ViewVC Help
View File | Revision Log | Show Annotations | Revision Graph | Download File | Root Listing
root/midnightbsd-cvs/src/UPDATING
Revision: 1.94
Committed: Thu Sep 2 12:58:27 2010 UTC (13 years, 8 months ago) by laffer1
Branch: MAIN
CVS Tags: RELENG_0_3_BP
Branch point for: RELENG_0_3
Changes since 1.93: +6 -1 lines
Log Message:
Document security update.

File Contents

# User Rev Content
1 laffer1 1.3 Updating Information for MidnightBSD users
2 laffer1 1.1
3 laffer1 1.94 20100902:
4     Fix a security issue with libutil that allows users to bypass cpu limits in
5     login.conf in some cases. This combined with OpenSSH for example can allow
6     the user to get more resources than they're allowed.
7    
8 laffer1 1.93 20100822:
9     Import Apple's mDNSResponder (mdnsd).
10    
11 laffer1 1.92 20100814:
12     libdispatch added to MidnightBSD. This provides functionality found in
13     Mac OS X's GCD. We do not have blocks support yet. As this code is
14     licensed under Apache 2, we create a new MK_APACHE option so that
15     it's not required for all users to run code under a license they
16     may not like.
17    
18 laffer1 1.91 20100713:
19     mbuf readonly fix related to sendfile(2) data corruption.
20    
21 laffer1 1.90 20100704:
22     brainfuck(1) imported from MirBSD.
23    
24 laffer1 1.89 20100505:
25     zlib 1.2.5
26    
27 laffer1 1.88 20100430:
28     Sudo 1.7.2p6 imported
29    
30 laffer1 1.87 20100321:
31     Update zlib to 1.2.4
32    
33 laffer1 1.86 20100319:
34     Removed i586 from default i386 generic kernel.
35    
36 laffer1 1.85 20100317:
37     Update to tzdata2010e (time zones). This includes changes in
38     Mexico.
39    
40     Add support for several newer sound cards via hda including
41     ATI and Realtek chipsets.
42    
43 laffer1 1.84 20100313:
44     CPU detection has been changed. VIA Padlock detection added.
45    
46     20100312:
47     Fix a number of bugs and compiler warnings in libmport. Handle
48     plus signs in paths for mport.check-fake
49    
50 laffer1 1.83 20100311:
51     mksh R39c
52    
53 laffer1 1.81 20100309:
54     Sudo 1.7.2p5
55    
56 laffer1 1.82 sqlite3 3.6.23
57    
58     mksh R39b
59    
60     libffi (ffi) 3.0.9
61    
62 laffer1 1.81 20100206:
63 laffer1 1.80 WITHOUT_LIB32 is no longer needed on AMD64. GCC was fixed to
64     properly pass arguments to ld.
65    
66     re(4) and rl(4) have been updated to support several new
67     realtek chipsets. Performance has been improved on re(4).
68    
69 laffer1 1.79 20100204:
70     Fix a bug cropping up on AMD64 MidnightBSD with sftp
71     segfaulting.
72    
73 laffer1 1.78 20100116:
74     Import ash changes from FreeBSD (bin/sh) 8-Stable.
75    
76     BIND 9.6.1-P2
77    
78 laffer1 1.76 20100110:
79 laffer1 1.78 Import Sendmail 8.14.4. Fix for SSL vulnerability.
80 laffer1 1.77
81 laffer1 1.76 posix_spawn(3) added to MidnightBSD libc. Users may need to build and
82     install libc before doing a full buildworld when upating from 0.2 or
83     older current systems.
84    
85     kqueue(2) was modified to support portions of libdispatch functionality.
86    
87 laffer1 1.75 20100106:
88     Bind security update. Fix a bug with DNSSEC that causes negative
89     cache entries and thus a possible DNS cache poisoning attack.
90    
91     Fix a bug in ZFS that can reset permissions on system crashes.
92    
93 laffer1 1.74 20091228:
94     amdtemp(4) was added. It allows one to monitor to the temperature
95     of an AMD CPU such as a Phenom.
