Annotation of www/plus.html, Revision 1.156
1.14 deraadt 1: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML Strict//EN">
2: <html>
3: <head>
4: <title>OpenBSD changes</title>
5: <link rev=made href=mailto:www@openbsd.org>
6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
1.59 deraadt 10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
1.14 deraadt 11: </head>
12:
1.64 downsj 13: <BODY BGCOLOR="#FFFFFF" TEXT="#000000" LINK="#23238E">
1.14 deraadt 14:
1.64 downsj 15: <img alt="[OpenBSD]" SRC="images/smalltitle.gif">
16:
17: <p>
1.146 deraadt 18: <h3>Changes made between OpenBSD versions.</h3>
1.14 deraadt 19:
20: <p>
1.29 deraadt 21: The OpenBSD project was spawned from NetBSD (ie. a member of the
1.71 denny 22: 4.4BSD family) and is developed separately. As well as developments
1.29 deraadt 23: by our development group, good changes from the other free operating
24: systems are evaluated and merged into OpenBSD (of course, depending on
25: various factors like developer time for example.) OpenBSD tracks bug
26: reports and source tree changes from the NetBSD and FreeBSD projects
27: fairly closely. Even pieces of code from the Linux projects have been
28: used.
1.14 deraadt 29:
30: <p>
1.29 deraadt 31: In the early days of OpenBSD, it was possible to be able to say
32: "OpenBSD is NetBSD <b>PLUS MORE STUFF</b>" Now, after substantial
1.30 deraadt 33: work OpenBSD is very much is it's own thing. Too much stuff has been
1.29 deraadt 34: added and fixed. OpenBSD is OpenBSD.
35:
36: <p>
37: This is a partial list of the major machine independent changes
38: (ie. these are the changes people ask about most often). Port
39: specific changes have also been made, and are sometimes mentioned
40: in the pages for the specific <a href=plat.html>ports</a> if you
41: are interested in for further port-specific details. Many ports
42: have had architecture-specific enhancements relative to NetBSD,
43: but when they do not they certainly have plenty of platform-independent
44: changes, starting with those listed below..
1.14 deraadt 45:
1.17 deraadt 46: <p>
1.156 ! deraadt 47: <h3><font color=#0000e0>Life for the OpenBSD project begins...</font></h3>
1.17 deraadt 48: <p>
1.14 deraadt 49: <ul>
50: <li>Many many NetBSD PR's fixed (which NetBSD has not yet fixed)
51: <li>New curses library, including libform, libpanel and libmenu.
52: <li>a termlib library which understands termcap.db, needed for new curses.
53: <li>The FreeBSD ports subsystem was integrated and is usable by you!
1.35 kstailey 54: <li>ipfilter for filtering dangerous packets and Network Address Translation
55: for IP masquerading.
1.14 deraadt 56: <li>better ELF support
57: <li>nlist() that understands ELF, ECOFF, and a.out, allowing non-a.out ports
58: to use kvm utilies
59: <li>Verbatim integration of the GNU tools (using a wrapper Makefile)
60: <li>All the pieces needed for cross compilation are in the source tree.
61: <li>Some LKM support in the tree.
62: <li>ATAPI support (should work on all ISA busses)
63: <li>new scsi, md5, pkg_* commands
64: <li>Numerous security related fixes
65: <li>Kerberos and other crypto in the source tree that is exportable
66: <li>Solid YP master, server, and client capabilities.
67: <li>/dev/*random -- a device driver providing some kinds of random data
68: <li>In-kernel update(8) with an adaptive algorithm
69: <li>Some ddb improvements and extensions
70: <li>Numerous scsi fixes
71: <li>ncheck utility for ffs
72: <li>/sbin/init now deals with non-existant ttys, no longer spins gettys madly.
73: <li>new system calls: rfork(), minherit(), poll().
74: <li>select() that can handle any amount of file descriptors.
75: <li>kernfs extensions
76: <li>ATM support (support for one company's sparc & i386 cards available)
77: <li>Boot kernels with "-c" to edit/enable/disable device configuration tables
78: <li>pax as tar, gnutar is toast
79: <li>using AT&T awk, gawk is toast
80: <li>Even more security fixes.
81: <li>Accepts FreeBSD MD5 passwords in password maps, soon will be able to
82: generate them too
83: <li>Linux ext2fs and BSD4.4 LFS support being worked on.
84: <li>Working ATAPI audio support for multiple architectures.
85: <li>terminfo database support.
86: <li>Fortran in the tree.
87: <li>The most secure rdist support anywhere.
88: <li>randomized port allocation in bind(), bindresvport(), and rresvport() --
89: security via unpredictability.
90: <li>Protection from the udp spamming and ftp bounce attacks.
91: <li>Significantly improved ftp daemon.
1.140 gene 92: <li>Numerous more security policy and implementation improvements (OpenBSD
1.14 deraadt 93: defaults to installing in a very secure mode)
94: <li>zlib (non-GPL'd gzip-compatible library)
95: <li>Newest version of pppd.
96: <li>_POSIX_SAVED_IDS behaviour with permitted BSD extensions.
97: <li>Fixed long-standing vm swap-leak.
98: <li>FreeBSD malloc() that uses mmap() and is able to free unused memory.
99: <li>Numerous FreeBSD userland fixes and improvements incorporated.
100: <li>new rdisc Router Discovery daemon
101: <li>generic protection against the bind() takeover problem.
102: <li>at -f security fix.
103: <li>20 or so more security fixes
104: <li>install now supports -C, -p, and -S flags.
105: <li>a real adduser program, which can even be used uninteractively.
106: <li>POSIX & C2 requirement; lose setuid/setgid bits if owner/group changed
107: by chown(). This can be turned off with sysctl.
108: <li>partial protection against tcp SYN attacks.
109: <li>added /etc/fbtab support to login & init.
110: <li>RCS version 5.7
111: <li>much newer join command (4.4lite2 with other fixes)
112: <li>scsi subsystem security fix
113: <li>Kerberos is much more silent if not configured
114: <li>arc4-based random support in kernel
115: <li>ncr53cXXX scsi scripts assembler
116: <li>Numerous ftpd improvements and fixes, including multihomed and skey support.
117: <li>`lsof'-style features in fstat.
118: <li>rudimentary support for ISA Plug-and-Play cards
119: <li>Fixed timeout support in RPC library, and also fixed it to support more
120: than FD_SETSIZE file descriptors.
121: <li>improved locate command
122: <li>a good start at NETIPX support
123: <li>vim version 4.5
124: <li>gcc 2.7.2.1 (to get closer to native alpha support ar gcc
125: bugs).
126: <li>latest version of perl, and a lndir command.
127: <li>Even more security fixes.
128: <li>cdio command for using CD audio.
1.40 gvf 129: <li>Kernel warns if /dev/console does not exist; nice warning for booting with
130: an unpopulated /dev directory.
