www/50.html - diff

Return to 50.html CVS log

Up to [local] / www

Diff for /www/50.html between version 1.30 and 1.31

version 1.30, 2019/04/24 15:54:53

version 1.31, 2019/05/27 22:55:18

Line 1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<!doctype html>

<html>

<head>

<title>OpenBSD 5.0</title>

</head>

<style>

#sourcecode h3 {

color: var(--red);

}

#sourcecode p {

margin-left: 2.75em;

}

<h2>

#sourcecode blockquote {

margin-left: 4.5em;

}

</style>

5.0

</h2>

<p>

<table>

<tr>

<td>

<td>

Released Nov 1, 2011<br>

<br>

5.0 Song: <a href="lyrics.html#50">"What Me Worry?"</a>

<br>

Line 31

Line 43

<ul>

<li>See the information on <a href="ftp.html">The FTP page</a> for

a list of mirror machines.

<li>Go to the <font color="#e00000">pub/OpenBSD/5.0/</font> directory on

<li>Go to the <code class=reldir>pub/OpenBSD/5.0/</code> directory on

one of the mirror sites.

<li>Have a look at <a href="errata50.html">The 5.0 Errata page</a> for a list

of bugs and workarounds.

Line 42

Line 54

All applicable copyrights and credits are in the src.tar.gz,

sys.tar.gz, xenocara.tar.gz, ports.tar.gz files, or in the

files fetched via ports.tar.gz.

</table>

<hr>

<p>

<p>

This is a partial list of new features and systems included in OpenBSD 5.0.

For a comprehensive list, see the <a href="plus50.html">changelog</a> leading

to 5.0.

Line 61

Line 73

<ul>

<li>MSI interrupts for many devices, on those architectures which can

support them (amd64, i386, sparc64 only so far).

<li>A new <a href="https://man.openbsd.org/?query=dma_alloc&sektion=9">dma_alloc(9)</a> API makes it easier for kernel code to allocate

<li>A new <a href="https://man.openbsd.org/dma_alloc.9">dma_alloc(9)</a> API makes it easier for kernel code to allocate

dma-safe memory. Many drivers (especially network drivers) and

subsystems (in particular scsi and the buffer cache) were adapted

to use this.

<li>As a result, big-memory support has been enabled on all possible

architectures.

<li>The rather rare <a href="https://man.openbsd.org/?query=bce&sektion=4">bce(4)</a> driver now copies mbufs all the time, to cope

<li>The rather rare <a href="https://man.openbsd.org/bce.4">bce(4)</a> driver now copies mbufs all the time, to cope

with the hardware having a 1GB limit.

<li>Added <a href="https://man.openbsd.org/?query=hds&sektion=4">hds(4)</a>, a driver for Hitachi Modular Storage SCSI devices.

<li>Added <a href="https://man.openbsd.org/hds.4">hds(4)</a>, a driver for Hitachi Modular Storage SCSI devices.

<li>Added <a href="https://man.openbsd.org/?query=myx&sektion=4">myx(4)</a>, a driver for the Myricom Myri-10G 10GB Ethernet devices.

<li>Added <a href="https://man.openbsd.org/myx.4">myx(4)</a>, a driver for the Myricom Myri-10G 10GB Ethernet devices.

<li>Added <a href="https://man.openbsd.org/?query=dfs&sektion=4&arch=macppc">dfs(4)</a>, a driver for Dynamic Frequency Switching on some macppc

<li>Added <a href="https://man.openbsd.org/macppc/dfs.4">dfs(4)</a>, a driver for Dynamic Frequency Switching on some macppc

systems.

<li><a href="https://man.openbsd.org/?query=cardbus&sektion=4">cardbus(4)</a> and <a href="https://man.openbsd.org/?query=pcmcia&sektion=4">pcmcia(4)</a> support on sgi.

<li><a href="https://man.openbsd.org/cardbus.4">cardbus(4)</a> and <a href="https://man.openbsd.org/pcmcia.4">pcmcia(4)</a> support on sgi.

<li>Suspend/resume support on Loongson Yeelong laptops.

</ul>

<p>

<li>Generic network stack improvements:

<ul>

<li>Added support for sending Wake on Lan packets using <a href="https://man.openbsd.org/?query=arp&sektion=8">arp(8)</a>.

<li>Added support for sending Wake on Lan packets using <a href="https://man.openbsd.org/arp.8">arp(8)</a>.

<li>Permit turning Wake on Lan support on/off using <a href="https://man.openbsd.org/?query=ifconfig&sektion=8">ifconfig(8)</a>.

<li>Permit turning Wake on Lan support on/off using <a href="https://man.openbsd.org/ifconfig.8">ifconfig(8)</a>.

<li>Added Wake on Lan support to <a href="https://man.openbsd.org/?query=xl&sektion=4">xl(4)</a>, <a href="https://man.openbsd.org/?query=re&sektion=4">re(4)</a>, and <a href="https://man.openbsd.org/?query=vr&sektion=4">vr(4)</a>.