96    
97 laffer1 1.73 20091205:
98     OpenSSL security fix
99    
100     The SSL version 3 and TLS protocols support session renegotiation without
101     cryptographically tying the new session parameters to the old parameters.
102    
103     20091128:
104 laffer1 1.72 OpenBSD sensors framework imported including sensorsd(8)
105    
106 laffer1 1.73 20091126:
107 laffer1 1.71 OpenNTPD 4.4 import
108    
109 laffer1 1.70 Update OpenSSH to 5.3p1
110    
111     mksh R39
112    
113 laffer1 1.73 20091124:
114 laffer1 1.69 cpdup updated from DragonFly to 1.15
115    
116     tzdata2009s updated with latest timezone data for November 2009.
117    
118 laffer1 1.68 20091010:
119     amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
120     to test current.
121    
122     Revert unicode filename fixes from ntfs code. This was causing chaos
123     on amd64 systems.
124    
125 laffer1 1.67 20091006:
126     Update timezone data with tzdata2009n with the Pakistan and
127     Argentina changes.
128    
129     Sync several userland utilities with versions from FreeBSD 7.0 in
130     sbin and usr.sbin.
131    
132 laffer1 1.66 20090919:
133     Update timezone data with tzdate2009m from September 2009.
134    
135 laffer1 1.65 20090729:
136     Patch for Bind 9 security vulnerability. a dynmaic update packet
137     can trigger an assertion and cause named to exit
138    
139 laffer1 1.64 20090606:
140     Remove PCC from the base system. This compiler will not work
141     as a system compiler for us as we've got some userland investment
142     in C++ code and may have Objective-C in the future. We're stuck
143     with a solution that supports these three languages at a minimum.
144    
145     I had wanted to keep it as an optional compiler because it is
146     fast, however too many users want to try to use it for the base
147     system which makes no sense.
148    
149     A hack was added for Cypress based usb hard drive enclosures to
150     the kernel. This should cut down on commands it claims to support
151     but does not (at the cam layer). Found while testing ZFS on
152     an external device.
153    
154 laffer1 1.63 20090520:
155     The powerd daemon no longer starts automatically to improve
156     compatibility with many systems. However, there is a new
157     installer option in the startup section to enable it. This
158     makes it easier to enable for users that have working systems. I thought it was only a problem on older hardware, but it freaks
159     out my new Phenom too.
160    
161 laffer1 1.62 20090502:
162     OpenSSH 5.2p1 import
163    
164 laffer1 1.63 ale(4) connected to the build. (kernel module only)
165    
166 laffer1 1.61 20090501:
167     Imported makefs utility from NetBSD/FreeBSD
168    
169 laffer1 1.60 20090422:
170     OpenSSL security update
171    
172     The function ASN1_STRING_print_ex does not properly validate the lengths
173     of BMPString or UniversalString objects before attempting to print them.
174    
175 laffer1 1.59 20090415:
176     Created a Symbol.map for libc/ohash symbols
177    
178     Updated several usr/bin usr/sbin utilities.
179    
180     Corrected a bug with Makefile.inc1 causing the bootstrap
181     tools to fail.
182    
183 laffer1 1.57 20090405:
184     xorg 7.4 wants to configure its input devices via hald which does not
185 laffer1 1.58 yet work with USB. If the keyboard/mouse does not work in xorg then
186 laffer1 1.57 add
187     Option "AllowEmptyInput" "off"
188     to your ServerLayout section. This will cause X to use the configured
189     kbd and mouse sections from your xorg.conf
190    
191     20090403:
192 laffer1 1.56 mksh was disconnected a few day ago do to bugs with
193     buildworld and mports. Now, connect it back
194     for use as /bin/sh with a conditional called
195     MK_ASH. By default, ash is the standard /bin/sh
196     but we may change this later. This will allow further
197     testing by users and developers of mksh without
198     causing an unpleasant default experience. In the
199     long run, we need to fix mksh compatibility.
