ViewVC Help
View File | Revision Log | Show Annotations | Download File | View Changeset | Root Listing
root/src/trunk/UPDATING
Revision: 4463
Committed: Sat Dec 24 03:21:55 2011 UTC (12 years, 5 months ago) by laffer1
File size: 34614 byte(s)
Log Message:
pam: don't allow escape from policy path.  Exploitable in KDE, etc.

File Contents

# Content
1 Updating Information for MidnightBSD users
2
3 20111223:
4 pam: don't allow escape from policy path. Exploitable in KDE, etc.
5
6 Fix pam_ssh module:
7
8 If the pam_ssh module is enabled, attackers may be able to gain access
9 to user accounts which have unencrypted SSH private keys.
10
11 This has to due with the way that openssl works. It ignores unencrpted data.
12
13 Fix security issue with chroot and ftpd.
14
15 nsdispatch(3) doesn't know it's working in a chroot and some
16 operations can cause files to get reloaded causing a security
17 hole in things like ftpd.
18
19 20111217:
20 libdialog/dialog upgraded to an lgpl version. As it's not
21 backwardly compatable, include the old libdialog as libodialog
22
23 20111212:
24 mksh r40d imported
25
26 20111210:
27 re(4) and rl(4) updated to support new chips.
28
29 GEOM synced with FreeBSD 7-stable.
30
31 MidnightBSD GPT partition types created in sys/gpt.h and
32 setup in boot loader and GEOM.
33
34 amdsbwd(4) (amd watchdog for south bridge) updated to support
35 8xx series chipset.
36
37 20111207:
38 import bsd grep from FreeBSD/OpenBSD.
39
40 MK_BSD_GREP controls which grep is installed
41 as grep with the other as bsdgrep or gnugrep.
42
43 20111122:
44 mksh vR40c imported.
45
46 20111117:
47 BIND 9.6 ESV R5 P1
48
49 20111107:
50 tzdata 2011n
51
52 20111026:
53 mDNSResponder v320
54
55 BIND 9.6 ESV R5
56
57 20111022:
58 cflow 0.0.6 imported
59
60 20111020:
61 less v436 imported
62
63 amdsbwd(4) AMD southbridge watchdog
64
65 20111019:
66 awk 20110810 imported
67
68 et(4) Agere Gigabit Ethernet/Fast Ethernet driver added, but
69 not included in GENERIC kernel. The kernel module needs
70 testing before we can include it in GENERIC.
71
72 intr_bind code ported to allow an IRQ to be bound to one
73 specific CPU core.
74
75 20111017:
76 Time Zone Data v. 2011l (Released 10 October 2011)
77
78 Updated list of countries (iso3166) to work with new timezone data.
79
80 20111015:
81 Introduce CPU Affinity in MidnightBSD. cpuset(1) can be used
82 to control which core or group of cores can be used for a given
83 process. Several new system calls were added to support this
84 functionality in the running kernel and for 32bit binary
85 compatibility on amd64.
86
87 The scheduler default has been changed to ULE in i386 and
88 amd64. Changes were made to both schedulers (4BSD AND ULE)
89 for this feature.
90
91 This work is based on Jeff Roberson's FreeBSD 7.1 patches.
92
93 20111004:
94 Fix a problem with unix socket handling caused by the recent
95 patch to unix socket path handling. This allows network
96 apps to work under the linuxolator again.
97
98 20111001:
99 Import libfetch & fetch(1) from FreeBSD 9. Passive FTP is
100 now default and an environment variable must be set to use
101 active.
102
103 20110930:
104 Introduce quirks handling for several umass devices including
105 USB cameras. Add workaround for Cyberpower UPS devices.
106
107 Bring in further bug fixes from FreeBSD and NetBSD for alc(4).
108 Stale ip/tcp header pointers are no longer used, lockups fixed
109 when network cable is unplugged on bootup, enable TX checksum
110 offloading.
111
112 Add a new man page for gcache(8), a useful geom class when
113 working with large raid3 sets.
114
115 Restore previous workaround for Cypress pata storage controller.
116
117 20110929:
118 Sync ath(4) with FreeBSD 7.3.
119
120 The following modules are no longer available, and should be
121 removed from loader.conf:
122 ath_hal ath_rate_amrr ath_rate_onoe ath_rate_sample
123
124 alc(4) would hibernate when a cable was unplugged and often
125 required bring the interface down and up to "wake up" so that
126 a connection could be established. Disable hibernation.
127
128 20110928:
129 Fix security issues with gzip and compress related to .Z
130 files that are corrupted.
131
132 Fix path validation with unix domain sockets.
133
134 20110917:
135 Remove dependance on mports perl for generating releases as
136 it's in the base system.
137
138 20110914:
139 Import xz 5.0.3 with liblzma 5.0.3
140
141 20110813:
142 synced the sparc64 GENERIC kernel configuration with amd64.