<li>Added Wake on Lan support to <a href="https://man.openbsd.org/xl.4">xl(4)</a>, <a href="https://man.openbsd.org/re.4">re(4)</a>, and <a href="https://man.openbsd.org/vr.4">vr(4)</a>.

<li>Allow <a href="https://man.openbsd.org/?query=ftp-proxy&sektion=8">ftp-proxy(8)</a> to proxy across rdomains.

<li>Allow <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a> to proxy across rdomains.

<li>The IPv4 stack will no longer accept ICMP redirects when

acting as a router.

<li>By default the IPv6 stack will not process ICMP6 redirects.

<a href="https://man.openbsd.org/?query=rtsol&sektion=8">rtsol(8)</a> will turn it back if -F is used.

<a href="https://man.openbsd.org/rtsol.8">rtsol(8)</a> will turn it back if -F is used.

<li>Reworked large parts of the <a href="https://man.openbsd.org/?query=dhclient&sektion=8">dhclient(8)</a> options processing for better

<li>Reworked large parts of the <a href="https://man.openbsd.org/dhclient.8">dhclient(8)</a> options processing for better

interoperability.

<li>Fixed <a href="https://man.openbsd.org/?query=carp&sektion=4">carp(4)</a> to work in IPv6 only setups.

<li>Fixed <a href="https://man.openbsd.org/carp.4">carp(4)</a> to work in IPv6 only setups.

<li>Make it possible to <a href="https://man.openbsd.org/?query=bind&sektion=2">bind(2)</a> to the local network broadcast address

<li>Make it possible to <a href="https://man.openbsd.org/bind.2">bind(2)</a> to the local network broadcast address

on datagram and raw sockets.

<li>The default multicast reject route is now ignored if the UDP socket

uses the IP_MULTICAST_IF socket option.

<li>Make <a href="https://man.openbsd.org/?query=gre&sektion=4">gre(4)</a> work between systems in the same LAN.

<li>Make <a href="https://man.openbsd.org/gre.4">gre(4)</a> work between systems in the same LAN.

<li>Removed the link1 mode special addressing mode on <a href="https://man.openbsd.org/?query=lo&sektion=4">lo(4)</a>.

<li>Removed the link1 mode special addressing mode on <a href="https://man.openbsd.org/lo.4">lo(4)</a>.

<li>Kernel randomization speed and quality improved substantially.

</ul>

<p>

<li>Routing daemons and other userland network improvements:

<ul>

<li><a href="https://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a> no longer bumps the rlimits: the rc.d framework respects

<li><a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a> no longer bumps the rlimits: the rc.d framework respects

<li>Correctly set the network filtersets on reload in <a href="https://man.openbsd.org/?query=bgpd&sektion=8">bgpd(8)</a>.

<li>Correctly set the network filtersets on reload in <a href="https://man.openbsd.org/bgpd.8">bgpd(8)</a>.

<li>The routing socket is now sending RTM_DESYNC messages if the

socketbuffer overflows.

<li>Allow <a href="https://man.openbsd.org/?query=ospfd&sektion=8">ospfd(8)</a> to send out LS updates and other messages

<li>Allow <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> to send out LS updates and other messages

larger than the MTU.

<li>Fixed nexthop calculation in <a href="https://man.openbsd.org/?query=ospfd&sektion=8">ospfd(8)</a> for directly connected P2P links.

<li>Fixed nexthop calculation in <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a> for directly connected P2P links.

<li>First bits to support opaque LSA in <a href="https://man.openbsd.org/?query=ospfd&sektion=8">ospfd(8)</a>. Only basic redistribute

<li>First bits to support opaque LSA in <a href="https://man.openbsd.org/ospfd.8">ospfd(8)</a>. Only basic redistribute

logic and LSDB handling for now.

<li>Creating new interfaces will no longer cause a fatal error in <a href="https://man.openbsd.org/?query=ospf6d&sektion=8">ospf6d(8)</a>.

<li>Creating new interfaces will no longer cause a fatal error in <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>.

<li><a href="https://man.openbsd.org/?query=ospf6d&sektion=8">ospf6d(8)</a> handles link-state changes better.

<li><a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a> handles link-state changes better.

<li>Better loopback handling in <a href="https://man.openbsd.org/?query=ospf6d&sektion=8">ospf6d(8)</a>.

<li>Better loopback handling in <a href="https://man.openbsd.org/ospf6d.8">ospf6d(8)</a>.

<li>No longer install extra multicast routes in <a href="https://man.openbsd.org/?query=ripd&sektion=8">ripd(8)</a> and <a href="https://man.openbsd.org/?query=ldpd&sektion=8">ldpd(8)</a>.

<li>No longer install extra multicast routes in <a href="https://man.openbsd.org/ripd.8">ripd(8)</a> and <a href="https://man.openbsd.org/ldpd.8">ldpd(8)</a>.

<li>Make <a href="https://man.openbsd.org/?query=kqueue&sektion=2">kqueue(2)</a> work with <a href="https://man.openbsd.org/?query=sosplice&sektion=9">sosplice(9)</a>.

