ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
Revision: 4350
Committed: Fri Nov 18 00:12:20 2011 UTC (12 years, 6 months ago) by laffer1
File size: 33490 byte(s)
Log Message:
Update bind for ANOTHER security hole.

File Contents

# Content
1 Updating Information for MidnightBSD users
2
3 20111117:
4 BIND 9.6 ESV R5 P1
5
6 20111107:
7 tzdata 2011n
8
9 20111026:
10 mDNSResponder v320
11
12 BIND 9.6 ESV R5
13
14 20111022:
15 cflow 0.0.6 imported
16
17 20111020:
18 less v436 imported
19
20 amdsbwd(4) AMD southbridge watchdog
21
22 20111019:
23 awk 20110810 imported
24
25 et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
26 not included in GENERIC kernel. The kernel module needs
27 testing before we can include it in GENERIC.
28
29 intr_bind code ported to allow an IRQ to be bound to one
30 specific CPU core.
31
32 20111017:
33 Time Zone Data v. 2011l (Released 10 October 2011)
34
35 Updated list of countries (iso3166) to work with new timezone data.
36
37 20111015:
38 Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
39 to control which core or group of cores can be used for a given
40 process. Several new system calls were added to support this
41 functionality in the running kernel and for 32bit binary
42 compatibility on amd64.
43
44 The scheduler default has been changed to ULE in i386 and
45 amd64. Changes were made to both schedulers (4BSD AND ULE)
46 for this feature.
47
48 This work is based on Jeff Roberson's FreeBSD 7.1 patches.
49
50 20111004:
51 Fix a problem with unix socket handling caused by the recent
52 patch to unix socket path handling. This allows network
53 apps to work under the linuxolator again.
54
55 20111001:
56 Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
57 now default and an environment variable must be set to use
58 active.
59
60 20110930:
61 Introduce quirks handling for several umass devices including
62 USB cameras. Add workaround for Cyberpower UPS devices.
63
64 Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
65 Stale ip/tcp header pointers are no longer used, lockups fixed
66 when network cable is unplugged on bootup, enable TX checksum
67 offloading.
68
69 Add a new man page for gcache(8), a useful geom class when
70 working with large raid3 sets.
71
72 Restore previous workaround for Cypress pata storage controller.
73
74 20110929:
75 Sync ath(4) with FreeBSD 7.3.
76
77 The following modules are no longer available, and should be
78 removed from loader.conf:
79 ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
80
81 alc(4) would hibernate when a cable was unplugged and often
82 required bring the interface down and up to "wake up" so that
83 a connection could be established. Disable hibernation.
84
85 20110928:
86 Fix security issues with gzip and compress related to .Z
87 files that are corrupted.
88
89 Fix path validation with unix domain sockets.
90
91 20110917:
92 Remove dependance on mports perl for generating releases as
93 it's in the base system.
94
95 20110914:
96 Import xz 5.0.3 with liblzma 5.0.3
97
98 20110813:
99 synced the sparc64 GENERIC kernel configuration with amd64.
100
101 20110806:
102 sqlite 3.7.7.1 imported
103
104 msearch(1), libmsearch and msearch.import added. msearch(1) provides
105 a full text search command line tool. libmsearch can also be used
106 to build a graphical based search in the future. You can enable
107 index building for msearch in periodic.conf or manually run the
108 /usr/libexec/msearch.index tool. Full text indexes take considerable
109 space in /var. I'm using approximately 500MB currently.
110
111 Fix a long standing bug with the periodic script to check package
112 versions. This will be obsolete with mport though.
113
114 20110710:
115 kdb_enter_why added to MidnightBSD to allow the kernel debugger to
116 know why it's in use and thus script can be run.
117
118 Yet another problem with the perl manifest was fixed
119
120 20110709:
121 cpufreq(1) is a new utility to monitor CPU frequency which may change
122 with use of powerd(8) and cpufreq(4).
123
124 20110612:
125 Update mksh to R40
126
127 Catch up ObsoleteFiles.inc to remove Perl 5.10.x. Good to run when
128 updating current (cd /usr/src && make check-old)
129
130 20110528:
131 Fix CVE-2011-1910 in BIND 9.6.x. This affects caching resolvers.
132
133 20110526:
134 newfs:
135 Raised the default blocksize for UFS/FFS filesystems from
136 16K to 32K and the default fragment size from 2K to 4K.
137
138 This should slightly imporve performance on "advanced format"
139 hard drives such as the WD EARS drives. Drives of this type
140 have emulation modes that slow down with lower sizes. Of course
141 the drive must still be aligned properly when using fdisk.
