Annotation of www/plus21.html, Revision 1.40
1.17 naddy 1: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
1.1 deraadt 2: <html>
3: <head>
4: <title>OpenBSD 2.1 changes</title>
1.17 naddy 5: <link rev=made href="mailto:www@openbsd.org">
1.1 deraadt 6: <meta name="resource-type" content="document">
7: <meta name="description" content="the main OpenBSD page">
8: <meta name="keywords" content="openbsd,main">
9: <meta name="distribution" content="global">
10: <meta name="copyright" content="This document copyright 1996 by OpenBSD.">
11: </head>
12:
1.20 david 13: <body bgcolor="#ffffff" text="#000000" link="#23238E">
1.1 deraadt 14:
1.14 jsyn 15: <a href="index.html"><img alt="[OpenBSD]" height="30" width="141" src="images/smalltitle.gif" border="0"></a>
1.1 deraadt 16: <p>
1.17 naddy 17: <h2><font color="#e00000">Changes made between OpenBSD 2.0 and OpenBSD 2.1</font></h2>
18: <hr>
1.1 deraadt 19:
20: <p>
21: This is a partial list of the major machine independent changes
1.35 sobrado 22: (i.e., these are the changes people ask about most often). Machine
1.1 deraadt 23: specific changes have also been made, and are sometimes mentioned
1.35 sobrado 24: in the pages for the specific <a href=plat.html>platforms</a> if you
1.1 deraadt 25: are interested in further port-specific details. Many ports
26: have had architecture-specific enhancements relative to NetBSD,
27: but when they do not they certainly have plenty of platform-independent
28: changes, starting with those listed below..
29:
30: <p>
1.17 naddy 31: Note: <font color="#e00000">Problems for which patches exist are marked in red</font>.
1.1 deraadt 32:
33: <p>
34: <h3>
1.16 deraadt 35: For changes in other releases, click below:<br>
36: <a href="plus20.html">2.0</a>,
37: <a href="plus22.html">2.2</a>,
38: <a href="plus23.html">2.3</a>,
39: <a href="plus24.html">2.4</a>,
40: <a href="plus25.html">2.5</a>,
41: <a href="plus26.html">2.6</a>,
42: <a href="plus27.html">2.7</a>,
43: <a href="plus28.html">2.8</a>,
44: <a href="plus29.html">2.9</a>,
45: <a href="plus30.html">3.0</a>,
46: <a href="plus31.html">3.1</a>,
47: <a href="plus32.html">3.2</a>,
1.18 deraadt 48: <a href="plus33.html">3.3</a>,
1.19 david 49: <a href="plus34.html">3.4</a>,
1.22 deraadt 50: <a href="plus35.html">3.5</a>,
1.23 miod 51: <a href="plus36.html">3.6</a>,
1.34 deraadt 52: <br>
1.24 deraadt 53: <a href="plus37.html">3.7</a>,
1.26 deraadt 54: <a href="plus38.html">3.8</a>,
1.28 deraadt 55: <a href="plus39.html">3.9</a>,
1.29 deraadt 56: <a href="plus40.html">4.0</a>,
1.30 deraadt 57: <a href="plus41.html">4.1</a>,
1.31 deraadt 58: <a href="plus42.html">4.2</a>,
1.33 deraadt 59: <a href="plus43.html">4.3</a>,
1.34 deraadt 60: <a href="plus44.html">4.4</a>,
1.36 deraadt 61: <a href="plus45.html">4.5</a>,
1.37 deraadt 62: <a href="plus46.html">4.6</a>,
1.38 deraadt 63: <a href="plus47.html">4.7</a>,
1.39 deraadt 64: <a href="plus48.html">4.8</a>,
1.40 ! deraadt 65: <a href="plus49.html">4.9</a>,
1.16 deraadt 66: <a href="plus.html">current</a>.
1.1 deraadt 67: <br>
68: </h3>
69:
70: <hr>
71:
1.17 naddy 72: <h3><font color="#0000e0">OpenBSD 2.1 released (July 2, 1997).</font></h3><p>
1.1 deraadt 73: <ul>
74: <li>Fix keyboard and delay timing in i386 bootfloppy bootblocks. Whee!
75: <li>Added gzip and cdrom support to the sparc and alpha bootblocks.
76: <li>Support crunch on arc (for bootable installs).
77: <li>Repaired install stuff for most architectures significantly, improving ftp/http installs, single bootable install floppies, and in some cases CDROM booting. Most floppies contain vi, too.
78: <li>The vnd(4) device has a new safer mode of operation called svnd where you can trust a disk-image right after it's unmounted, i.e. cache-coherency.
79: <li>sleep(3) and usleep(3) now call nanosleep(2) for significantly less overhead.
80: <li>GNU Groff 1.10 with (improved) Makefile wrapper.
81: <li>A bit more man page cleanup starting to happen...
1.21 deraadt 82: <li>Split rc.local, creating rc.securelevel. (Securelevels look like a worse and worse idea every month.)
1.1 deraadt 83: <li>newfs_msdos(8) can has enough brains to find the partition size itself.
84: <li>Significantly improved the unpredictability of the DNS packet id's in the resolver and named.
85: <li>libpthread works on the m68k.
86: <li>Support for PCI NE2000 clones.
87: <li>Some more userland 64 bit fixes.
1.5 rohee 88: <li>Unify naming of architecture names between gcc & binutils.
1.1 deraadt 89: <li>Signal handling fix to crontab(1).
90: <li>Various fixes to the YP utilities.
91: <li>Support extended partitions in fdisk(8).
92: <li>Support /etc/rc.shutdown from halt(8).
93: <li>PCI aic7860 scsi support improved.
94: <li>Support .group entries in /etc/passwd.conf
95: <li>Repair some bugs in mail(1), especially regarding signal handling.
1.5 rohee 96: <li>Always skip the first 8KB of all swap partitions (hint: disklabels & bootblocks)
1.1 deraadt 97: <li>The df(1) utility now has a human-readable "-h" option.
98: <li>For the first time ever, an obj@ populated /usr/src tree compiles cleanly when mounted read-only.
99: <li>Various man page fixes.
100: <li>NAT now gets started from /etc/netstart.
101: <li>Fix AFS string-to-key handling in kerberos.
102: <li>Correct DEV_BSIZE and lp->d_secsize confusion throughout the source tree. CD9660 is much happier now.
103: <li>Use in_addr_t and in_port_t all over the place.
104: <li>For config(8), if any kernel options get added/deleted/changed since the previous commit, warn that the compile tree needs 'make clean'.
1.25 david 105: <li>Make real i386 CPUs work again. In case no one noticed, they didn't work for about 5 months. The bug was very hard to find...
1.1 deraadt 106: <li>Once again, really correct the various source routing pieces of the userland source tree.
107: <li>A whole bunch of 64 bit fixes in the source tree (hint: alpha).
108: <li>Fix patch to honour Index lines better.
109: <li>Solve a few resolver problems after the recent 4.9.5-P1 integration, not all our fault.
110: <li>Use 10 X characters in many remaining mktemp() calls which are hard to excise.
111: <li>getnetent() and friends now work a lot more like gethostent().
112: <li>More buffer overflows, but none in sensitive programs.
113: <li>Fixed some more mktemp races (sigh, will this ever end!)
114: <li>Add support for YP v1 to ypserv.
1.5 rohee 115: <li>Add md5 & blowfish passwd support to adduser(8).
1.1 deraadt 116: <li>Numerous more pax/tar fixes.
117: <li>Add ./.message support to ftpd
118: <li>16 partition support for the alpha port.
119: <li>cvs 1.9.6
120: <li>64 bit clean in.rarpd.
121: <li>Change mail.local -H behaviour slightly, and convince mail(1) to use it for correct locking!
122: <li>New termcap and terminfo database files.
123: <li>Be more careful about modes of lost+found directories.
124: <li>Implement NOFILE_MAX--hard limit on max descriptors per process.
125: <li>gcc no longer defines -D__NetBSD__, only -D__OpenBSD__ now!
126: <li>sysctl kern.osrevision gives OpenBSD date.
127: <li>A few ypbind fixes.
128: <li>Fixes to fts(3).
129: <li>ddb improvements for 64 bit machines.
130: <li>The NE2000 if_ed driver now works on the alpha, too.
131: <li>Various atm fixes.
132: <li>Support for "secure" YP password maps.
133: <li>Substantial changes and fixes to the scsi scanner support.
134: <li>noaccesstime option for filesystems (saves batteries on laptops)
135: <li>Bye bye tahoe bits.
136: <li>pccon(1) to control the pccons driver.
137: <li>Merged changes from at 2.9 into our own at.
138: <li>Fix pcmcia on the i386.
139: <li>ipsecadm as an initial cut at controlling IPSEC sessions.
140: <li>Various fixes to the fsck tools.
141: <li>Let fsck and fsirand automatically work on very large filesystems.
142: <li>Numerous improvements to pax, including full support for cpio and a lot of fixes to tar mode.
143: <li>Import of libwrap and tcpd (tcp wrappers).
144: <li>Import of the mvme88k kernel port.
145: <li>Add support for FreeBSD md5 to /etc/passwd.conf.
146: <li>BIND 4.9.5-P1.
147: <li>deroff(1) 1.0 from Debian (a Linux).
1.32 tobias 148: <li>settimeofday(2) won't roll back the date if securelevel > 0 (from lite2).
1.1 deraadt 149: <li>newfs(8) now has an inline fsirand(8) with no noticable speed decrease.
150: <li>Replace which(1) with a C program.
151: <li>libg++ pulls in libcurses automatically.
152: <li>Fix weak symbol support in ld.
153: <li>cvs 1.9.2
154: <li>IPSEC package from John Ioannidis and Angelos D. Keromytis.
155: <li>Working kadmind for kerberosIV.
156: <li>Add support for /etc/passwd.conf which controls the format and strength of passwd entries for the next time a user changes their password. These options can be set per-user.
157: <li>New scalable BLOWFISH-based crypt algorithm for passwd file entries. It uses a very large strong-random `salt' and the number of rotor runs is configurable. Hence if you have faster machines you can slow the crypt routine down and make harder keys.
158: <li>fix some more memory and file descriptor leaks in libc/rpc
159: <li>Fix so that stack limits which are not a multiple of the pagesize work.
160: <li>Fix a few netinet kernel crash problems.
1.5 rohee 161: <li>Fix pax & tar to be POSIX compliant.
1.1 deraadt 162: <li>add RPC service name generation to netstat -a
163: <li>Make dd(1) work fine with our 64-bit off_t types, now you can copy very large disks using it.
164: <li>Improved NFS filehandle creation.
165: <li>Use lots more XXXX characters in calls to the few remaining mktemp() calls in the source tree. This cuts out a whole class of races.
166: <li>IPF 3.1.7 which includes fully working NAT support (ie. IP masquerading).
167: <li>The <a href="hp300.html">hp300</a> joins many other ports in supporting 16 disk partitions.
168: <li>Have libc/rpc save you from yourself if you do enable source routing.
169: <li>Change mktemp(3) and family to generate more random filenames, yet still as collision free as possible.
170: <li>Merge new ftp(1) changes from NetBSD.
171: <li>Add cdev and partition support to the ramdisk driver.
172: <li>New wgrisc port for Willowglen embedded r3081-based machine with ISA slots.
173: <li>Support for gzip'd kernels in some bootblocks.
174: <li>Be more careful if some fool decides to enable source routing ;-)
175: <li>Added RFC-1812 ICMP unreachable codes to ip_icmp.h, traceroute, and ping.
176: <li>/sbin/dump -a saves you from needing to deal with finicky tape length options (from FreeBSD)
177: <li>config.old(8) has been removed from the tree, as the <a href="hp300.html"> hp300</a> port switches to config(8).
178: <li>A SA_SIGINFO implementation for sigaction() and signal handlers. This is a small part of POSIX 1003.1b and permits the signal handler to figure out the exact cause of a signal; such as fault address information for SIGSEGV or more detailed information for SIGFPE.
1.2 deraadt 179: <li>The <a href="alpha.html">Alpha</a> port and all its utilities now compiles using in-tree versions of all tools. Yipee!
1.1 deraadt 180: <li>amd (the automounter) is now 64-bit and working on the alpha.
181: <li>Changed netinet IP_HDRINCL option to require ip_len and ip_off in network byte order. This is a compatibility/portability fix and we expect other BSD systems to eventually follow suit.
1.32 tobias 182: <li>Bug fixed that prevented bufpages/nbuf > 1 setups. This allows large buffer caches even when available kvm space is low, like for i386 & sparc.
1.1 deraadt 183: <li>Some ypbind(8) tightening up, includes a method to specify a list of valid servers
1.27 miod 184: <li>Completely in-tree <a href="powerpc.html">PowerPC</a> port for non-Apple hardware. This port requires nothing outside the in-tree development environment to build (except mkisofs for building distributions).
1.1 deraadt 185: <li>A working fsirand.
186: <li>More kerberosIV security patches.
187: <li>Repair many uses of the SIOCGIFCONF code for machines with an outrageous number of network interfaces.
188: <li>pax in tar mode will understand multiple -v options to generate ls-like output.
189: <li>Prevent stat() from disclosing inode generation numbers to non-root userland.
190: <li>various adjtime() corrections inside the kernel.
191: <li>No buffer lengths in fmt(1).
192: <li>Support lchown(2) in dump(8), cp(1), pax(1), cpio(1), chown(8), and restore(8).
193: <li>New gnu cpio 2.4.2
194: <li>Added lchown(2) for compatibility with SVR4 implementations.
195: <li>Sendmail upgraded to version 8.8.5.
196: <li>Upgrade of awk(1), integration of BSD tsort(1), getopt fixes.
197: <li>Support for the <a href="hp300.html">hp300</a> added.
198: <li>Fix a fairly nasty security hole in all of the games.
199: <li>new aucat command.
200: <li>libcrypt goes away. We do not need this stub library anymore. Do not link against it on OpenBSD, all the pieces you need are in libc.
201: <li>ppp 2.3b3
202: <li>Permit building of kernels without a.out support.
203: <li>Properly use _POSIX_SAVED_IDS throughout the source tree.
204: <li>Import of the powerpc port.
205: <li>Change the games to be run setgid games, not setuid games. This closes a whole slew of fascinating security holes.
206: <li>Add disklabels to the vnd device driver.
207: <li>Properly split fsck, mount, and newfs into multiple pieces. Use disklabel information if it is available.
208: <li>Permit NFS attribute cache to be configured on a per-mount basis.
209: <li>Add XCASE/IUCLC/OLCUC/OCRNL/ONOCR/ONLRET tty subsystem flags for backwards compatibility.
210: <li>Repair some more KerberosIV buffer overflows. Hard to believe this is supposed to be security software.
211: <li>f77 0.5.19
212: <li>texinfo 3.9
213: <li>sendmail 8.8.4
214: <li>Fix a few setgroups() related security holes.
215: <li>Add NetBSD's "route show" implementation, and at the same time fix the new buffer overflows that this provided.
216: <li>Fix information gathering attack in ping(8).
217: <li>tcpdump 3.3
218: <li>If disklabel reading code discovers an ISOFS filesystem underlying, spoof a nice disklabel (enough to fool mountroot).
219: <li>At boottime, have (*mountroot)() look at the root device's disklabel to determine which filesystem type is to be mounted.
220: <li>Add disklabels to the floppy device drivers.
221: <li>Multiple updates for GNU software
222: <li>Hundreds of little fixes all over the place.
223: <li>Some YP and bootparamd security changes.
224: <li>Add FreeBSD md5 diffs to mtree(8). This can be used to implement a tripwire-like system.
225: <li>GNU gdb works on the mips-based platforms.
226: <li>Imported FreeBSD's calendar.
227: <li>Increased compatibility in the pccons driver with BSDi features.
228: <li>Added -C option to pax/tar. Also made -z support compressed files too.
229: <li>Prevent generic users from mounting filesystems by default.
230: <li>Use pdksh as our /bin/sh. This provides excellent POSIX compliance.
231: <li>Numerous small security fixes again...
232: <li>com driver is now bus-independent.
233: <li>lpt driver is now bus-independent.
234: <li>The Arc port family has a new member: The rPC44 works!
235: <li>New bsd.*.mk feature: DEBUG=-g. Try it, you'll like it.
236: <li>pdksh version is now 5.2.11
1.10 jsyn 237: <li>Make login get more consistently upset about failed logins, and tell user about these failures at the next successful login.
1.1 deraadt 238: <li>Memory leak paranoia in cron.
239: <li>Numerous more difficult-to-exploit-but-possible-if-someone-really-wanted-to buffer overflows found in system utilities..
240: <li>Various repairs to the scsi scanner support.
241: <li>Import of ctm.
242: <li>Integration of the pmax port.
243: <li>Beware $HOME overflows throughout the source tree.
244: <li>OLF binary type added. This is like ELF, but includes an OS-dependent tag. elf2olf(1) converts an elf binary to a tagged OLF binary which the kernel can recognize correctly.
245: <li>In numerous utilities: prefer $LOGNAME, but also accept $USER.
246: <li>The NIST suite showed numerous errors in libraries and the kernel. Only a few small errors remain now, mostly regarding serial ports.
247: <li>More ftpd raging paranoia security fixes.
248: <li>Numerous fixes to the lpr suite, including security.
1.10 jsyn 249: <li>Crank kvm space on the i386 port, also limit buffer cache usage so that 512MB machines may work (untested :-)
1.1 deraadt 250: <li>GPL i387 emulator added.
251: <li>Skey revamped into full OTP (RFC1938) support, including sha1 and md5 support.
252: <li>Add stack tracebacks to Arc port's kernel debugger.
253: <li>The /dev/*random devices are now default on all architectures.
254: <li>A number of security fixes to the way coredumping works.
255: <li>upgrade to CVS version 1.9.
256: <li>The NIST Posix test suite became free. As a result we have been correcting numerous problems in the source tree, and expect to be completely POSIX compliant very soon.
257: </ul>
258: <p>
259:
260: This list mentions mostly platform-independent changes. For a list of changes
261: made in a particular platform, please check the page for that platform. If you
262: find them not listed there, the changes are either (1) not being documented or
263: (2) are documented here.<br><br>
264:
265: <hr>
266: <p>
267: <h3>
1.16 deraadt 268: For changes in other releases, click below:<br>
269: <a href="plus20.html">2.0</a>,
270: <a href="plus22.html">2.2</a>,
271: <a href="plus23.html">2.3</a>,
272: <a href="plus24.html">2.4</a>,
273: <a href="plus25.html">2.5</a>,
274: <a href="plus26.html">2.6</a>,
275: <a href="plus27.html">2.7</a>,
276: <a href="plus28.html">2.8</a>,
277: <a href="plus29.html">2.9</a>,
278: <a href="plus30.html">3.0</a>,
279: <a href="plus31.html">3.1</a>,
280: <a href="plus32.html">3.2</a>,
1.18 deraadt 281: <a href="plus33.html">3.3</a>,
1.19 david 282: <a href="plus34.html">3.4</a>,
1.22 deraadt 283: <a href="plus35.html">3.5</a>,
1.23 miod 284: <a href="plus36.html">3.6</a>,
1.34 deraadt 285: <br>
1.24 deraadt 286: <a href="plus37.html">3.7</a>,
1.26 deraadt 287: <a href="plus38.html">3.8</a>,
1.28 deraadt 288: <a href="plus39.html">3.9</a>,
1.29 deraadt 289: <a href="plus40.html">4.0</a>,
1.30 deraadt 290: <a href="plus41.html">4.1</a>,
1.31 deraadt 291: <a href="plus42.html">4.2</a>,
1.33 deraadt 292: <a href="plus43.html">4.3</a>,
1.34 deraadt 293: <a href="plus44.html">4.4</a>,
1.36 deraadt 294: <a href="plus45.html">4.5</a>,
1.37 deraadt 295: <a href="plus46.html">4.6</a>,
1.38 deraadt 296: <a href="plus47.html">4.7</a>,
1.39 deraadt 297: <a href="plus48.html">4.8</a>,
1.40 ! deraadt 298: <a href="plus49.html">4.9</a>,
1.16 deraadt 299: <a href="plus.html">current</a>.
1.1 deraadt 300: <br>
301: </h3>
302:
303: <hr>
304: <a href="index.html"><img height=24 width=24 src=back.gif border=0 alt=OpenBSD></a>
1.17 naddy 305: <a href="mailto:www@openbsd.org">www@openbsd.org</a>
1.40 ! deraadt 306: <br><small>$OpenBSD: plus21.html,v 1.39 2010/08/31 01:34:13 deraadt Exp $</small>
1.1 deraadt 307:
308: </body>
309: </html>