<li>Make <a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> work with <a href="https://man.openbsd.org/sosplice.9">sosplice(9)</a>.

<li>Enabled <a href="https://man.openbsd.org/?query=sosplice&sektion=9">sosplice(9)</a> in <a href="https://man.openbsd.org/?query=relayd&sektion=8">relayd(8)</a> for TCP.

<li>Enabled <a href="https://man.openbsd.org/sosplice.9">sosplice(9)</a> in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a> for TCP.

<li>Added support for divert-to which provides some benefits over

rdr-to in <a href="https://man.openbsd.org/?query=relayd&sektion=8">relayd(8)</a>.

rdr-to in <a href="https://man.openbsd.org/relayd.8">relayd(8)</a>.

<li>Fixed trap sending in <a href="https://man.openbsd.org/?query=snmpd&sektion=8">snmpd(8)</a>.

<li>Fixed trap sending in <a href="https://man.openbsd.org/snmpd.8">snmpd(8)</a>.

<li>Make <a href="https://man.openbsd.org/?query=ping6&sektion=8">ping6(8)</a> compare minimum amount of bytes between what

<li>Make <a href="https://man.openbsd.org/ping6.8">ping6(8)</a> compare minimum amount of bytes between what

was received and what was sent out.

<li>Make <a href="https://man.openbsd.org/?query=traceroute&sektion=8">traceroute(8)</a> with type-of-service setted (-t) display

<li>Make <a href="https://man.openbsd.org/traceroute.8">traceroute(8)</a> with type-of-service setted (-t) display

a message if the returned packet has a different tos type.

<li>Added the socket splicing fields of struct socket to netstat -vP output.

</ul>

<p>

<li><a href="https://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> improvements:

<li><a href="https://man.openbsd.org/pf.4">pf(4)</a> improvements:

<ul>

<li>Make <a href="https://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> reassemble IPv6 fragments. In the forward case, pf

<li>Make <a href="https://man.openbsd.org/pf.4">pf(4)</a> reassemble IPv6 fragments. In the forward case, pf

refragments the packets with the same maximum size.

<li>Allow <a href="https://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> to filter on the rdomain a packet belongs to.

<li>Allow <a href="https://man.openbsd.org/pf.4">pf(4)</a> to filter on the rdomain a packet belongs to.

<li>Make <a href="https://man.openbsd.org/?query=pf&sektion=4">pf(4)</a> allow userland proxies to establish cross rdomain

<li>Make <a href="https://man.openbsd.org/pf.4">pf(4)</a> allow userland proxies to establish cross rdomain

proxy sessions.

<li>Added IPv6 ACK prioritization in <a href="https://man.openbsd.org/?query=pf&sektion=4">pf(4)</a>.

<li>Added IPv6 ACK prioritization in <a href="https://man.openbsd.org/pf.4">pf(4)</a>.

<li>Change 'set skip on <...>' to work with interface groups.

<li><a href="https://man.openbsd.org/?query=pfsync&sektion=4">pfsync(4)</a> supports IPv6 as network protocol.

<li><a href="https://man.openbsd.org/pfsync.4">pfsync(4)</a> supports IPv6 as network protocol.

<li>Switched <a href="https://man.openbsd.org/?query=ftp-proxy&sektion=8">ftp-proxy(8)</a> over to divert-to instead of rdr-to.

<li>Switched <a href="https://man.openbsd.org/ftp-proxy.8">ftp-proxy(8)</a> over to divert-to instead of rdr-to.

<li><a href="https://man.openbsd.org/?query=tftp-proxy&sektion=8">tftp-proxy(8)</a> uses 'divert-to' as well.

<li><a href="https://man.openbsd.org/tftp-proxy.8">tftp-proxy(8)</a> uses 'divert-to' as well.

</ul>

<p>

<li>SCSI improvements:

<ul>

<li>most SCSI hardware drivers now use the new iopools infrastructure.

<li><a href="https://man.openbsd.org/?query=sci&sektion=4">scsi(4)</a> devices are now all provided with a unique devid, which

<li><a href="https://man.openbsd.org/sci.4">scsi(4)</a> devices are now all provided with a unique devid, which

is displayed during the probe process.

<li>ASC/ASCQ error codes and verbiage now in sync with

http://www.t10.org/lists/asc-num.txt.

<li>progress on iSCSI includes better login, better logout, preliminary

FSM support in <a href="https://man.openbsd.org/?query=iscsid&sektion=8">iscsid(8)</a>, and improved logging and debug information.

FSM support in <a href="https://man.openbsd.org/iscsid.8">iscsid(8)</a>, and improved logging and debug information.

<li><a href="https://man.openbsd.org/?query=uk&sektion=4">uk(4)</a> can now safely and reliably detach an unknown SCSI device.

<li><a href="https://man.openbsd.org/uk.4">uk(4)</a> can now safely and reliably detach an unknown SCSI device.