142
143 20110521:
144 mport tool now has a deleteall command. This can be used to remove
145 all packages from a system.
146
147 A few bugs with the perl 5.14 import have been fixed.
148
149 20110518:
150 Perl 5.14.0
151
152 20110517:
153 Sendmail 8.14.5
154
155 20110314:
156 DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
157
158 cdevpriv wrappers added
159
160 nss_mdns hack introduced to work around linking problem.
161
162 dnsextd fixed after update to mDNSResponder code.
163
164 20110308:
165 Introduce liblzma & xz 5.0.1 to the base system
166
167 Patch for OpenSSL security issue CVE-2011-0014.
168
169 "OSREVISION 4004"
170
171 nsswitch module for multicast dns (nss_mdns) added.
172
173 tzdata2011c
174
175 20110220:
176 cam(4) syncronized with FreeBSD 7.3.
177
178 20110219:
179 amdtemp(4) updated to support sensors framework.
180
181 20110217:
182 Perl 5.10.1 imported
183
184 20110216:
185 Introduce igb(4) and split Intel Gigabit Ethernet adapters between
186 igb(4) and em(4). Newer devices use igb(4). The code has moved
187 to sys/dev/e1000 for both devices in the kernel. igb(4) has
188 been placed in GENERIC on i386 and amd64.
189
190 Update bfe(4) to support newer devices and WOL.
191
192 20110215:
193 age(4) added.
194
195 20110208:
196 BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
197
198 20110206:
199 eeemon(4) added to monitor Asus Eee PC.
200
201 20110205:
202 OpenSSH 5.7p1
203
204 GNU sort 6.9 (coreutils)
205
206 20110203:
207 one true awk 20100523 imported
208
209 sqlite 3.7.5
210
211 OpenSSL 0.9.8q
212
213 20110202:
214 tcsh 6.17.00
215
216 file 5.05
217
218 20110122:
219 Import it(4) and lm(4), with support for Super I/O hardware monitors. This
220 uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
221
222 20110120:
223 BIND 9.6.2-P3
224
225 sudo 1.7.4-p6
226
227 20110115:
228 Add experimental jme(4) for Jmicron ethernet devices.
229
230 20101130:
231 A double free exists in the SSL client ECDH handling code, when
232 processing specially crafted public keys with invalid prime
233 numbers. [CVE-2010-2939]
234
235 20101120:
236 Several portions of the kernel and userland code related to UFS file
237 systems (and UFS2) cannot properly handle inode counts above 2^31 due
238 to use of int types. Based on a patch from FreeBSD, I've modified
239 our UFS2 implementation to handle unsigned values for inode counts
240 which should allow for file systems greater than 16TB.
241
242 newfs and growfs was also modified.
243
244 20101110:
245 Fix a security issue with pseudofs which could result in running code in kernel
246 context or a kernel panic depending on system configuration. This affects file
247 systems such as procfs for instance.
248
249 20101021:
250 sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
251 This is similar to functions present in many linux distros. The utility was
252 written by Devin Teske for FreeBSD.
253
254 20100920:
255 bzip2 security patch for integer overflow.
256
257 20100905:
258 MidnightBSD RELENG_0_3 branch created. Aggressive development continues here
259 for 0.4.
260
261 20100902:
262 Fix a security issue with libutil that allows users to bypass cpu limits in
263 login.conf in some cases. This combined with OpenSSH for example can allow
264 the user to get more resources than they're allowed.
265
266 20100822:
267 Import Apple's mDNSResponder (mdnsd).
268
269 20100814:
270 libdispatch added to MidnightBSD. This provides functionality found in
271 Mac OS X's GCD. We do not have blocks support yet. As this code is
272 licensed under Apache 2, we create a new MK_APACHE option so that
273 it's not required for all users to run code under a license they
274 may not like.
275
276 20100713:
277 mbuf readonly fix related to sendfile(2) data corruption.
278
279 20100704:
280 brainfuck(1) imported from MirBSD.
281
282 20100505:
283 zlib 1.2.5
284
285 20100430:
286 Sudo 1.7.2p6 imported
287
288 20100321:
289 Update zlib to 1.2.4
290
291 20100319:
292 Removed i586 from default i386 generic kernel.
293
294 20100317:
295 Update to tzdata2010e (time zones). This includes changes in
296 Mexico.
297
298 Add support for several newer sound cards via hda including
299 ATI and Realtek chipsets.
300
301 20100313:
302 CPU detection has been changed. VIA Padlock detection added.
303
304 20100312:
305 Fix a number of bugs and compiler warnings in libmport. Handle
306 plus signs in paths for mport.check-fake
307
308 20100311:
309 mksh R39c
310
311 20100309:
312 Sudo 1.7.2p5
313
314 sqlite3 3.6.23
315
316 mksh R39b
317
318 libffi (ffi) 3.0.9
319
320 20100206:
321 WITHOUT_LIB32 is no longer needed on AMD64. GCC was fixed to
322 properly pass arguments to ld.
