MyCity :: *BSD

Re: Instalacija i konfiguracija NAS (Network Attached Storage) servera

nobody@mycity.rs (kostolac) — Wed, 19 Feb 2020 22:01:46 +0100

Dok ne nabavin drugi hard disk imam jedno hipoteti�ko pitanje. U slu�aju da se pokvari usb flash na kome se nalazi instalacija freenas-a da li se i kako moze pristupiti fajlovima koji se nalaze na hard disku?

Re: MidnightBSD

nobody@mycity.rs (bocke) — Wed, 28 Feb 2018 16:27:06 +0100

----------- Napisano: 28 Avg 2016 13:12 ---------

Ina�e, Lumina Desktop (prva slika) je lagano desktop okru�enje bazirano na Qt5. Dostupno je i za druge Juniksoide, uklju�uju�i slobodnu BSD familiju operativnih sistema i mnoge Linuks distribucije. Lumina je originalno razvijena za TrueOS/PC-BSD. Za vi�e informacija, bacite pogled ovde.

----------- Dopuna: 28 Feb 2018 16:27 ---------

Intervju sa osniva�em MidnightBSD projekta: [Link mogu videti samo ulogovani korisnici] (27.02.2018.)

Re: [Nova izdanja] OpenBSD

nobody@mycity.rs (Rogi) — Wed, 12 Apr 2017 10:58:24 +0100

OpenBSD 6.1

+ Novosti i izmene------------------------------------------------------------------------
- OpenBSD 6.1 RELEASED -------------------------------------------------

April 11, 2017.

We are pleased to announce the official release of OpenBSD 6.1.
This is our 42nd release. We remain proud of OpenBSD's record of more
than twenty years with only two remote holes in the default install.

As in our previous releases, 6.1 provides significant improvements,
including new features, in nearly all areas of the system:

- New/extended platforms:
o New arm64 platform, using clang(1) as the base system compiler.
o The loongson platform now supports systems with Loongson 3A CPU
and RS780E chipset.
o The following platforms were retired: armish, sparc, zaurus.

- Improved hardware support, including:
o New acpials(4) driver for ACPI ambient light sensor devices.
o New acpihve(4) driver for feeding Hyper-V entropy into the kernel
pool.
o New acpisbs(4) driver for ACPI Smart Battery devices.
o New dwge(4) driver for Designware GMAC 10/100/Gigabit Ethernet
devices.
o New htb(4) driver for Loongson 3A PCI host bridges.
o New hvn(4) driver for Hyper-V networking interfaces.
o New hyperv(4) driver for the Hyper-V guest nexus device.
o New iatp(4) driver for the Atmel maXTouch touchpad and
touchscreen.
o New imxtemp(4) driver for Freescale i.MX6 temperature sensors.
o New leioc(4) driver for the Loongson 3A low-end IO controller.
o New octmmc(4) driver for the OCTEON MMC host controller.
o New ompinmux(4) driver for OMAP pin multiplexing.
o New omwugen(4) driver for OMAP wake-up generators.
o New psci(4) driver for the ARM Power State Coordination Interface.
o New simplefb(4) driver for the simple frame buffer on systems
using a device tree.
o New sximmc(4) driver for Allwinner A1X/A20 MMC/SD/SDIO
controllers.
o New tpm(4) driver for Trusted Platform Module devices.
o New uwacom(4) driver for Wacom USB tablets.
o New vmmci(4) VMM control interface.
o New xbf(4) driver for Xen Blkfront virtual disks.
o New xp(4) driver for the LUNA-88K HD647180X I/O processor.
o Support for Kaby Lake and Lewisburg PCH Ethernet MACs with I219
PHYs has been added to the em(4) driver.
o Support for RTL8153 USB 3.0 Gigabit Ethernet based devices has
been added to the ure(4) driver.
o Improved ACPI support for modern Apple hardware, including S3
suspend and resume.
o Support for X550 family of 10 Gigabit Ethernet based devices has
been added to the ix(4) driver.

- New vmm(4)/ vmd(8):
o Support was partially integrated in 6.0, but disabled.
o Support for amd64 and i386 hosts.
o BIOS payload provided via vmm-firmware, delivered via
fw_update(1).
o Support for Linux guest VMs.
o Better interrupt handling and legacy device emulation.
o vmm(4) no longer requires VMX unrestricted guest capability
(Nehalem and later CPUs are sufficient).
o Removed bounce buffers previously used by vmd(8) for vio(4) and
vioblk(4) devices.
o Support VMs with > 2GB RAM.
o vmd(8) uses pledge(2) and the fork+exec model.
o vm.conf(5) expanded to include VM ownership rules (uid/gid).
o vmd(8)/ vm.conf(5) supports automatic bridge(4) and switch(4)
configuration for VM network interfaces.
o vmctl(8) supports graceful VM shutdown via vmmci(4).

- IEEE 802.11 wireless stack improvements:
o The ral(4) driver now supports Ralink RT3900E (RT5390, RT3292)
devices.
o The iwm(4) and iwn(4) drivers now support the short guard interval
(SGI) in 11n mode.
o Added a new implementation of MiRa, a rate adapation algorithm
designed for 802.11n.
o The iwm(4) driver now supports 802.11n MIMO (MCS 0-15).
o The athn(4) driver now supports 802.11n, featuring MIMO (MCS 0-15)
and hostap mode.
o The iwn(4) driver now receives MIMO frames in monitor mode.
o The rtwn(4) and urtwn(4) drivers now use AMRR rate adaptation
(8188EU and 8188CE devices only).
o TKIP/WPA1 was disabled by default because of inherent weaknesses
in this protocol.

- Generic network stack improvements:
o New switch(4) pseudo-device together with new switchd(8) and
switchctl(8) programs.
o New mobileip(4) operation mode for the gre(4) pseudo-device.
o Multipoint-to-multipoint mode in vxlan(4).
o route(8) and netstat -r display all routing flags correctly and
they are completely documented in the netstat(1) man page.
o When sending TCP streams they are locally stored in large mbuf
clusters to improve memory management. The maximum TCP send and
receive buffer size has been increased from 256KB to 2MB. Note
that this results in a different pf(4) OS fingerprint for OpenBSD.
The default limit for mbuf clusters has been increased. You can
check the values with netstat(1) -m and adjust them with sysctl(8)
kern.maxclusters.
o Make the TCP_NOPUSH flag work for listen(2) sockets. It is
inherited by the socket returned from accept(2).
o A lot of code has been removed or simplified to make the
transition to multi-processor easier. Redesign the interrupt and
multi-processor locks in the network stack.
o When passing packets from the network stack to the interface
layer, make sure that they have no pointers to pf(4) which could
result in a memory free operation at the wrong protection level.
o Fix checksum calculation in pf(4) af-to ICMP packet conversions.
Simplify af-to processing in and fix path MTU discovery in some
corner cases.
o Improve IPv6 fragment processing. Drop empty atomic fragments
early. Be more paranoid when IPv6 hop-by-hop headers appear after
fragment headers. Follow RFC 5722 "Handling of Overlapping IPv6
Fragments" more strictly in pf(4). RFC 8021 "IPv6 Atomic Fragments
Considered Harmful" deprecates generating atomic fragments, so do
not send them anymore.
o Depending on the addresses, ipsecctl(8) may automatically group SA
bundles together. To make clear what is going on, the kernel
provides this information and ipsecctl -s sa prints IPsec SA
bundles.
o A new routing socket message type, RTM_PROPOSAL, was added to
facilitate future improvements to the network configuration
process.

- Installer improvements:
o The installer now uses privilege separation for fetching and
verifying the install sets.
o Install sets are now fetched over an HTTPS connection by default
when using a mirror that supports it.
o The installer now considers all of the DHCP information in
filename, bootfile-name, server-name, tftp-server-name, and
next-server when attempting to do automatic installs or upgrades.
o The installer no longer adds a route to an alias IP via 127.0.0.1,
due to improvements in the kernel routing components.

- Routing daemons and other userland network improvements:
o ping(8) and ping6(8) are now the same binary and share the engine.
o ripd(8) now supports p2p links with addresses in different
subnets.
o UDP speakers can specify an IPv4 source address using
IP_SENDSRCADDR. iked(8) and snmpd(8) now use the proper source
address when sending replies.
o iked(8) now supports ECDSA and RFC 7427 signatures for
authentication.
o iked(8) now supports replying to IKEv2 responder cookies.
o Many fixes and improvements for iked(8) and ikectl(8), including
various fixes for rekeying.
o ospfd(8) and ospf6d(8) now cope with interface MTU change at
runtime.
o bgpd(8) now supports BGP Large Communities (RFC 8092).
o bgpd(8) now supports BGP Administrative Shutdown Communication
(draft-ietf-idr-shutdown).

- Security improvements:
o Enforcement of userland W^X on OCTEON Plus and later.
o All shared libraries, all dynamic and static-PIE executables, and
ld.so(1) itself use the RELRO ("read-only after relocation")
design such that more of the initial data is protected as
read-only.
o The size of user virtual address space has been increased from 2GB
to 1TB on mips64.
o PIE and -static -pie on arm.
o route6d(8) now runs with fewer privileges.
o For incoming TLS connections syslogd(8) can validate client
certificates with a given CA file.
o The privileged parent process of syslogd(8) calls exec(2) to
reshuffle its random memory layout.
o New function recallocarray(3) to reduce the risk of incorrect
clearing of memory before and after reallocarray(3).
o SHA512_256 family of functions added to libc.
o arm added to the list of archs where the setjmp(3) family of
functions apply XOR cookies to stack and return-address values in
the jmpbuf.
o printf(3) family of formatting functions now report to syslog when
the %s format is used with a NULL pointer.
o Heap buffer overflow detection has been improved when the C
malloc(3) option is used. The existing S option now includes C.
o Support for permitting non-root users to mount(8) filesystems has
been removed.
o bioctl(8) now uses bcrypt PBKDF to derive keys for crypto volumes.

- dhclient(8)/ dhcpd(8)/ dhcrelay(8) improvements:
o Add DHO_BOOTFILE_NAME and DHO_TFTP_SERVER to the options requested
by default.
o Add support for RFC 6842 (Client Identifier Option in DHCP Server
Replies).
o Stop leaking option data received on the udp socket.
o Stop pretending we use RFC 3046/Option 82/Relay Agent Information.
o Stop recording ignored DHO_ROUTERS and DHO_STATIC_ROUTES options
in the effective lease.
o Use only leases from no SSID or the current SSID when restarting.
o Reduce default values for various timeouts to something more
appropriate to modern networks.
o Fix issues with redundant dhcpd servers and CARP'd interfaces.
o Switch to standard logging functions
o Fix vis/unvis of strings in dhclient(8) leases files.