<li><a href="https://man.openbsd.org/?query=mpath&sektion=4">mpath(4)</a> device and kernel support is improved.

<li><a href="https://man.openbsd.org/mpath.4">mpath(4)</a> device and kernel support is improved.

<li><a href="https://man.openbsd.org/?query=vscsi&sektion=4">vscsi(4)</a> now ensures output always goes to the correct connection.

<li><a href="https://man.openbsd.org/vscsi.4">vscsi(4)</a> now ensures output always goes to the correct connection.

<li><a href="https://man.openbsd.org/?query=vscsi&sektion=4">vscsi(4)</a> connections can now be reset gracefully.

<li><a href="https://man.openbsd.org/vscsi.4">vscsi(4)</a> connections can now be reset gracefully.

<li><a href="https://man.openbsd.org/?query=scsi&sektion=4">scsi(4)</a> devices on fibre channel fabrics no longer inherit the adapter's

<li><a href="https://man.openbsd.org/scsi.4">scsi(4)</a> devices on fibre channel fabrics no longer inherit the adapter's

address.

</ul>

<p>

<li>Assorted improvements:

<ul>

<li>For additional security, <a href="https://man.openbsd.org/?query=security&sektion=8">security(8)</a> was rewritten in Perl.

<li>For additional security, <a href="https://man.openbsd.org/security.8">security(8)</a> was rewritten in Perl.

<li>Mandoc 1.11.4: Now accepts <a href="https://man.openbsd.org/?query=eqn&sektion=7">eqn(7)</a> input (no fancy formatting yet)

<li>Mandoc 1.11.4: Now accepts <a href="https://man.openbsd.org/eqn.7">eqn(7)</a> input (no fancy formatting yet)

and supports -Tutf8 output (but no utf8 input yet).

<li>Removed a variety of OS-compat emulation code, leaving just the Linux

support.

<li>Small improvements to Linux compat (only available on i386).

<li>Improved our own <a href="https://man.openbsd.org/?query=pkg-config&sektion=1">pkg-config(1)</a> implementation with extended comparison

<li>Improved our own <a href="https://man.openbsd.org/pkg-config.1">pkg-config(1)</a> implementation with extended comparison

scheme and implementing various new options.

<li>The math library, libm, was fully fleshed out to support all C99 required

parts. Many bugs for various architectures were fixed along the way.

<li><a href="https://man.openbsd.org/?query=malloc&sektion=3">malloc(3)</a> is a lot faster and has a few further security features (more

<li><a href="https://man.openbsd.org/malloc.3">malloc(3)</a> is a lot faster and has a few further security features (more

randomization, as well as the 'S' flag to enable all paranoia checks).

<li>'make depend' is no longer neccessary in kernel compilation directories

since the dependencies are calculated automatically.

<li>Increased the default size of the buffer cache.

<li><a href="https://man.openbsd.org/?query=kqueue&sektion=2">kqueue(2)</a> now works on /dev/random and spliced sockets

<li><a href="https://man.openbsd.org/kqueue.2">kqueue(2)</a> now works on /dev/random and spliced sockets

<li>On MBR-based disks, scan through up to 256 extended partition tables

when looking for an OpenBSD partition table.

<li>Added POSIX 2008 <a href="https://man.openbsd.org/?query=fdopendir&sektion=3">fdopendir(3)</a> and <a href="https://man.openbsd.org/?query=opennat&sektion=2">openat(2)</a> functions, as well as the

<li>Added POSIX 2008 <a href="https://man.openbsd.org/fdopendir.3">fdopendir(3)</a> and <a href="https://man.openbsd.org/opennat.2">openat(2)</a> functions, as well as the

O_CLOEXEC, O_DIRECTORY, and F_DUPFD_CLOEXEC flags.

<li>Improved lint format string checks and added a few other checks.

<li><a href="https://man.openbsd.org/?query=kdump&sektion=1">kdump(1)</a> now dumps stat and sockaddr structures, sysctl mib

<li><a href="https://man.openbsd.org/kdump.1">kdump(1)</a> now dumps stat and sockaddr structures, sysctl mib

strings, and decodes syscall flags and operation bits.

<li>Improved kernel pool debug checking.

<li>Improved correctness of signals and various syscalls when rthreads

are in use.

<li>Kernel <a href="https://man.openbsd.org/?query=malloc&sektion=9">malloc(9)</a> space and stacks moved to non-dma memory.

<li>Kernel <a href="https://man.openbsd.org/malloc.9">malloc(9)</a> space and stacks moved to non-dma memory.

<li>Fixed some shutdown/reboot hangs on NFS clients.

<li>UNIX-domain socket paths are now guaranteed to be NUL-terminated.

<li>Added support for <a href="https://man.openbsd.org/?query=wprintf&sektion=3">*wprintf(3)</a>, <a href="https://man.openbsd.org/?query=wcscasecmp&sektion=3">wcs{,n}casecmp(3)</a>, and <a href="https://man.openbsd.org/?query=wcsdup&sektion=3">wcsdup(3)</a>.