323
324 re(4) and rl(4) have been updated to support several new
325 realtek chipsets. Performance has been improved on re(4).
326
327 20100204:
328 Fix a bug cropping up on AMD64 MidnightBSD with sftp
329 segfaulting.
330
331 20100116:
332 Import ash changes from FreeBSD (bin/sh) 8-Stable.
333
334 BIND 9.6.1-P2
335
336 20100110:
337 Import Sendmail 8.14.4. Fix for SSL vulnerability.
338
339 posix_spawn(3) added to MidnightBSD libc. Users may need to build and
340 install libc before doing a full buildworld when upating from 0.2 or
341 older current systems.
342
343 kqueue(2) was modified to support portions of libdispatch functionality.
344
345 20100106:
346 Bind security update. Fix a bug with DNSSEC that causes negative
347 cache entries and thus a possible DNS cache poisoning attack.
348
349 Fix a bug in ZFS that can reset permissions on system crashes.
350
351 20091228:
352 amdtemp(4) was added. It allows one to monitor to the temperature
353 of an AMD CPU such as a Phenom.
354
355 20091205:
356 OpenSSL security fix
357
358 The SSL version 3 and TLS protocols support session renegotiation without
359 cryptographically tying the new session parameters to the old parameters.
360
361 20091128:
362 OpenBSD sensors framework imported including sensorsd(8)
363
364 20091126:
365 OpenNTPD 4.4 import
366
367 Update OpenSSH to 5.3p1
368
369 mksh R39
370
371 20091124:
372 cpdup updated from DragonFly to 1.15
373
374 tzdata2009s updated with latest timezone data for November 2009.
375
376 20091010:
377 amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
378 to test current.
379
380 Revert unicode filename fixes from ntfs code. This was causing chaos
381 on amd64 systems.
382
383 20091006:
384 Update timezone data with tzdata2009n with the Pakistan and
385 Argentina changes.
386
387 Sync several userland utilities with versions from FreeBSD 7.0 in
388 sbin and usr.sbin.
389
390 20090919:
391 Update timezone data with tzdate2009m from September 2009.
392
393 20090729:
394 Patch for Bind 9 security vulnerability. a dynmaic update packet
395 can trigger an assertion and cause named to exit
396
397 20090606:
398 Remove PCC from the base system. This compiler will not work
399 as a system compiler for us as we've got some userland investment
400 in C++ code and may have Objective-C in the future. We're stuck
401 with a solution that supports these three languages at a minimum.
402
403 I had wanted to keep it as an optional compiler because it is
404 fast, however too many users want to try to use it for the base
405 system which makes no sense.
406
407 A hack was added for Cypress based usb hard drive enclosures to
408 the kernel. This should cut down on commands it claims to support
409 but does not (at the cam layer). Found while testing ZFS on
410 an external device.
411
412 20090520:
413 The powerd daemon no longer starts automatically to improve
414 compatibility with many systems. However, there is a new
415 installer option in the startup section to enable it. This
416 makes it easier to enable for users that have working systems. I thought it was only a problem on older hardware, but it freaks
417 out my new Phenom too.
418
419 20090502:
420 OpenSSH 5.2p1 import
421
422 ale(4) connected to the build. (kernel module only)
423
424 20090501:
425 Imported makefs utility from NetBSD/FreeBSD
426
427 20090422:
428 OpenSSL security update
429
430 The function ASN1_STRING_print_ex does not properly validate the lengths
431 of BMPString or UniversalString objects before attempting to print them.
432
433 20090415:
434 Created a Symbol.map for libc/ohash symbols
435
436 Updated several usr/bin usr/sbin utilities.
437
438 Corrected a bug with Makefile.inc1 causing the bootstrap
439 tools to fail.