143
144 20110806:
145 sqlite 3.7.7.1 imported
146
147 msearch(1), libmsearch and msearch.import added. msearch(1) provides
148 a full text search command line tool. libmsearch can also be used
149 to build a graphical based search in the future. You can enable
150 index building for msearch in periodic.conf or manually run the
151 /usr/libexec/msearch.index tool. Full text indexes take considerable
152 space in /var. I'm using approximately 500MB currently.
153
154 Fix a long standing bug with the periodic script to check package
155 versions. This will be obsolete with mport though.
156
157 20110710:
158 kdb_enter_why added to MidnightBSD to allow the kernel debugger to
159 know why it's in use and thus script can be run.
160
161 Yet another problem with the perl manifest was fixed
162
163 20110709:
164 cpufreq(1) is a new utility to monitor CPU frequency which may change
165 with use of powerd(8) and cpufreq(4).
166
167 20110612:
168 Update mksh to R40
169
170 Catch up ObsoleteFiles.inc to remove Perl 5.10.x. Good to run when
171 updating current (cd /usr/src && make check-old)
172
173 20110528:
174 Fix CVE-2011-1910 in BIND 9.6.x. This affects caching resolvers.
175
176 20110526:
177 newfs:
178 Raised the default blocksize for UFS/FFS filesystems from
179 16K to 32K and the default fragment size from 2K to 4K.
180
181 This should slightly imporve performance on "advanced format"
182 hard drives such as the WD EARS drives. Drives of this type
183 have emulation modes that slow down with lower sizes. Of course
184 the drive must still be aligned properly when using fdisk.
185
186 20110521:
187 mport tool now has a deleteall command. This can be used to remove
188 all packages from a system.
189
190 A few bugs with the perl 5.14 import have been fixed.
191
192 20110518:
193 Perl 5.14.0
194
195 20110517:
196 Sendmail 8.14.5
197
198 20110314:
199 DRM/DRI code updated to support newer video cards. (FreeBSD 7.1)
200
201 cdevpriv wrappers added
202
203 nss_mdns hack introduced to work around linking problem.
204
205 dnsextd fixed after update to mDNSResponder code.
206
207 20110308:
208 Introduce liblzma & xz 5.0.1 to the base system
209
210 Patch for OpenSSL security issue CVE-2011-0014.
211
212 "OSREVISION 4004"
213
214 nsswitch module for multicast dns (nss_mdns) added.
215
216 tzdata2011c
217
218 20110220:
219 cam(4) syncronized with FreeBSD 7.3.
220
221 20110219:
222 amdtemp(4) updated to support sensors framework.
223
224 20110217:
225 Perl 5.10.1 imported
226
227 20110216:
228 Introduce igb(4) and split Intel Gigabit Ethernet adapters between
229 igb(4) and em(4). Newer devices use igb(4). The code has moved
230 to sys/dev/e1000 for both devices in the kernel. igb(4) has
231 been placed in GENERIC on i386 and amd64.
232
233 Update bfe(4) to support newer devices and WOL.
234
235 20110215:
236 age(4) added.
237
238 20110208:
239 BIND 9.6.3 which fixes a bug with DNSSEC records getting added.
240
241 20110206:
242 eeemon(4) added to monitor Asus Eee PC.
243
244 20110205:
245 OpenSSH 5.7p1
246
247 GNU sort 6.9 (coreutils)
248
249 20110203:
250 one true awk 20100523 imported
251
252 sqlite 3.7.5
253
254 OpenSSL 0.9.8q
255
256 20110202:
257 tcsh 6.17.00
258
259 file 5.05
260
261 20110122:
262 Import it(4) and lm(4), with support for Super I/O hardware monitors. This
263 uses the sensors framework ported by Constantine A. Murenin (GSOC2007)
264
265 20110120:
266 BIND 9.6.2-P3
267
268 sudo 1.7.4-p6
269
270 20110115:
271 Add experimental jme(4) for Jmicron ethernet devices.
272
273 20101130:
274 A double free exists in the SSL client ECDH handling code, when
275 processing specially crafted public keys with invalid prime
276 numbers. [CVE-2010-2939]
277
278 20101120:
279 Several portions of the kernel and userland code related to UFS file
280 systems (and UFS2) cannot properly handle inode counts above 2^31 due
281 to use of int types. Based on a patch from FreeBSD, I've modified
282 our UFS2 implementation to handle unsigned values for inode counts
283 which should allow for file systems greater than 16TB.
284
285 newfs and growfs was also modified.
286
287 20101110:
288 Fix a security issue with pseudofs which could result in running code in kernel
289 context or a kernel panic depending on system configuration. This affects file
290 systems such as procfs for instance.
291
292 20101021:
293 sysrc is a utility to print and modify name/value pairs in /etc/rc.conf easily.
294 This is similar to functions present in many linux distros. The utility was
295 written by Devin Teske for FreeBSD.
296
297 20100920:
298 bzip2 security patch for integer overflow.
299
300 20100905:
301 MidnightBSD RELENG_0_3 branch created. Aggressive development continues here
302 for 0.4.