<li>Added support for <a href="https://man.openbsd.org/wprintf.3">*wprintf(3)</a>, <a href="https://man.openbsd.org/wcscasecmp.3">wcs{,n}casecmp(3)</a>, and <a href="https://man.openbsd.org/wcsdup.3">wcsdup(3)</a>.

<li>NULL is now a (void *).

</ul>

<p>

Line 202

Line 214

<li>Install/Upgrade process changes:

<ul>

<li>Completed support for DUID disk installs, and enabled it fully.

<li>Tried to make <a href="https://man.openbsd.org/?query=sysmerge&sektion=8">sysmerge(8)</a> work in the installer, but ran into small

<li>Tried to make <a href="https://man.openbsd.org/sysmerge.8">sysmerge(8)</a> work in the installer, but ran into small

problems and decided to disable it.

<li>Install non-free firmwares from the internet upon first boot, based on a

question in the installer.

<li><a href="https://man.openbsd.org/?query=svnd&sektion=4">svnd(4)</a>-like behaviour became the default for <a href="https://man.openbsd.org/?query=vnd&sektion=4">vnd(4)</a> devices. This is

<li><a href="https://man.openbsd.org/svnd.4">svnd(4)</a>-like behaviour became the default for <a href="https://man.openbsd.org/vnd.4">vnd(4)</a> devices. This is

what is used to build the media.

</ul>

<p>

<li><a href="https://man.openbsd.org/?query=rc.d&sektion=8">rc.d(8)</a> framework improvements:

<li><a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> framework improvements:

<ul>

<li><a href="https://man.openbsd.org/?query=rc.d&sektion=8">rc.d(8)</a> is now also used for the base system daemons.

<li><a href="https://man.openbsd.org/rc.d.8">rc.d(8)</a> is now also used for the base system daemons.

<li>Backward compatible with the historic way of starting daemons.

<li>Notify the user by appending (ok) or (failed) in interactive mode.

<li>Better diagnostics with the introduction of RC_DEBUG.

Line 225

Line 237

<li>New features:

<ul>

<li>Introduce sandboxing of the pre-auth privsep child using an optional

<a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>

<a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>

"UsePrivilegeSeparation=sandbox" mode that enables mandatory

restrictions on the syscalls the privsep child can perform.

<li>Add new SHA256-based HMAC transport integrity modes from

https://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt

These modes are hmac-sha2-256, hmac-sha2-256-96, hmac-sha2-512,

and hmac-sha2-512-96, and are available by default in

and

<a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>.

<a href="https://man.openbsd.org/sshd.8">sshd(8)</a>.

<li>The pre-authentication

privilege separation slave process now logs via a socket shared with

the master process, avoiding the need to maintain /dev/log inside the

chroot.

now warns when a server refuses X11 forwarding.

<li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>'s

<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>'s

AuthorizedKeysFile now accepts multiple paths, separated by whitespace.

The undocumented AuthorizedKeysFile2 option is deprecated (though the

default for AuthorizedKeysFile includes .ssh/authorized_keys2).

<li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>:

<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>:

similarly deprecate UserKnownHostsFile2 and GlobalKnownHostsFile2 by

making UserKnownHostsFile and GlobalKnownHostsFile accept multiple

options and default to include known_hosts2.

<li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>'s

<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>'s

ControlPath option now expands %L to the host portion of the

destination host name.

<li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>

<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>

"Host" options now support negated Host matching.

<li><a href="https://man.openbsd.org/?query=sshd_config&sektion=5">sshd_config(5)</a>:

<li><a href="https://man.openbsd.org/sshd_config.5">sshd_config(5)</a>:

a new RequestTTY option provides control over when a TTY is requested

for a connection, similar to the existing -t/-tt/-T

commandline options.

<li><a href="https://man.openbsd.org/?query=ssh-keygen&sektion=1">ssh-keygen(1)</a>:

<li><a href="https://man.openbsd.org/ssh-keygen.1">ssh-keygen(1)</a>:

Add -A option. For each of the key types (rsa1, rsa, dsa and ecdsa) for

which host keys do not exist, generate the host keys with the default

key file path, an empty passphrase, default bits for the key type, and

default comment. This is useful for system initialisation scripts.

<li><a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:

Allow graceful shutdown of multiplexing: request that a mux server

removes its listener socket and refuse future multiplexing requests but

don't kill existing connections. This may be requested using

"ssh -O stop ...".

<li><a href="https://man.openbsd.org/?query=ssh-add&sektion=1">ssh-add(1)</a>:

<li><a href="https://man.openbsd.org/ssh-add.1">ssh-add(1)</a>:

now accepts keys piped from standard input.