- Assorted improvements:
o New syspatch(8) utility for security and reliability binary
updates to the base system.
o acme-client(1), a privilege separated Automatic Certificate
Management Environment (ACME) client written by Kristaps Dzonsons
has been imported.
o New, simplified xenodm(1) X11 display manager forked from xdm(1).
o Unicode version 8 character properties in the C library.
o Partial UTF-8 line editing support for ksh(1) Vi input mode.
o UTF-8 support in column(1).
o The performance and concurrency of the malloc(3) family in
multi-threaded processes has been improved.
o Estonian keyboard support.
o read(2) on directories now fails instead of returning 0.
o Support for the RES_USE_EDNS0 and RES_USE_DNSSEC flags has been
added to the resolver(3) implementation.
o syslogd(8) limits the socket buffer for TCP and TLS connections to
64K to avoid wasting kernel memory.
o syslogd(8) supports the option -Z to print the timestamp in RFC
5424 ISO format. This logs everything in UTC including the year,
timezone and fractions of seconds. The default is still RFC 3164
BSD syslog time format.
o When log files are rotated, newsyslog(8) writes the creation time
in UTC ISO format into the first line.
o The syslogd(8) options -a, -T, and -U can be given more than once
to specify multiple input sources.
o Improve the syslogd(8) output and diagnostics in case the klog
buffer overflows.
o Make SIGHUP handling in syslogd(8) more reliable.
o Let syslogd(8) tolerate most errors on startup. Keep running and
receive messages from all working subsystems, but do not die.
o The syslog(3) priority of fatal and warning messages of various
daemons has been adjusted.
o An NMI sends the amd64 kernel into ddb(4) more reliably.
o ld.so(1) now supports the DT_PREINITARRAY, DT_INITARRAY,
DT_FINIARRAY, DT_FLAGS, and DT_RUNPATH dynamic tags.
o kdump(1) now dumps the fds returned by pipe(2) and socketpair(2).
o Added support to doas(1) for session-locked persistent
authentication.
o Use a hardware register for the thread pointer on arm for improved
performance in multi-threaded processes.
o SGI boot blocks now consult the OpenBSD disklabel(5) to locate the
root filesystem. This reduces constraints on disk partitioning.
o iec(4) no longer hangs when its transmit ring gets full.
o sq(4) has been fixed to accept broadcast frames in non-promiscuous
mode when no IP address is configured. This lets the interface
work with DHCP.
o Multiprocessor-safe PCI interrupt handlers are run without the
kernel lock on OpenBSD/sgi.
o fdisk(8) now unconditionally sets the size of the protective MBR's
EFI GPT partition to UINT32_MAX.
o fdisk(8) now respects the current MBR or GPT format when
initializing a disk.
o softraid(4) now uses sufficient parallel i/o's to efficiently
rebuild RAID5 volumes.
o asr now accepts UDP packets of up to 4096 bytes to account for
broken DNS servers.
o umass(4) no longer assumes that ATAPI or UFI devices have only 1
LUN.
o scsi(4) now correctly detects end of tape on LTO5 devices.
o httpd(8) supports SNI via libtls to allow for multiple https sites
on a single IP address.
o ocspheck(8) has been added, and can be used to check the OCSP
status of certificates. The corresponding responses can be saved
for later use in OCSP stapling.
o httpd(8) supports OCSP stapling via libtls to permit OCSP
responses to be stapled to the tls handshake
o nc(1) now also supports OCSP stapling server side, and will show
the stapling information client side.
o Both relayd(8) and httpd(8) support now TLS session resumption
using TLS session tickets. See the respective configuration man
page for more information.
o With the -f option sensorsd(8) can use an alternative config file.

- OpenSMTPD 6.0.0
o Added support for providing an alternate subaddressing delimiter.
o Made the daemon less verbose in logs when exiting.
o Improved the io layer to simplify code accross the daemon.
o Added support for matching authenticated sessions in the ruleset.
o Assorted code and documentation cleanups.

- OpenSSH 7.4
o Security:
- ssh-agent(1): Will now refuse to load PKCS#11 modules from
paths outside a trusted whitelist (run-time configurable).
Requests to load modules could be passed via agent forwarding
and an attacker could attempt to load a hostile PKCS#11
module across the forwarded agent channel: PKCS#11 modules
are shared libraries, so this would result in code execution
on the system running the ssh-agent if the attacker has
control of the forwarded agent-socket (on the host running
the sshd server) and the ability to write to the filesystem
of the host running ssh-agent (usually the host running the
ssh client).
- sshd(8): When privilege separation is disabled, forwarded
Unix- domain sockets would be created by sshd(8) with the
privileges of 'root' instead of the authenticated user. This
release refuses Unix-domain socket forwarding when privilege
separation is disabled (Privilege separation has been enabled
by default for 14 years).
- sshd(8): Avoid theoretical leak of host private key material
to privilege-separated child processes via realloc() when
reading keys. No such leak was observed in practice for
normal-sized keys, nor does a leak to the child processes
directly expose key material to unprivileged users.
- sshd(8): The shared memory manager used by pre-authentication
compression support had a bounds checks that could be elided
by some optimising compilers. Additionally, this memory
manager was incorrectly accessible when pre-authentication
compression was disabled. This could potentially allow
attacks against the privileged monitor process from the
sandboxed privilege-separation process (a compromise of the
latter would be required first). This release removes support
for pre-authentication compression from sshd(8).
- sshd(8): Fix denial-of-service condition where an attacker
who sends multiple KEXINIT messages may consume up to 128MB
per connection.
- sshd(8): Validate address ranges for AllowUser and DenyUsers
directives at configuration load time and refuse to accept
invalid ones. It was previously possible to specify invalid
CIDR address ranges (e.g. [Link mogu videti samo ulogovani korisnici]/55) and these would
always match, possibly resulting in granting access where it
was not intended.
- ssh(1), sshd(8): Fix weakness in CBC padding oracle
countermeasures that allowed a variant of the attack fixed in
OpenSSH 7.3 to proceed.
o New/changed features:
- Server support for the SSH v.1 protocol has been removed.
- ssh(1): Remove 3des-cbc from the client's default proposal.
64-bit block ciphers are not safe in 2016 and we don't want
to wait until attacks like SWEET32 are extended to SSH. As
3des-cbc was the only mandatory cipher in the SSH RFCs, this
may cause problems connecting to older devices using the
default configuration, but it's highly likely that such
devices already need explicit configuration for key exchange
and hostkey algorithms already anyway.
- sshd(8): Remove support for pre-authentication compression.
Doing compression early in the protocol probably seemed
reasonable in the 1990s, but today it's clearly a bad idea in
terms of both cryptography (cf. multiple compression oracle
attacks in TLS) and attack surface. Pre-auth compression
support has been disabled by default for >10 years. Support
remains in the client.
- ssh-agent will refuse to load PKCS#11 modules outside a
whitelist of trusted paths by default. The path whitelist may
be specified at run-time.
- sshd(8): When a forced-command appears in both a certificate
and an authorized keys/principals command= restriction, sshd
will now refuse to accept the certificate unless they are
identical. The previous (documented) behaviour of having the
certificate forced-command override the other could be a bit
confusing and error-prone.
- sshd(8): Remove the UseLogin configuration directive and
support for having /bin/login manage login sessions.
- ssh(1): Add a proxy multiplexing mode to ssh(1) inspired by
the version in PuTTY by Simon Tatham. This allows a
multiplexing client to communicate with the master process
using a subset of the SSH packet and channels protocol over a
Unix-domain socket, with the main process acting as a proxy
that translates channel IDs, etc. This allows multiplexing
mode to run on systems that lack file- descriptor passing
(used by current multiplexing code) and potentially, in
conjunction with Unix-domain socket forwarding, with the
client and multiplexing master process on different machines.
Multiplexing proxy mode may be invoked using "ssh -O proxy
..."
- sshd(8): Add a sshd_config DisableForwarding option that
disables X11, agent, TCP, tunnel and Unix domain socket
forwarding, as well as anything else we might implement in
the future. Like the 'restrict' authorized_keys flag, this is
intended to be a simple and future-proof way of restricting
an account.
- sshd(8), ssh(1): Support the "curve25519-sha256" key exchange
method. This is identical to the currently-supported method
named "curve25519-sha256@libssh.org".
- sshd(8): Improve handling of SIGHUP by checking to see if
sshd is already daemonised at startup and skipping the call
to daemon(3) if it is. This ensures that a SIGHUP restart of
sshd(8) will retain the same process-ID as the initial
execution. sshd(8) will also now unlink the PidFile prior to
SIGHUP restart and re-create it after a successful restart,
rather than leaving a stale file in the case of a
configuration error.
- sshd(8): Allow ClientAliveInterval and ClientAliveCountMax
directives to appear in sshd_config Match blocks.
- sshd(8): Add %-escapes to AuthorizedPrincipalsCommand to
match those supported by AuthorizedKeysCommand (key, key
type, fingerprint, etc.) and a few more to provide access to
the contents of the certificate being offered.
- Added regression tests for string matching, address matching
and string sanitisation functions.
- Improved the key exchange fuzzer harness.
- Deprecate the sshd_config UsePrivilegeSeparation option,
thereby making privilege separation mandatory. Privilege
separation has been on by default for almost 15 years and
sandboxing has been on by default for almost the last five.
- ssh(1), sshd(8): Support "=-" syntax to easily remove methods
from algorithm lists, e.g. Ciphers=-*cbc.
o The following significant bugs have been fixed in this release:
- ssh(1): Allow IdentityFile to successfully load and use
certificates that have no corresponding bare public key.
certificate id_rsa-cert.pub (and no id_rsa.pub).
- ssh(1): Fix public key authentication when multiple
authentication is in use and publickey is not just the first
method attempted.
- ssh-agent(1), ssh(1): improve reporting when attempting to
load keys from PKCS#11 tokens with fewer useless log messages
and more detail in debug messages.
- ssh(1): When tearing down ControlMaster connections, don't
pollute stderr when LogLevel=quiet.
- sftp(1): On ^Z wait for underlying ssh(1) to suspend before
suspending sftp(1) to ensure that ssh(1) restores the
terminal mode correctly if suspended during a password
prompt.
- ssh(1): Avoid busy-wait when ssh(1) is suspended during a
password prompt.
- ssh(1), sshd(8): Correctly report errors during sending of
ext- info messages.
- sshd(8): fix NULL-deref crash if sshd(8) received an out-of-
sequence NEWKEYS message.
- sshd(8): Correct list of supported signature algorithms sent
in the server-sig-algs extension.
- sshd(8): Fix sending ext_info message if privsep is disabled.
- sshd(8): more strictly enforce the expected ordering of
privilege separation monitor calls used for authentication
and allow them only when their respective authentication
methods are enabled in the configuration
- sshd(8): Fix uninitialised optlen in getsockopt() call;
harmless on Unix/BSD but potentially crashy on Cygwin.
- Fix false positive reports caused by explicit_bzero(3) not
being recognised as a memory initialiser when compiled with
-fsanitize-memory.
- sshd_config(5): Use 2001:db8::/32, the official IPv6 subnet
for configuration examples.
- sshd(1): Fix NULL dereference crash when key exchange start
messages are sent out of sequence.
- ssh(1), sshd(8): Allow form-feed characters to appear in
configuration files.
- sshd(8): Fix regression in OpenSSH 7.4 support for the
server-sig-algs extension, where SHA2 RSA signature methods
were not being correctly advertised.
- ssh(1), ssh-keygen(1): Fix a number of case-sensitivity bugs
in known_hosts processing.
- ssh(1): Allow ssh to use certificates accompanied by a
private key file but no corresponding plain *.pub public key.
- ssh(1): When updating hostkeys using the UpdateHostKeys
option, accept RSA keys if HostkeyAlgorithms contains any RSA
keytype. Previously, ssh could ignore RSA keys when only the
ssh-rsa-sha2-* methods were enabled in HostkeyAlgorithms and
not the old ssh-rsa method.
- ssh(1): Detect and report excessively long configuration file
lines.
- Merge a number of fixes found by Coverity and reported via
Redhat and FreeBSD. Includes fixes for some memory and file
descriptor leaks in error paths.
- ssh-keyscan(1): Correctly hash hosts with a port number.
- ssh(1), sshd(8): When logging long messages to stderr, don't
truncate "\r\n" if the length of the message exceeds the
buffer.
- ssh(1): Fully quote [host]:port in generated ProxyJump/-J
command- line; avoid confusion over IPv6 addresses and shells
that treat square bracket characters specially.
- ssh-keygen(1): Fix corruption of known_hosts when running
"ssh-keygen -H" on a known_hosts containing already-hashed
entries.
- Fix various fallout and sharp edges caused by removing SSH
protocol 1 support from the server, including the server
banner string being incorrectly terminated with only \n
(instead of \r\n), confusing error messages from ssh-keyscan
a segfault in sshd if protocol v.1 was enabled for the client
and sshd_config contained references to legacy keys.
- ssh(1), sshd(8): Free fd_set on connection timeout.
- sshd(8): Fix Unix domain socket forwarding for root
(regression in OpenSSH 7.4).
- sftp(1): Fix division by zero crash in "df" output when
server returns zero total filesystem blocks/inodes.
- ssh(1), ssh-add(1), ssh-keygen(1), sshd(8): Translate OpenSSL
errors encountered during key loading to more meaningful
error codes.
- ssh-keygen(1): Sanitise escape sequences in key comments sent
to printf but preserve valid UTF-8 when the locale supports
it.
- ssh(1), sshd(8): Return reason for port forwarding failures
where feasible rather than always "administratively
prohibited".
- sshd(8): Fix deadlock when AuthorizedKeysCommand or
AuthorizedPrincipalsCommand produces a lot of output and a
key is matched early.
- ssh(1): Fix typo in ~C error message for bad port forward
cancellation.
- ssh(1): Show a useful error message when included config
files can't be opened.
- sshd(8): Make sshd set GSSAPIStrictAcceptorCheck=yes as the
manual page (previously incorrectly) advertised.
- sshd_config(5): Repair accidentally-deleted mention of %k
token in AuthorizedKeysCommand.
- sshd(8): Remove vestiges of previously removed LOGIN_PROGRAM;
- ssh-agent(1): Relax PKCS#11 whitelist to include libexec and
common 32-bit compatibility library directories.
- sftp-client(1): Fix non-exploitable integer overflow in
SSH2_FXP_NAME response handling.
- ssh-agent(1): Fix regression in 7.4 of deleting
PKCS#11-hosted keys. It was not possible to delete them
except by specifying their full physical path.