440
441 20090405:
442 xorg 7.4 wants to configure its input devices via hald which does not
443 yet work with USB. If the keyboard/mouse does not work in xorg then
444 add
445 Option "AllowEmptyInput" "off"
446 to your ServerLayout section. This will cause X to use the configured
447 kbd and mouse sections from your xorg.conf
448
449 20090403:
450 mksh was disconnected a few day ago do to bugs with
451 buildworld and mports. Now, connect it back
452 for use as /bin/sh with a conditional called
453 MK_ASH. By default, ash is the standard /bin/sh
454 but we may change this later. This will allow further
455 testing by users and developers of mksh without
456 causing an unpleasant default experience. In the
457 long run, we need to fix mksh compatibility.
458
459 20090328:
460 Bring in mksh R37 from CVS. The dot.mkshrc files for root
461 and skel were changed. mksh(1) now replaces ash aka sh(1)
462 as the default /bin/sh. Please report bugs with
463 ports, etc. The ash code will remain in the repo for awhile
464 as I decide if we'll add something like MK_SHELL_ASH as
465 an optional build parameter.
466
467 ahd was disconnected from the lint environment until
468 the compiler bug is sorted (by updating gcc?)
469
470 Remove freebsd-tips from fortune files and change the
471 default for login and profile.
472
473 20090327:
474 Update libarchive to 2.5.5, tar, and add bsdcpio.
475
476 Also previously, ctriv has been connecting Perl 5.10
477 to the build (part of os). This will have an impact
478 on mports.
479
480 20090325:
481 Update Bind to 9.4.3-P1
482
483 Update mksh to R36b
484
485 Update tcpdump to 3.9.8, fix libpcap to work with current.
486
487 Update pnpinfo, sync with FreeBSD.
488
489 20090115:
490 Fix a problem with DNSSEC and BIND.
491
492 20090110:
493 For applications using OpenSSL for SSL connections, an invalid SSL
494 certificate may be interpreted as valid. This could for example be
495 used by an attacker to perform a man-in-the-middle attack.
496
497 Other applications which use the OpenSSL EVP API may similarly be
498 affected.
499
500 Stop cross site request forgery attacks in lukemftpd
501
502 20090104:
503 Import GNU libreadline 5.2
504
505 20090101:
506 Update time zone data to 2008i.
507
508 20081231:
509 Correct a problem where bluetooth and netgraph sockets are not
510 properly initialized.
511
512 Happy 2009.
513
514 20081206:
515 Due to the massive change in the underlying system under way,
516 we're naming the next release 1.0. The sys/sys/param.h was
517 changed accordingly. ipfilter and ncurses were corrected
518 using __MidnightBSD__ tests in the code.
519
520 The GENERIC kernel config was caught up on i386 today. Consider
521 i386 still broken, but amd64 is running again.
522
523 mdoc.local was updated with the new MidnightBSD version info.
524
525 batt(1) was rewritten in C. It now supports several flags and
526 runs about 8 times faster on my laptop. The default output
527 shows the number of minutes of battery life remaining and the
528 percentage. You can use -u to display the number of batteries or
529 -c to get script friendly output. Consult the man page for more.
530
531 20081204:
532 Work has completed on importing ZFS, jemalloc, several
533 new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
534 support, improved locking for file desc., audit (openbsm),
535 openssl .98e, nfe, imporved intel high def audio, midi, updated
536 intel gigabit (em), support for several wifi cards (intel), ...
537
538 Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
539 data from param.h instead of the FreeBSD version. This means
540 testing is now possible in the ports tree for the version
541 and that any ports or code relying on the FreeBSD version from
542 sys/sys/param.h will need to be fixed.
543
544 20080905:
545 update nve(4) to support new hardware.
546
547 20080801:
548 Import OpenBSM 1.0
549
550 Modify src/release to create 3 isos instead of 2 for packages.
551
552 etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
553
554 Many ia64, alpha, powerpc items were removed.
555
556 The recent diffutils 2.8.7 import was fixed.
557
558 20080703:
559 pcc was not installed properly when setting DESTDIR for live cds,
560 or posibly jails.
561
562 20080627:
563 Add firmware(9), WEP, CCMP, TKIP to GENERIC.
564
565 Add glabel to GENERIC.
566
567 Intel ICH8 mobile chipset used on some iMacs included with ata.
568
569 pcc connected to the build on i386. (alternative compiler)
570
571 ath added to GENERIC. (Atheros wireless NICs) on amd64/i386
572
573 20080528:
574 Sendmail 8.14.3
575
576 20080516:
577 ssh-vulnkey allows you to look for vulnerable ssh keys that
578 were generated on Debian and Ubuntu hosts over the last
579 few years. sshd can block offending keys with a configuration
580 option.