200    
201 laffer1 1.54 20090328:
202     Bring in mksh R37 from CVS. The dot.mkshrc files for root
203     and skel were changed. mksh(1) now replaces ash aka sh(1)
204     as the default /bin/sh. Please report bugs with
205     ports, etc. The ash code will remain in the repo for awhile
206     as I decide if we'll add something like MK_SHELL_ASH as
207     an optional build parameter.
208    
209     ahd was disconnected from the lint environment until
210     the compiler bug is sorted (by updating gcc?)
211    
212     Remove freebsd-tips from fortune files and change the
213     default for login and profile.
214    
215 laffer1 1.53 20090327:
216     Update libarchive to 2.5.5, tar, and add bsdcpio.
217    
218     Also previously, ctriv has been connecting Perl 5.10
219     to the build (part of os). This will have an impact
220     on mports.
221    
222 laffer1 1.52 20090325:
223     Update Bind to 9.4.3-P1
224    
225     Update mksh to R36b
226    
227     Update tcpdump to 3.9.8, fix libpcap to work with current.
228    
229     Update pnpinfo, sync with FreeBSD.
230    
231 laffer1 1.51 20090115:
232     Fix a problem with DNSSEC and BIND.
233    
234     20090110:
235 laffer1 1.49 For applications using OpenSSL for SSL connections, an invalid SSL
236     certificate may be interpreted as valid. This could for example be
237     used by an attacker to perform a man-in-the-middle attack.
238    
239     Other applications which use the OpenSSL EVP API may similarly be
240     affected.
241    
242 laffer1 1.50 Stop cross site request forgery attacks in lukemftpd
243    
244 laffer1 1.51 20090104:
245 laffer1 1.48 Import GNU libreadline 5.2
246    
247 laffer1 1.51 20090101:
248 laffer1 1.47 Update time zone data to 2008i.
249    
250 laffer1 1.46 20081231:
251     Correct a problem where bluetooth and netgraph sockets are not
252     properly initialized.
253    
254     Happy 2009.
255    
256 laffer1 1.45 20081206:
257     Due to the massive change in the underlying system under way,
258     we're naming the next release 1.0. The sys/sys/param.h was
259     changed accordingly. ipfilter and ncurses were corrected
260     using __MidnightBSD__ tests in the code.
261    
262     The GENERIC kernel config was caught up on i386 today. Consider
263     i386 still broken, but amd64 is running again.
264    
265     mdoc.local was updated with the new MidnightBSD version info.
266    
267     batt(1) was rewritten in C. It now supports several flags and
268     runs about 8 times faster on my laptop. The default output
269     shows the number of minutes of battery life remaining and the
270     percentage. You can use -u to display the number of batteries or
271     -c to get script friendly output. Consult the man page for more.
272    
273 laffer1 1.44 20081204:
274     Work has completed on importing ZFS, jemalloc, several
275     new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
276     support, improved locking for file desc., audit (openbsm),
277     openssl .98e, nfe, imporved intel high def audio, midi, updated
278     intel gigabit (em), support for several wifi cards (intel), ...
279    
280     Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
281     data from param.h instead of the FreeBSD version. This means
282     testing is now possible in the ports tree for the version
283     and that any ports or code relying on the FreeBSD version from
284     sys/sys/param.h will need to be fixed.
285    
286 laffer1 1.43 20080905:
287     update nve(4) to support new hardware.
288    
289 laffer1 1.42 20080801:
290     Import OpenBSM 1.0
291    
292     Modify src/release to create 3 isos instead of 2 for packages.
293    
294     etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
295    
296     Many ia64, alpha, powerpc items were removed.
297    
298     The recent diffutils 2.8.7 import was fixed.
299    
300 laffer1 1.41 20080703:
301     pcc was not installed properly when setting DESTDIR for live cds,
302     or posibly jails.