- LibreSSL 2.5.3
o libtls now supports ALPN and SNI
o libtls adds a new callback interface for integrating custom IO
functions. Thanks to Tobias Pape.
o libtls now handles 4 cipher suite groups:
- "secure" (TLSv1.2+AEAD+PFS)
- "compat" (HIGH:!aNULL)
- "legacy" (HIGH:MEDIUM:!aNULL)
- "insecure" (ALL:!aNULL:!eNULL)
This allows for flexibility and finer grained control, rather than
having two extremes (an issue raised by Marko Kreen some time
ago).
o Tightened error handling for tls_config_set_ciphers().
o libtls now always loads CA, key and certificate files at the time
the configuration function is called. This simplifies code and
results in a single memory based code path being used to provide
data to libssl.
o Added support for OCSP intermediate certificates.
o Added X509_check_host(), X509_check_email(), X509_check_ip(), and
X509_check_ip_asc() functions, via BoringSSL.
o Added initial support for iOS, thanks to Jacob Berkman.
o Improved behavior of arc4random on Windows when using memory leak
analysis software.
o Correctly handle an EOF that occurs prior to the TLS handshake
completing. Reported by Vasily Kolobkov, based on a diff from
Marko Kreen.
o Limit the support of the "backward compatible" SSLv2 handshake to
only be used if TLS 1.0 is enabled.
o Fix incorrect results in certain cases on 64-bit systems when
BN_mod_word() can return incorrect results. BN_mod_word() now can
return an error condition. Thanks to Brian Smith.
o Added constant-time updates to address CVE-2016-0702.
o Fixed undefined behavior in BN_GF2m_mod_arr().
o Removed unused Cryptographic Message Support (CMS).
o More conversions of long long idioms to time_t.
o Improved compatibility by avoiding printing NULL strings with
printf.
o Reverted change that cleans up the EVP cipher context in
EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies on
the previous behaviour.
o Avoid unbounded memory growth in libssl, which can be triggered by
a TLS client repeatedly renegotiating and sending OCSP Status
Request TLS extensions.
o Avoid falling back to a weak digest for (EC)DH when using SNI with
libssl.
o X509_cmp_time() now passes a malformed GeneralizedTime field as an
error. Reported by Theofilos Petsios.
o Check for and handle failure of HMAC_{Update,Final} or
EVP_DecryptUpdate().
o Massive update and normalization of manpages, conversion to mandoc
format. Many pages were rewritten for clarity and accuracy.
Portable doc links are up-to-date with a new conversion tool.
o Curve25519 and TLS X25519 Key Exchange support.
o Support for alternate chains for certificate verification.
o Code cleanups, CBB conversions, further unification of DTLS/SSL
handshake code, further ASN1 macro expansion and removal.
o Private symbols are now hidden in libssl and libcrypto.
o Friendly certificate verification error messages in libtls, peer
verification is now always enabled.
o Added OCSP stapling support to libtls and nc.
o Added ocspcheck utility to validate a certificate against its OCSP
responder and save the reply for stapling
o Enhanced regression tests and error handling for libtls.
o Added explicit constant and non-constant time BN functions,
defaulting to constant time wherever possible.
o Moved many leaked implementation details in public structs behind
opaque pointers.
o Added ticket support to libtls.
o Added support for setting the supported EC curves via
SSL{_CTX}_set1_groups{_list}() - also provide defines for the
previous SSL{_CTX}_set1_curves{_list} names. This also changes the
default list of curves to be X25519, P-256 and P-384. All other
curves must be manually enabled.
o Added -groups option to openssl(1) s_client for specifying the
curves to be used in a colon-separated list.
o Merged client/server version negotiation code paths into one,
reducing much duplicate code.
o Removed error function codes from libssl and libcrypto.
o Fixed an issue where a truncated packet could crash via an OOB
read.
o Added SSL_OP_NO_CLIENT_RENEGOTIATION option that disallows
client-initiated renegotiation. This is the default for libtls
servers.
o Avoid a side-channel cache-timing attack that can leak the ECDSA
private keys when signing. This is due to BN_mod_inverse() being
used without the constant time flag being set. Reported by Cesar
Pereida Garcia and Billy Brumley (Tampere University of
Technology). The fix was developed by Cesar Pereida Garcia.
o iOS and MacOS compatibility updates from Simone Basso and Jacob
Berkman.
o Added the recallocarray(3) memory allocation function, and
converted various places in the library to use it, such as CBB and
BUF_MEM_grow. recallocarray(3) is similar to reallocarray. Newly
allocated memory is cleared similar to calloc(3). Memory that
becomes unallocated while shrinking or moving existing allocations
is explicitly discarded by unmapping or clearing to 0.
o Added new root CAs from SECOM Trust Systems / Security
Communication of Japan.
o Added EVP interface for MD5+SHA1 hashes.
o Improved nc(1) TLS handshake CPU usage and server-side error
reporting.
o Added a constant time version of BN_gcd and use it default for
BN_gcd to avoid the possibility of sidechannel timing attacks
against RSA private key generation - Thanks to Alejandro Cabrera

- mandoc 1.14.1
o New mandoc.db(5) file format: man(1), apropos(1), and
makewhatis(8) no longer need SQLite3.
o Much improved HTML output and CSS.
o In man(1), internal searching with less(1) :t has been improved.
o New mandoc(1) -mdoc -T markdown output mode (already a post-1.14.1
feature).