581
582 The elf note on binaries is now set to MidnightBSD.
583
584 20080514:
585 Fixed a number of problems with pcc. It is not yet connected
586 to the build, but usable on i386 hosts. You may use it
587 by make; make install in /usr/src/usr.bin/pcc. It will
588 install in /usr/local as some of the files conflict with
589 GCC versions. __MidnightBSD__ is defined in PCC as well.
590
591 System headers were fixed to allow pcc to compile many binaries
592 on MidnightBSD. bin/cp will work now for instance.
593
594 20080430:
595 __MidnightBSD__ is now defined via gcc. This can be tested
596 to determine we're running on MidnightBSD in the preprocessor.
597
598 20080429:
599 Import bind 9.4.2 with threading
600
601 libpthread (KSE) and libthr are built earlier
602
603 pcvt(4) removed!
604
605 Alias added for core2 cpus.
606
607 Alpha and PC98 only utilities removed from usr/sbin
608
609 syslogd, adduser, rmuser, mergemaster and mailwrapper have been
610 improved. See the man pages for info.
611
612 periodic scripts will not send emails with empty message bodies.
613 See mailwrapper fix.
614
615 20080410:
616 Sync cpdup with DragonFly. Add parallel transaction support and
617 -l flag to line-buffer stdout and stderr.
618
619 20080406:
620 Import bzip2 1.05
621 Import OpenSSH 4.9p1
622
623 20080322:
624 The default umask was changed to 022.
625
626 /usr/X11R6 paths were removed from several config files.
627
628 .mkshrc files are now installed for root.
629
630 20080316:
631 FIx a problem with gif0 tunnels and neighbors with IPV6.
632
633 20080312:
634 Add lndir from X.org. This aides in the porting of MirPorts.
635
636 New OS versions were added to the mapage code (groff)
637
638 20080310:
639 Correct a buffer overflow in ppp.
640
641 20080308:
642 Remove /usr/X11R6 from manpath config.
643
644 20080307:
645 Atheros driver no longer has several options set
646 which corrects building in tinderbox on all three platforms.
647
648 Added a new macro to sx.h which returns true if the current
649 thread holds an exclusive lock on a specifix sx.
650
651 Removed OS/2's HPFS file system. It's not maintained and
652 I don't know anyone using OS/2 or ecomstation these days.
653 My copy is in the closet collecting dust.
654
655 20080306:
656 Synced tinderbox with FreeBSD. Modified it for MidnightBSD.
657 Developers can now use it to check src builds.
658
659 20080303:
660 Add mksh to /etc/shells, made some adjustments to options
661 for mksh builds per suggestion upstream.
662
663 USB HID table updated with modern hardware list.
664
665 Updated BSD family true (we're not in there yet)
666
667 iso3166 file updated and import of tzdata2007k for
668 new time zones.
669
670 Updated mksh to latest version R33.
671
672 20080228:
673 Remplaced the random IP id generation code with a new
674 version by Amit Klein.
675
676 20080221:
677 Sendfile write only permissions fix.
678
679 Removed some HPFS and PC98 code.
680
681 iso639 file sycned with DragonFly.
682
683 20080128:
684 Changed NTP configuration so that ips aren't cached
685 so multiple servers are used.
686
687 Fix an issue with fork() in libpthread.
688
689 20080121:
690 Add virtualization detection to set the HZ rate
691 according to a VM present. VMWare and Parallels
692 should work better like this.
693
694 Change to full x11 install in sysinstall. Add
695 xorg 7 support.
696
697 20080115:
698 Fix the handling of PTY's. CVE-2008-0216
699
700 20080105:
701 mport delete code added, USE_MPORT_TOOLS knob aded.
702
703 20080101:
704 Happy New Year
705
706 20071123:
707 Update sendmail to 8.14.2
708
709 20071120:
710 Update system compiler to gcc 3.4.6.
711
712 20071023:
713 Updated mksh to R31d.
714
715 20070911:
716 Updated mksh to version R31b.
717
718 Fixed stderr output in libpthread. Previously it was
719 written to stdout.
720
721 20070831:
722 Added dot.mkshrc file to support the recent change to
723 mksh from OpenBSD's ksh derived from pdksh.
724
725 Added new firewall configuration. ipfw is enabled by default
726 with a "desktop" configuration. Consult /etc/rc.firewall
727 or ipfw show to see the ruleset used. You can disable
728 ipfw by setting firewall_enable="NO" in /etc/rc.conf This
729 change only effects IPv4. IPv6 does not have a firewall
730 enabled by default.
731
732 20070814:
733 Removed GNU tar source. We've been using BSD tar
734 for awhile.
