Unix操作系統 OpenBSD 5.0 正式版發布下載
OpenBSD是一個從NetBSD衍生出來的類Unix操作系統。專案領導人Theo de Raadt在1995年]發起了OpenBSD專案,希望創造一個注重安全的操作系統,此外OpenBSD也以高品質的文件、堅持開放程式碼以及嚴格的軟 件授權著名。OpenBSD的吉祥物是河豚。
OpenBSD 5.0 發布了,該版本改進了硬件支持、網絡堆棧支持、路由守護進程以及其他用戶級別的網絡,改進對 SCSI 的支持,更新 OpenSSH 到 5.9 等等,詳細內容請看
發行說明。
下載 OpenBSD 5.0 :
i386/install50.iso (219MB, SHA256)
amd64/install50.iso (233MB, SHA256).
This is a partial list of new features and systems included in OpenBSD 5.0. For a comprehensive list, see the changelog leading to 5.0.
- Improved hardware support, including:
- MSI interrupts for many devices, on those architectures which can support them (amd64, i386, sparc64 only so far).
- A new dma_alloc(9) API makes it easier for kernel code to allocate dma-safe memory. Many drivers (especially network drivers) and subsystems (in particular scsi and the buffer cache) were adapted to use this.
- As a result, big-memory support has been enabled on all possible architectures.
- The rather rare bce(4) driver now copies mbufs all the time, to cope with the hardware having a 1GB limit.
- Added hds(4), a driver for Hitachi Modular Storage SCSI devices.
- Added myx(4), a driver for the Myricom Myri-10G 10GB Ethernet devices.
- Added dfs(4), a driver for Dynamic Frequency Switching on some macppc systems.
- cardbus(4) and pcmcia(4) support on sgi.
- Suspend/resume support on Loongson Yeelong laptops.
- Generic network stack improvements:
- Added support for sending Wake on Lan packets using arp(8).
- Permit turning Wake on Lan support on/off using ifconfig(8).
- Added Wake on Lan support to xl(4), re(4), and vr(4).
- Allow ftp-proxy(8) to proxy across rdomains.
- The IPv4 stack will no longer accept ICMP redirects when acting as a router.
- By default the IPv6 stack will not process ICMP6 redirects. rtsol(8) will turn it back if -F is used.
- Reworked large parts of the dhclient(8) options processing for better interoperability.
- Fixed carp(4) to work in IPv6 only setups.
- Make it possible to bind(2) to the local network broadcast address on datagram and raw sockets.
- The default multicast reject route is now ignored if the UDP socket uses the IP_MULTICAST_IF socket option.
- Make gre(4) work between systems in the same LAN.
- Removed the link1 mode special addressing mode on lo(4).
- Kernel randomization speed and quality improved substantially. </ul> </li>
- Routing daemons and other userland network improvements:
- bgpd(8) no longer bumps the rlimits: the rc.d framework respects login classes which is a much better solution.
- Correctly set the network filtersets on reload in bgpd(8).
- The routing socket is now sending RTM_DESYNC messages if the socketbuffer overflows.
- Allow ospfd(8) to send out LS updates and other messages larger than the MTU.
- Fixed nexthop calculation in ospfd(8) for directly connected P2P links.
- First bits to support opaque LSA in ospfd(8). Only basic redistribute logic and LSDB handling for now.
- Creating new interfaces will no longer cause a fatal error in ospf6d(8).
- ospf6d(8) handles link-state changes better.
- Better loopback handling in ospf6d(8).
- No longer install extra multicast routes in ripd(8) and ldpd(8).
- Make kqueue(2) work with sosplice(9).
- Enabled sosplice(9) in relayd(8) for TCP.
- Added support for divert-to which provides some benefits over rdr-to in relayd(8).
- Fixed trap sending in snmpd(8).
- Make ping6(8) compare minimum amount of bytes between what was received and what was sent out.
- Make traceroute(8) with type-of-service setted (-t) display a message if the returned packet has a different tos type.