- Ports and packages:
o Many pre-built packages for each architecture:
- alpha: 7413 - mips64: 8072
- amd64: 9714 - mips64el: 6880
- arm: 7501 - powerpc: 7703
- hppa: 6422 - sparc64: 8606
- i386: 9697

- Some highlights:

o Afl 2.39b o Mutt 1.8.0
o Chromium 57.0.2987.133 o Node.js 6.10.1
o Emacs 21.4 and 24.5 o Ocaml 4.03.0
o GCC 4.9.4 o OpenLDAP 2.3.43 and 2.4.44
o GHC 7.10.3 o PHP 5.5.38, 5.6.30 and 7.0.16
o Gimp 2.8.18 o Postfix 3.2.0 and 3.3-20170218
o GNOME 3.22.2 o PostgreSQL 9.6.2
o Go 1.8 o Python 2.7.13, 3.4.5, 3.5.2 and
o Groff 1.22.3 3.6.0
o JDK 7u80 and 8u121 o R 3.3.3
o KDE 3.5.10 and 4.14.3 (plus o Ruby 1.8.7.374, 2.1.9, 2.2.6,
KDE4 core updates) 2.3.3 and 2.4.1
o LLVM/Clang 4.0.0 o Rust 1.16.0
o LibreOffice 5.2.4.2 o Sendmail 8.15.2
o Lua 5.1.5, 5.2.4, and 5.3.4 o SQLite 3.17.0
o MariaDB 10.0.30 o Sudo 1.8.19.2
o Mono 4.6.2.6 o Tcl/Tk 8.5.18 and 8.6.4
o Mozilla Firefox 52.0.2esr and o TeX Live 2015
52.0.2 o Vim 8.0.0388
o Mozilla Thunderbird 45.8.0 o Xfce 4.12

- As usual, steady improvements in manual pages and other documentation.

- The system includes the following major components from outside suppliers:
o Xenocara (based on X.Org 7.7 with xserver 1.18.3 + patches,
freetype 2.7.1, fontconfig 2.12.1, Mesa 13.0.6, xterm 327,
xkeyboard-config 2.20 and more)
o LLVM/Clang 4.0.0 (+ patches)
o GCC 4.2.1 (+ patches) and 3.3.6 (+ patches)
o Perl 5.24.1 (+ patches)
o NSD 4.1.15
o Unbound 1.6.1
o Ncurses 5.7
o Binutils 2.17 (+ patches)
o Gdb 6.3 (+ patches)
o Awk Aug 10, 2011 version
o Expat 2.1.1

Download: [Link mogu videti samo ulogovani korisnici]

Re: [Nova izdanja] DragonFly BSD

nobody@mycity.rs (Rogi) — Tue, 28 Mar 2017 14:16:31 +0100

DragonFly BSD 4.8

Improved kernel performance

This release further localizes cache lines and reduces/removes cache ping-ponging on globals. For bulk builds on many-cores or multi-socket systems, we have around a 5% improvement, and certain subsystems such as namecache lookups and exec()s see massive focused improvements. See the corresponding mailing list post with details.
Support for eMMC booting, and mobile and high-performance PCIe SSDs

This kernel release includes support for eMMC storage as the boot device. We also sport a brand new SMP-friendly, high-performance NVMe SSD driver (PCIe SSD storage). Initial device test results are available.

EFI support

The installer can now create an EFI or legacy installation. Numerous adjustments have been made to userland utilities and the kernel to support EFI as a mainstream boot environment. The /boot filesystem may now be placed either in its own GPT slice, or in a DragonFly disklabel inside a GPT slice.

DragonFly, by default, creates a GPT slice for all of DragonFly and places a DragonFly disklabel inside it with all the standard DFly partitions, such that the disk names are roughly the same as they would be in a legacy system.

Improved graphics support

The i915 driver has been updated to match the version found with the Linux 4.6 kernel. Broadwell and Skylake processor users will see improvements.

Other user-affecting changes

Kernel is now built using -O2.
VKernels now use COW, so multiple vkernels can share one disk image.
powerd() is now sensitive to time and temperature changes.
Non-boot-filesystem kernel modules can be loaded in rc.conf instead of loader.conf.

+ All changes since DragonFly 4.6Kernel

Refactor buffer cache code to remove dynamic KVA reservations. Instead, all KVA is reserved at boot time. Saves us from unnecessary IPIs and allows significant simplification of the buffer cache code.

Add vfs.repurpose_enable (under test, disabled by default). This feature can be enabled to significantly reduce the IPI and VM management load on a machine which is doing huge amounts of file I/O, for example from a NVMe SSD, by bypassing normal VM page recycling mechanism. When enabled, the feature only triggers under high I/O loads. It works by repurposing the VM pages underlying a buffer in-place (when possible) so as not to have to kremove/kenter the pages in the buffer's KVA. Normal VM page recycling (which would otherwise be overwhelmed by the I/O load) is bypassed as well.

Change how the IPIQ is processed, in particular create an independent Xinterrupt vector mechanism for page invalidations that ignore (will operate) even if a critical section is held. Implement machdep.optimized_invltlb (disabled by default, under test) which avoids sending tlb invalidation IPIs to idle cpus.

Fix numerous races that could occur under extreme loads. Most use cases would never trigger these but our build boxes did occasionally. For example, there was a two instruction race where the cpu bit for a pmap would be cleared (for two instructions) and cause a TLB IPI occuring at the same time on another cpu for the same pmap to not realize that cpu was using the pmap. The fix is to disable the CR3 reload optimization for the LWP->LWP (same proc) switch case.

Fix a HAMMER bug which could result in a DATA CRC error being improperly reported.

Fix a double-write triggered by the way HAMMER uses cluster_write(). This significantly improves HAMMER's write performance.

Numerous other HAMMER cleanups and fixes also went in.

Fix a hard lock that could occur in getpbuf*() due to a misinterpretation of the return value of an atomic op.

Fix a stacking interrupt that can occur in a 10-instruction window, potentially (but not found in the wild) running the kernel stack out.

Cut pmap related IPIs in half for certain buffer-cache operations by not bothering to invalidate the TLB, and on the flip-side always invalidating the TLB when entering a new PTE even if the prior contents was invalid. This improves performance and also makes debugging easier by removing a problematic optimization.

Fix a number of difficult-to-trigger SMP races, in particular one related to doing simultaneous umounts of different mount points which the bulk build could trigger. Also fix a mountctl vs umount race.

Reduce the number of atomic ops in the switch path.

Fix a namecache race/panic which could occur under extreme loads coupled with a lot of mount/umount activity.

Restrict %rip sampling to root.

Fix a getpid() issue in vfork() when threaded. In particular, concurrent vfork()s in a threaded program could cause the wrong PID to be returned by getpid() in the child prior to the exec.

Fix a rare tsleep/callout race when the callout timer triggers before the tsleep() is completely done setting up.

Cleanup namecache stall messages on the console. In particular, report the proper elapsed time and the td_comm of the thread involved.

Further reduce memory testing and early-boot zeroing to improve boot times on systems with large amounts of ram.

Remove the idle page-zeroing code entirely. Zeroing a page on a modern cpu on-demand is better for many reasons, and may actually be faster when combined with the consumer accessing data in the page, due to cache effects. Remove PG_ZERO, because it is no longer needed. Removing PG_ZERO also makes the kernel more debuggable by removing another possible source of cross-contamination.

Refactor and finish implementing CPU localization for kernel memory allocations. Combine with NUMA awareness. This works for cpu-localized or short-lived kernel data structures. The two are combined together in our PQ_L2_SIZE abstraction that used to be the VM page coloring code. This code now also handles CPU localization and NUMA awareness.

Fix many vkernel issues and significantly improve vkernel performance.

Update kern.proc.pathname, a sysctl used by programs to find the path of the running program. This sysctl was originally implemented before we stored sufficient data to return a full, proper path.

Sync ACPICA from Intel (this is a regular occurrence).

Fix the memcpy() assembly ABI. The assembly was not returning the original (dst) argument. Doesn't fix any known issues but closes a hole when GCC sometimes decides to call memcpy while generating code.

Many commits to clean up -O2 warnings and errors. The kernel is now compiled -O2 by default.

Add a workaround for an improper yield in the ACPI path (aka buggy ACPI code).

Fix a STOP/CONT race that could be triggered by a pending signal at just the wrong time.

Threaded coredump fixes and fix a lockup related to same when multiple threads of the same process seg-fault at the same time.

Fix a CAM/VM deadlock that could occur due to a bug in uiomove_nofault(). This could cause an 'indefinite wait buffer' during heavy paging/swapping.

Add code to detect and deal with lost IPIs. This is primarily for vkernels where some virtual hosts can lose IPIs. Real CPUs are not supposed lose IPIs.

Various fixes to clock_gettime().

Remove more vestiges of the MPLOCK. All critical paths have long since divested from this lock, but there are still a few non-critical places left that use it.

Rework the low-memory process killing code and fix a number of races that could prevent the feature from working.

Fix a system lockup with VMM and refactor the VMX code.

Fix a deadlock when numvnodes reaches maxvnodes, which can occur under heavy loads. Also fix a minor kernel memory leak when 'df' or filesystem sync races a umount. Also reduce the maxvnodes calculation modestly. For example, a machine with 8GB of ram will now set maxvnodes to 478483 instead of 598103.

Fix a rare panic which can be triggered by vm_object_page_remove() when user_yield() is improperly called while holding a spinlock, and then decides to deschedule.

Reduce the size of some dynamically allocated kernel structures. In particular, excessively-sized inode hash table allocations are now smaller. Primarily affects UFS (which DragonFlyBSD doesn't use much).

Add workaround for AMD erratum 793.

Fix a deadlock which can occur in stacked cluster_*() I/O calls.

Fix a bug where recursive module loading could deadlock.

Fix a silly bug in the NFS sillyrename code (server side NFS) which could cause the NFS server's sillyrename code to never remove the silly-renamed file. How silly!

Do a better job accommodating high-ncpu + low-memory configurations.

Refactor shared spinlocks to reduce the amount of spinning which can occur when multiple cpus acquire a shared spinlock at the same time.

Overhaul namecache operations to reduce SMP contention even further. This improves simultaneous non-conflicting single-component performance at least 25x on systems with many cores, and significantly reduces vnode and mount structure ref and unref operations.

Overhaul numerous other kernel structures to improve cache locality and reduce cache line bouncing.

Fix a bug in SMBFS's file rename code.

Implement RLIMIT_RSS, a per-process RSS limiter which will force localized paging on a per-process basis. This feature can be used to prevent one process from turning the rest of the machine into a hard case.

Increase the maximum supported swap space. The maximum is now limited primarily by ram and will be in the tens of terabytes (if you have enough ram for the supporting management structures). Also increase the kernel's KVM from 128G to 511G.

Implement dynamic pmap deletion (disabled by default). This directs the pmap code to delete intermediate page table pages and PDs from the pmap on the fly. It can be useful if memory is at a premium, but note that, if enabled, it will slow execution of programs which allocate and deallocate memory at a high rate.

Refactor how user 'nice' levels work, making the selected nice values more significant than they used to be.