1.41 deraadt 131: <li>libgnumalloc is gone; our malloc() is better.
1.14 deraadt 132: <li>FreeBSD pipe() system call; quite a bit faster.
133: <li>Some serial driver support for /dev/cuaXX devices to support transparent
134: out+dial
1.40 gvf 135: <li>DDB can now access symbol tables from LKM modules
1.14 deraadt 136: <li>Say goodbye to dump, restore, and mt security holes: They are no longer
137: setuid.
138: <li>*Hobbit*'s netcat utility. The crackers use it, so should you.
139: <li>New routed from SGI.
140: <li>Complete in-tree development for MIPS/Alpha systems (ie. binutils).
141: <li>ftp command modified for easily scripted ftp & http downloads.
142: <li>And of course... more security related bugfixes... (ie. dump,
143: restore, mt).
144: <li>vim is replacing nvi, since nvi does not have a pure BSD license, and vim
145: also works better.
146: <li>16 partitions working on sparc and i386 (yipee!)
147: <li>Nice sample files in /etc
148: <li>sendmail gecos hole fixed (in a number of ways; other programs in the
149: source tree were also vulnerable.)
150: <li>secure multicast tools against possible security problems.
151: <li>latest GNU groff, incorporated in a clean wrapperized form.
152: <li>mopd for networking booting Digital machines
153: <li>less version 2.90
154: <li>deal with the SYN bomb problem (denial of service attack) as well known.
155: <li>Another kerberos security fix.
156: <li>Almost a hundred more security fixes, including /tmp races because of strncpy.
157: <li>Compile time option to compile the source tree almost completely dynamic.
158: <li>A 7% reduction in size of static binaries.
159: <li>FreeBSD's adduser(8) command. Also an rmuser(8) command.
160: <li>We have completed security reviews of almost all userland programs and
161: libraries except for the gnu stuff (where, based on preliminary
162: inspection there is poor handling of temp files).
163: <li>Working Linux ext2fs.
164: <li>Added sudo (which is maintained by one of our developers)
165: <li>CTM is now a supported way of obtaining OpenBSD source code.
1.17 deraadt 166: </ul>
167: <p>
1.156 ! deraadt 168: <h3><font color=#0000e0>OpenBSD 2.0 released.</font></h3>
1.17 deraadt 169: <p>
1.15 deraadt 170: <ul>
1.14 deraadt 171: <li>The NIST Posix test suite became free. As a result we have been correcting
172: numerous problems in the source tree, and expect to be completely
173: POSIX compliant very soon.
174: <li>upgrade to CVS version 1.9.
175: <li>A number of security fixes to the way coredumping works.
176: <li>The /dev/*random devices are now default on all architectures.
177: <li>Add stack tracebacks to Arc port's kernel debugger.
178: <li>Skey revamped into full OTP (RFC1938) support, including sha1 and
179: md5 support.
180: <li>GPL i387 emulator added.
181: <li>Crank kvm space on the i386 port, also limit buffer cache useage
182: so that 512MB machines may work (untested :-)
183: <li>Numerous fixes to the lpr suite, including security.
184: <li>More ftpd raging paranoia security fixes.
185: <li>The NIST suite showed numerous errors in libraries and the kernel.
186: Only a few small errors remain now, mostly regarding serial
187: ports.
188: <li>In numerous utilities: prefer $LOGNAME, but also accept $USER.
189: <li>OLF binary type added. This is like ELF, but includes an OS-dependent
190: tag. elf2olf(1) converts an elf binary to a tagged OLF binary which
191: the kernel can recognize correctly.
192: <li>Beware $HOME overflows throughout the source tree.
193: <li>Integration of the pmax port.
194: <li>Import of ctm.
195: <li>Various repairs to the scsi scanner support.
196: <li>Numerous more difficult-to-exploit-but-possible-if-someone-really-wanted-to
197: buffer overflows found in system utilities..
198: <li>Memory leak paranoia in cron.
199: <li>Make login get more consistantly upset about failed logins, and tell user
1.147 todd 200: about these failures at the next successful login.
1.14 deraadt 201: <li>pdksh version is now 5.2.11
202: <li>New bsd.*.mk feature: DEBUG=-g. Try it, you'll like it.
203: <li>The Arc port family has a new member: The rPC44 works!
204: <li>lpt driver is now bus-independent.
205: <li>com driver is now bus-independent.
206: <li>Numerous small security fixes again...
207: <li>Use pdksh as our /bin/sh. This provides excellent POSIX compliance.
208: <li>Prevent generic users from mounting filesystems by default.
209: <li>Added -C option to pax/tar. Also made -z support compressed files too.
210: <li>Increased compatibility in the pccons driver with BSDi features.
211: <li>Imported FreeBSD's calendar.
212: <li>GNU gdb works on the mips-based platforms.
213: <li>Add FreeBSD md5 diffs to mtree(8). This can be used to implement a
214: tripwire-like system.
215: <li>Some YP and bootparamd security changes.
216: <li>Hundreds of little fixes all over the place.
217: <li>Multiple updates for GNU software
218: <li>Add disklabels to the floppy device drivers.
219: <li>At boottime, have (*mountroot)() look at the root device's disklabel
220: to determine which filesystem type is to be mounted.
221: <li>If disklabel reading code discovers an ISOFS filesystem underlying,
222: spoof a nice disklabel (enough to fool mountroot).
223: <li>tcpdump 3.3
224: <li>Fix information gathering attack in ping(8).
1.147 todd 225: <li>Add NetBSD's "route show" implementation, and at the same time fix
1.14 deraadt 226: the new buffer overflows that this provided.
227: <li>Fix a few setgroups() related security holes.
228: <li>sendmail 8.8.4
229: <li>texinfo 3.9
230: <li>f77 0.5.19
231: <li>Repair some more KerberosIV buffer overflows. Hard to believe this is
232: supposed to be security software.
233: <li>Add XCASE/IUCLC/OLCUC/OCRNL/ONOCR/ONLRET tty subsystem flags for
234: backwards compatibility.
235: <li>Permit NFS attribute cache to be configured on a per-mount basis.
236: <li>Properly split fsck, mount, and newfs into multiple pieces. Use
237: disklabel information if it is available.
238: <li>Add disklabels to the vnd device driver.
239: <li>Change the games to be run setgid games, not setuid games. This closes
240: a whole slew of fascinating security holes.
241: <li>Import of the powerpc port.
242: <li>Properly use _POSIX_SAVED_IDS throughout the source tree.
243: <li>Permit building of kernels without a.out support.
244: <li>ppp 2.3b3
245: <li>libcrypt goes away. We do not need this stub library anymore. Do not link
246: against it on OpenBSD, all the pieces you need are in libc.
1.18 deraadt 247: <li>new aucat command.
248: <li>Fix a fairly nasty security hole in all of the games.