735
736 20070806:
737 Finished removing umapfs and autofs from the tree.
738
739 20070804:
740 BIND and Tcpdump have been patched for recent vulnerabilities.
741
742 We switched to BSD cpio (pax).
743
744 20070719:
745 Imported cpdup from DragonFly as /bin/cpdup
746
747 20070716:
748 Update GNU cpio to 2.8.
749
750 20070410:
751 cvs was updated to 1.12.13. cvsbug was removed.
752 cvs now behaves similarly to DragonFly's cvs with
753 most of their local changes.
754
755 20070409:
756 RELENG_0_1 was created. More aggresive changes will
757 continue here.
758
759 20070406:
760 Back out propolice. propolice caused several problems
761 with our threading libraries libthr and libpthread.
762 curthread was often NULL after the patch and many
763 multithreaded applications would crash. We plan to
764 work on either bringing in gcc 4.1 or developing a new
765 patch which also corrects our threading issues later.
766
767 It is more important to have a stable system for our
768 mport work and other projects at this time.
769
770 This is not a clean removal. It is recommended that you
771 have a recently SNAP CD handy. You can either reinstall
772 or perform a make buildworld and make buildkernel and
773 make installkernel. Reboot on the cd and copy the contents
774 of /bin, /sbin, /lib, /libexec, and /usr/bin, /usr/sbin,
775 /usr/lib, and /usr/libexec to the respective directories on
776 your disk. Then you should be able to boot into single user
777 mode and run make installworld. You will need to run
778 chflags noschg on some of the files if you can't overwrite
779 them.
780
781 You will get __guard missing errors since we had to remove
782 this from libc.
783
784 You will need to rebuild any ports built while propolice was
785 installed.
786
787 20070401:
788 Importing propolice into MidnightBSD. Propolice is going to
789 provide us with much greater security and stability in the
790 long run. If upgrading from a pre-propolice system, please
791 follow the these instructions:
792
793 cd /usr/src/lib/libc && make obj && make && make install
794 cd /usr/src/gnu/usr.bin/cc && make obj && make && make install
795 cd /usr/src/lib/libpthread && make obj && make && make install
796 cd /usr/src/lib/libthr && make obj && make && make install
797 buildworld and kernel
798
799 It is adviced that any mports which were installed and/or built
800 prior to the propolice update also be updated. If any errors
801 or issue are encounted, please contact security@midnightbsd.org
802 and we will be sure to investigate and come up with an expeditious
803 fix.
804
805 20070314:
806 Remove send-pr from src.
807
808 Switch to NetBSD's gzip.
809
810 Bump MBSD minor revision.
811
812 20070313:
813 Imported OpenSSH 4.6p1.
814
815 Imported FreeBSD's libarchive and updated tar to work with it.
816
817 Disabled debug statements cluttering up /var/log/messages for
818 the tcp autobuf patch applied previously.
819
820 20070312:
821 Synced several audio changes from FreeBSD 6.1. Removed the
822 BSD Daemon files from src/share.
823
824 20070308:
825 Added mfi which supports LSI Logic MegaRAID SAS devices including
826 the Dell perc5i.
827
828 20070206:
829 Imported OpenBSD's sudo into source. Please install
830 /usr/src/usr.bin/sudo/lib first before building.
831
832 Those who install from a snapshot after this date
833 will not be effected.
834
835 20070119:
836 Added audit group. Be sure to add audit to your /etc/group file
837 before installing world.
838
839 hostapd was updated to 0.4.8.
840
841 An accidental commit in usr.sbin/bluetooth/hccontrol was fixed to
842 unbreak world.
843
844 wpa_supplicant was updated.
845
846 For stability and compatibility reasons, it was decided that MidnightBSD
847 sync with FreeBSD 6.1 Release. Nearly every change between the original
848 fork date of February 24, 2006 and the release of FreeBSD 6.1 in May
849 2006 will be merged. Beyond this, MidnightBSD will be a "real" fork and
850 will not sync every little change with FreeBSD.
851
852 20061231:
853 Updated COPYRIGHT for 2007.
854
855 Updated and bumped libutil after importing NetBSD efun(3) functions.
856
857 Added MidnightBSD_version and bumped the FreeBSD version as we've
858 synced all commits between the fork and that version. It is now safe
859 to assume MidnightBSD is compatible with FreeBSD RELENG_6 from
860 Feb 26, 2006.
861
862 Added spell(1) and deroff(1) from NetBSD. Also added additional
863 dict files to work with it. /usr/share/dict/american,
864 /usr/share/dict/british and /usr/share/dict/special/math
865
866 Numerous man page and bug fixes.
867
868 20061226:
869 Setup /usr/share/examples/cvsup SUPfiles for the new
870 MidnightBSD CVSup server.
871
872 Fix a bug in burncd where it would continue forever while
873 erasing CDRW media.