- Added the socket splicing fields of struct socket to netstat -vP output. </ul> </li>
- pf(4) improvements:
- Make pf(4) reassemble IPv6 fragments. In the forward case, pf refragments the packets with the same maximum size.
- Allow pf(4) to filter on the rdomain a packet belongs to.
- Make pf(4) allow userland proxies to establish cross rdomain proxy sessions.
- Added IPv6 ACK prioritization in pf(4).
- Change 'set skip on <...>' to work with interface groups.
- pfsync(4) supports IPv6 as network protocol.
- Switched ftp-proxy(8) over to divert-to instead of rdr-to.
- tftp-proxy(8) uses 'divert-to' as well. </ul> </li>
- SCSI improvements:
- most SCSI hardware drivers now use the new iopools infrastructure.
- scsi(4) devices are now all provided with a unique devid, which is displayed during the probe process.
- ASC/ASCQ error codes and verbiage now in sync with http://www.t10.org/lists/asc-num.txt.
- progress on iSCSI includes better login, better logout, preliminary FSM support in iscsid(8), and improved logging and debug information.
- uk(4) can now safely and reliably detach an unknown SCSI device.
- mpath(4) device and kernel support is improved.
- vscsi(4) now ensures output always goes to the correct connection.
- vscsi(4) connections can now be reset gracefully.
- scsi(4) devices on fibre channel fabrics no longer inherit the adapter's address. </ul> </li>
- Assorted improvements:
- For additional security, security(8) was rewritten in Perl.
- Mandoc 1.11.4: Now accepts eqn(7) input (no fancy formatting yet) and supports -Tutf8 output (but no utf8 input yet).
- Removed a variety of OS-compat emulation code, leaving just the Linux support.
- Small improvements to Linux compat (only available on i386).
- Improved our own pkg-config(1) implementation with extended comparison scheme and implementing various new options.
- The math library, libm, was fully fleshed out to support all C99 required parts. Many bugs for various architectures were fixed along the way.
- malloc(3) is a lot faster and has a few further security features (more randomization, as well as the 'S' flag to enable all paranoia checks).
- 'make depend' is no longer neccessary in kernel compilation directories since the dependencies are calculated automatically.
- Increased the default size of the buffer cache.
- kqueue(2) now works on /dev/random and spliced sockets
- On MBR-based disks, scan through up to 256 extended partition tables when looking for an OpenBSD partition table.
- Added POSIX 2008 fdopendir(3) and openat(2) functions, as well as the O_CLOEXEC, O_DIRECTORY, and F_DUPFD_CLOEXEC flags.
- Improved lint format string checks and added a few other checks.
- kdump(1) now dumps stat and sockaddr structures, sysctl mib strings, and decodes syscall flags and operation bits.
- Improved kernel pool debug checking.
- Improved correctness of signals and various syscalls when rthreads are in use.
- Kernel malloc(9) space and stacks moved to non-dma memory.
- Fixed some shutdown/reboot hangs on NFS clients.
- UNIX-domain socket paths are now guaranteed to be NUL-terminated.
- Added support for *wprintf(3), wcs{,n}casecmp(3), and wcsdup(3).
- NULL is now a (void *). </ul> </li>
- Install/Upgrade process changes:
- Completed support for DUID disk installs, and enabled it fully.
- Tried to make sysmerge(8) work in the installer, but ran into small problems and decided to disable it.
- Install non-free firmwares from the internet upon first boot, based on a question in the installer.
- svnd(4)-like behaviour became the default for vnd(4) devices. This is what is used to build the media. </ul> </li>
- rc.d(8) framework improvements:
- rc.d(8) is now also used for the base system daemons.
- Backward compatible with the historic way of starting daemons.
- Notify the user by appending (ok) or (failed) in interactive mode.
- Better diagnostics with the introduction of RC_DEBUG. </ul> </li> </ul>
本文由用戶 fmms 自行上傳分享,僅供網友學習交流。所有權歸原作者,若您的權利被侵害,請聯系管理員。轉載本站原創文章,請注明出處,并保留原始鏈接、圖片水印。本站是一個以用戶分享為主的開源技術平臺,歡迎各類分享!