303
304 20100902:
305 Fix a security issue with libutil that allows users to bypass cpu limits in
306 login.conf in some cases. This combined with OpenSSH for example can allow
307 the user to get more resources than they're allowed.
308
309 20100822:
310 Import Apple's mDNSResponder (mdnsd).
311
312 20100814:
313 libdispatch added to MidnightBSD. This provides functionality found in
314 Mac OS X's GCD. We do not have blocks support yet. As this code is
315 licensed under Apache 2, we create a new MK_APACHE option so that
316 it's not required for all users to run code under a license they
317 may not like.
318
319 20100713:
320 mbuf readonly fix related to sendfile(2) data corruption.
321
322 20100704:
323 brainfuck(1) imported from MirBSD.
324
325 20100505:
326 zlib 1.2.5
327
328 20100430:
329 Sudo 1.7.2p6 imported
330
331 20100321:
332 Update zlib to 1.2.4
333
334 20100319:
335 Removed i586 from default i386 generic kernel.
336
337 20100317:
338 Update to tzdata2010e (time zones). This includes changes in
339 Mexico.
340
341 Add support for several newer sound cards via hda including
342 ATI and Realtek chipsets.
343
344 20100313:
345 CPU detection has been changed. VIA Padlock detection added.
346
347 20100312:
348 Fix a number of bugs and compiler warnings in libmport. Handle
349 plus signs in paths for mport.check-fake
350
351 20100311:
352 mksh R39c
353
354 20100309:
355 Sudo 1.7.2p5
356
357 sqlite3 3.6.23
358
359 mksh R39b
360
361 libffi (ffi) 3.0.9
362
363 20100206:
364 WITHOUT_LIB32 is no longer needed on AMD64. GCC was fixed to
365 properly pass arguments to ld.
366
367 re(4) and rl(4) have been updated to support several new
368 realtek chipsets. Performance has been improved on re(4).
369
370 20100204:
371 Fix a bug cropping up on AMD64 MidnightBSD with sftp
372 segfaulting.
373
374 20100116:
375 Import ash changes from FreeBSD (bin/sh) 8-Stable.
376
377 BIND 9.6.1-P2
378
379 20100110:
380 Import Sendmail 8.14.4. Fix for SSL vulnerability.
381
382 posix_spawn(3) added to MidnightBSD libc. Users may need to build and
383 install libc before doing a full buildworld when upating from 0.2 or
384 older current systems.
385
386 kqueue(2) was modified to support portions of libdispatch functionality.
387
388 20100106:
389 Bind security update. Fix a bug with DNSSEC that causes negative
390 cache entries and thus a possible DNS cache poisoning attack.
391
392 Fix a bug in ZFS that can reset permissions on system crashes.
393
394 20091228:
395 amdtemp(4) was added. It allows one to monitor to the temperature
396 of an AMD CPU such as a Phenom.
397
398 20091205:
399 OpenSSL security fix
400
401 The SSL version 3 and TLS protocols support session renegotiation without
402 cryptographically tying the new session parameters to the old parameters.
403
404 20091128:
405 OpenBSD sensors framework imported including sensorsd(8)
406
407 20091126:
408 OpenNTPD 4.4 import
409
410 Update OpenSSH to 5.3p1
411
412 mksh R39
413
414 20091124:
415 cpdup updated from DragonFly to 1.15
416
417 tzdata2009s updated with latest timezone data for November 2009.
418
419 20091010:
420 amd64 users should use WITHOUT_LIB32=yes in /etc/make.conf for now
421 to test current.
422
423 Revert unicode filename fixes from ntfs code. This was causing chaos
424 on amd64 systems.
425
426 20091006:
427 Update timezone data with tzdata2009n with the Pakistan and
428 Argentina changes.
429
430 Sync several userland utilities with versions from FreeBSD 7.0 in
431 sbin and usr.sbin.
432
433 20090919:
434 Update timezone data with tzdate2009m from September 2009.
435
436 20090729:
437 Patch for Bind 9 security vulnerability. a dynmaic update packet
438 can trigger an assertion and cause named to exit
439
440 20090606:
441 Remove PCC from the base system. This compiler will not work
442 as a system compiler for us as we've got some userland investment
443 in C++ code and may have Objective-C in the future. We're stuck
444 with a solution that supports these three languages at a minimum.
445
446 I had wanted to keep it as an optional compiler because it is
447 fast, however too many users want to try to use it for the base
448 system which makes no sense.
449
450 A hack was added for Cypress based usb hard drive enclosures to
451 the kernel. This should cut down on commands it claims to support
452 but does not (at the cam layer). Found while testing ZFS on
453 an external device.
454
455 20090520:
456 The powerd daemon no longer starts automatically to improve
457 compatibility with many systems. However, there is a new
458 installer option in the startup section to enable it. This
459 makes it easier to enable for users that have working systems. I thought it was only a problem on older hardware, but it freaks
460 out my new Phenom too.