</ul>

<li>The following significant bugs have been fixed in this release:

<ul>

<li>Retain key comments when loading v.2 keys. These will be visible in

"ssh-add -l" and other places. (bz#439)

and

<a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:

<a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:

set IPv6 traffic class from IPQoS (as well as IPv4 ToS/DSCP). (bz#1855)

<li><a href="https://man.openbsd.org/?query=sshd&sektion=8">sshd(8)</a>:

<li><a href="https://man.openbsd.org/sshd.8">sshd(8)</a>:

allow GSSAPI authentication to detect when a server-side failure causes

authentication failure and don't count such failures against

MaxAuthTries. (bz#1244)

<li><a href="https://man.openbsd.org/?query=ssh-keysign&sektion=8">ssh-keysign(8)</a>:

<li><a href="https://man.openbsd.org/ssh-keysign.8">ssh-keysign(8)</a>:

now signs hostbased authentication challenges correctly using ECDSA

keys. (bz#1858)

<li><a href="https://man.openbsd.org/?query=sftp&sektion=1">sftp(1)</a>:

<li><a href="https://man.openbsd.org/sftp.1">sftp(1)</a>:

document that sftp accepts square brackets to delimit addresses

(useful for IPv6). (bz#1847a)

<li><a href="https://man.openbsd.org/?query=ssh&sektion=1">ssh(1)</a>:

<li><a href="https://man.openbsd.org/ssh.1">ssh(1)</a>:

when using session multiplexing, the master process will change its

process title to reflect the control path in use and when a

ControlPersist-ed master is waiting to close. (bz#1883 and bz#1911)

Line 303

Line 315

<li>Over 7,200 ports, major robustness and speed improvements in package tools.

<li>Many pre-built packages for each architecture:

<tr>

<ul>

<li>i386: 7008

<li>sparc64: 6456

<li>alpha: 6046

</ul></td><td valign=top width="25%"><ul>

<li>sh: 3721

<li>amd64: 6960

<li>powerpc: 6691

</ul></td><td valign=top width="25%"><ul>

<li>sparc: 3277

<li>arm: 2963

<li>hppa: 6125

</ul></td><td valign=top width="25%"><ul>

<li>vax: 1409

<li>mips64: 5689

<li>mips64el: 5709

</ul></td></tr></table>

</ul>

<p>

<li>Some highlights:

Line 343

Line 349

<li>As usual, steady improvements in manual pages and other documentation.

<li>Base system and Xenocara manuals are now installed as source code,

making <a href="https://man.openbsd.org/?query=grep&sektion=1">grep(1)</a> more useful in /usr/share/man/ and /usr/X11R6/man/.

making <a href="https://man.openbsd.org/grep.1">grep(1)</a> more useful in /usr/share/man/ and /usr/X11R6/man/.

<li>If both formatted and source versions of manuals are installed,

<a href="https://man.openbsd.org/?query=man&sektion=1">man(1)</a> automatically displays the newer version of each page.

<a href="https://man.openbsd.org/man.1">man(1)</a> automatically displays the newer version of each page.

- The system includes the following major components from outside suppliers:

<li>The system includes the following major components from outside suppliers:

<ul>

<li>Xenocara (based on X.Org 7.6 with xserver 1.9 + patches,

freetype 2.4.5, fontconfig 2.8.0, Mesa 7.8.2, xterm 270,

xkeyboard-config 2.3 and more)

Line 368

Line 375

</ul>

</section>

<hr>

<h3>How to install</h3>

<p>

<h3><font color="#0000e0">How to install</font></h3>

<p>

Following this are the instructions which you would have on a piece of

paper if you had purchased a CDROM set instead of doing an alternate

form of install. The instructions for doing an FTP (or other style

Line 410

Line 419

</ul>

<hr>

<p>

Quick installer information for people familiar with OpenBSD, and the

use of the "disklabel -E" command. If you are at all confused when

installing OpenBSD, read the relevant INSTALL.* file as listed above!

<p>

<h3><font color="#e00000">OpenBSD/i386:</font></h3>

<h3>OpenBSD/i386:</h3>

<ul>

<p>

Play with your BIOS options to enable booting from a CD. The OpenBSD/i386

release is on CD1. If your BIOS does not support booting from CD, you will need

to create a boot floppy to install from. To create a boot floppy write

Line 440

Line 451

To make a boot floppy under MS-DOS, use the "rawrite" utility located

at <i>CD1:5.0/tools/rawrite.exe</i>. To make the boot floppy under a Unix OS,

use the

utility. The following is an example usage of

<a href="https://man.openbsd.org/?query=dd&sektion=1">dd(1)</a>,

<a href="https://man.openbsd.org/dd.1">dd(1)</a>,

where the device could be "floppy", "rfd0c", or

"rfd0a".

# <strong>dd if=<file> of=/dev/<device> bs=32k</strong>

</pre></ul>

</pre></blockquote>

<p>

Make sure you use properly formatted perfect floppies with NO BAD BLOCKS or

your install will most likely fail. For more information on creating a boot

floppy and installing OpenBSD/i386 please refer to

<a href="faq/faq4.html#MkFlop">this page</a>.

</ul>

<h3>OpenBSD/amd64:</h3>

<p>

<h3><font color="#e00000">OpenBSD/amd64:</font></h3>

<ul>

The 5.0 release of OpenBSD/amd64 is located on CD2.