1.20 downsj 249: <li>Support for the <a href="hp300.html">hp300</a> added.
250: <li>Upgrade of awk(1), integration of BSD tsort(1), getopt fixes.
251: <li>Sendmail upgraded to version 8.8.5.
1.21 downsj 252: <li>Added lchown(2) for compatibility with SVR4 implementations.
1.23 deraadt 253: <li>New gnu cpio 2.4.2
254: <li>Support lchown(2) in dump(8), cp(1), pax(1), cpio(1), chown(8), and
255: restore(8).
256: <li>No buffer lengths in fmt(1).
257: <li>various adjtime() corrections inside the kernel.
258: <li>Prevent stat() from disclosing inode generation numbers to non-root userland.
259: <li>pax in tar mode will understand multiple -v options to generate ls-like output.
260: <li>Repair many uses of the SIOCGIFCONF code for machines with an outrageous
261: number of network interfaces.
1.22 deraadt 262: <li>More kerberosIV security patches.
263: <li>A working fsirand.
1.56 deraadt 264: <li>Completely in-tree <a href="powerpc.html">PowerPC</a> port for non-Apple
1.28 deraadt 265: hardware. This port requires nothing outside the in-tree development
266: environment to build (except mkisofs for building distributions).
267: <li>Some ypbind(8) tightening up, includes a method to specify a list of
268: valid servers
1.25 niklas 269: <li>Bug fixed that prevented bufpages/nbuf > 1 setups. This allows large
270: buffer caches even when available kvm space is low, like for i386
271: & sparc.
1.26 deraadt 272: <li>Changed netinet IP_HDRINCL option to require ip_len and ip_off in network
273: byte order. This is a compatibility/portability fix and we expect
274: other BSD systems to eventually follow suit.
275: <li>amd (the automounter) is now 64-bit and working on the alpha.
276: <li>The <a href="alpha.html">Alpha</a> port and all it's utilities now compiles
277: using in-tree versions of all tools. Yipee!
1.34 deraadt 278: <li>A SA_SIGINFO implementation for sigaction() and signal handlers. This is a
279: small part of POSIX 1003.1b and permits the signal handler to figure
280: out the exact cause of a signal; such as fault address information
281: for SIGSEGV or more detailed information for SIGFPE.
1.31 downsj 282: <li>config.old(8) has been removed from the tree, as the <a href="hp300.html">
283: hp300</a> port switches to config(8).
1.32 deraadt 284: <li>/sbin/dump -a saves you from needing to deal with finicky tape length
285: options (from FreeBSD)
1.34 deraadt 286: <li>Added RFC-1812 ICMP unreachable codes to ip_icmp.h, traceroute, and ping.
1.36 deraadt 287: <li>Be more careful if some fool decides to enable source routing ;-)
288: <li>Support for gzip'd kernels in some bootblocks.
289: <li>New wgrisc port for Willowglen embedded r3081-based machine with ISA slots.
290: <li>Add cdev and partition support to the ramdisk driver.
291: <li>Merge new ftp(1) changes from NetBSD.
1.37 deraadt 292: <li>Change mktemp(3) and family to generate more random filenames, yet still
293: as collision free as possible.
294: <li>Have libc/rpc save you from yourself if you do enable source routing.
1.38 downsj 295: <li>The <a href="hp300.html">hp300</a> joins many other ports in supporting
296: 16 disk partitions.
1.55 kstailey 297: <li>IPF 3.1.7 which includes fully working NAT support (ie. IP masquerading).
1.39 deraadt 298: <li>Use lots more XXXX characters in calls to the few remaining mktemp() calls
299: in the source tree. This cuts out a whole class of races.
300: <li>Improved NFS filehandle creation.
1.42 deraadt 301: <li>Make dd(1) work fine with our 64-bit off_t types, now you can copy very
302: large disks using it.
303: <li>add RPC service name generation to netstat -a
1.43 deraadt 304: <li>Fix pax & tar to be POSIX compliant.
1.42 deraadt 305: <li>Fix a few netinet kernel crash problems.
306: <li>Fix so that stack limits which are not a multiple of the pagesize work.
307: <li>fix some more memory and file descriptor leaks in libc/rpc
1.43 deraadt 308: <li>New scalable BLOWFISH-based crypt algorithm for passwd file entries. It
309: uses a very large strong-random `salt' and the number of rotor
310: runs is configurable. Hence if you have faster machines you can
311: slow the crypt routine down and make harder keys.
312: <li>Add support for /etc/passwd.conf which controls the format and strength
313: of passwd entries for the next time a user changes their password.
314: These options can be set per-user.
1.44 deraadt 315: <li>Working kadmind for kerberosIV.
316: <li>IPSEC package from John Ioannidis and Angelos D. Keromytis.
317: <li>cvs 1.9.2
318: <li>Fix weak symbol support in ld.
319: <li>libg++ pulls in libcurses automatically.
320: <li>Replace which(1) with a C program.
1.45 millert 321: <li>newfs(8) now has an inline fsirand(8) with no noticable speed decrease.
322: <li>settimeofday(2) won't roll back the date if securelevel > 0 (from lite2).
1.46 kstailey 323: <li>deroff(1) 1.0 from Debian (a Linux).
1.47 downsj 324: <li>BIND 4.9.5-P1.
1.48 deraadt 325: <li>Add support for FreeBSD md5 to /etc/passwd.conf.
326: <li>Import of the mvme88k kernel port.
327: <li>Import of libwrap and tcpd (tcp wrappers).
328: <li>Numerous improvements to pax, including full support for cpio and
329: a lot of fixes to tar mode.
330: <li>Let fsck and fsirand automatically work on very large filesystems.
331: <li>Various fixes to the fsck tools.
332: <li>ipsecadm as an initial cut at controlling IPSEC sessions.
333: <li>Fix pcmcia on the i386.
334: <li>Merged changes from at 2.9 into our own at.
335: <li>pccon(1) to control the pccons driver.
336: <li>Bye bye tahoe bits.
337: <li>noaccesstime option for filesystems (saves batteries on laptops)
338: <li>Substantial changes and fixes to the scsi scanner support.
339: <li>Support for "secure" YP password maps.
340: <li>Various atm fixes.
341: <li>The NE2000 if_ed driver now works on the alpha, too.
342: <li>ddb improvements for 64 bit machines.
343: <li>Fixes to fts(3).
344: <li>A few ypbind fixes.
345: <li>sysctl kern.osrevision gives OpenBSD date.
346: <li>gcc no longer defines -D__NetBSD__, only -D__OpenBSD__ now!
1.147 todd 347: <li>Implement NOFILE_MAX--hard limit on max descriptors per process.
1.48 deraadt 348: <li>Be more careful about modes of lost+found directories.
349: <li>New termcap and terminfo database files.