874
875 Add csup to /usr/bin. csup is a CVSup replacement written
876 in C.
877
878 Fixed a bug with bsnmpd build from Oct 30.
879
880 Corrected some race conditions and fixed a few bugs in
881 geom. Imported changes from FreeBSD RELENG_6.
882
883 20061225:
884 Fixed a typo in src/lib/libc/sparc64/fpu/fpu_implode.c
885 that caused long double to long and long long
886 conversion of negative numbers to always result in -1.
887
888 20061221:
889 Fixed acpi_battery.c to not report an ERROR if no
890 batteries are present.
891
892 Performed some minor updates on the RL and RE NIC drivers.
893 RL should no longer panic when trying to print errors.
894
895 Corrected a bug with TTY.
896
897 20061218:
898 Corrected a bug with libpthread where newly created suspended
899 threads don't get scheduled.
900
901 20061206:
902 Fixed a typo with the firewire security patch.
903
904 20061129:
905 Minor cleanups to utilities in bin.
906
907 Fixed msdos file system short file name behavior to match
908 FreeBSD.
909
910 20061031:
911 Updated man pages in section 7.
912
913 20061030:
914 Updated sys/dev/drm to support intel 915 and radeon
915 r300 cards properly.
916
917 Synced snmpd with FreeBSD-stable.
918
919 Fixed a bug in rm which could cause data loss.
920
921 20061027:
922 Added Intel ICH8 and nForce 5 support to ATA. cam, mpt,
923 random, kbdmux, atkbd, and usb were updated. Changes
924 to clearing registers on SSE enabled processors (i386)
925 commited.
926
927 lukemftpd updated.
928
929 openssh rc script was altered which effects initial
930 seeding.
931
932 20061014:
933 Workaround for em driver problem on shared IRQ.
934
935 Started removal of alpha support.
936
937 20061013:
938 ATA driver was updated. USB/USB1/USB2 types added.
939
940 20061010:
941 OpenSSH was updated to 4.4p1.
942
943 20060909:
944 OpenNTPD was added to MidnightBSD. Run make delete-old to remove
945 the old ntpd daemon.
946
947 cat has a new option -D which allows you to timestamp output
948 on a per line basis.
949
950 The kernel has a keyboard mux which allows you to have multiple
951 keyboard connected simultaneously. USB keyboard support was also
952 improved with this patch.
953
954 The Intel em driver was updated. Network performance was greatly
955 increased on many systems. Additional models are supported.
956
957 The ATA driver was patched to fix a potential deadlock.
958
959 Bind was patched to fix a potential denial of service condition.
960
961 20060817:
962 ksh has been added to the base system. If you previously had
963 the port installed, it will be overwritten on the next buildworld.
964
965
966
967 To build a kernel
968 -----------------
969 If you are updating from a prior version of MidnightBSD (even one just
970 a few days old), you should follow this procedure. With a
971 /usr/obj tree with a fresh buildworld,
972 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
973 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
974
975 To test a kernel once
976 ---------------------
977 If you just want to boot a kernel once (because you are not sure
978 if it works, or if you want to boot a known bad kernel to provide
979 debugging information) run
980 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
981 nextboot -k testkernel
982
983 To just build a kernel when you know that it won't mess you up
984 --------------------------------------------------------------
985 This assumes you are already running a 6.X system. Replace
986 ${arch} with the architecture of your machine (e.g. "i386",
987 "amd64", "ia64", "pc98", "sparc64", etc).
988
989 cd src/sys/${arch}/conf
990 config KERNEL_NAME_HERE
991 cd ../compile/KERNEL_NAME_HERE
992 make depend
993 make
994 make install
995
996 If this fails, go to the "To build a kernel" section.
997
998 To rebuild everything and install it on the current system.
999 -----------------------------------------------------------
1000 # Note: sometimes if you are running current you gotta do more than
1001 # is listed here if you are upgrading from a really old current.