303    
304 laffer1 1.39 20080627:
305     Add firmware(9), WEP, CCMP, TKIP to GENERIC.
306    
307     Add glabel to GENERIC.
308    
309     Intel ICH8 mobile chipset used on some iMacs included with ata.
310    
311     pcc connected to the build on i386. (alternative compiler)
312    
313 laffer1 1.40 ath added to GENERIC. (Atheros wireless NICs) on amd64/i386
314    
315 laffer1 1.38 20080528:
316     Sendmail 8.14.3
317    
318 laffer1 1.37 20080516:
319     ssh-vulnkey allows you to look for vulnerable ssh keys that
320     were generated on Debian and Ubuntu hosts over the last
321     few years. sshd can block offending keys with a configuration
322     option.
323    
324     The elf note on binaries is now set to MidnightBSD.
325    
326     20080514:
327     Fixed a number of problems with pcc. It is not yet connected
328     to the build, but usable on i386 hosts. You may use it
329     by make; make install in /usr/src/usr.bin/pcc. It will
330     install in /usr/local as some of the files conflict with
331     GCC versions. __MidnightBSD__ is defined in PCC as well.
332    
333     System headers were fixed to allow pcc to compile many binaries
334     on MidnightBSD. bin/cp will work now for instance.
335    
336 laffer1 1.36 20080430:
337     __MidnightBSD__ is now defined via gcc. This can be tested
338     to determine we're running on MidnightBSD in the preprocessor.
339    
340 laffer1 1.35 20080429:
341     Import bind 9.4.2 with threading
342    
343     libpthread (KSE) and libthr are built earlier
344    
345     pcvt(4) removed!
346    
347     Alias added for core2 cpus.
348    
349     Alpha and PC98 only utilities removed from usr/sbin
350    
351     syslogd, adduser, rmuser, mergemaster and mailwrapper have been
352     improved. See the man pages for info.
353    
354     periodic scripts will not send emails with empty message bodies.
355     See mailwrapper fix.
356    
357 laffer1 1.34 20080410:
358     Sync cpdup with DragonFly. Add parallel transaction support and
359     -l flag to line-buffer stdout and stderr.
360    
361 laffer1 1.33 20080406:
362 laffer1 1.34 Import bzip2 1.05
363 laffer1 1.33 Import OpenSSH 4.9p1
364    
365 laffer1 1.32 20080322:
366     The default umask was changed to 022.
367    
368     /usr/X11R6 paths were removed from several config files.
369    
370     .mkshrc files are now installed for root.
371    
372 laffer1 1.31 20080316:
373     FIx a problem with gif0 tunnels and neighbors with IPV6.
374    
375     20080312:
376     Add lndir from X.org. This aides in the porting of MirPorts.
377    
378     New OS versions were added to the mapage code (groff)
379    
380     20080310:
381     Correct a buffer overflow in ppp.
382    
383     20080308:
384     Remove /usr/X11R6 from manpath config.
385    
386     20080307:
387     Atheros driver no longer has several options set
388     which corrects building in tinderbox on all three platforms.
389    
390     Added a new macro to sx.h which returns true if the current
391     thread holds an exclusive lock on a specifix sx.
392    
393     Removed OS/2's HPFS file system. It's not maintained and
394     I don't know anyone using OS/2 or ecomstation these days.
395     My copy is in the closet collecting dust.
396    
397     20080306:
398     Synced tinderbox with FreeBSD. Modified it for MidnightBSD.
399     Developers can now use it to check src builds.
400    
401     20080303:
402     Add mksh to /etc/shells, made some adjustments to options
403     for mksh builds per suggestion upstream.
404    
405     USB HID table updated with modern hardware list.
406    
407     Updated BSD family true (we're not in there yet)
408    
409     iso3166 file updated and import of tzdata2007k for
410     new time zones.
411    
412     Updated mksh to latest version R33.
413    
414     20080228:
415     Remplaced the random IP id generation code with a new
416     version by Amit Klein.
417    
418     20080221:
419     Sendfile write only permissions fix.
420    
421     Removed some HPFS and PC98 code.
422    
423     iso639 file sycned with DragonFly.
424    
425     20080128:
426     Changed NTP configuration so that ips aren't cached
427     so multiple servers are used.