350: <li>Change mail.local -H behaviour slightly, and convince mail(1) to use it
351: for correct locking!
352: <li>64 bit clean in.rarpd.
353: <li>cvs 1.9.6
1.49 millert 354: <li>16 partition support for the alpha port.
1.50 deraadt 355: <li>Add ./.message support to ftpd
356: <li>Numerous more pax/tar fixes.
357: <li>Add md5 & blowfish passwd support to adduser(8).
358: <li>Add support for YP v1 to ypserv.
359: <li>Fixed some more mktemp races (sigh, will this ever end!)
360: <li>More buffer overflows, but none in sensitive programs.
361: <li>getnetent() and friends now work a lot more like gethostent().
362: <li>Use 10 X characters in many remaining mktemp() calls which are
363: hard to excise.
364: <li>Solve a few resolver problems after the recent 4.9.5-P1 integration,
365: not all our fault.
366: <li>Fix patch to honour Index lines better.
367: <li>A whole bunch of 64 bit fixes in the source tree (hint: alpha).
368: <li>Once again, really correct the various source routing pieces of the
369: userland source tree.
370: <li>Make real i386 cpu's work again. In case noone noticed, they didn't
371: work for about 5 months. The bug was very hard to find...
372: <li>For config(8), if any kernel options get added/deleted/changed since
373: the previous commit, warn that the compile tree needs 'make clean'.
374: <li>Use in_addr_t and in_port_t all over the place.
375: <li>Correct DEV_BSIZE and lp->d_secsize confusion throughout the source
376: tree. CD9660 is much happier now.
377: <li>Fix AFS string-to-key handling in kerberos.
1.51 kstailey 378: <li>NAT now gets started from /etc/netstart.
1.50 deraadt 379: <li>Various man page fixes.
380: <li>For the first time ever, an obj@ populated /usr/src tree compiles cleanly
381: when mounted read-only.
1.54 kstailey 382: <li>The df(1) utility now has a human-readable "-h" option.
1.53 deraadt 383: <li>Always skip the first 8KB of all swap partitions (hint: disklabels &
384: bootblocks)
385: <li>Repair some bugs in mail(1), especially regarding signal handling.
386: <li>Support .group entries in /etc/passwd.conf
387: <li>PCI aic7860 scsi support improved.
388: <li>Support /etc/rc.shutdown from halt(8).
389: <li>Support extended partitions in fdisk(8).
390: <li>Various fixes to the YP utilities.
391: <li>Signal handling fix to crontab(1).
1.147 todd 392: <li>Unify naming of architecture names between gcc & binutils.
1.53 deraadt 393: <li>Some more userland 64 bit fixes.
394: <li>Support for PCI NE2000 clones.
395: <li>libpthread works on the m68k.
396: <li>Significantly improved the unpredictability of the DNS packet id's
397: in the resolver and named.
398: <li>newfs_msdos(8) can has enough brains to find the partition size itself.
399: <li>Split rc.local, creating rc.securelevel. (Securelevels look like a worse
400: and worse idea every month).
401: <li>A bit more man page cleanup starting to happen...
1.57 kstailey 402: <li>GNU Groff 1.10 with (improved) Makefile wrapper.
1.58 kstailey 403: <li>sleep(3) and usleep(3) now call nanosleep(2) for significantly less
404: overhead.
1.60 niklas 405: <li>The vnd(4) device has a new safer mode of operation called svnd
406: where you can trust a disk-image right after it's unmounted,
407: i.e. cache-coherency.
1.61 deraadt 408: <li>Repaired install stuff for most architectures significantly, improving
409: ftp/http installs, single bootable install floppies, and in some
410: cases CDROM booting. Most floppies contain vi, too.
411: <li>Support crunch on arc (for bootable installs).
412: <li>Added gzip and cdrom support to the sparc and alpha bootblocks.
413: <li>Fix keyboard and delay timing in i386 bootfloppy bootblocks. Whee!
414: </ul>
415: <p>
1.150 deraadt 416: <a name=2.1release>
1.156 ! deraadt 417: <h3><font color=#0000e0>OpenBSD 2.1 released (July 2, 1997).</font></h3>
1.61 deraadt 418: <p>
419: <ul>
420: <li>Few quirky changes to the way ISO9660 disklabel spoofing works in
421: some ports.
422: <li>Fix a few more libc functions to generate very large fd_set's properly
423: for select(2).
424: <li>Import newer version of vax port.
1.65 deraadt 425: <li>Newer version of ext2fs that is reliable for read/write operation. This
426: is essentially FULLY OPERATIONAL.
1.61 deraadt 427: <li>Make adduser understand /etc/passwd.conf
428: <li>Support SIGINFO in ping; also add more complete icmp reporting
429: capabilities.
430: <li>New named root.cache from Internic.
431: <li>Lots of man page fixes.
432: <li>Fix more overflows and other bugs in mail(1).
433: <li>tail(1) can now notice if the file been replaced or truncated.
434: <li>getpgid(2) from XPG3(?)
435: <li>In ar(1), truncate uid & gid if too large.
436: <li>Add some more malloc options to malloc(3)
437: <li>tcp wrappers 7.6
438: <li>Fix lots more NetBSD PR's.
1.62 deraadt 439: <li>Few more fixes to pax(1).
440: <li>kill process timers if execve'ing a setuid/setgid executable.
441: <li>fix sendsmg() credential passing on 64 bit machines.
442: <li>Kernel now generates random pid values in fork().
443: <li>A few netinet fixes.
1.63 deraadt 444: <li>Some more security and robustness changes to traceroute and ping.
445: <li>Add <strong>-P proto</strong> support to traceroute.
446: <li>fix SO_SNDTIMEO.
447: <li>add sysctl net.inet.tcp.{keepidle,keepintvl,slowhz}
448: <li>fix disklabel support in vnd/svnd.
449: <li>Ensure TCP RST is within window.
450: <li>Use /etc/namedb/tmp/ to avoid /var/tmp race conditions.
1.147 todd 451: <li>Use dynamic fd_set allocation in more places, particularly setuid
1.63 deraadt 452: programs.
1.65 deraadt 453: <li>tftpd -c flag.
454: <li>document the ddb hangman.
455: <li>Move named tmp files to /etc/named/tmp/ to avoid localhost race
456: attacks.
457: <li>Addition of readlink(1).
458: <li>Implement hex/octal offsets in cmp(1), as documented.
459: <li>Repair many cross-references and other documentation problems in
460: the section 2 and 3 man pages, and also fix a few minor
461: other bugs discovered by analysis of recent changes in
462: FreeBSD's and NetBSD's libc.
463: <li>Add tsearch(3) and friends to libc, as required by XPG3(?).
464: <li>Fixed a few netinet bugs as pointed out by TCP/IP Illustrated
465: Vol.2.
1.66 deraadt 466: <li>Improved performance in /dev/*random.