461
462 20090502:
463 OpenSSH 5.2p1 import
464
465 ale(4) connected to the build. (kernel module only)
466
467 20090501:
468 Imported makefs utility from NetBSD/FreeBSD
469
470 20090422:
471 OpenSSL security update
472
473 The function ASN1_STRING_print_ex does not properly validate the lengths
474 of BMPString or UniversalString objects before attempting to print them.
475
476 20090415:
477 Created a Symbol.map for libc/ohash symbols
478
479 Updated several usr/bin usr/sbin utilities.
480
481 Corrected a bug with Makefile.inc1 causing the bootstrap
482 tools to fail.
483
484 20090405:
485 xorg 7.4 wants to configure its input devices via hald which does not
486 yet work with USB. If the keyboard/mouse does not work in xorg then
487 add
488 Option "AllowEmptyInput" "off"
489 to your ServerLayout section. This will cause X to use the configured
490 kbd and mouse sections from your xorg.conf
491
492 20090403:
493 mksh was disconnected a few day ago do to bugs with
494 buildworld and mports. Now, connect it back
495 for use as /bin/sh with a conditional called
496 MK_ASH. By default, ash is the standard /bin/sh
497 but we may change this later. This will allow further
498 testing by users and developers of mksh without
499 causing an unpleasant default experience. In the
500 long run, we need to fix mksh compatibility.
501
502 20090328:
503 Bring in mksh R37 from CVS. The dot.mkshrc files for root
504 and skel were changed. mksh(1) now replaces ash aka sh(1)
505 as the default /bin/sh. Please report bugs with
506 ports, etc. The ash code will remain in the repo for awhile
507 as I decide if we'll add something like MK_SHELL_ASH as
508 an optional build parameter.
509
510 ahd was disconnected from the lint environment until
511 the compiler bug is sorted (by updating gcc?)
512
513 Remove freebsd-tips from fortune files and change the
514 default for login and profile.
515
516 20090327:
517 Update libarchive to 2.5.5, tar, and add bsdcpio.
518
519 Also previously, ctriv has been connecting Perl 5.10
520 to the build (part of os). This will have an impact
521 on mports.
522
523 20090325:
524 Update Bind to 9.4.3-P1
525
526 Update mksh to R36b
527
528 Update tcpdump to 3.9.8, fix libpcap to work with current.
529
530 Update pnpinfo, sync with FreeBSD.
531
532 20090115:
533 Fix a problem with DNSSEC and BIND.
534
535 20090110:
536 For applications using OpenSSL for SSL connections, an invalid SSL
537 certificate may be interpreted as valid. This could for example be
538 used by an attacker to perform a man-in-the-middle attack.
539
540 Other applications which use the OpenSSL EVP API may similarly be
541 affected.
542
543 Stop cross site request forgery attacks in lukemftpd
544
545 20090104:
546 Import GNU libreadline 5.2
547
548 20090101:
549 Update time zone data to 2008i.
550
551 20081231:
552 Correct a problem where bluetooth and netgraph sockets are not
553 properly initialized.
554
555 Happy 2009.
556
557 20081206:
558 Due to the massive change in the underlying system under way,
559 we're naming the next release 1.0. The sys/sys/param.h was
560 changed accordingly. ipfilter and ncurses were corrected
561 using __MidnightBSD__ tests in the code.
562
563 The GENERIC kernel config was caught up on i386 today. Consider
564 i386 still broken, but amd64 is running again.
565
566 mdoc.local was updated with the new MidnightBSD version info.
567
568 batt(1) was rewritten in C. It now supports several flags and
569 runs about 8 times faster on my laptop. The default output
570 shows the number of minutes of battery life remaining and the
571 percentage. You can use -u to display the number of batteries or
572 -c to get script friendly output. Consult the man page for more.
573
574 20081204:
575 Work has completed on importing ZFS, jemalloc, several
576 new devices, SCTP, updated pf, a new tempfs, linuxolator 2.6 kernel
577 support, improved locking for file desc., audit (openbsm),
578 openssl .98e, nfe, imporved intel high def audio, midi, updated
579 intel gigabit (em), support for several wifi cards (intel), ...
580
581 Renamed 0.3-CURRENT officially. Switched to using MidnightBSD version
582 data from param.h instead of the FreeBSD version. This means
583 testing is now possible in the ports tree for the version
584 and that any ports or code relying on the FreeBSD version from
585 sys/sys/param.h will need to be fixed.
586
587 20080905:
588 update nve(4) to support new hardware.
589
590 20080801:
591 Import OpenBSM 1.0
592
593 Modify src/release to create 3 isos instead of 2 for packages.
594
595 etc/rc.d/firstboot now enables kdm, gnustep + slim and bsdstats.
596
597 Many ia64, alpha, powerpc items were removed.
598
599 The recent diffutils 2.8.7 import was fixed.
600
601 20080703:
602 pcc was not installed properly when setting DESTDIR for live cds,
603 or posibly jails.