Boot from the CD to begin the install - you may need to adjust

your BIOS options first.

Line 475

Line 485

<p>

If you are planning to dual boot OpenBSD with another OS, you will need to

read INSTALL.amd64.

</ul>

<h3>OpenBSD/macppc:</h3>

<p>

<h3><font color="#e00000">OpenBSD/macppc:</font></h3>

<ul>

Put CD2 in your CDROM drive and poweron your machine while holding down the

<i>C</i> key until the display turns on and shows <i>OpenBSD/macppc boot</i>.

<p>

Alternatively, at the Open Firmware prompt, enter <i>boot cd:,ofwboot

/5.0/macppc/bsd.rd</i>

</ul>

<h3>OpenBSD/sparc64:</h3>

<p>

<h3><font color="#e00000">OpenBSD/sparc64:</font></h3>

<ul>

Put CD3 in your CDROM drive and type <i>boot cdrom</i>.

<p>

Line 509

Line 517

<p>

If nothing works, you can boot over the network as described in INSTALL.sparc64.

</ul>

<h3>OpenBSD/alpha:</h3>

<p>

<h3><font color="#e00000">OpenBSD/alpha:</font></h3>

<ul>

<p>Write <i>FTP:5.0/alpha/floppy50.fs</i> or

<i>FTP:5.0/alpha/floppyB50.fs</i> (depending on your machine) to a diskette and

enter <i>boot dva0</i>. Refer to INSTALL.alpha for more details.

Line 522

Line 529

Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install

will most likely fail.

</ul>

<h3>OpenBSD/armish:</h3>

<p>

<h3><font color="#e00000">OpenBSD/armish:</font></h3>

<ul>

<p>

After connecting a serial port, Thecus can boot directly from the network

either tftp or http. Configure the network using fconfig, reset,

then load bsd.rd, see INSTALL.armish for specific details.

Line 535

Line 539

and copy 'boot' and bsd.rd into the first partition on wd0 (hda1)

then load and run bsd.rd, preserving the wd0i (hda1) ext2fs partition.

More details are available in INSTALL.armish.

</ul>

<h3>OpenBSD/hp300:</h3>

<p>

<h3><font color="#e00000">OpenBSD/hp300:</font></h3>

<ul>

<p>

Boot over the network by following the instructions in INSTALL.hp300.

</ul>

<h3>OpenBSD/hppa:</h3>

<p>

<h3><font color="#e00000">OpenBSD/hppa:</font></h3>

<ul>

<p>

Boot over the network by following the instructions in INSTALL.hppa or the

<a href="hppa.html#install">hppa platform page</a>.

</ul>

<h3>OpenBSD/landisk:</h3>

<p>

<h3><font color="#e00000">OpenBSD/landisk:</font></h3>

<ul>

<p>

Write <i>miniroot50.fs</i> to the start of the CF

or disk, and boot normally.

</ul>

<h3>OpenBSD/loongson:</h3>

<p>

<h3><font color="#e00000">OpenBSD/loongson:</font></h3>

<ul>

<p>

Write <i>miniroot50.fs</i> to a USB stick and boot bsd.rd from it

or boot bsd.rd via tftp.

Refer to the instructions in INSTALL.loongson for more details.

</ul>

<p>

<h3>OpenBSD/mvme68k:</h3>

<p>

<h3><font color="#e00000">OpenBSD/mvme68k:</font></h3>

<ul>

<p>

You can create a bootable installation tape or boot over the network.<br>

The network boot requires a MVME68K BUG version that supports the <i>NIOT</i>

and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme68k

for more details.

</ul>

<h3>OpenBSD/mvme88k:</h3>

<p>

<h3><font color="#e00000">OpenBSD/mvme88k:</font></h3>

<ul>

<p>

You can create a bootable installation tape or boot over the network.<br>

The network boot requires a MVME88K BUG version that supports the <i>NIOT</i>

and <i>NBO</i> debugger commands. Follow the instructions in INSTALL.mvme88k

for more details.

</ul>

<h3>OpenBSD/sgi:</h3>

<p>

<h3><font color="#e00000">OpenBSD/sgi:</font></h3>

<ul>

<p>

To install on an O2, burn cd50.iso on a CD-R, put it in the CD drive of your

machine and select <i>Install System Software</i> from the System Maintenance

menu.

Line 603

Line 592

setup a DHCP/tftp network server, and boot using "bootp()/bsd.rd.IP##" using

the kernel matching your system type.

Refer to the instructions in INSTALL.sgi for more details.

</ul>

<h3>OpenBSD/socppc:</h3>

<p>

<h3><font color="#e00000">OpenBSD/socppc:</font></h3>

<ul>

<p>

After connecting a serial port, boot over the network via DHCP/tftp.

Refer to the instructions in INSTALL.socppc for more details.