467: <li>Deal with atapi drives that cannot lock their doors.
468: <li>Fix /tmp races in make(1).
469: <li>Add tsearch(3) to libc.
470: <li>In newfs(8), fix -o and -m to work better.
471: <li>Correct -n behaviour in sort(1).
472: <li>Better support for unmounted filesystems in df(1).
473: <li>add per-interface bindings to inetd(8).
474: <li>Fix some more /tmp races in various programs.
475: <li>Support "-d dir" in rpc.yppasswdd(8).
476: <li>Make ifconfig(8) print full information about the full set of
477: interface aliases.
478: <li>add -insecure flag to ypbind(8) so that it can bind to very old ypserv's.
479: <li>More ipsec changes!
480: <li>Change mount(2) to return EFTYPE for invalid filesystem.
1.147 todd 481: <li>Some NLS improvements, notably some more language catalogs.
1.66 deraadt 482: <li>Add ELOOP error handling to realpath(3).
1.68 deraadt 483: <li>More paranoia in procfs.
1.67 deraadt 484: <li>Slightly improve ftpd log file.
1.69 downsj 485: <li>Added automatic power down framework at halt(8) time, currently only
486: supported on sun4m machines with the <i>power</i> device.
1.70 kstailey 487: <li>IPF 3.1.11 + Darren's patches + 64-bit cleanup.
1.72 deraadt 488: <li>Fix a minor problem in popen().
489: <li>Use O_EXLOCK for passwd locking to avoid a class of localhost denial of
490: service attacks.
491: <li>Clip setsockopt SO_SND*/SO_RCV parameters.
492: <li>Repaired hundreds of long != int problems (in a bunch of programs) that
493: affect the alpha.
494: <li>Y2K enhancement to date(1).
495: <li>Race fix to amd(8).
496: <li>Support IP option handling in IPSEC packets.
497: <li>Import of the gnu multi-precision math library, libgmp. This will be
498: used by an IPSEC key daemon soon.
499: <li>Modify inetd to accept a "hostname,[hostname,...]:" token to added to the
500: front of any line in /etc/inetd.conf. This permits services to be
501: supplied only on certain interfaces.
502: <li>A few more minor netinet problems fixed.
503: <li>Import of cvs-1.9.10.
504: <li>Fix readlink(1).
1.74 deraadt 505: <li>Permit tftpd to provide files over 32K blocks in size.
506: <li>New kprop/kpropd man pages.
507: <li>Make sleep(1) handle fractions of seconds. This is a nice extension.
508: <li>Move libdes out of the kerberos tree so that it can be used by other
509: parts of the system too.
510: <li>Many more 64 bit fixes for the alpha, in about 20 more programs.
511: <li>libedit update with lots of fixes.
1.75 kstailey 512: <li>Fixed all(?) Makefile wrappers for GNU software to not build and install
513: manpages when NOMAN is set.
1.76 deraadt 514: <li>Fixed highscore handling in battlestar(6).
515: <li>Repaired nfs handling in tcpdump.
516: <li>split ifconfig -a into -a/-A: -A prints ifaliases, -a does not.
517: <li>Fix a number of rtld dynamic loading problems.
518: <li>More IPSEC changes. IPSEC is almost fully useable now.
519: <li>Intel EtherExpress Pro/100B PCI driver.
1.77 downsj 520: <li>ATAPI devices may now reside in a kernel without wd (disk) devices.
1.78 deraadt 521: <li>Amended issetugid(2) man page to be quite a bit more clear.
522: <li>Fix ruptime output for machines up > 99 days.
1.79 kstailey 523: <li>Maintain process size stats in forkstat struct for "vmstat -f".
1.80 deraadt 524: <li>make compress(1) do gzip support too.
525: <li>Make ed(1) work properly on a non-tty.
526: <li>Fix passive buffer overflow in rusers.
527: <li>Replace libc sha1 code with another version that is better in some respects.
528: <li>Repair symbolic link handling during coredumps (correctly, this time).
529: <li>Lots more IPSEC improvements.
530: <li>Add sha1 support to md5(1).
531: <li>Add sha1 digest support to mtree(8).
1.147 todd 532: <li>More mail(1) fixes, particularly regarding long lines.
1.81 downsj 533: <li>cua devices, new <strong>MAKEDEV</strong> script in the hp300 port.
534: <li>Updated <a href="http://www.sendmail.org/">Sendmail</a> to 8.8.6.
1.82 deraadt 535: <li>man page cleanups.
536: <li>lpd security fixes.
537: <li>Add rmd160 hash support throughout the source tree.
538: <li>Import of the IPSEC photuris daemon.
539: <li>Add <strong>-d date</strong> support to last(1).
1.147 todd 540: <li>make ctags operate a bit better in the presence of extra spacing.
1.85 deraadt 541: <li>IPSEC Photuris daemon is integrated into the source tree.
1.83 millert 542: <li>mail(1) behaves correctly when interrupted while getting headers from the user.
1.85 deraadt 543: <li>mail(1) supports "inc" command.
1.84 millert 544: <li>S/Key keyfile is now readable only by root. skeyinfo(1) and skeyaudit(1)
545: have been enhanced and rewritten as C programs.
1.85 deraadt 546: <li>Appletalk networking support.
547: <li>permit ftp(1) to download http pages without Content-Length.
548: <li>Some cribbage(6) fixes.
1.90 kstailey 549: <li>All Makefile.bsd-wrapper files can now strip GNU binaries during install (pr 188.)
1.86 deraadt 550: <li>Do not use tempnam(3) in mail(1).
551: <li>make amd(8) use /tmp_mnt by default.
552: <li>Implement IFF_NOARP handling in netinet.
553: <li>Fix pax to not need getcwd(3).
554: <li>Add -T support to last(1).
555: <li>-d flag for shutdown(8).
556: <li>Support lpc(8) "all" keyword option.
557: <li>Support YP map mail.aliases set of maps.
1.123 kstailey 558: <li>Hardcode a list of reserved ports that random port allocation should not
1.86 deraadt 559: reuse.
560: <li>Use sendmail -t instead of other invocation forms inside lots of
561: programs in the source tree.
562: <li>mremap(2) support for Linux emulation.
563: <li>Switch back to nvi; vim has copyright licensing issues.
564: <li>stime(2) support for SunOS emulation.
565: <li>More mail(1) fixes.... It's amazing Todd hasn't broken it.
566: <li>Support -H flag in who(1).
567: <li>Allocate reserved ports for NFS inside the kernel randomly.
568: <li>Man page improvements in many areas.
1.87 deraadt 569: <li>Fix systat manpage.
570: <li>An ugly identd race fixed.
571: <li>More buffer overflow fixes in mail(1).
1.88 deraadt 572: <li>Various fixes and improvements to the 3cXXX ethernet drivers.
573: <li>routed(8) is now disabled by default.