604
605 20080627:
606 Add firmware(9), WEP, CCMP, TKIP to GENERIC.
607
608 Add glabel to GENERIC.
609
610 Intel ICH8 mobile chipset used on some iMacs included with ata.
611
612 pcc connected to the build on i386. (alternative compiler)
613
614 ath added to GENERIC. (Atheros wireless NICs) on amd64/i386
615
616 20080528:
617 Sendmail 8.14.3
618
619 20080516:
620 ssh-vulnkey allows you to look for vulnerable ssh keys that
621 were generated on Debian and Ubuntu hosts over the last
622 few years. sshd can block offending keys with a configuration
623 option.
624
625 The elf note on binaries is now set to MidnightBSD.
626
627 20080514:
628 Fixed a number of problems with pcc. It is not yet connected
629 to the build, but usable on i386 hosts. You may use it
630 by make; make install in /usr/src/usr.bin/pcc. It will
631 install in /usr/local as some of the files conflict with
632 GCC versions. __MidnightBSD__ is defined in PCC as well.
633
634 System headers were fixed to allow pcc to compile many binaries
635 on MidnightBSD. bin/cp will work now for instance.
636
637 20080430:
638 __MidnightBSD__ is now defined via gcc. This can be tested
639 to determine we're running on MidnightBSD in the preprocessor.
640
641 20080429:
642 Import bind 9.4.2 with threading
643
644 libpthread (KSE) and libthr are built earlier
645
646 pcvt(4) removed!
647
648 Alias added for core2 cpus.
649
650 Alpha and PC98 only utilities removed from usr/sbin
651
652 syslogd, adduser, rmuser, mergemaster and mailwrapper have been
653 improved. See the man pages for info.
654
655 periodic scripts will not send emails with empty message bodies.
656 See mailwrapper fix.
657
658 20080410:
659 Sync cpdup with DragonFly. Add parallel transaction support and
660 -l flag to line-buffer stdout and stderr.
661
662 20080406:
663 Import bzip2 1.05
664 Import OpenSSH 4.9p1
665
666 20080322:
667 The default umask was changed to 022.
668
669 /usr/X11R6 paths were removed from several config files.
670
671 .mkshrc files are now installed for root.
672
673 20080316:
674 FIx a problem with gif0 tunnels and neighbors with IPV6.
675
676 20080312:
677 Add lndir from X.org. This aides in the porting of MirPorts.
678
679 New OS versions were added to the mapage code (groff)
680
681 20080310:
682 Correct a buffer overflow in ppp.
683
684 20080308:
685 Remove /usr/X11R6 from manpath config.
686
687 20080307:
688 Atheros driver no longer has several options set
689 which corrects building in tinderbox on all three platforms.
690
691 Added a new macro to sx.h which returns true if the current
692 thread holds an exclusive lock on a specifix sx.
693
694 Removed OS/2's HPFS file system. It's not maintained and
695 I don't know anyone using OS/2 or ecomstation these days.
696 My copy is in the closet collecting dust.
697
698 20080306:
699 Synced tinderbox with FreeBSD. Modified it for MidnightBSD.
700 Developers can now use it to check src builds.
701
702 20080303:
703 Add mksh to /etc/shells, made some adjustments to options
704 for mksh builds per suggestion upstream.
705
706 USB HID table updated with modern hardware list.
707
708 Updated BSD family true (we're not in there yet)
709
710 iso3166 file updated and import of tzdata2007k for
711 new time zones.
712
713 Updated mksh to latest version R33.
714
715 20080228:
716 Remplaced the random IP id generation code with a new
717 version by Amit Klein.
718
719 20080221:
720 Sendfile write only permissions fix.
721
722 Removed some HPFS and PC98 code.
723
724 iso639 file sycned with DragonFly.
725
726 20080128:
727 Changed NTP configuration so that ips aren't cached
728 so multiple servers are used.
729
730 Fix an issue with fork() in libpthread.
731
732 20080121:
733 Add virtualization detection to set the HZ rate
734 according to a VM present. VMWare and Parallels
735 should work better like this.
736
737 Change to full x11 install in sysinstall. Add
738 xorg 7 support.
739
740 20080115:
741 Fix the handling of PTY's. CVE-2008-0216
742
743 20080105:
744 mport delete code added, USE_MPORT_TOOLS knob aded.
745
746 20080101:
747 Happy New Year
748
749 20071123:
750 Update sendmail to 8.14.2
751
752 20071120:
753 Update system compiler to gcc 3.4.6.
754
755 20071023:
756 Updated mksh to R31d.
757
758 20070911:
759 Updated mksh to version R31b.
760
761 Fixed stderr output in libpthread. Previously it was
762 written to stdout.
763
764 20070831:
765 Added dot.mkshrc file to support the recent change to
766 mksh from OpenBSD's ksh derived from pdksh.
767
768 Added new firewall configuration. ipfw is enabled by default
769 with a "desktop" configuration. Consult /etc/rc.firewall
770 or ipfw show to see the ruleset used. You can disable
771 ipfw by setting firewall_enable="NO" in /etc/rc.conf This
772 change only effects IPv4. IPv6 does not have a firewall
773 enabled by default.