</ul>

<h3>OpenBSD/sparc:</h3>

<p>

<h3><font color="#e00000">OpenBSD/sparc:</font></h3>

<ul>

Boot from one of the provided install ISO images, using one of the two

commands listed below, depending on the version of your ROM.

ok <strong>boot cdrom 5.0/sparc/bsd.rd</strong>

ok <kbd>boot cdrom 5.0/sparc/bsd.rd</kbd>

> <strong>b sd(0,6,0)5.0/sparc/bsd.rd</strong>

> <kbd>b sd(0,6,0)5.0/sparc/bsd.rd</kbd>

</pre></ul>

</pre></blockquote>

<p>

If your SPARC system does not have a CD drive, you can alternatively boot from floppy.

Line 632

Line 618

To boot from the floppy use one of the two commands listed below,

depending on the version of your ROM.

ok <strong>boot floppy</strong>

ok <kbd>boot floppy</kbd>

> <strong>b fd()</strong>

> <kbd>b fd()</kbd>

</pre></ul>

</pre></blockquote>

<p>

Make sure you use a properly formatted floppy with NO BAD BLOCKS or your install

Line 646

Line 632

If your SPARC system doesn't have a floppy drive nor a CD drive, you can either

setup a bootable tape, or install via network, as told in the

INSTALL.sparc file.

</ul>

<h3>OpenBSD/vax:</h3>

<p>

<h3><font color="#e00000">OpenBSD/vax:</font></h3>

<ul>

Boot over the network via mopbooting as described in INSTALL.vax.

</ul>

<h3>OpenBSD/zaurus:</h3>

<p>

<h3><font color="#e00000">OpenBSD/zaurus:</font></h3>

<ul>

<p>

Using the Linux built-in graphical ipkg installer, install the

openbsd50_arm.ipk package. Reboot, then run it. Read INSTALL.zaurus

for a few important details.

</ul>

</section>

<h3>Notes about the source code:</h3>

<p>

<h3><font color="#e00000">Notes about the source code:</font></h3>

<ul>

src.tar.gz contains a source archive starting at /usr/src. This file

contains everything you need except for the kernel sources, which are

in a separate archive. To extract:

# <kbd>mkdir -p /usr/src</kbd>

# <kbd>cd /usr/src</kbd>

# <kbd>tar xvfz /tmp/src.tar.gz</kbd>

</pre></blockquote>

<p>

# <strong>mkdir -p /usr/src</strong>

# <strong>cd /usr/src</strong>

# <strong>tar xvfz /tmp/src.tar.gz</strong>

</pre></ul>

<p>

sys.tar.gz contains a source archive starting at /usr/src/sys.

This file contains all the kernel sources you need to rebuild kernels.

To extract:

<p>

# <strong>mkdir -p /usr/src/sys</strong>

# <kbd>mkdir -p /usr/src/sys</kbd>

# <strong>cd /usr/src</strong>

# <kbd>cd /usr/src</kbd>

# <strong>tar xvfz /tmp/sys.tar.gz</strong>

</pre></ul>

</pre></blockquote>

<p>

Both of these trees are a regular CVS checkout. Using these trees it

is possible to get a head-start on using the anoncvs servers as

Line 692

Line 679

Using these files

results in a much faster initial CVS update than you could expect from

a fresh checkout of the full OpenBSD source tree.

<p>

</ul>

</section>

<hr>

<h3>How to upgrade</h3>

<p>

<h3><font color="#0000e0">How to upgrade</font></h3>

<p>

If you already have an OpenBSD 4.9 system, and do not want to reinstall,

upgrade instructions and advice can be found in the

<a href="faq/upgrade50.html">Upgrade Guide</a>.

</section>

<hr>

<h3>Ports Tree</h3>

<p>

<h3><font color="#0000e0">Ports Tree</font></h3>

<p>

A ports tree archive is also provided. To extract:

<p>

# <strong>cd /usr</strong>

# <kbd>cd /usr</kbd>

# <strong>tar xvfz /tmp/ports.tar.gz</strong>

# <kbd>tar xvfz /tmp/ports.tar.gz</kbd>

# <strong>cd ports</strong>

# <kbd>cd ports</kbd>

</pre></ul>

</pre></blockquote>

<p>

The <i>ports/</i> subdirectory is a checkout of the OpenBSD ports tree. Go

read the <a href="faq/ports/index.html">ports</a> page

Line 725

Line 714

OpenBSD ports system.

<p>

The <i>ports/</i> directory represents a CVS (see the manpage for

cvs(1)</a> if

you aren't familiar with CVS) checkout of our ports. As with our complete

source tree, our ports tree is available via anoncvs. So, in

Line 733

Line 722

available on a read-write medium and update the tree with a command

like:

<p>

# <strong>cd [portsdir]/; cvs -d anoncvs@server.openbsd.org:/cvs update -Pd -rOPENBSD_5_0</strong>

</pre></ul>

</pre></blockquote>

<p>

[Of course, you must replace the local directory and server name here

with the location of your ports collection and a nearby anoncvs

Line 747

Line 736

If you're interested in seeing a port added, would like to help out, or just

would like to know more, the mailing list ports@openbsd.org is a good

place to know.

<p>

</section>

</body>

</html>