===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/72.html,v
retrieving revision 1.51
retrieving revision 1.52
diff -u -r1.51 -r1.52
--- www/72.html 2022/10/03 20:41:40 1.51
+++ www/72.html 2022/10/03 21:30:58 1.52
@@ -615,16 +615,19 @@
locked ypbinding file, thereby removing a horrible hack to support YP
lookups in programs using strong
pledge(2) rules.
-
Restrict pledge("vminfo") callers to read-only swapctl(2) operations.
+ Processes that pledge("vminfo") may only use the swapctl(2) operations
+ SWAP_NSWAP and SWAP_STATS providing information on swap devices.
Randomized the rekey interval of arc4random(3).
- Added local bind mode to Reduce the attack surface by introducing a 'local bind' mode to ypldap(8). In this mode
ypldap binds its RPC sockets to loopback, so YP services are only
- available to the host ypldap is running on. In local bind mode one
- does not need to run portmap(8).
+ available to the host it's running on. ypldap replaces ypbind(8) and writes the
+ YP binding file in /var/yp/binding itself. This also implies that portmap(8) doesn't need
+ to be running anymore when local bind mode is used.
Changed the /sbin daemons dhcpleased(8), mountd(8), Relax IP address limitation by allowing prefixes in 240/4.
Implement RFC 9234 - Route Leak Prevention and Detection Using Roles
in UPDATE and OPEN Messages.
- Full support for RFC 7911 - Advertisement of Multiple Paths in BGP.
+ Full support for RFC 7911 - Advertisement of Multiple Paths in BGP (ADD-PATH).
Improve FIB code, handle IPv6 scoped addresses properly.
Add bgplgd(8),
a FastCGI server providing a REST API to execute
@@ -724,8 +727,6 @@
Fix race between a neighbor session reset and its update message
backlog
Improve handling of nexthop reachability state changes
- Added send side RFC 7911 (ADD-PATH) support to bgpd(8).
Made sure only one bgpd(8) roa softreconfig
runner is run at any time.