Add a high performance native NVME driver to DragonFly, written by Matt Dillon. This driver will use MSI-X vectors and all available queues supported by the device, per-cpu localization with no locking or minimal locking (no SMP conflicts in most cases), and is capable of insane IOPS and throughput.

Graphics

Stabilizes Broadwell and Skylake, bring us up to the Linux 4.6 equivalent DRM.

Implement the Linux i2c API to make porting easier.

Fix a few old bugs, including a lock order reversal, which could stall-out video playback (and the rest of X).

Fix a kernel drm thread priority mistake that allowed user processes to have a higher priority than the drm helper thread. This fixes most temporary video stalls reported on browsers.

Handle EFI framebuffer passing into DRM, improve syscons VT switching and fix a related deadlock. Also have the kernel try to switch back to the console VT from X when a panic occurs.

Networking

Many improvements across the board.

iwm - Fixes an issue caused by inverted logic. Numerous other improvements that significantly improve performance.

wlan - Support for asynchronous bg scan and other features added.

Other drivers

nvme - Added to default kernel build, plus fixes and performance improvements.

mmcsd - Significant eMMC support added to DragonFly.

ahci - Some compatibility adjustments and more quirks added to support broken chipsets, in particular port multipliers. Also implement FBS (FIS-Based-Switching) when supported by the chipset.

Trackpoint and Elantech support added.

Userland

systat enhanced to collapse multiple interrupts belonging to the same driver, as there are often too many to list now.

systat -vm 1 significantly enhanced and revamped to report more useful information and to unpack fields so they don't run into each other. And add 'nvme' to the block device match. Also adjust the extended vmstats display and change how ozfod and nzfod is reported.

'vmstat 1' output refactored. All the fields were running into each other due to the high performance of a modern machine verses what existed 30 years ago.

Change mount/mountd signalling to reduce unnecessary mountlist scans and commands from mount_null and mount_tmpfs operations. Only really matters under heavy concurrent use of mount/umount, but the bulk build actually creates that situation.

Fix numerous fork/exec*() leaks that libc can trigger due to not using O_CLOEXEC in an atomic fashion. Add various O_CLOEXEC features to functions like popen() and mk*stemp*() (add mkostemp() and mkostemps()). Fix a file descriptor leak in popen() when running in a threaded environment.

Be nicer to pthreads in vfork() by giving the new sub-process's lwp the same TID as the one that called vfork(). This allows pthread support functions to execute in the child during the vfork without imploding pthreads.

Lots of compatibility fixes to headers to improve dports bulk builds.

Several OpenSSL imports for security fixes.

Resync OpenSSH to make it easier to keep it uptodate.

Separate out kernel C flags by having the kernel build use KCFLAGS instead of CFLAGS.

Remove numerous old ISA drivers from the tree entirely. As DragonFlyBSD is now 64-bit only, we can begin to remove old drivers that do not exist on 64-bit platforms.

Introduce WORLD_CFLAGS and WORLD_CCOPTLEVEL, defaulting to -O. This makes it easier to compile your world -O2 or whatever (e.g. WORLD_CCOPTLEVEL=2). However, we discourage use of 3 or higher. Valid values are 0, 1, 2, 3, s, g, and 'fast'.

Adjust STATUS formatting for ps to make it more readable and to remove ancient flags that are no longer applicable and just create clutter.

Fix malloc() alignment for small allocations. The minimum alignment is now 16 for allocations in the 16-128 byte range instead of 8. Note that power-of-2 allocations have always been naturally aligned, but some programs use multiples of (e.g.) 16, like '48', and assume 16-byte alignment.

Fortunes refactored, added.

powerd - Add temperature-based management to powerd with a new -H lotemp:hightemp option. This feature is extremely useful on laptops with poor cooling and whos BIOSes intentionally throttle at too-high a temperature. Powerd now also detects power state changes (which can change the list of available frequencies) and properly transitions the service when a power state change occurs.

Lots of libthread_xu / pthreads fixes and adjustments to improve dports compatibility.

Add copy-on-write features to the vkernel. For example, allows multiple vkernels to use a single disk image by having each one COW modifications internally to ram.

/usr/src/secure rewired, conflicts removed from libmd, libcrypt.

Various tools have been upgraded in the base system:

Compiler updated to GCC 5.4.1.

We now have a gold linker with LTO.

binutils 2.25

less 481.

OpenSSL / LibRESSL completely revamped. Base now uses libressl.

Multiple timezone updates.

Hammer Status

Miscellaneous improvements. One thing that didn't make it into the release was a version bump to use a faster CRC algorithm with a different polynomial. This work will be MFC'd to -release once testing is complete. However, users should not worry about it too much because the most serious performance fix IS in the release (a fix to the cluster_write() code for filesystem writes).
Hammer2 Status

Development continues but no word yet on a first release.
Clang status

A starting framework has been added for using clang as the alternate base compiler in DragonFly, to replace gcc 4.7. It's not yet complete. Clang can of course be added as a package.
64-bit status

Note that DragonFly is a 64-bit-only operating system as of 4.6, and will not run on 32-bit hardware.

AMD Ryzen support is in the release and further work will be brought in as new Ryzen developments occur. There are some cpu-reported-topology issues that will be fixed and MFC'd. There are some stability issues currently waiting on an AMD microcode update to resolve/retest. Ryzen users can be assured that we are staying on top of it!

Download: [Link mogu videti samo ulogovani korisnici]

Re: UbuntuBSD

nobody@mycity.rs (Ri�ard) — Tue, 31 May 2016 06:58:36 +0100

Tema jeste u BSD, a u Linux Download je senka, pre�ica.

Re: [Nova izdanja] FreeBSD

nobody@mycity.rs (nulti.korisnik) — Wed, 13 Apr 2016 01:15:43 +0100

nulti.korisnik ::Ha, izasao je 10.3 ali jos uvek nikakve zvanicne objave nema.
Ko hoce, ima linkova:
[Link mogu videti samo ulogovani korisnici]

Lista promena ce biti azurirana.

Iza�ao je.

�ta je novo:
Citat:- The UEFI boot loader received several improvements: It now follows /boot/config and /boot.config files, multi-device boot support works and command line arguments are parsed. Additionally, its framebuffer driver has been enhanced with GOP (Graphics Output Protocol) and UGA (Universal Graphics Adapter) handling, allowing to set the current graphics mode on systems using one of these methods. Moreover, ZFS boot capability has been added to the UEFI boot loader, including support for multiple ZFS Boot Environments (BEs), e. g. those provided by sysutils/beadm.

- The CAM Target Layer ctl(4) now supports High Availability setups.

- The Linux� compatibility layer has been substantially improved and now is capable of running 64-bit applications on amd64 (x86_64), 1:1 threading, VDSO and subset of the epoll(7) family sufficient for the majority of programs.

- The em(4) and igb(4) drivers have been updated to version 7.6.1 and 2.5.3 respectively. Among others, this brings support for i219/i219(2)/i219(3) hardware found with Intel� Skylake generation and newer chipsets.

- The isp(4) driver has been updated and improved: It now also supports 16 Gbps Fibre Channel adapters, has improved target mode support and completed Multi-ID (NPIV) functionality.

- The ixgbe(4) driver has been updated to Intel� FreeBSD Networking Group version 3.1.13-k and support for X552 and X550T was added.

- The initial implementation of reroot support has has been added to the reboot(8) utility, allowing the root file system to be mounted from a temporary source file system without requiring a full system reboot.

- The bsdinstall(8) utility has been updated to allow for creating root-on-ZFS installations on UEFI-based systems in automatic mode.

- The ifconfig(8) utility now reports SFP/SFP+ optics module data when the -v flag is specified and a NIC driver provides such information, i. e. for cxgbe(4), ixgbe(4), mlx5en(4) and sfxge(4).

- The jail(8) utility has been updated to include a new flag, -l, which ensures a clean environment in the target jail. Additionally, jail(8) now runs a shell within the target jail by default when no command was given.

- The mkimg(1) utility has been updated to support NTFS file systems in both GPT and MBR partitioning schemes.

- The xz(1) utility has been updated to version 5.2.2, which provides support for multi-threaded compression.

- GNOME has been updated to version 3.16.2.

- TeXLive has been updated to TL2015.

- Xorg-Server has been updated to version 1.17.4.

And much more ...

Obave�tenje: [Link mogu videti samo ulogovani korisnici]
Detaljnije: [Link mogu videti samo ulogovani korisnici]
Errata: [Link mogu videti samo ulogovani korisnici]

Re: [Nova izdanja] GhostBSD

nobody@mycity.rs (E.L.I.T.E.) — Mon, 28 Mar 2016 10:23:51 +0100

GhostBSD 10.1 Ève

Citat:After a year of development, testing and debugging we are pleased to announce the release of GhostBSD 10.1 MATE & XFCE which is available on SourceForge and torrents for the amd64 and i386 architectures.

What's new in GhostBSD 10.1

GhostBSD ISO image is hybrid that can be burn on DVD or USB stick
XFCE is coming back
Users can chose to install the BSD boot manager, Grub boot manager or simply None and use their Linux Grub
Station Tweak a fork of Mate Tweak
OctoPkg GUI frontend for pkgng written in Qt
Station Update Manager to update FreeBSD base system and third party software
Software from pkg or ports can be installed in the live DVD/USB session
VT Console by default
Instant verification for user and root to know if the password is strong and match on the system installer
Host name and user name auto completion when typing the real name
Vim

What changed in GhostBSD 10.1

The installer partition editor UI and partitioning have been greatly improved
SpiderOak has been removed from the default system
GDM is replacing PCDM for more functionalities
Wifimgr is now fully replaced by Networkmgr
What has been fix.
The installation process failed to copy
Radon/ATI and Intel issue
Mouse integration suport for VirtualBox
The installer GPT partition problem
Some installer text error

Screenshot:

Home Page:
[Link mogu videti samo ulogovani korisnici]

Download:
[Link mogu videti samo ulogovani korisnici]

Re: [Nova izdanja] PC-BSD

nobody@mycity.rs (E.L.I.T.E.) — Mon, 28 Mar 2016 10:16:30 +0100

PC-BSD 10.2

The following features or enhancements were introduced for PC-BSD� 10.2:

