release/doc/en_US.ISO8859-1/relnotes/article.xml

   1 <?xml version="1.0" encoding="iso-8859-1"?>
   2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
   3         "../../../share/xml/freebsd50.dtd" [
   4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
   5  %release;
   6 <!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
   7  %sponsor;
   8 <!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
   9  %vendor;
  10 <!ENTITY security SYSTEM "../../share/xml/security.xml">
  11 <!ENTITY errata SYSTEM "../../share/xml/errata.xml">
  12 ]>
  13 <article xmlns="http://docbook.org/ns/docbook"
  14   xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
  15
  16   <info>
  17     <title>&os; &release.current; Release Notes</title>
  18
  19     <author>
  20       <orgname>The &os; Project</orgname>
  21     </author>
  22
  23     <pubdate>$FreeBSD$</pubdate>
  24
  25     <!-- Last rev: 278934 -->
  26
  27     <copyright>
  28       <year>2015</year>
  29       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
  30         Project</holder>
  31     </copyright>
  32
  33     <legalnotice xml:id="trademarks" role="trademarks">
  34       &tm-attrib.freebsd;
  35       &tm-attrib.ibm;
  36       &tm-attrib.ieee;
  37       &tm-attrib.intel;
  38       &tm-attrib.sparc;
  39       &tm-attrib.general;
  40     </legalnotice>
  41
  42     <abstract>
  43       <para>The release notes for &os; &release.current; contain
  44         a summary of the changes made to the &os; base system on the
  45         &release.branch; development line.  This document lists
  46         applicable security advisories that were issued since the last
  47         release, as well as significant changes to the &os; kernel and
  48         userland.  Some brief remarks on upgrading are also
  49         presented.</para>
  50     </abstract>
  51   </info>
  52
  53   <sect1 xml:id="intro">
  54     <title>Introduction</title>
  55
  56     <para>This document contains the release notes for &os;
  57       &release.current;.  It describes recently added, changed, or
  58       deleted features of &os;.  It also provides some notes on
  59       upgrading from previous versions of &os;.</para>
  60
  61     <para releasetype="current">The &release.type; distribution to
  62       which these release notes apply represents the latest point
  63       along the &release.branch; development branch since
  64       &release.branch; was created.  Information regarding pre-built,
  65       binary &release.type; distributions along this branch can be
  66       found at <uri
  67         xlink:href="&release.url;">&release.url;</uri>.</para>
  68
  69     <para releasetype="snapshot">The &release.type; distribution to
  70       which these release notes apply represents a point along the
  71       &release.branch; development branch between &release.prev; and
  72       the future &release.next;.  Information regarding pre-built,
  73       binary &release.type; distributions along this branch can be
  74       found at <uri
  75         xlink:href="&release.url;">&release.url;</uri>.</para>
  76
  77     <para releasetype="release">This distribution of &os;
  78       &release.current; is a &release.type; distribution.  It can be
  79       found at <uri xlink:href="&release.url;">&release.url;</uri> or
  80       any of its mirrors.  More information on obtaining this (or
  81       other) &release.type; distributions of &os; can be found in the
  82       <link
  83         xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
  84           &os;</quote> appendix</link> to the <link
  85         xlink:href="&url.books.handbook;/">&os;
  86         Handbook</link>.</para>
  87
  88     <para>All users are encouraged to consult the release errata
  89       before installing &os;.  The errata document is updated with
  90       <quote>late-breaking</quote> information discovered late in the
  91       release cycle or after the release.  Typically, it contains
  92       information on known bugs, security advisories, and corrections
  93       to documentation.  An up-to-date copy of the errata for &os;
  94       &release.current; can be found on the &os; Web site.</para>
  95
  96     <para>This document describes the most user-visible new or changed
  97       features in &os; since &release.prev;.  In general, changes
  98       described here are unique to the &release.branch; branch unless
  99       specifically marked as &merged; features.</para>
 100
 101     <para>Typical release note items document recent security
 102       advisories issued after &release.prev;, new drivers or hardware
 103       support, new commands or options, major bug fixes, or
 104       contributed software upgrades.  They may also list changes to
 105       major ports/packages or release engineering practices.  Clearly