574: <li>Support fpx cards with i82555 PHY.
575: <li>Todd Miller is on a rampage, and making every single buffer inside mail(1)
576: dynamically allocated...
577: <li>Radius support in tcpdump.
1.93 kstailey 578: <li>More fixes to the alpha vga driver. Curses-based programs now work on it.
1.92 kstailey 579: <li>FSF GNU texinfo 3.11.
1.94 deraadt 580: <li>Attempt to cleanup identd. A long road left.
581: <li>Deal nicer with rfork/execve interactions.
582: <li>Make if_tun to prefix address family as a host byte order u_int32_t instead
583: of a u_char, so that bpf can deal with the interface.
1.97 deraadt 584: <li>Fix a kernel bug regarding double m_freem()..
1.96 downsj 585: <li>Sendmail 8.8.7.
1.98 deraadt 586: <li>Fixed getnetbyaddr() 'always tried DNS' resolution problem from 2.1.
587: <li>Cyclades driver fixed. Works on alpha, too.
588: <li>More mdoc pages.
589: <li>save errno in most of the tree's SIGCHLD handlers, just in case.
1.99 deraadt 590: <li>Make 127.0.0.1 assumed OK if /var/yp/securenet is in use.
591: <li>Fix pdksh bugs: closed too many fd's on exec, fix handling of (( )) to be
592: compatible with POSIX sh spec without breaking $((, and explain how
593: IFS works when splitting text after a substitution.
594: <li>Fix another race condition in identd.
595: <li>Work has started to fix the remainder of the signal handlers in the
596: source tree with respect to errno clobbering.
1.100 deraadt 597: <li>Seriously rework the identd daemon even further, to avoid even more
598: input parsing problems and race conditions.
599: <li>Fix a memory leak in grep(1).
600: <li>Fix vacation(1) properly.
601: <li>Make bsd.doc.mk use DOCDIR.
602: <li>Support -n better in pstat(8).
603: <li>Change the bounds_check_with_label() API to handle a cpu_disklabel too.
604: <li>Optional TCP syn cookie support enabled via TCPCOOKIE kernel option.
605: <li>Import ypserv performance.
606: <li>Make bad random allocation ports settable via sysctl(8).
607: <li>Make gzexe(1) use mktemp to avoid races.
608: <li>Fix pcap_inject(3) in libpcap.
609: <li>In mountd(8), handle ext2fs specially, like most exported filesystems.
610: <li>Be even more paranoid (if it can be believed) in mail.local(8).
611: <li>Add top(1) to the source tree. Fix some problems.
612: <li>Fix another procfs security hole.
613: <li>ATAPI quirk for MATSHITA CR-574.
1.114 kstailey 614: <li>Attempt to deal with archive timestamp and filemode problems in texinfo...
1.100 deraadt 615: <li>Put hostname in root crontab mailout subjects.
1.101 deraadt 616: <li>We are starting to pay attention to good things found in the XPG4
617: standard. We hope to never be compliant, because XPG4 goes way
618: too far.
619: <li>More 1003.2 conformance: cal, cksum, sleep, compress, expr, etc.
620: <li>Support simple add/delete operations on ports in the baddynamic masks
621: via sysctl(8)
622: <li>Be more careful about YP groups in getgrouplist().
623: <li>New PCMCIA Wavelan driver.
1.102 millert 624: <li>More user-friendly error messages from mount_* when the filesystem
625: is not in the kernel.
626: <li>Changed realloc(foo,0) semantics to be like malloc(0), not free(foo).
627: <li>Fixed a bug in cp(1) when the -r option is used and the source dir
628: ends in a '/'.
1.103 millert 629: <li>Verbose SCSI warnings are now available and on by default.
630: <li>Added basename(3) and dirname(3) for XPG4. dirname(1) is now trivial.
631: <li>XPG4 compatibility for ps(1) format options.
632: <li>Buffer overflow fixes in tip(1).
633: <li>Fixed err(3)/warn(3) argument usage in the tree.
634: <li>shutdown(8) now gets its own session as it deserves.
635: <li>Fixed a bug where the kernel could lie about how many file descriptors
636: are available and cause a panic.
637: <li>ash is gone gone gone.
638: <li>The group vector could end up with duplicates esp. with YP. Now it won't.
639: <li>Document a64l(3) and l64a(3).
640: <li>basename(1) and dirname(1) no longer give an error for paths starting
641: with '-'.
642: <li>Don't print duplicate fields in ps(1) when called with silly arguments.
1.109 deraadt 643: <li>Few more 64 bit fixes in userland, in some rarely used system tools.
644: <li>Various fixes to battlestar(6).
645: <li>A few fixes to tip(1).
646: <li>In join(1), require compat options start with '-'.
647: <li>In dump(8), do not consider tape changing time in the timing estimates.
648: <li>Correct 'sync' option to dd(1).
1.107 kstailey 649: <li>Lucent Technologies (formerly AT&T) awk version 970821.
1.109 deraadt 650: <li>Handle setgid lossage in tip(1).
651: <li>Fix a crash in systat(8).
652: <li>Further IPSEC enhancement (but still no man pages for it though).
653: <li>In calendar(1), support "-t date" to let you see the calendar for other days.
1.112 kstailey 654: <li>More SysVR4 emulation: sockets, NTP, POSIX time functions, pread(2)/pwrite(2).
1.110 deraadt 655: <li>Kill "union wait" in a few more places.
656: <li>Handle SIGCHLD better in rlogin.
657: <li>Correct some remaining small inetd bugs.
1.111 deraadt 658: <li>Do permission checking at delivery time for pgid's derived from TIOCSPGRP,
659: F_SETOWN, or FIOSETOWN.
660: <li>Some FreeBSD m4(1) fixes.
661: <li>Fix first directory handling in "find -execdir"
1.115 deraadt 662: <li>make glob(3) XPG4.2 compliant, which means use GLOB_ABORT.
1.116 deraadt 663: <li>ppp 2.3.1...
1.115 deraadt 664: <li>Another tip(1) overflow fix.
665: <li>New COMPAT_BSDOS binary compatibility subsystem.
1.113 kstailey 666: <li>Print system call emulation in ps(1) output. Try "ps -axO emul".
1.116 deraadt 667: <li>Update ftp(1) to new NetBSD changes.
668: <li>make mail(1) be permissive about <CR><LF> pairs in mailbox files.
669: <li>Cleaned up verbose scsi error reporting.
670: <li>make bpfread() return ENXIO for uninitialized descriptors.
671: <li>Extend buffer lengths in patch(1).
672: <li>Fix a coredumping problem in tip(1).
673: <li>Preliminary manual pages for the IPSEC utils.
1.117 deraadt 674: <li>Fix a long-standing and minor problem with ld.so on m68k.
675: <li>Ignore trailing spaces on priority in /etc/syslogd.conf.