428    
429     Fix an issue with fork() in libpthread.
430    
431     20080121:
432     Add virtualization detection to set the HZ rate
433     according to a VM present. VMWare and Parallels
434     should work better like this.
435    
436     Change to full x11 install in sysinstall. Add
437     xorg 7 support.
438    
439     20080115:
440     Fix the handling of PTY's. CVE-2008-0216
441    
442     20080105:
443     mport delete code added, USE_MPORT_TOOLS knob aded.
444    
445 laffer1 1.30 20080101:
446     Happy New Year
447    
448 laffer1 1.29 20071123:
449     Update sendmail to 8.14.2
450    
451 laffer1 1.28 20071120:
452     Update system compiler to gcc 3.4.6.
453    
454 laffer1 1.29 20071023:
455     Updated mksh to R31d.
456    
457 laffer1 1.27 20070911:
458     Updated mksh to version R31b.
459    
460     Fixed stderr output in libpthread. Previously it was
461     written to stdout.
462    
463 laffer1 1.26 20070831:
464     Added dot.mkshrc file to support the recent change to
465     mksh from OpenBSD's ksh derived from pdksh.
466    
467     Added new firewall configuration. ipfw is enabled by default
468     with a "desktop" configuration. Consult /etc/rc.firewall
469     or ipfw show to see the ruleset used. You can disable
470     ipfw by setting firewall_enable="NO" in /etc/rc.conf This
471     change only effects IPv4. IPv6 does not have a firewall
472     enabled by default.
473    
474 laffer1 1.25 20070814:
475     Removed GNU tar source. We've been using BSD tar
476     for awhile.
477    
478 laffer1 1.24 20070806:
479     Finished removing umapfs and autofs from the tree.
480    
481     20070804:
482     BIND and Tcpdump have been patched for recent vulnerabilities.
483    
484     We switched to BSD cpio (pax).
485    
486 laffer1 1.23 20070719:
487     Imported cpdup from DragonFly as /bin/cpdup
488    
489 laffer1 1.22 20070716:
490     Update GNU cpio to 2.8.
491    
492 laffer1 1.21 20070410:
493     cvs was updated to 1.12.13. cvsbug was removed.
494     cvs now behaves similarly to DragonFly's cvs with
495     most of their local changes.
496    
497     20070409:
498     RELENG_0_1 was created. More aggresive changes will
499     continue here.
500    
501 laffer1 1.19 20070406:
502     Back out propolice. propolice caused several problems
503     with our threading libraries libthr and libpthread.
504     curthread was often NULL after the patch and many
505     multithreaded applications would crash. We plan to
506     work on either bringing in gcc 4.1 or developing a new
507     patch which also corrects our threading issues later.
508    
509     It is more important to have a stable system for our
510     mport work and other projects at this time.
511    
512 laffer1 1.20 This is not a clean removal. It is recommended that you
513     have a recently SNAP CD handy. You can either reinstall
514     or perform a make buildworld and make buildkernel and
515     make installkernel. Reboot on the cd and copy the contents
516     of /bin, /sbin, /lib, /libexec, and /usr/bin, /usr/sbin,
517     /usr/lib, and /usr/libexec to the respective directories on
518     your disk. Then you should be able to boot into single user
519     mode and run make installworld. You will need to run
520     chflags noschg on some of the files if you can't overwrite
521     them.
522    
523     You will get __guard missing errors since we had to remove
524     this from libc.
525    
526     You will need to rebuild any ports built while propolice was
527     installed.
528    
529 archite 1.16 20070401:
530     Importing propolice into MidnightBSD. Propolice is going to
531     provide us with much greater security and stability in the
532     long run. If upgrading from a pre-propolice system, please
533     follow the these instructions:
534    
535     cd /usr/src/lib/libc && make obj && make && make install
536     cd /usr/src/gnu/usr.bin/cc && make obj && make && make install
537 laffer1 1.18 cd /usr/src/lib/libpthread && make obj && make && make install
538     cd /usr/src/lib/libthr && make obj && make && make install
539 archite 1.16 buildworld and kernel
540    
541     It is adviced that any mports which were installed and/or built
542     prior to the propolice update also be updated. If any errors
543     or issue are encounted, please contact security@midnightbsd.org
544     and we will be sure to investigate and come up with an expeditious
545     fix.