Based on FreeBSD 10.2 which adds these features.
CD-sized network installers are available for both the graphical and text installers. The installation looks the same for both, with the difference being the size of the downloaded media and the fact that the installation files are retrieved over the network rather than from the installation media.
Lumina has been updated to 0.8.6.
iocage has replaced Warden as the back-end for jail management in AppCafe� and the �Warden� tab has been renamed to �Plugins�. The Warden graphical utility has been removed from Control Panel and the command line usage docs have been changed to describe how to use the iocage command line utility.
The default Serif/Sans Serif font is now Noto instead of Dejavu.
The graphical installer now uses the Droid font.
The installer now supports installing to free space. This means that you no longer need to temporarily format a partition after shrinking a drive when installing PC-BSD� in a dual-boot scenario.
The graphical installer now provides a shortcut to Disk Manager.
Wine has been removed from the installer but can be installed afterwards using AppCafe�.
The �Domain Name� field has been added to the Time Zone Selection Screen.
The �Enable Optional Services� screen has been added to the post-configuration wizard. Currently, this screen allows you to enable the SSH service or to disable IPv6.
The �Tile Plugins� and �Cascade Plugins� entries have been added to the right-click menu of Lumina.
You can now create and manage more than two panels using the Lumina configuration utility.
The �Save Pkg List� option has been added to the �Configure� button of AppCafe�.
The �Enterprise (Long Term Support)� repository has been added to AppCafe� ‣ Configure ‣ Repository Configuration. This option is meant for enterprise users that wish to only receive software updates which fix known security vulnerabilities.
If you install or uninstall any software in AppCafe�, a �Status� tab will appear so that you can review the installation log.
The System ‣ Branches menu has been added to Update Manager. This can be used to change which software branch is used to track updates.
The showeol option has been added to pc-updatemanager.
The �Allow Valid Users with UID under 1000� checkbox and �Additional Excluded Users� field have been added to Control Panel ‣ Login Manager ‣ Misc.
The probe-netdrives, list-mountednetdrives, mountnet, and unmountnet options have been added to pc-sysconfig.
The �Domain Name� field has been added to Control Panel ‣ Network Configuration ‣ Network Configuration (Advanced).
The �Replication Server� screen has been removed from the Life Preserver initial configuration wizard and an option has been added to the last screen of the wizard offering to open the advanced configuration options so that replication can be configured.
Life Preserver�s �Local Snapshots� tab now allows you to create a list of datasets to exclude when creating snapshots.
Life Preserver�s �Replication� tab now allows you to create a list of datasets to exclude when replicating to the remote server.
The �Reset Replication Password� option has been added to the Life Preserver ‣ Snapshots menu.

Screenshot:

Home Page:
[Link mogu videti samo ulogovani korisnici]

Documentation:
[Link mogu videti samo ulogovani korisnici]

Download:
[Link mogu videti samo ulogovani korisnici]

Complete ISO installer: HTTP | Torrent
Netinstall ISO installer: HTTP | Torrent

BSD za Rapsberry Pi

nobody@mycity.rs (bocke) — Wed, 19 Aug 2015 18:14:49 +0100

Nai�ao sam danas na objavu u vezi FreeBSD slike za RPI. Ne se�am se ta�nog linka, ali sa�uvao sam objave sa RPI bloga. Ovo je trenutni status dostupnosti slika BSD derivata za RPI:

FreeBSD

Citat:Another day (a particularly snowy day, here), another new OS for the Pi. This is not an official release; this image has been built by the FreeBSD community (and we do expect an official variant from [Link mogu videti samo ulogovani korisnici] at some point). But this is very useful early access if you�ve been wanting to play with FreeBSD on your Pi; be aware, though, that this is not a finished, stable port, so you may encounter some bugs. You�ll need an SD card of 4GB or more to dd this image to.

[Link mogu videti samo ulogovani korisnici]

NetBSD

Citat:In last week�s FreeBSD post, we linked to an early version of Nick Hudson�s NetBSD image for Pi. Nick has now released a new version which fixes a number of USB issues, and we�ve placed it in our mirror system.

[Link mogu videti samo ulogovani korisnici]

OpenBSD

Ne�e da mo�e.

Theo de Raadt ::Dewey Hylton ::i'm hoping the raspberrypi will eventually be supported on openbsd (if the hardware proves to be stable, $35 sounds GREAT) but i don't have the skills to go there myself.

Wow. Dream on. It is a mess of firmware. You know nothing of our history?

Re: Gnome3 status na OpenBSD

nobody@mycity.rs (profiler1982) — Thu, 20 Feb 2014 10:41:04 +0100

rekao sam @nemysis-u da kad dodje gnome3 cu da dignem pc-bsd. evo odrzavam obecanje

FreeBSD tromesecni izvestaj Okt-Dec 2013

nobody@mycity.rs (soxxx) — Wed, 29 Jan 2014 09:30:39 +0100

FreeBSD tromesecni izvestaj o tome sta se radilo od oktobra do decembra 2013:

Citat:Introduction

This report covers FreeBSD-related projects between October and December 2013. This is the last of four reports planned for 2013.

The last quarter of 2013 was very active for the FreeBSD community, much like the preceding quarters. Many advances were made in getting FreeBSD to run on ARM-based System-on-Chip boards like Cubieboard, Rockchip, Snapdragon, S4, Freescale i.MX6, and Vybrid VF6xx. FreeBSD is also becoming a better platform for Xen and the Amazon Elastic Compute Cloud. There are plans for FreeBSD to become a fully supported compute host for OpenStack. The I/O stack has again received some performance boosts on multi-processor systems through work touching the CAM and GEOM subsystems, and through better adaptation of UMA caches to system memory constraints for ZFS. The FreeBSD Foundation did an excellent job in this quarter, and many of their sponsored projects like VT-d and UEFI support, iSCSI stack, Capsicum, and auditdistd are about to complete. At the same time, new projects like Automounter and Intel GPU updates have just been launched. The Newcons project has been merged into -CURRENT, which will make it possible to finally move to the latest version of X.Org in the Ports Collection. Efforts are also under way to improve testing with Jenkins and Kyua. It is an exciting time for users and developers of FreeBSD!

Thanks to all the reporters for the excellent work! This report contains 37 entries and we hope you enjoy reading it.

FreeBSD Team Reports
FreeBSD Cluster Administration Team
FreeBSD Core Team
FreeBSD Port Management Team
FreeBSD Postmaster Team
FreeBSD Release Engineering Team
Projects
CBSD
Jenkins Continuous Integration for FreeBSD
Kernel
GEOM Direct Dispatch and Fine-Grained CAM Locking
Intel 802.11n NIC (iwn(4)) Work
Intel GPU Driver Update
Native iSCSI Stack
New Automounter
UEFI Boot
UMA/ZFS and RPC/NFS Performance Improvements
Updated vt(9) System Console
Architectures
FreeBSD Host Support for OpenStack and OpenContrail
FreeBSD on Cubieboard{1,2}
FreeBSD on Freescale i.MX6 processors
FreeBSD on Freescale Vybrid VF6xx
FreeBSD on Newer ARM Boards
FreeBSD/EC2
FreeBSD/Xen
Intel IOMMU (VT-d, DMAR) Support
Userland Programs
auditdistd(8)
Base GCC Updates
BSDInstall ZFSBoot
Capsicum and Casper
Centralized Panic Reporting
FreeBSD Test Suite
The LLDB Debugger
Ports
FreeBSD Python Ports
GNOME/FreeBSD
KDE/FreeBSD
Wine/FreeBSD
X.Org on FreeBSD
Xfce/FreeBSD
Miscellaneous
The FreeBSD Foundation

[Link mogu videti samo ulogovani korisnici]

Re: Besplatna izdanja BSD Magazina

nobody@mycity.rs (soxxx) — Mon, 27 Jan 2014 11:34:12 +0100

----------- Napisano: 31 Mar 2013 11:10 ---------

Martovsko izdanje BSD Magazina:

Nessus, Exploitation Tools and Payloads

Sadrzaj:

MaheshaBSD-2.0: What�s New On The Lake Manasarovar?
GhostBSD: A Brief Overview
How Do I Study for the BSDA Certification?
GDB and Truss for Debugging
PostgreSQL: MVCC and Vacuum
Beowulf Clusters with DragonflyBSD
Npppd: EasyPPTP VPN with OpenBSD
Anatomy of FreeBSD Compromise Part 4

[Link mogu videti samo ulogovani korisnici]

----------- [] -----------

Aprilsko izdanje je dostupno za preuzimanje:

Here Comes The Cloud

Sadrzaj:

Installing FreeBSD on Amazon AWS EC2 Cloud Services
Interview with Mark Price, President of Tranquil Hosting and owner of RootBSD
Taking the BSDA Certification Exam By Dru Lavigne
Installing OpenBSD 5.0 on VMware Server
MidnightBSD: Developing Applications Using mpor
The Greater Benefits of Open Source Software
PostgreSQL: Replication

[Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 09 Maj 2012 9:25 ---------

Majsko izdanje BSD Magazina posveceno bezbednosnim temama. Uzivajte u citanju!:

BSD Security - Protect Your BSD

Sadrzaj:

A Fresh Look at the Warden for PC-BSD 9.1
A Web Application Firewall for Nginx
Mysql-zrm: Enterprise Level Backups for MySQL
PostgreSQL: Server-Side Programming
Anatomy of FreeBSD Compromise Part 5
Introduction to DNSSEC
Hardening FreeBSD with TrustedBSD and Mandatory Access Controls
Introducing EasyPBI � Making PBI Modules With a Few Mouse Clicks
Intro to DTrace

[Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 12 Jul 2012 20:43 ---------

BSD Security Upgrade Your Skills

Sadrzaj:

DNSSEC: Threats to DNS Transactions Part 2
Anatomy of a FreeBSD Compromise Part 6
Using Qjail to set up the basejail
PostgreSQL: Server-Side Programming Part 2
Synchronization Problems or: How I Learned to Stop Worrying and Love the Sleep Mutex
ZFS Madness with BEADM - How To

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

- - - - - -

I Julsko izdanje je dostupno za preuzimanje:

Kerberos on OpenBSD

Deploy a full-featured Mail Server on OpenBSD 5.1 with iRedMail
freebsd-update as Intrusion Detection System
Taming the Blowfish with a Dog
Upgrading Ports Using Portmaster
Hardening FreeBSD with TrustedBSD and Mandatory Access Controls
DNSSEC Part 3: Securing the DNS Hosting Environment
Interview with Gabriel Weinberg, Founder of DuckDuckGo

[Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 20 Feb 2013 22:30 ---------

Posto sam propustio da postavim nekoliko proslih izdanja evo sada ispravljam tu greskicu, ima zaista dobrih clanaka za citanje. Navali narode!