774
775 20070814:
776 Removed GNU tar source. We've been using BSD tar
777 for awhile.
778
779 20070806:
780 Finished removing umapfs and autofs from the tree.
781
782 20070804:
783 BIND and Tcpdump have been patched for recent vulnerabilities.
784
785 We switched to BSD cpio (pax).
786
787 20070719:
788 Imported cpdup from DragonFly as /bin/cpdup
789
790 20070716:
791 Update GNU cpio to 2.8.
792
793 20070410:
794 cvs was updated to 1.12.13. cvsbug was removed.
795 cvs now behaves similarly to DragonFly's cvs with
796 most of their local changes.
797
798 20070409:
799 RELENG_0_1 was created. More aggresive changes will
800 continue here.
801
802 20070406:
803 Back out propolice. propolice caused several problems
804 with our threading libraries libthr and libpthread.
805 curthread was often NULL after the patch and many
806 multithreaded applications would crash. We plan to
807 work on either bringing in gcc 4.1 or developing a new
808 patch which also corrects our threading issues later.
809
810 It is more important to have a stable system for our
811 mport work and other projects at this time.
812
813 This is not a clean removal. It is recommended that you
814 have a recently SNAP CD handy. You can either reinstall
815 or perform a make buildworld and make buildkernel and
816 make installkernel. Reboot on the cd and copy the contents
817 of /bin, /sbin, /lib, /libexec, and /usr/bin, /usr/sbin,
818 /usr/lib, and /usr/libexec to the respective directories on
819 your disk. Then you should be able to boot into single user
820 mode and run make installworld. You will need to run
821 chflags noschg on some of the files if you can't overwrite
822 them.
823
824 You will get __guard missing errors since we had to remove
825 this from libc.
826
827 You will need to rebuild any ports built while propolice was
828 installed.
829
830 20070401:
831 Importing propolice into MidnightBSD. Propolice is going to
832 provide us with much greater security and stability in the
833 long run. If upgrading from a pre-propolice system, please
834 follow the these instructions:
835
836 cd /usr/src/lib/libc && make obj && make && make install
837 cd /usr/src/gnu/usr.bin/cc && make obj && make && make install
838 cd /usr/src/lib/libpthread && make obj && make && make install
839 cd /usr/src/lib/libthr && make obj && make && make install
840 buildworld and kernel
841
842 It is adviced that any mports which were installed and/or built
843 prior to the propolice update also be updated. If any errors
844 or issue are encounted, please contact security@midnightbsd.org
845 and we will be sure to investigate and come up with an expeditious
846 fix.
847
848 20070314:
849 Remove send-pr from src.
850
851 Switch to NetBSD's gzip.
852
853 Bump MBSD minor revision.
854
855 20070313:
856 Imported OpenSSH 4.6p1.
857
858 Imported FreeBSD's libarchive and updated tar to work with it.
859
860 Disabled debug statements cluttering up /var/log/messages for
861 the tcp autobuf patch applied previously.
862
863 20070312:
864 Synced several audio changes from FreeBSD 6.1. Removed the
865 BSD Daemon files from src/share.
866
867 20070308:
868 Added mfi which supports LSI Logic MegaRAID SAS devices including
869 the Dell perc5i.
870
871 20070206:
872 Imported OpenBSD's sudo into source. Please install
873 /usr/src/usr.bin/sudo/lib first before building.
874
875 Those who install from a snapshot after this date
876 will not be effected.
877
878 20070119:
879 Added audit group. Be sure to add audit to your /etc/group file
880 before installing world.
881
882 hostapd was updated to 0.4.8.
883
884 An accidental commit in usr.sbin/bluetooth/hccontrol was fixed to
885 unbreak world.
886
887 wpa_supplicant was updated.
888
889 For stability and compatibility reasons, it was decided that MidnightBSD
890 sync with FreeBSD 6.1 Release. Nearly every change between the original
891 fork date of February 24, 2006 and the release of FreeBSD 6.1 in May
892 2006 will be merged. Beyond this, MidnightBSD will be a "real" fork and
893 will not sync every little change with FreeBSD.
894
895 20061231:
896 Updated COPYRIGHT for 2007.
897
898 Updated and bumped libutil after importing NetBSD efun(3) functions.
899
900 Added MidnightBSD_version and bumped the FreeBSD version as we've
901 synced all commits between the fork and that version. It is now safe
902 to assume MidnightBSD is compatible with FreeBSD RELENG_6 from
903 Feb 26, 2006.
904
905 Added spell(1) and deroff(1) from NetBSD. Also added additional
906 dict files to work with it. /usr/share/dict/american,
907 /usr/share/dict/british and /usr/share/dict/special/math
908
909 Numerous man page and bug fixes.
910
911 20061226:
912 Setup /usr/share/examples/cvsup SUPfiles for the new
913 MidnightBSD CVSup server.
914
915 Fix a bug in burncd where it would continue forever while
916 erasing CDRW media.