1002
1003 <make sure you have good level 0 dumps>
1004 make buildworld
1005 make kernel KERNCONF=YOUR_KERNEL_HERE
1006 [1]
1007 <reboot in single user> [3]
1008 mergemaster -p [5]
1009 make installworld
1010 make delete-old
1011 mergemaster [4]
1012 <reboot>
1013
1014
1015 To cross-install current onto a separate partition
1016 --------------------------------------------------
1017 # In this approach we use a separate partition to hold
1018 # current's root, 'usr', and 'var' directories. A partition
1019 # holding "/", "/usr" and "/var" should be about 2GB in
1020 # size.
1021
1022 <make sure you have good level 0 dumps>
1023 <boot into -stable>
1024 make buildworld
1025 make buildkernel KERNCONF=YOUR_KERNEL_HERE
1026 <maybe newfs current's root partition>
1027 <mount current's root partition on directory ${CURRENT_ROOT}>
1028 make installworld DESTDIR=${CURRENT_ROOT}
1029 cd src/etc; make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
1030 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1031 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
1032 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1033 <reboot into current>
1034 <do a "native" rebuild/install as described in the previous section>
1035 <maybe install compatibility libraries from src/lib/compat>
1036 <reboot>
1037
1038
1039 To upgrade in-place from 5.x-stable or higher to 6.x-stable
1040 -----------------------------------------------------------
1041 <make sure you have good level 0 dumps>
1042 make buildworld [9]
1043 make kernel KERNCONF=YOUR_KERNEL_HERE [8]
1044 [1]
1045 <reboot in single user> [3]
1046 mergemaster -p [5]
1047 make installworld
1048 make delete-old
1049 mergemaster -i [4]
1050 <reboot>
1051
1052 Make sure that you've read the UPDATING file to understand the
1053 tweaks to various things you need. At this point in the life
1054 cycle of current, things change often and you are on your own
1055 to cope. The defaults can also change, so please read ALL of
1056 the UPDATING entries.
1057
1058 Also, if you are tracking -current, you must be subscribed to
1059 freebsd-current@freebsd.org. Make sure that before you update
1060 your sources that you have read and understood all the recent
1061 messages there. If in doubt, please track -stable which has
1062 much fewer pitfalls.
1063
1064 [1] If you have third party modules, such as vmware, you
1065 should disable them at this point so they don't crash your
1066 system on reboot.
1067
1068 [3] From the bootblocks, boot -s, and then do
1069 fsck -p
1070 mount -u /
1071 mount -a
1072 cd src
1073 adjkerntz -i # if CMOS is wall time
1074 Also, when doing a major release upgrade, it is required that
1075 you boot into single user mode to do the installworld.
1076
1077 [4] Note: This step is non-optional. Failure to do this step
1078 can result in a significant reduction in the functionality of the
1079 system. Attempting to do it by hand is not recommended and those
1080 that pursue this avenue should read this file carefully, as well
1081 as the archives of freebsd-current and freebsd-hackers mailing lists
1082 for potential gotchas.
1083
1084 [5] Usually this step is a noop. However, from time to time
1085 you may need to do this if you get unknown user in the following
1086 step. It never hurts to do it all the time.
1087
1088 [8] In order to have a kernel that can run the 5.x binaries
1089 needed to do an installworld, you must include the COMPAT_FREEBSD5
1090 option in your kernel. Failure to do so may leave you with a system
1091 that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
1092 is required to run the 5.x binaries on more recent kernels.
1093
1094 Make sure that you merge any new devices from GENERIC since the
1095 last time you updated your kernel config file.
1096
1097 [9] When checking out sources, you must include the -P flag to have
1098 cvs prune empty directories.
1099
1100 If CPUTYPE is defined in your /etc/make.conf, make sure to use the
1101 "?=" instead of the "=" assignment operator, so that buildworld can
1102 override the CPUTYPE if it needs to.
1103
1104 MAKEOBJDIRPREFIX must be defined in an environment variable, and
1105 not on the command line, or in /etc/make.conf. buildworld will
1106 warn if it is improperly defined.
1107
1108 Copyright information:
1109
1110 Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
1111
1112 Redistribution, publication, translation and use, with or without
1113 modification, in full or in part, in any form or format of this
1114 document are permitted without further permission from the author.
1115
1116 THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1117 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1118 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1119 DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1120 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1121 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1122 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1123 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1124 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1125 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1126 POSSIBILITY OF SUCH DAMAGE.
1127
1128 If you find this document useful, and you want to, you may buy the
1129 author a beer.
1130
1131 Contact Warner Losh if you have any questions about your use of
1132 this document.
1133
1134 $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1135 $MidnightBSD: src/UPDATING,v 1.144 2011/11/08 04:54:20 laffer1 Exp $

Properties

Name Value
cvs2svn:cvs-rev 1.145