546    
547 laffer1 1.15 20070314:
548     Remove send-pr from src.
549    
550     Switch to NetBSD's gzip.
551    
552     Bump MBSD minor revision.
553    
554 laffer1 1.14 20070313:
555     Imported OpenSSH 4.6p1.
556    
557     Imported FreeBSD's libarchive and updated tar to work with it.
558    
559     Disabled debug statements cluttering up /var/log/messages for
560     the tcp autobuf patch applied previously.
561    
562 laffer1 1.13 20070312:
563     Synced several audio changes from FreeBSD 6.1. Removed the
564     BSD Daemon files from src/share.
565    
566 laffer1 1.12 20070308:
567     Added mfi which supports LSI Logic MegaRAID SAS devices including
568     the Dell perc5i.
569    
570 archite 1.11 20070206:
571     Imported OpenBSD's sudo into source. Please install
572     /usr/src/usr.bin/sudo/lib first before building.
573    
574     Those who install from a snapshot after this date
575     will not be effected.
576    
577 laffer1 1.10 20070119:
578     Added audit group. Be sure to add audit to your /etc/group file
579     before installing world.
580    
581     hostapd was updated to 0.4.8.
582    
583     An accidental commit in usr.sbin/bluetooth/hccontrol was fixed to
584     unbreak world.
585    
586     wpa_supplicant was updated.
587    
588 laffer1 1.12 For stability and compatibility reasons, it was decided that MidnightBSD
589     sync with FreeBSD 6.1 Release. Nearly every change between the original
590     fork date of February 24, 2006 and the release of FreeBSD 6.1 in May
591     2006 will be merged. Beyond this, MidnightBSD will be a "real" fork and
592     will not sync every little change with FreeBSD.
593 laffer1 1.10
594 laffer1 1.9 20061231:
595     Updated COPYRIGHT for 2007.
596    
597     Updated and bumped libutil after importing NetBSD efun(3) functions.
598    
599     Added MidnightBSD_version and bumped the FreeBSD version as we've
600     synced all commits between the fork and that version. It is now safe
601     to assume MidnightBSD is compatible with FreeBSD RELENG_6 from
602     Feb 26, 2006.
603    
604     Added spell(1) and deroff(1) from NetBSD. Also added additional
605     dict files to work with it. /usr/share/dict/american,
606     /usr/share/dict/british and /usr/share/dict/special/math
607    
608     Numerous man page and bug fixes.
609    
610 laffer1 1.7 20061226:
611     Setup /usr/share/examples/cvsup SUPfiles for the new
612 laffer1 1.8 MidnightBSD CVSup server.
613    
614     Fix a bug in burncd where it would continue forever while
615     erasing CDRW media.
616    
617     Add csup to /usr/bin. csup is a CVSup replacement written
618     in C.
619    
620     Fixed a bug with bsnmpd build from Oct 30.
621    
622     Corrected some race conditions and fixed a few bugs in
623     geom. Imported changes from FreeBSD RELENG_6.
624 laffer1 1.7
625     20061225:
626     Fixed a typo in src/lib/libc/sparc64/fpu/fpu_implode.c
627     that caused long double to long and long long
628     conversion of negative numbers to always result in -1.
629    
630     20061221:
631     Fixed acpi_battery.c to not report an ERROR if no
632     batteries are present.
633    
634     Performed some minor updates on the RL and RE NIC drivers.
635     RL should no longer panic when trying to print errors.
636    
637     Corrected a bug with TTY.
638    
639     20061218:
640     Corrected a bug with libpthread where newly created suspended
641     threads don't get scheduled.