Tuning ZFS on FreeBSD

Sadrzaj:
Free Issue to Download! BSD 8/2012
MaheshaBSD Server Edition Has Been Just Released!
Tuning ZFS on FreeBSD
MPD5 � VPN Server with FreeBSD Setup and Management
PostgreSQL Partitioning
DNSSEC Part 4: Securing DNS Transactions

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------------------------

What's New in PC-BSD 9.1

Sadrzaj:
Free Issue to Download! BSD 9/2012
What�s New in PC-BSD 9.1
Setting up Your OwnCloud Instance via the Warden�
Nmap: The Network Swiss Army Knife
Unix IPC with Pipes
FreeBSD Enterprise Search with Apache Solr
Hardening FreeBSD with TrustedBSD and Mandatory Access Controls (MAC)
Interview with Jeroen van Nieuwenhuizen

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------------------------

Network Security & Auditing

Sadrzaj:
Free Issue to Download! BSD 10/2012
VX ConnectBot: Open Source SSH Client for Android Devices
Installing Xfce Desktop Environment on OpenBSD 5.1
Browse the Internet Differently
FreeBSD Enterprise Search with Apache Solr (Part 2)
PostgreSQL: Indexes (Part 1)
Unix IPC with FIFOs
Capture Session Data with Argus on FreeBSD
Securing Your Family with pfSense and IPSec
Installation and Setup of the Halon Virtual Security Router

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------------------------

Run FreeBSD as NAT Instance in Cloud

Sadrzaj:

Free Issue to Download! BSD 11/2012
NETGEAR Universal Wifi Adapter
Automating the Deployment of FreeBSD and PC-BSD Systems
Network Concepts, Routing and Firewalls
FreeBSD as a NAT Instance in Amazon Cloud
PostgreSQL: Indexes (Part 2)
FreeBSD Enterprise Search with Apache Solr (Part 3)

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------------------------

Linux Jails in PC-BSD

Sadrzaj:

Free Issue to Download! BSD 12/2012
The Sandbox
Installing and Configuring Linux Jails in PC-BSD
FreeBSD Enterprise Search with Apache Solr (Part 4)
PostgreSQL: Schemas
A simple DNS-DHCP Server for Small Business Network with dnsmasq
Hardening FreeBSD with TrustedBSD and Mandatory Access Controls (Part 4)
EuroBSDcon and MeetBSD California: Two Continents, One Community
PgDay.IT 2012

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------------------------

Panoramic Photography in BSD

Sadrzaj:
Keyboard Error� Press any Key to Continue
2012: BSD Year in Review
Configuring the Qmail Autoresponder to Ignore Spam
PostgreSQL: Users and Permissions Managements
Immersive 360�180� Panoramic Photography in BSD
FreeBSD Programming Primer

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------------------------

Rehosting in NetBSD

Sadrzaj:
Fear, Loathing and Misunderstandings
What�s around the Corner: A Look at Upcoming PC-BSD Changes
VAX/OpenVMS Rehosting in NetBSD 6.0 Hosts
Installing and Configuring SSL for Dovecot and Roundcube for the Qmail MTA
FreeBSD Unattended Installation of Servers
FreeBSD Programming Primer (CMS) Part 2
Organizational Structure and Culture at FreeBSD

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 31 Mar 2013 11:10 ---------

Handling Kernel Panic

Sadrzaj:
Reacting to Panic: How to Configure the System to handle Crash Dumps
MaheshaBSD Server: MySQL and WordPress in FreeBSD
FreeBSD Programming Primer: How to Embed CSS and Javascript in Pages
Hardening FreeBSD with TrustedBSD and MAC: configuration of mac_ifoff, mac_portacl, and MAC LOMAC modules

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 09 Maj 2013 17:38 ---------

Najsvezije izdanje BSD magazina, ovoga puta skoro potpuno posveceno FreeNAS operativnom sistemu:

All About FreeNAS

Sadrzaj:

FreeNAS � Detachable Storage has Come of Age
Which FreeNAS? Lessons from a Year in the Trenches with BSD�s Killer App
What�s New in FreeNAS 8.x
FreeNAS Plugins: Everything You Ever Wanted to Know
Handmade NAS
FreeNAS in an Enterprise Environment
FreeNAS: a Migration Story
The Interview with Alfred Perlstein, VP of Software Engineering at iXsystems
From Reading to Real Life

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 23 Maj 2013 21:50 ---------

Jails Firewall with PF

Novo izdanje BSD magazina, evo sadrzaja:

SpiderFoot 2.0: The Open Source Footprinting Tool
FreeBSD Jails Firewall with PF
Improvements to Jail Management via the Warden
msearch: MidnightBSD Search
Useful Utilities for PF
FreeBSD Programming Primer � Part 4
DTrace: A Deeper Approach

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 23 Sep 2013 20:44 ---------

Malo sam bio lenj u poslednje vreme pa evo sada postavljam par brojeva BSD magazina. Ima tu veoma dobrih clanaka za citanje.

FreeBSD on Rails

Sadrzaj:

BSD 6/2013 in high resolution
BSD 6/2013 in epub format!
The British Broadcasting Corporation (BBC)
Sofin, the Software Installer
A backup server with FreeBSD for mixed networks in SOHO environment
FreeBSD on Rails
Creating PBI�s with EasyPBI
Manage your Ruby Versions Under FreeBSD
Keep OpenBSD customers satisfied
FreeBSD in Xen Cloud Platform (XCP)

[Link mogu videti samo ulogovani korisnici]

-----------------------

Security and Cryptography in BSD

Sadrzaj:
BSD 7/2013 in epub format!
An Eye For An Eye Soon Leads To Blindness
MaheshaOpenBSD � OpenBSD In A Serpent World
Security Policy Development in TrustedBSD MAC Framework
Using Nginx and Naxsi for Security and High Availability
FreeBSD Programming Primer � Part 6
Elliptic Curve Cryptography and Basic Applications in BSD OS

[Link mogu videti samo ulogovani korisnici]

------------------

ZFS Boot Environments

Sadrzaj:
BSD 8/2013 in epub format!
Quis custodiet ipsos custodes (Who will guard the guards themselves)?
Apache THRIFT: A much needed tutorial
A closer look at the changes in PC-BSD/TrueOS 9.2 � Part 1 � ZFS Boot Environments
An email gateway with FreeBSD to prevent malware and undesirable messages
The Service Spawner
FreeBSD Programming Primer � Part 7
PKGNG: The future of packages on FreeBSD and PC-BSD

[Link mogu videti samo ulogovani korisnici]

-----------------------

Day-To-Day BSD Administration

Sadrzaj:
BSD 9/2013 in epub format!
It�s Lonely at the Top
MidnightBSD Custom Installations and Live CDs
BSD Server Maintenance
Re-purposing an Abandoned Mac Mini as a Wireless Router with OpenBSD
Monit � Monitoring Solution for Enterprise and SOHO Servers with FreeBSD
FreeBSD Programming Primer � Part 8
A closer Look at the Changes in PC-BSD/TrueOS 9.2 � Part 2 � Directory Encryption using PEFS
Intro to ZFS

[Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 27 Jan 2014 11:34 ---------

FreeBSD Programming Primer - How to configure a development environment

Sadrzaj:

BSD 10/2013 Free Issue to Download!
BSD 10/2013 epub version
FreeBSD Moves to Subversion
Gentle Introduction to Programming in Clojure
The Revamped Life-Preserver � How New ZFS Utilities are Changing FreeBSD & PC-BSD
Migrating from Linux to FreeBSD
FreeBSD for C++11 Developer (Eclipse Indigo + CDT + GCC 4.8)
FreeBSD Programming Primer � Part 9
Improved Updates and LTS for OpenBSD
Column: The Computer Says �No�
Interview with Klaus P. Ohrhallinger

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

----------------------

Hast on FreeBSD - How to make storage highly available by using HAST

Sadrzaj:

Configuring a Highly Available Service on FreeBSD � Part 1: HAST
IT Inventory & Asset Management Automation
FreeBSD Programming Primer � Part 10
PfSense + Snort: Fast approach
How Secure Can Secure Shell (SSH) Be?
With the Recent Revelation That the United States Spied on Angela Merkel and the Subsequent Outrage From Politicians � is this a Case of the �Lady Doth Protest Too Much�?
Maximising Website Runtime on Host Servers Running FreeBSD
PGDay.IT 2013

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

-------------

CARP on FreeBSD - How to use DEVD to take action on kernel events

Sadrzaj:

Configuring a Highly Available Service on FreeBSD � part 2: CARP and devd
FreeBSD Programming Primer � Part 11
Unix Basics � for Security Professionals
Introduction to Unix Kernel
OpenBSD 5.4 as a Transparent HTTP/HTTPS Proxy
GhostBSD: A User-friendly, Lightweight BSD Alternative
How Secure Can Secure Shell (SSH) Be?
Column by Rob Somerville

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

-------------

FreeBSD Programming Primer

Sadrzaj:

FreeBSD Programming Primer � Part 1
FreeBSD Programming Primer � Part 2
FreeBSD Programming Primer � Part 3
FreeBSD Programming Primer � Part 4
FreeBSD Programming Primer � Part 5
FreeBSD Programming Primer � Part 6
FreeBSD Programming Primer � Part 7
FreeBSD Programming Primer � Part 8
FreeBSD Programming Primer � Part 9
FreeBSD Programming Primer � Part 10
FreeBSD Programming Primer � Part 11
FreeBSD Programming Primer � Part 12

Preuzimanje: [Link mogu videti samo ulogovani korisnici]

U ovom poslednjem izdanju magazina mozete pronaci kako poceti sa pisanjem Content Management System (CMS) pocevsi od konfigurisanja samog servera, pa onda CSS i Javascript; pravljenje menija; dodavanje sadrzaja; kontrola prijavljivanja, bezbednost i kontrola spam robota; i na kraju koriscenje Netbeans IDE za debug-ovanje i uredjivanje CMS-a.

Re: *BSD vesti: FreeBSD i PC-BSD novosti...

nobody@mycity.rs (Brok) — Thu, 21 Nov 2013 10:27:47 +0100

Playstation 4 pokre�e FreeBSD kernel

Citat:Sony je pro�le nedelje lansirao svoju PlayStation 4 konzolu, a izgleda da su glasine da je bazirana na FreeBSD bile ta�ne. Pre nekoliko meseci, na internetu se pojavilo nekoliko fotografija koje su ukazivale na �injenicu da bi PlayStation 4 operativni sistem mogao biti modifikovani FreeBSD 9 OS. Sada je to i potvr�eno jer fotografija koju mo�ete videti jasno pokazuje da operativni sistem koristi FreeBSD kernel. Kao �to se mo�da se�ate, Playstation 3 je jednom imao i opciju OtherOS, �to je omogu�ilo korisnicima da pokrenu Linux operativni sistem, ali je ta opcija kasnije uklonjena.