 106       the release notes cannot list every single change made to &os;
 107       between releases; this document focuses primarily on security
 108       advisories, user-visible changes, and major architectural
 109       improvements.</para>
 110   </sect1>
 111
 112   <sect1 xml:id="upgrade">
 113     <title>Upgrading from Previous Releases of &os;</title>
 114
 115     <para arch="amd64,i386">Binary upgrades between RELEASE versions
 116       (and snapshots of the various security branches) are supported
 117       using the &man.freebsd-update.8; utility.  The binary upgrade
 118       procedure will update unmodified userland utilities, as well as
 119       unmodified GENERIC kernels distributed as a part of an official
 120       &os; release.  The &man.freebsd-update.8; utility requires that
 121       the host being upgraded have Internet connectivity.</para>
 122
 123     <para>Source-based upgrades (those based on recompiling the &os;
 124       base system from source code) from previous versions are
 125       supported, according to the instructions in
 126       <filename>/usr/src/UPDATING</filename>.</para>
 127
 128     <important>
 129       <para>Upgrading &os; should only be attempted after backing up
 130         <emphasis>all</emphasis> data and configuration files.</para>
 131     </important>
 132   </sect1>
 133
 134   <sect1 xml:id="security-errata">
 135     <title>Security and Errata</title>
 136
 137     <para>This section lists the various Security Advisories and
 138       Errata Notices since &release.prev;.</para>
 139
 140     <sect2 xml:id="security">
 141       <title>Security Advisories</title>
 142
 143       &security;
 144     </sect2>
 145
 146     <sect2 xml:id="errata">
 147       <title>Errata Notices</title>
 148
 149       &errata;
 150     </sect2>
 151   </sect1>
 152
 153   <sect1 xml:id="userland">
 154     <title>Userland</title>
 155
 156     <para>This section covers changes and additions to userland
 157       applications, contributed software, and system utilities.</para>
 158
 159     <sect2 xml:id="userland-config">
 160       <title>Userland Configuration Changes</title>
 161
 162       <para revision="266463">The default &man.newsyslog.conf.5; now
 163         includes files in the
 164         <filename>/etc/newsyslog.conf.d/</filename> and
 165         <filename>/usr/local/etc/newsyslog.conf.d/</filename>
 166         directories by default for &man.newsyslog.8;.</para>
 167
 168       <para revision="270675">The &man.mailwrapper.8; utility has been
 169         updated to use &man.mailer.conf.5; from the
 170         <literal>LOCALBASE</literal> environment variable, which
 171         defaults to <filename class="directory">/usr/local</filename>
 172         if unset.</para>
 173
 174       <para revision="272350">The <literal>MK_ARM_EABI</literal>
 175         &man.src.conf.5; option has been removed.</para>
 176     </sect2>
 177
 178     <sect2 xml:id="userland-programs">
 179       <title>Userland Application Changes</title>
 180
 181       <para revision="258838" contrib="sponsor" sponsor="&ff;,
 182         &google;" sponsorurl="">The &man.casperd.8; daemon has been
 183         added, which provides access to functionality that is not
 184         available in the <quote>capability mode</quote>
 185         sandbox.</para>
 186
 187       <para revision="260594">When unable to load a kernel module with
 188         &man.kldload.8;, a message informing to view output of
 189         &man.dmesg.8; is now printed, opposed to the previous output
 190         <quote>Exec format error.</quote>.</para>
 191
 192       <para revision="260910">Allow &man.pciconf.8; to identify PCI
 193         devices that are attached to a driver to be identified by
 194         their device name instead of just the selector.  Additionally,
 195         an optional device argument to the <literal>-l</literal> flag
 196         to restrict the output to only listing details about a single
 197         device.</para>
 198
 199       <para revision="260913">A new flag, <quote>onifconsole</quote>
 200         has been added to <filename>/etc/ttys</filename>.  This allows
 201         the system to provide a login prompt via serial console if the
 202         device is an active kernel console, otherwise it is equivalent
 203         to <literal>off</literal>.</para>
 204
 205       <para revision="260926">Support for displaying VPD for PCI
 206         devices via &man.pciconf.8; has been added.</para>
 207
 208       <para revision="261498">&man.ping.8; protects against malicious
 209         network packets using the Capsicum framework to drop
 210         privileges.</para>
 211
 212       <para revision="265229">The &man.ps.1; utility has been
 213         updated to include the <literal>-J</literal> flag, used to
 214         filter output by matching &man.jail.8; IDs and names.
