>Fix a race condition in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh-agent&sektion=1">ssh-agent(1)</a>

<a href="http://man.openbsd.org?query=ssh-agent&sektion=1">ssh-agent(1)</a>

that could result in a wedged or spinning agent. (bz#1633)

<li>Flush stdio before exec() to ensure that everything has made it out

before the streams go away. (bz#1596)

<li>Set FD_CLOEXEC on in/out sockets in

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sshd&sektion=8">sshd(8)</a>.

<a href="http://man.openbsd.org?query=sshd&sektion=8">sshd(8)</a>.

(bz#1706)

</ul>

Line 579

To make a boot floppy under MS-DOS, use the "rawrite" utility located

at CD1:4.7/tools/rawrite.exe. To make the boot floppy under a Unix OS,

use the

utility. The following is an example usage of

<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dd&sektion=1">dd(1)</a>,

<a href="http://man.openbsd.org?query=dd&sektion=1">dd(1)</a>,

where the device could be "floppy", "rfd0c", or

"rfd0a".

Line 864

OpenBSD ports system.

The ports/ directory represents a CVS (see the manpage for

cvs(1)</a> if

you aren't familiar with CVS) checkout of our ports. As with our complete

source tree, our ports tree is available via anoncvs. So, in