Izvor i vest u celosti:
[Link mogu videti samo ulogovani korisnici]

Re: Koju distribuciju preporu�ujete za po�etnike?

nobody@mycity.rs (Cerberus) — Tue, 29 Oct 2013 19:29:40 +0100

Receno mi na zvanicnim forumima i na ostalim da je bolje raditi preko Terminala, jer se dobija bolji uvid u problem ... Ma kada budem imao dva inerna hdd/a istaliracu jos jedan sistem yasnovan na Unixu . Ne sam ljubitelj deljenja harda na particije.

Re: [Nova izdanja] NetBSD

nobody@mycity.rs (soxxx) — Thu, 22 Aug 2013 09:33:48 +0100

----------- Napisano: 20 Maj 2013 13:50 ---------

NetBSD 6.1

Pored novog NetBSD 6.1 izdanja, izdato je i 6.0.2 izdanje; razlika je da 6.0.2 predstavlja nastavak 6.0 grane sa sigurnosnim ispravkama i drugim zakrpama, dok 6.1 pored tih ispravki i zakrpa sadrzi jos i nove funkcije i mogucnosti koje nisu dostupne u 6.0.2 i ranijim.

Evo isecka iz objave za 6.1 izdanje:
Citat:
Major Changes Between 6.0 and 6.1

The complete list of changes can be found in the CHANGES-6.1 file in the top level directory of the NetBSD 6.1 release tree. An abbreviated list is as follows:

Security Advisory Fixes
NetBSD-SA2013-001, Kernel panic triggered from userland
NetBSD-SA2013-002, kqueue related kernel panic triggered from userland
NetBSD-SA2013-003, RNG Bug May Result in Weak Cryptographic Keys
NetBSD-SA2013-004, Vulnerabilities in grepSecurity Fixes
expat: Fix CVE-2012-1147, CVE-2012-1148 and CVE-2012-0876.
BIND: Address CVE-2012-5688: Named could die on specific queries with dns64 enabled.
Fixed a crash which could happen with sysctl security.curtain=1 set. (PR#47598)
Address CVE-2012-5667: Multiple integer overflows in GNU grep.
Several fixes to entropy handling in the kernel.
Prevent ktrace from being able to crash the kernel.
General kernelposix_spawn(): Fix processes with attributes.
Resolve races between vget() and vrele() resulting in vget() returning dead vnodes.
Prevent crash when unsupported fd's are used with kevent.
Fix a bug where kmem_alloc() could be called from interrupt context.
WAPBL: coalesce writes to the journal to speed up wapbl_flush() on raid5 by a factor of 3 to 4.
NetworkingFix "atomic fragments" for IPv6.
ipf: Fix alignment issues in ipmon. (PR#47101)
npf: handle delayed checksums in the network stack. (PR#47235)
Fixed some locking issues in ipf(4)
npf(3): Many fixes and updates. Config syntax has changed somewhat, please check your config files.
Fixed sendto(2) issue with IPv6 UDP datagrams. (PR#47408)
vioif(4): Fixed an issue which caused recent QEMU to crash.
File systemssmbfs: Make smbfs actually work on big-endian ports.
smbfs: various fixes. (PR#25070)
Allow mounting ext2fs and msdosfs in 32-bit compat mode.
v7fs: fix off-by-one error.
Driversciss(4): don't try to handle sensors if there aren't any.
isp(4): Fix FC-AL devices on QLogic ISP2100. (PR#47302)
mfi(4): Add support for LSI Thunderbolt (SAS2208) controllers.
mfi(4): Add support for running the MegaCLI Linux binary to manage the controller.
puc(4): Additional device support.
bge(4): Add support for Apple's Thunderbolt to Gigabit Ethernet adapter. (PR#46961)
mvgbe(4): fix a number of issues
nfe(4): Avoid bounce buffering and improve performance.
wm(4): Fix handling of 82578D and 82579V chips. Various other fixes.
fss(4): Don't crash when running multiple dump -X. (PR#47514)
fss(4): Fixed panic. (PR#47020)
Platformsalpha:Fixed longjmp/setjmp on alpha for statically linked programs such as those in /rescue.amiga:New ed(4) device driver for Hydra and ASDG Zorro2 bus network cards.arm:Fix gcc bugid 51408 for arm. (PR#46972)
Fixed a bit check in the Kirkwood IRQ code.
Fixed incorrect counts for 'vmstat -e' on Kirkwood.
Make bigendian ARM get the MBR partition and offset correct. (PR#47081)
Fixed bug where IRQ masks of GPIO were set incorrectly on Marvell SoCs.
Fixed static linking on ARM platforms. (PR#47139)
Properly block IRQs >= 32. (PR#45371)
Greatly improved Raspberry Pi support - USB and onboard Ethernet now work.
Enabled DCache Streaming Switch and Write Allocate for Sheeva CPUs.
Added support for the watchdog timer in some Marvell SoCs.
Fix for non-MBR disks on ARM. (PR#47463)mips:MIPS ports have switched to gdb 7.3.1. GDB6 is removed.vax:Reverted MAXPARTITION bump to 16, lowering it to 12 instead, to fix bootblocks and installboot for VAX 780 and other machines booting via VMB.EXE.x68k:Update bootloader: cdboot, netboot support and bugfixes.
Add floppy format support.x86 (i386, amd64):Work around a possible gcc bug generating bad assembler code. (PR#45673)
Disable C1E on AMD K8 CPUs, to prevent freeze during boot.
Fix running BSDi and NetBSD <= 1.0 binaries. (PR#41341)
Add support in ld.elf_so for relocation type R_386_TLS_TPOFF32. (PR#47061)
Fix some ACPI panics. (PR#47016)
The amd64 port now supports dtrace. (Not compiled in by default)xen:Prevent a memory corruption issue that locks up a Xen DomU, and can potentially cause file system corruption. (PR#47056, PR#47057)
Fix: Xen Dom0 NetBSD kernel could crash by adding duplicate xenwatches.
Userland fixes
Library Updates
pthread(3): libpthread minor number was bumped for the addition of pthread_cond_setclock(). Threaded binaries built on NetBSD 6.1 will not function on NetBSD 6.0.
pthread(3): libpthread can be dlopen()ed again.
terminfo(3): Various fixes to libterminfo.
libc: fix memory corruption in rpc. (PR#13082)
libutil: Fixed a bug in parsedate(3) where it would treat all input as if it were in the local time zone.
Update to tzdata2013c.
cdb: don't refuse to open databases without entries or keys.
Address graphics corruption in recent Cairo, manifested most commonly by certain rendered text sections appearing as solid rectangular blocks of color.
Added flock(1), inspired by the Linux program of the same name.
Updated Postfix to version 2.8.13.
wsconsctl(8 ): add support for touchscreen calibration. (PR#45872)
openssl: Fixed a multiple-free bug.

Zvanicna objava za 6.1: [Link mogu videti samo ulogovani korisnici]

Zvanicna objava za 6.0.2: [Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 22 Avg 2013 9:33 ---------

NetBSD 6.1.1

Objavljeno je NetBSD 6.1.1 izdanje. Nema nekih novina, uglavnom izdanje donosi donosi bezbednosne ispravke i ispravke bug-ova.
Citat:
Introduction

The NetBSD Project is pleased to announce NetBSD 6.1.1, the first security/bugfix update of the NetBSD 6.1 release branch. It represents a selected subset of fixes deemed important for security or stability reasons.

Please note that all fixes in the prior security/bugfix updates (NetBSD 6.0.1 and 6.0.2), as well as those in 6.1, are also in 6.1.1. See the release map graph on the NetBSD website for a visual representation of the relationship between releases.

Complete source and binaries for NetBSD 6.1.1 are available for download at many sites around the world. A list of download sites providing FTP, AnonCVS, SUP, and other services may be found at [Link mogu videti samo ulogovani korisnici] We encourage users who wish to install via ISO or USB disk images to download via BitTorrent by using the torrent files supplied in the images area. A list of hashes for the NetBSD 6.1.1 distribution has been signed with the well-connected PGP key for the NetBSD Security Officer: [Link mogu videti samo ulogovani korisnici]

NetBSD is free. All of the code is under non-restrictive licenses, and may be used without paying royalties to anyone. Free support services are available via our mailing lists and website. Commercial support is available from a variety of sources. More extensive information on NetBSD is available from our website:

[Link mogu videti samo ulogovani korisnici]

Fund Drive

Your donations to the NetBSD Foundation have allowed the project to make major improvements to the code base. We would like to continue funded development in various areas, including:

Improving network stack concurrency and performance.
Development of modern file systems and improvement of existing ones.
Features which are useful in embedded environments, such as high resolution timers and execute in place (XIP) support.
Automatic testing and quality assurance.

For more information about donating, visit [Link mogu videti samo ulogovani korisnici] The NetBSD Foundation is a 501(c)(3) organization in the US, and donations may be tax deductible.

Major Changes Between 6.1 and 6.1.1

The complete list of changes can be found in the CHANGES-6.1.1 file in the top level directory of the NetBSD 6.1.1 release tree. An abbreviated list is as follows:

Security Advisory Fixes

NetBSD-SA2013-005, bind Denial of Service (CVE-2013-4854)
NetBSD-SA2013-006, Arbitrary Kernel Read with netstat -P
NetBSD-SA2013-007, Protocol handling issues in X Window System client libraries
NetBSD-SA2013-008, Error in authorization check re tcpdrop sysctl

Security

Add four new sysctls to avoid IPv6 DoS attacks.

Networking

mpls(4): Stop abusing kmem during softint context to prevent panic.
Avoid crash destroying tap0 after deleting its link-local address. PR 47576.

File systems

NILFS: Fix serious file read problem due to not-so-clear VOP_BMAP description. PR 45605.
procfs: Add a missing vm_map_unlock_read() and uvmspace_free() to the ENOMEM error case in procfs_domap()d. PR 48048.

Platforms

amiga: Fix kernel panic on Amigas with Deneb cards.
vax: Add a makedisk_p12high, used by VAX now after unbumping MAXPARTITIONS from 16 down to 12. This fixes install issues on new setups.

Miscellaneous Userland

Updated tzdata to 2013d.

[Link mogu videti samo ulogovani korisnici]