917
918 Add csup to /usr/bin. csup is a CVSup replacement written
919 in C.
920
921 Fixed a bug with bsnmpd build from Oct 30.
922
923 Corrected some race conditions and fixed a few bugs in
924 geom. Imported changes from FreeBSD RELENG_6.
925
926 20061225:
927 Fixed a typo in src/lib/libc/sparc64/fpu/fpu_implode.c
928 that caused long double to long and long long
929 conversion of negative numbers to always result in -1.
930
931 20061221:
932 Fixed acpi_battery.c to not report an ERROR if no
933 batteries are present.
934
935 Performed some minor updates on the RL and RE NIC drivers.
936 RL should no longer panic when trying to print errors.
937
938 Corrected a bug with TTY.
939
940 20061218:
941 Corrected a bug with libpthread where newly created suspended
942 threads don't get scheduled.
943
944 20061206:
945 Fixed a typo with the firewire security patch.
946
947 20061129:
948 Minor cleanups to utilities in bin.
949
950 Fixed msdos file system short file name behavior to match
951 FreeBSD.
952
953 20061031:
954 Updated man pages in section 7.
955
956 20061030:
957 Updated sys/dev/drm to support intel 915 and radeon
958 r300 cards properly.
959
960 Synced snmpd with FreeBSD-stable.
961
962 Fixed a bug in rm which could cause data loss.
963
964 20061027:
965 Added Intel ICH8 and nForce 5 support to ATA. cam, mpt,
966 random, kbdmux, atkbd, and usb were updated. Changes
967 to clearing registers on SSE enabled processors (i386)
968 commited.
969
970 lukemftpd updated.
971
972 openssh rc script was altered which effects initial
973 seeding.
974
975 20061014:
976 Workaround for em driver problem on shared IRQ.
977
978 Started removal of alpha support.
979
980 20061013:
981 ATA driver was updated. USB/USB1/USB2 types added.
982
983 20061010:
984 OpenSSH was updated to 4.4p1.
985
986 20060909:
987 OpenNTPD was added to MidnightBSD. Run make delete-old to remove
988 the old ntpd daemon.
989
990 cat has a new option -D which allows you to timestamp output
991 on a per line basis.
992
993 The kernel has a keyboard mux which allows you to have multiple
994 keyboard connected simultaneously. USB keyboard support was also
995 improved with this patch.
996
997 The Intel em driver was updated. Network performance was greatly
998 increased on many systems. Additional models are supported.
999
1000 The ATA driver was patched to fix a potential deadlock.
1001
1002 Bind was patched to fix a potential denial of service condition.
1003
1004 20060817:
1005 ksh has been added to the base system. If you previously had
1006 the port installed, it will be overwritten on the next buildworld.
1007
1008
1009
1010 To build a kernel
1011 -----------------
1012 If you are updating from a prior version of MidnightBSD (even one just
1013 a few days old), you should follow this procedure. With a
1014 /usr/obj tree with a fresh buildworld,
1015 make -DALWAYS_CHECK_MAKE buildkernel KERNCONF=YOUR_KERNEL_HERE
1016 make -DALWAYS_CHECK_MAKE installkernel KERNCONF=YOUR_KERNEL_HERE
1017
1018 To test a kernel once
1019 ---------------------
1020 If you just want to boot a kernel once (because you are not sure
1021 if it works, or if you want to boot a known bad kernel to provide
1022 debugging information) run
1023 make installkernel KERNCONF=YOUR_KERNEL_HERE KODIR=/boot/testkernel
1024 nextboot -k testkernel
1025
1026 To just build a kernel when you know that it won't mess you up
1027 --------------------------------------------------------------
1028 This assumes you are already running a 6.X system. Replace
1029 ${arch} with the architecture of your machine (e.g. "i386",
1030 "amd64", "ia64", "pc98", "sparc64", etc).
1031
1032 cd src/sys/${arch}/conf
1033 config KERNEL_NAME_HERE
1034 cd ../compile/KERNEL_NAME_HERE
1035 make depend
1036 make
1037 make install
1038
1039 If this fails, go to the "To build a kernel" section.
1040
1041 To rebuild everything and install it on the current system.
1042 -----------------------------------------------------------
1043 # Note: sometimes if you are running current you gotta do more than
1044 # is listed here if you are upgrading from a really old current.
1045
1046 <make sure you have good level 0 dumps>
1047 make buildworld
1048 make kernel KERNCONF=YOUR_KERNEL_HERE
1049 [1]
1050 <reboot in single user> [3]
1051 mergemaster -p [5]
1052 make installworld
1053 make delete-old
1054 mergemaster [4]
1055 <reboot>
1056
1057
1058 To cross-install current onto a separate partition
1059 --------------------------------------------------
1060 # In this approach we use a separate partition to hold
1061 # current's root, 'usr', and 'var' directories. A partition
1062 # holding "/", "/usr" and "/var" should be about 2GB in
1063 # size.