676: <li>Make ddb not think 'h' means hangman.
677: <li>Some setlogin() and getlogin() fixes in the tree.
678: <li>Fixed small pathname buffer in man(1).
679: <li>Made indent(1) handle unlimited number of -T options.
1.119 deraadt 680: <li>Some fsck_msdos(8) fixes.
681: <li>Make popen(3) safe if vfork(2) does real parent address space borrowing.
682: <li>Always set the SCSI-1 LUN field correctly in all transfers.
1.118 gene 683: <li>Added ex (EtherExpress Pro/10) driver ported from FreeBSD
1.119 deraadt 684: <li>Fix a ksh(1) bug.
685: <li>Permit a longer path buffer in tgetent(3).
686: <li>Some syslogd fixes.
687: <li>Fix SA_* sigaction(2) fields in the OS compat code.
688: <li>Don't error out of MDTM fails.
689: <li>Add sigaction(2) SA_NOCLDWAIT support.
690: <li>Add mkisofs(8).
691: <li>Run calendar -a in the background. (Points to whoever figures out why).
692: <li>Another important disk-full check in pwd_mkdb(8).
1.120 deraadt 693: <li>Fix ftime(3).
694: <li>Fixed various MAKEDEV bugs on lots of architectures.
695: <li>Deal with some possible buffer overflows in sup.
696: <li>Make top(1) work better on very small screens.
697: <li>Fix tar to deal better with one more kind of strange tar file.
698: <li>Shrink most of the install floppies ;-)
1.147 todd 699: <li>Fix a few small problems in rarpd(8).
1.120 deraadt 700: <li>Make ls -d sort directories with files.
1.121 deraadt 701: <li>Do not init pgid in /dev/log's logopen().
702: <li>Fixed a pstat -s related bug in pcvt.
703: <li>Ignore SIGPIPE in inetd(8).
704: <li>In struct sigaction, split sa_handler and the new sa_sigaction function
705: pointers as is being done on newer POSIX systems. This permits proper
706: prototyping of signal handlers.
707: <li>Fix an ifconfig bug related to interfaces that do not exist.
708: <li>Make execle() use alloca() instead of malloc(); to ensure execle() can be
709: safely called in a signal hander.
710: <li>Fix the : and . support in chown so that usernames can have . in them.
711: <li>Fix a network performance problem introduced with IPSEC.
712: <li>Add support for FNM_LEADING_DIR, FNM_CASEFOLD, FNM_IGNORECASE to fnmatch(3).
713: <li>Fix a bug in libform.
714: <li>Add -f option to readlink which does a realpath(3).
715: <li>More IPSEC improvements after the Interop ANX bakeoff.
716: <li>A few pppd fixes.
1.122 kstailey 717: <li>The random(6) tool (game?) now uses arc4random(3).
1.124 deraadt 718: <li>Fix prompting code in pw_edit(3)
719: <li>Ignore bogus hostnames in the /etc/exports file.
720: <li>Make /etc/security handle blowfish-a passwd entries.
721: <li>Rewrite of fdisk(8).
722: <li>Handle a potential crash in the bpf driver.
723: <li>Quirks for two kinds of hitachi dk515 scsi drives and the
724: Cipher ST150S tape drive.
725: <li>Handle creation of /var/tmp/vi.recover more securely.
726: <li>Implementation of the new disklabel -E mode.
727: <li>Support 'q' modifier in kernel vsprintf/kprintf
728: <li>In fmt(1), support backslashed whitespace inside words better.
729: <li>Make disklabel -E always succeed at writing a label. Now you
730: can load a fictitious label, edit it, and write it out.
731: <li>Repair the msdosfs timestamping code so that NT/Win95 do not complain.
732: <li>Another lpd security fix.
733: <li>Some minor tftpd bug fixes.
734: <li>Fix one last little problem case in the fts(3) library routine. This
735: is a very complicated piece of code...
736: <li>Fix a memory leak in libdes.
737: <li>Fix mktemp() to work correctly when specified against non-existant
738: directories.
739: <li>Make ac(8) use the correct timestamp if the user specifies a different
740: wtmp file.
741: <li>Fix a select/read race in identd(8) which would make it spin wildly.
742: <li>Make the ncr scsi driver work on big-endian machines too.
743: <li>Add per-host locking support to supfilesrv.
744: <li>Make clri(8) mark the filesystem dirty.
745: <li>Addition of 'kbus' port for the Solbourne Series5 sparc-based machines.
746: <li><strong>The new afterboot(8) man page. Everyone should look at this.</strong>
747: <li>Prevent open(2) with wrong flag modes.
1.105 deraadt 748: </ul>
1.125 deraadt 749:
750: <p>
1.156 ! deraadt 751: <h3><font color=#0000e0>OpenBSD 2.2 released (Dec 4, 1997).</font></h3>
1.150 deraadt 752: <p>
753:
754: <p>
1.156 ! deraadt 755: <h3><font color=#0000e0>Work begins on what will become 2.3....</font></h3>
1.125 deraadt 756: <p>
757:
758: <ul>
759: <li>Add svr4 jioctl() compat interface.
760: <li>Make kdump(1) handle the newer emulations.
761: <li>a buffer underrun in ctags(1).
762: <li>In tftpd(8), permit syslog() to work when running chroot(2)'d.
763: <li>Add blowfish and cast encryption to IPSEC.
764: <li>SIGWINCH handling in systat(1).
765: <li>If a non-existant user logs in and asks for s/key authentication, fake a
766: proper s/key prompt.
767: <li>Make disklabel -E deal with multiple partitions which overlap.
768: <li>Replace kernel printf with Torek's libc printf.
769: <li>Be more careful with getpwent() information inside rcp(1).
770: <li>Handle C++ and other languages in yacc(1) far better.
771: <li>Fix an as(1) parsing bug relating to the .ascii directive.
772: <li>Fix some memory leaks in the RPC code.
773: <li>Document how crypt(3) handles blowfish and MD5 passwords.
774: <li>Truncate large uid and gid values in ranlib(1), in the same way as this
775: is handled in ar(1).
776: <li>Fix rpc.rquotad support if the quotas file resides on another filesystem.
777: <li>makewhatis(8) manpage added.
1.142 deraadt 778: <li>Fixed ps(1) LIM and STAT columns.
1.130 deraadt 779: <li>usleep(3) returns int, and add useconds_t type as required by XPG4.2
780: <li>4.4BSD lite2 vfs integration.
781: <li>Support execution sections in syslog.conf.
1.131 deraadt 782: <li>Start named(8) earlier in /etc/rc.
783: <li>add uu_lock(), uu_unlock() and uu_lockerr() to libutil.
784: <li>sendmail 8.8.8
785: <li>double MAX_KMAPENT and MAX_KMAP
786: <li>Fix tty suspend during <strong>sh -c "less file"</strong>.
787: <li>Add more things to afterboot(8).