642    
643     20061206:
644     Fixed a typo with the firewire security patch.
645    
646     20061129:
647     Minor cleanups to utilities in bin.
648    
649     Fixed msdos file system short file name behavior to match
650     FreeBSD.
651    
652 laffer1 1.6 20061031:
653     Updated man pages in section 7.
654    
655     20061030:
656     Updated sys/dev/drm to support intel 915 and radeon
657     r300 cards properly.
658    
659     Synced snmpd with FreeBSD-stable.
660    
661     Fixed a bug in rm which could cause data loss.
662    
663 laffer1 1.5 20061027:
664     Added Intel ICH8 and nForce 5 support to ATA. cam, mpt,
665     random, kbdmux, atkbd, and usb were updated. Changes
666     to clearing registers on SSE enabled processors (i386)
667     commited.
668    
669     lukemftpd updated.
670    
671     openssh rc script was altered which effects initial
672     seeding.
673    
674 laffer1 1.4 20061014:
675     Workaround for em driver problem on shared IRQ.
676    
677     Started removal of alpha support.
678    
679     20061013:
680     ATA driver was updated. USB/USB1/USB2 types added.
681    
682     20061010:
683 laffer1 1.5 OpenSSH was updated to 4.4p1.
684 laffer1 1.3
685     20060909:
686     OpenNTPD was added to MidnightBSD. Run make delete-old to remove
687     the old ntpd daemon.
688    
689     cat has a new option -D which allows you to timestamp output
690     on a per line basis.
691    
692     The kernel has a keyboard mux which allows you to have multiple
693     keyboard connected simultaneously. USB keyboard support was also
694     improved with this patch.
695    
696     The Intel em driver was updated. Network performance was greatly
697     increased on many systems. Additional models are supported.
698 laffer1 1.1
699 laffer1 1.3 The ATA driver was patched to fix a potential deadlock.
700    
701     Bind was patched to fix a potential denial of service condition.
702 laffer1 1.1
703 laffer1 1.2 20060817:
704     ksh has been added to the base system. If you previously had
705     the port installed, it will be overwritten on the next buildworld.
706    
707 laffer1 1.3
708 laffer1 1.1
709     To build a kernel
710     -----------------
711 laffer1 1.3 If you are updating from a prior version of MidnightBSD (even one just
712 laffer1 1.1 a few days old), you should follow this procedure. With a
713     /usr/obj tree with a fresh buildworld,
714     make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
715     make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
716    
717     To test a kernel once
718     ---------------------
719     If you just want to boot a kernel once (because you are not sure
720     if it works, or if you want to boot a known bad kernel to provide
721     debugging information) run
722     make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
723     nextboot -k testkernel
724    
725     To just build a kernel when you know that it won't mess you up
726     --------------------------------------------------------------
727     This assumes you are already running a 6.X system. Replace
728     ${arch} with the architecture of your machine (e.g. "i386",
729 laffer1 1.4 "amd64", "ia64", "pc98", "sparc64", etc).
730 laffer1 1.1
731     cd src/sys/${arch}/conf
732     config KERNEL_NAME_HERE
733     cd ../compile/KERNEL_NAME_HERE
734     make depend
735     make
736     make install
737    
738     If this fails, go to the "To build a kernel" section.
739    
740     To rebuild everything and install it on the current system.
741     -----------------------------------------------------------
742     # Note: sometimes if you are running current you gotta do more than
743     # is listed here if you are upgrading from a really old current.
744    
745     <make sure you have good level 0 dumps>
746     make buildworld
747     make kernel KERNCONF=YOUR_KERNEL_HERE
748     [1]
749     <reboot in single user> [3]
750     mergemaster -p [5]
751     make installworld
752 laffer1 1.2 make delete-old
753 laffer1 1.1 mergemaster [4]
754     <reboot>
755    
756    
757     To cross-install current onto a separate partition
758     --------------------------------------------------
759     # In this approach we use a separate partition to hold
760     # current's root, 'usr', and 'var' directories. A partition
761     # holding "/", "/usr" and "/var" should be about 2GB in
762     # size.
