version 1.55, 2015/03/12 07:06:05 |
version 1.56, 2015/03/12 15:49:55 |
|
|
<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/bridge.4?query=bridge&sec=4">bridge(4)</a>. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man4/bridge.4?query=bridge&sec=4">bridge(4)</a>. |
<li>Traffic destinated to link-local IPv6 addresses can now be seen with |
<li>Traffic destinated to link-local IPv6 addresses can now be seen with |
<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8?query=tcpdump&sec=8">tcpdump(8)</a>. |
<a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man8/tcpdump.8?query=tcpdump&sec=8">tcpdump(8)</a>. |
|
<li>A <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=carp&sektion=4">carp(4)</a> now needs to be configured with an explicit <em>carpdev</em> parent interface. |
<li> ... |
<li> ... |
</ul> |
</ul> |
<p> |
<p> |
|
|
<ul> |
<ul> |
<li>nginx and sliplogin have been removed. |
<li>nginx and sliplogin have been removed. |
<li>IPv6 router solicitations are now sent by the kernel ("inet6 autoconf"); rtsol(8) and rtsold(8) are no longer necessary and have been removed. |
<li>IPv6 router solicitations are now sent by the kernel ("inet6 autoconf"); rtsol(8) and rtsold(8) are no longer necessary and have been removed. |
<li> ... |
<li>Enhancements and bugfixes in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=arp&sektion=8">arp(8)</a> and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ndp&sektion=8">ndp(8)</a> |
|
<li>... |
</ul> |
</ul> |
<p> |
<p> |
|
|
|
|
<li>At resume (or unhibernate) time, use a variety of methods to reseed the random number generator. This also works on VM's which wake up (if a wakeup event is seen). |
<li>At resume (or unhibernate) time, use a variety of methods to reseed the random number generator. This also works on VM's which wake up (if a wakeup event is seen). |
<li>All architectures have been transitioned so to static PIE, meaning the statically linked binaries in /bin and /sbin now have randomly located text segments. |
<li>All architectures have been transitioned so to static PIE, meaning the statically linked binaries in /bin and /sbin now have randomly located text segments. |
<li>Allow larger .openbsd.randomdata ELF segments. |
<li>Allow larger .openbsd.randomdata ELF segments. |
|
<li>Sync kernel AES code and <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ssh&sektion=1">ssh(1)</a> AES code to the one shipped with OpenSSL/LibreSSL. |
|
<li>removed <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=passwd&sektion=1">passwd(1)</a> support for all password cyphers except <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=blowfish&sektion=3">blowfish(3)</a> |
|
<li>Use sha512 instead of md5 for <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=tcp&sektion=4">tcp(4)</a> initial sequence number. |
|
<li>Use sha512 instead of md5 in the random number generator. |
|
<li>Delete secret or secret-derived data in many base utilities with <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=explicit_bzero&sektion=3">explicit_bzero(3)</a>. |
<li>... |
<li>... |
</ul> |
</ul> |
<p> |
<p> |
|
|
<li>Added <tt>kern.global_ptrace</tt> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=1">sysctl(1)</a> to disable by default the ability to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ptrace&sektion=2">ptrace(2)</a> processes that aren't your descendent. |
<li>Added <tt>kern.global_ptrace</tt> <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=sysctl&sektion=1">sysctl(1)</a> to disable by default the ability to <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ptrace&sektion=2">ptrace(2)</a> processes that aren't your descendent. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&sektion=1">kdump(1)</a> now always displays both the numeric and the textual forms for users, groups, timestamps, and sysctl ids, eliminating the <tt>-r</tt> option. It also auto-selects between decimal and hex format for arguments, renders more types of flags, and is more robust when parsing corrupt ktrace files. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=kdump&sektion=1">kdump(1)</a> now always displays both the numeric and the textual forms for users, groups, timestamps, and sysctl ids, eliminating the <tt>-r</tt> option. It also auto-selects between decimal and hex format for arguments, renders more types of flags, and is more robust when parsing corrupt ktrace files. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chmod&sektion=1">chmod(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chgrp&sektion=1">chgrp(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&sektion=8">chown(8)</a> now comply with POSIX's requirements when they encounter symlinks when the <tt>-R</tt> option is used, and are safe from race conditions when doing so. |
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chmod&sektion=1">chmod(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chgrp&sektion=1">chgrp(1)</a>/<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=chown&sektion=8">chown(8)</a> now comply with POSIX's requirements when they encounter symlinks when the <tt>-R</tt> option is used, and are safe from race conditions when doing so. |
|
<li>The <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=dmesg&sektion=8">dmesg(8)</a> utility can now display the console message buffer in addition to the system message buffer. |
<li>... |
<li>... |
</ul> |
</ul> |
<p> |
<p> |