788: <li>Correct TCP's handling of RST.
1.132 deraadt 789: <li>Fix EXTPROC in pty code.
790: <li>Update getNAME(8) and fix makewhatis(8) to use it more optimally.
791: <li>Some compat_svr4 fixes.
792: <li>Flesh out compat_freebsd a fair bit more.
793: <li>Some minor fixes for the libc/db/btree code.
794: <li>Add getsid(2) system call as mandated by XPG4.2.
1.133 deraadt 795: <li>Make dumpfs(8) report if soft updates are requested by the superblock.
796: <li>Make "expr a : /" work.
797: <li>Support an "object" keyword in config(8).
798: <li>Support -mmin, -amin, and -cmin in find(1).
1.134 deraadt 799: <li>Fix a ONLCR + FLUSHO situation in tty.c
800: <li>Make msync(2) POSIX compliant.
801: <li>Make the if_de driver support more cards.
1.135 deraadt 802: <li>Clear CLOCAL mode in pppd if modem is set but modem_chat is not.
803: <li>Add inetd(8) <strong>-R rate</strong> flag, and crank default rate to 256.
804: <li>Fix a line continuation bug in sed(1).
1.136 deraadt 805: <li>Change various system calls to take void * instead of caddr_t.
806: <li>Range-check the "how" argument for shutdown(2).
807: <li>Make the <strong>-Ss</strong> flag in rpcgen(1) work right.
1.137 deraadt 808: <li>Add <strong>SHUT_RD</strong>, <strong>SHUT_WR</strong>, and
809: <strong>SHUT_RDWR</strong> values for shutdown(2) as
810: specified by XPG4.2.
811: <li>in chat(8), replace Mini Getopt from hell with real getopt().
812: <li>Minor logging feature changes in fingerd(8).
813: <li>Fix some Y2K problems in the nroff tmac macros.
814: <li>Added mode rangecheck in chmod(2) and fchmod(2).
1.139 deraadt 815: <li>Consider only the 0177777 bits of the umask(2) value, as documented.
1.140 gene 816: <li>Implement FIONBIO in ibcs2 emulation code.
1.139 deraadt 817: <li>Make fstat(2) on AF_UNIX socket return proper st_[acm]time field values.
818: <li>make readlink(1) terminate it's buffer correctly.
1.155 deraadt 819: <a href=errata.html#all>This affects CDROM builds so a patch is
820: available for 2.2</a>.
1.139 deraadt 821: <li>Clean /var earlier in the /etc/rc script.
822: <li>Fix the internals of open(2) when O_TRUNC and either O_SHLOCK or O_EXLOCK
823: are set. (That was a nasty kernel bug).
1.142 deraadt 824: <li>Fixed bug in 'systat vm' output.
1.141 deraadt 825: <li>Update sudo(8).
826: <li>Import of FreeBSD's ppp(8) program.
827: <li>Fix a memory leak in the kernel process group manipulation code.
828: <li>Some man page cleanups.
1.143 deraadt 829: <li>add <strong>-t</strong> option to disklabel(8).
830: <li>Fix a mget prompting error in ftp(1).
831: <li>Update to ncurses 4.1.
832: <li>Work around stupid linux emulation behaviour involving non-blocking
833: connect(2).
1.144 niklas 834: <li>Massive performance optimization of the ccd device (RAID-like striping
835: disk driver).
1.145 deraadt 836: <li>Fix arp(8) ethernet address parsing for the illegal cases.
837: <li>Fix <strong>-amin</strong> option in find(1).
838: <li>Moving towards KTH kerberos 4-0.9.7.
839: <li>Fix /etc/rc scripts to require IPF if NAT is requested.
840: <li>Add asprintf(3) and vasprintf(3).
841: <li>Add hosts.equiv(3) and .rhosts(3) man page.
1.148 deraadt 842: <li>Import perl 5.004_04.
843: <li>Add some more XPG4.2 *_t types.
844: <li>Fix SunOS emulation of TIOCGPGRP.
845: <li>Newer ncr device driver.
1.154 deraadt 846: <li>On the i386, handle the nasty problem with distinguishing SVR4 and Linux
847: binaries. <a href=errata.html#i386>A patch is available for 2.2</a>.
1.149 millert 848: <li>Update to ncurses-4.1-971129
1.151 deraadt 849: <li>Fix a deadlock on cd9660.
850: <li>Fix an overflow in top(1).
851: <li>Prevent ipf/ipnnat configuration changes when securelevel > 1.
852: <li>Fix scsi CDIOCREADSUBCHANNEL.
1.152 deraadt 853: <li>Indicate connect direction for tcp sockets in fstat(1).
854: <li>In linux compat, handle the CDROM ioctl() calls.
1.153 deraadt 855: <li>Flesh out scsi(8) a tiny bit more.
856: <li>Use <strong>cp -R</strong> instead of <strong>cp -r</strong> for local
857: copies in rcp(1).
858: <li>Enhance the performance of pwd_mkdb(8) by expanding the db(3) cache based
859: on input filesize.
860: <li>Add a <strong>kern.nosuidcoredump</strong> sysctl.
861: <li>Fix minor numbers for /dev/ch* in the MAKEDEV scripts.
1.154 deraadt 862: <li>A workaround for the Intel P5 F00F lockup problem.
863: <a href=errata.html#i386>A patch is available for 2.2</a>.
1.153 deraadt 864: <li>Fix numerous problems with new KTH kerberos.
865: <li>Fix a problem in -current regarding open() of O_TRUNC and O_SHLOCK.
866: <li>Correct an XPG violation in stdlib.h.
867: <li>Handle the cdrom ejecting ioctl in linux emulation.
868: <li>Handle SIOCGIFHWADDR ioctl in linux emulation.
869: <li>Use recursive vnode locks to solve a page-in panic reported by chuck & chuck.
1.125 deraadt 870: </ul>
871:
1.17 deraadt 872: <p>
1.156 ! deraadt 873: <h3><font color=#0000e0>Development is rapidly continuing...</font></h3>
1.17 deraadt 874: <p>
1.14 deraadt 875:
1.95 deraadt 876: This list mentions mostly platform-independent changes. For a list of changes
877: made in a particular platform, please check the page for that platform. If you
878: find them not listed there, the changes are either (1) not being documented or
879: (2) are documented here.<br><br>
1.14 deraadt 880:
881: <hr>
882: <a href="index.html"><img src=back.gif border=0 alt=OpenBSD></a>
883: <a href=mailto:www@openbsd.org>www@openbsd.org</a>
1.156 ! deraadt 884: <br><small>$OpenBSD: plus.html,v 1.155 1997/12/10 11:08:20 deraadt Exp $</small>
1.14 deraadt 885:
886: </body>
887: </html>
![[BACK]](/icons/back.gif){kind=icon}
Return to plus.html CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / www