Return to BSD News archive
Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!solace!eru.mt.luth.se!bloom-beacon.mit.edu!news.kei.com!newsfeed.internetmci.com!info.ucla.edu!nnrp.info.ucla.edu!agate!theos.com!deraadt From: deraadt@theos.com (Theo de Raadt) Newsgroups: comp.unix.bsd.netbsd.misc Subject: List of OpenBSD changes Date: 08 Aug 1996 20:42:08 GMT Organization: Theo Ports Kernels For Fun And Profit, Inc. Lines: 74 Message-ID: <DERAADT.96Aug8144209@zeus.theos.com> NNTP-Posting-Host: zeus.theos.com Here's a list of machine-independent changes that OpenBSD has done of late. All NetBSD-current changes have been merged in. As well, many (if not most) FreeBSD userland changes have been merged in too. This list is updated and maintained on the main OpenBSD web page at http://www.OpenBSD.org The machine-dependent changes are maintained on the per-port pages, for example the i386 change list is maintained at http://www.OpenBSD.org/i386.html For brevity, these lists contain only MAJOR changes. There isn't any point in listing the 100+ buffer overflows in setuid programs which we've fixed... ---- Many many NetBSD PR's fixed (which NetBSD has not yet fixed) New curses library, including libform, libpanel and libmenu. a termlib library which understands termcap.db, needed for new curses. The FreeBSD ports subsystem was integrated and is usable by you! ipfilter for filtering dangerous packets better ELF support nlist() that understands ELF, ECOFF, and a.out, allowing non-a.out ports to use kvm utilies Verbatim integration of the GNU tools (using a wrapper Makefile) All the pieces needed for cross compilation are in the source tree. Some LKM support in the tree. ATAPI support (should work on all ISA busses) new scsi, md5, pkg_* commands Numerous security related fixes Kerberos and other crypto in the source tree that is exportable Solid YP master, server, and client capabilities. /dev/rnd -- source of random data In-kernel update(8) with an adaptive algorithm Some ddb improvements and extensions Numerous scsi fixes new system calls: rfork(), minherit(), poll(). select() that can handle any amount of file descriptors. kernfs extensions ATM support (support for one company's sparc & i386 cards available) Boot kernels with "-c" to edit/enable/disable device configuration tables pax as tar, gnutar is toast using AT&T awk, gawk is toast Even more security fixes. Accepts FreeBSD MD5 passwords in password maps, soon will be able to generate them too Linux ext2fs and BSD4.4 LFS support being worked on. Working ATAPI audio (and data) support for multiple architectures. terminfo database support. Fortran in the tree. The most secure rdist support anywhere. randomized port allocation in bind(), bindresvport(), and rresvport() -- security via unpredictability. Protection from the udp spamming and ftp bounce attacks. Significantly improved ftp daemon. Numerous more security policy and implimentation improvements (OpenBSD defaults to installing in a very secure mode) zlib (non-GPL'd gzip-compatible library) Newest version of ppp, vi, _POSIX_SAVED_IDS behaviour with permitted BSD extensions. Fixed long-standing vm swap-leak. FreeBSD malloc() that uses mmap() and is able to free unused memory. Numerous FreeBSD userland fixes and improvements incorporated. new rdisc Router Discovery daemon generic protection against the bind() takeover problem. at -f security fix. install now supports -C, -p, and -S flags. a real adduser program, which can even be used uninteractively. Like C2, lose setuid/setgid bits if owner/group changed by chown(). This is attached to a sysctl. partial protection against tcp SYN attacks. -- This space not left unintentionally unblank. deraadt@theos.com