version 1.22, 2014/03/23 19:00:14 |
version 1.23, 2014/03/24 06:06:11 |
|
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&sektion=1">signify(1)</a> utility. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&sektion=1">signify(1)</a> utility. |
<ul> |
<ul> |
<li>The installer will verify all sets before installing. |
<li>The installer will verify all sets before installing. |
<li>Users should still verify the installer by hand. |
<li>Installing without verification works, but is discouraged. |
|
<li>Users are advised to verify the installer (bsd.rd, install55.iso, etc.) |
|
ahead of time using the |
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=signify&sektion=1#end">signify(1)</a> tool is available. |
|
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> now trusts signed packages only by default. |
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
|
|
<li>Security improvements: |
<li>Security improvements: |
<ul> |
<ul> |
<li>Position-independent executables (PIE) are now used <b>by default</b> |
<li>Position-independent executables (PIE) are now used by default on i386. |
on i386. |
|
<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> |
<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arc4random&sektion=3">arc4random(3)</a> |
functions now use the ChaCha20 cipher. |
functions now use the ChaCha20 cipher. |
<li>The kernel random number system is initially seeded by the bootloader, |
<li>The kernel random number system is initially seeded by the bootloader, |
|
|
|
|
<li>Assorted improvements: |
<li>Assorted improvements: |
<ul> |
<ul> |
<li>New in-memory file system, tmpfs |
<li>New in-memory file system, <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=mount_tmpfs&sektion=8">tmpfs</a> |
<li>POSIX required <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nl&sektion=1">nl(1)</a> utility. |
<li>POSIX required <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=nl&sektion=1">nl(1)</a> utility. |
<li>OpenBSD/vax has switched to GCC 3. |
<li>OpenBSD/vax has switched to GCC 3. |
<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getdents&sektion=2">getdents(2)</a>. |
<li>Added <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=getdents&sektion=2">getdents(2)</a>. |
|
|
|
|
<li>Major overhaul of the package tools: |
<li>Major overhaul of the package tools: |
<ul> |
<ul> |
<li>Much better memory usage |
<li>Much better memory usage. |
<li>pkg_add now trusts signed packages only by default |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pkg_add&sektion=1">pkg_add(1)</a> now trusts signed packages only by default. |
</ul> |
</ul> |
<li>Over 8,700 ports |
<li>Over 8,700 ports |
<p> |
<p> |