763    
764     <make sure you have good level 0 dumps>
765     <boot into -stable>
766     make buildworld
767     make buildkernel KERNCONF=YOUR_KERNEL_HERE
768     <maybe newfs current's root partition>
769     <mount current's root partition on directory ${CURRENT_ROOT}>
770     make installworld DESTDIR=${CURRENT_ROOT}
771     cd src/etc; make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
772     make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
773     cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
774     <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
775     <reboot into current>
776     <do a "native" rebuild/install as described in the previous section>
777     <maybe install compatibility libraries from src/lib/compat>
778     <reboot>
779    
780    
781     To upgrade in-place from 5.x-stable or higher to 6.x-stable
782     -----------------------------------------------------------
783     <make sure you have good level 0 dumps>
784     make buildworld [9]
785     make kernel KERNCONF=YOUR_KERNEL_HERE [8]
786     [1]
787     <reboot in single user> [3]
788     mergemaster -p [5]
789     make installworld
790 laffer1 1.2 make delete-old
791 laffer1 1.1 mergemaster -i [4]
792     <reboot>
793    
794     Make sure that you've read the UPDATING file to understand the
795     tweaks to various things you need. At this point in the life
796     cycle of current, things change often and you are on your own
797     to cope. The defaults can also change, so please read ALL of
798     the UPDATING entries.
799    
800     Also, if you are tracking -current, you must be subscribed to
801     freebsd-current@freebsd.org. Make sure that before you update
802     your sources that you have read and understood all the recent
803     messages there. If in doubt, please track -stable which has
804     much fewer pitfalls.
805    
806     [1] If you have third party modules, such as vmware, you
807     should disable them at this point so they don't crash your
808     system on reboot.
809    
810     [3] From the bootblocks, boot -s, and then do
811     fsck -p
812     mount -u /
813     mount -a
814     cd src
815     adjkerntz -i # if CMOS is wall time
816     Also, when doing a major release upgrade, it is required that
817     you boot into single user mode to do the installworld.
818    
819     [4] Note: This step is non-optional. Failure to do this step
820     can result in a significant reduction in the functionality of the
821     system. Attempting to do it by hand is not recommended and those
822     that pursue this avenue should read this file carefully, as well
823     as the archives of freebsd-current and freebsd-hackers mailing lists
824     for potential gotchas.
825    
826     [5] Usually this step is a noop. However, from time to time
827     you may need to do this if you get unknown user in the following
828     step. It never hurts to do it all the time.
829    
830     [8] In order to have a kernel that can run the 5.x binaries
831     needed to do an installworld, you must include the COMPAT_FREEBSD5
832     option in your kernel. Failure to do so may leave you with a system
833     that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
834     is required to run the 5.x binaries on more recent kernels.
835    
836     Make sure that you merge any new devices from GENERIC since the
837     last time you updated your kernel config file.
838    
839     [9] When checking out sources, you must include the -P flag to have
840     cvs prune empty directories.
841    
842     If CPUTYPE is defined in your /etc/make.conf, make sure to use the
843     "?=" instead of the "=" assignment operator, so that buildworld can
844     override the CPUTYPE if it needs to.
845    
846     MAKEOBJDIRPREFIX must be defined in an environment variable, and
847     not on the command line, or in /etc/make.conf. buildworld will
848     warn if it is improperly defined.
849    
850     Copyright information:
851    
852     Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
853    
854     Redistribution, publication, translation and use, with or without
855     modification, in full or in part, in any form or format of this
856     document are permitted without further permission from the author.
857    
858     THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
859     IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
860     WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
861     DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
862     INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
863     (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
864     SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
865     HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
866     STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
867     IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
868     POSSIBILITY OF SUCH DAMAGE.
869    
870     If you find this document useful, and you want to, you may buy the
871     author a beer.
872    
873     Contact Warner Losh if you have any questions about your use of
874     this document.
875    
876 laffer1 1.2 $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
877 laffer1 1.94 $MidnightBSD: src/UPDATING,v 1.93 2010/08/22 22:19:05 laffer1 Exp $