 215         Additionally, argument <literal>0</literal> can be used to
 216         <literal>-J</literal> to only list processes running on the
 217         host system.</para>
 218
 219       <para revision="265249">The &man.top.1; utility has been updated
 220         to filter by &man.jail.8; ID or name, in followup to the
 221         &man.ps.1; change in <literal>r265229</literal>.</para>
 222
 223       <para revision="265995">The Blowfish &man.crypt.3; default
 224         format has been changed to
 225         <literal>&dollar;2b&dollar;</literal>.</para>
 226
 227       <para revision="266209">The &man.pmcstat.8; utility has been
 228         updated to include a new flag, <literal>-l</literal>, which
 229         ends event collection after the specified number of
 230         seconds.</para>
 231
 232       <para revision="270745">The &man.ps.1; utility has been updated
 233         to include a new keyword, <quote>tracer</quote>, which
 234         displays the <acronym>PID</acronym> of the tracing
 235         process.</para>
 236
 237       <para revision="271482">Support for adding empty partitions has
 238         been added to the &man.mkimg.1; utility.</para>
 239
 240       <para revision="272166">The &man.primes.6; utility has been
 241         updated to correctly enumerate prime numbers between
 242         <literal>4295098369</literal> and
 243         <literal>3825123056546413050</literal>, which prior to this
 244         change, it would be possible for returned values to be
 245         incorrectly identified as prime numbers.</para>
 246
 247       <para revision="272198">The &man.mkimg.1; utility has been
 248         updated to include three options used to print information
 249         about &man.mkimg.1; itself:</para>
 250
 251       <informaltable frame="none" pgwide="0">
 252         <tgroup cols="2">
 253           <colspec colwidth="1*"/>
 254           <colspec colwidth="1*"/>
 255           <thead>
 256             <row>
 257               <entry>Option</entry>
 258               <entry>Output</entry>
 259             </row>
 260           </thead>
 261
 262           <tbody>
 263             <row>
 264               <entry><literal>--version</literal></entry>
 265               <entry>The current version of the &man.mkimg.1;
 266                 utility</entry>
 267             </row>
 268
 269             <row>
 270               <entry><literal>--formats</literal></entry>
 271               <entry>The disk image file formats supported by
 272                 &man.mkimg.1;</entry>
 273             </row>
 274
 275             <row>
 276               <entry><literal>--schemes</literal></entry>
 277               <entry>The partition schemes supported by
 278                 &man.mkimg.1;</entry>
 279             </row>
 280           </tbody>
 281         </tgroup>
 282       </informaltable>
 283
 284       <para revision="272488">Userland &man.ctf.5; support in
 285         &man.dtrace.1; has been added.  With this change,
 286         &man.dtrace.1; is able to resolve type info for function and
 287         <acronym>USDT</acronym> probe arguments, and function return
 288         values.</para>
 289
 290       <para revision="274960">The &man.elfdump.1; utility has been
 291         updated to support capability mode provided by
 292         &man.capsicum.4;.</para>
 293
 294       <para revision="275680" contrib="sponsor" sponsor="&ff;">The
 295         &man.fstyp.8; utility has been added, which is used to
 296         determine the filesystem on a specified device.</para>
 297
 298       <para revision="276881">The <literal>libedit</literal> library
 299         has been updated to support <acronym>UTF</acronym>-8, which
 300         additionally provides unicode support to &man.sh.1;.</para>
 301
 302       <para revision="277166" arch="powerpc">The &man.ptrace.2; system
 303         call has been updated include support for Altivec registers on
 304         &os;/&arch.powerpc;.</para>
 305
 306       <para revision="278320">A new device control utility,
 307         &man.devctl.8; has been added, which allows making
 308         administrative changes to individual devices, such as
 309         attaching and detaching drivers, and enabling and disabling
 310         devices.  The &man.devctl.8; utility uses the new
 311         &man.devctl.3; library.</para>
 312
 313       <para revision="279315" contrib="sponsor" sponsor="&ff;">The
 314         &man.uefisign.8; utility has been added.</para>
 315
 316       <para revision="279571" contrib="sponsor"
 317         sponsor="&scaleengine;">The &man.freebsd-update.8; utility has