1064
1065 <make sure you have good level 0 dumps>
1066 <boot into -stable>
1067 make buildworld
1068 make buildkernel KERNCONF=YOUR_KERNEL_HERE
1069 <maybe newfs current's root partition>
1070 <mount current's root partition on directory ${CURRENT_ROOT}>
1071 make installworld DESTDIR=${CURRENT_ROOT}
1072 cd src/etc; make distribution DESTDIR=${CURRENT_ROOT} # if newfs'd
1073 make installkernel KERNCONF=YOUR_KERNEL_HERE DESTDIR=${CURRENT_ROOT}
1074 cp /etc/fstab ${CURRENT_ROOT}/etc/fstab # if newfs'd
1075 <edit ${CURRENT_ROOT}/etc/fstab to mount "/" from the correct partition>
1076 <reboot into current>
1077 <do a "native" rebuild/install as described in the previous section>
1078 <maybe install compatibility libraries from src/lib/compat>
1079 <reboot>
1080
1081
1082 To upgrade in-place from 5.x-stable or higher to 6.x-stable
1083 -----------------------------------------------------------
1084 <make sure you have good level 0 dumps>
1085 make buildworld [9]
1086 make kernel KERNCONF=YOUR_KERNEL_HERE [8]
1087 [1]
1088 <reboot in single user> [3]
1089 mergemaster -p [5]
1090 make installworld
1091 make delete-old
1092 mergemaster -i [4]
1093 <reboot>
1094
1095 Make sure that you've read the UPDATING file to understand the
1096 tweaks to various things you need. At this point in the life
1097 cycle of current, things change often and you are on your own
1098 to cope. The defaults can also change, so please read ALL of
1099 the UPDATING entries.
1100
1101 Also, if you are tracking -current, you must be subscribed to
1102 freebsd-current@freebsd.org. Make sure that before you update
1103 your sources that you have read and understood all the recent
1104 messages there. If in doubt, please track -stable which has
1105 much fewer pitfalls.
1106
1107 [1] If you have third party modules, such as vmware, you
1108 should disable them at this point so they don't crash your
1109 system on reboot.
1110
1111 [3] From the bootblocks, boot -s, and then do
1112 fsck -p
1113 mount -u /
1114 mount -a
1115 cd src
1116 adjkerntz -i # if CMOS is wall time
1117 Also, when doing a major release upgrade, it is required that
1118 you boot into single user mode to do the installworld.
1119
1120 [4] Note: This step is non-optional. Failure to do this step
1121 can result in a significant reduction in the functionality of the
1122 system. Attempting to do it by hand is not recommended and those
1123 that pursue this avenue should read this file carefully, as well
1124 as the archives of freebsd-current and freebsd-hackers mailing lists
1125 for potential gotchas.
1126
1127 [5] Usually this step is a noop. However, from time to time
1128 you may need to do this if you get unknown user in the following
1129 step. It never hurts to do it all the time.
1130
1131 [8] In order to have a kernel that can run the 5.x binaries
1132 needed to do an installworld, you must include the COMPAT_FREEBSD5
1133 option in your kernel. Failure to do so may leave you with a system
1134 that is hard to boot to recover. A similar kernel option COMPAT_FREEBSD5
1135 is required to run the 5.x binaries on more recent kernels.
1136
1137 Make sure that you merge any new devices from GENERIC since the
1138 last time you updated your kernel config file.
1139
1140 [9] When checking out sources, you must include the -P flag to have
1141 cvs prune empty directories.
1142
1143 If CPUTYPE is defined in your /etc/make.conf, make sure to use the
1144 "?=" instead of the "=" assignment operator, so that buildworld can
1145 override the CPUTYPE if it needs to.
1146
1147 MAKEOBJDIRPREFIX must be defined in an environment variable, and
1148 not on the command line, or in /etc/make.conf. buildworld will
1149 warn if it is improperly defined.
1150
1151 Copyright information:
1152
1153 Copyright 1998-2005 M. Warner Losh. All Rights Reserved.
1154
1155 Redistribution, publication, translation and use, with or without
1156 modification, in full or in part, in any form or format of this
1157 document are permitted without further permission from the author.
1158
1159 THIS DOCUMENT IS PROVIDED BY WARNER LOSH ``AS IS'' AND ANY EXPRESS OR
1160 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
1161 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
1162 DISCLAIMED. IN NO EVENT SHALL WARNER LOSH BE LIABLE FOR ANY DIRECT,
1163 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
1164 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
1165 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
1166 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
1167 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
1168 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
1169 POSSIBILITY OF SUCH DAMAGE.
1170
1171 If you find this document useful, and you want to, you may buy the
1172 author a beer.
1173
1174 Contact Warner Losh if you have any questions about your use of
1175 this document.
1176
1177 $FreeBSD: src/UPDATING,v 1.416.2.18 2006/02/22 11:51:57 yar Exp $
1178 $MidnightBSD: src/UPDATING,v 1.152 2011/12/24 03:08:57 laffer1 Exp $

Properties

Name Value
cvs2svn:cvs-rev 1.153