 318         been updated to prevent fetching updated binary patches when
 319         a previous upgrade has not been thoroughly completed.</para>
 320
 321       <para revision="279122" contrib="sponsor"
 322         sponsor="&juniper;">The &man.netstat.1; utility has been
 323         updated to link against the &man.libxo.3; shared
 324         library.</para>
 325     </sect2>
 326
 327     <sect2 xml:id="userland-contrib">
 328       <title>Contributed Software</title>
 329
 330       <para revision="258884" contrib="sponsor"
 331         sponsor="&darpa_afrl;">&man.lldb.1; has been updated to
 332         upstream snapshot version r196259.</para>
 333
 334       <para revision="259626">Timezone data files have been updated to
 335         version 2013i.</para>
 336
 337       <para revision="260445">&man.byacc.1; has been updated to
 338         version 20140101.</para>
 339
 340       <para revision="261071">&man.jemalloc.3; has been updated to
 341         version 3.5.0.</para>
 342
 343       <para revision="261283"><application>libc++</application> has
 344         been updated to version 3.4.</para>
 345
 346       <para revision="261320"><application>OpenSSH</application> has
 347         been updated to 6.5p1.</para>
 348
 349       <para revision="261344"><application>mdocml</application> has
 350         been updated to version 1.12.3.</para>
 351
 352       <para revision="261991"><application>LLVM</application> and
 353         <application>Clang</application> have been updated to
 354         version 3.4.</para>
 355
 356       <para revision="266527"
 357         role="merged"><application>Sendmail</application> has been
 358         updated from 8.14.7 to 8.14.9.</para>
 359
 360       <para revision="276577"><application>file</application> has been
 361         updated to version 5.22.</para>
 362
 363       <para revision="275718">The <application>binutils</application>
 364         suite of utilities has been updated to include upstream
 365         patches that add new relocations for &arch.powerpc;
 366         support.</para>
 367
 368       <para revision="276398" contrib="sponsor" sponsor="&ff;">The
 369         <application>ELF Tool Chain</application> has been updated to
 370         upstream revision r3136.</para>
 371
 372       <para revision="276551">The <application>texinfo</application>
 373         utility and <literal>info</literal> pages were removed from
 374         the base system.  The <filename
 375           role="package">print/texinfo</filename> port should be
 376         installed on systems where <literal>info</literal> pages are
 377         needed.</para>
 378
 379       <para revision="276796" contrib="sponsor" sponsor="&ff;">The ELF
 380         object manipulation tools
 381         <application>addr2line</application>,
 382         <application>elfcopy (strip)</application>,
 383         <application>nm</application>,
 384         <application>readelf</application>,
 385         <application>size</application>, and
 386         <application>strings</application> were switched to the
 387         versions from the ELF Tool Chain project.</para>
 388
 389       <para revision="276881">The <literal>libedit</literal> library
 390         has been updated to include <acronym>UTF-8</acronym> support,
 391         adding <acronym>UTF-8</acronym> support to the &man.sh.1;
 392         shell.</para>
 393
 394       <para revision="277270"><application>OpenSSL</application> has
 395         been updated to version 1.0.1l.</para>
 396
 397       <para revision="278433">The &man.xz.1; utility has been updated
 398         to support multi-threaded compression.</para>
 399
 400       <para revision="278970">The &man.acpi.4; subsystem has been
 401         updated to version 20150204.</para>
 402
 403       <para revision="280932" contrib="sponsor" sponsor="&ff;">The
 404         <application>elftoolchain</application> utilities have been
 405         updated to version 3179.</para>
 406
 407       <para revision="281316">The &man.xz.1; utility has been udpated
 408         to version 5.2.1.</para>
 409
 410       <para revision="281373">The &man.nvi.1; utility has been updated
 411         to version 2.1.3.</para>
 412
 413       <para revision="281806">The &man.wpa.supplicant.8; and
 414         &man.hostapd.8; utilties have been updated to version
 415         2.4.</para>
 416
 417       <para revision="281812"><application>bmake</application> has
 418         been updated to version 20150418.</para>
 419
 420       <para revision="282089">The &man.unbound.8; utility has been
 421         updated to version 1.5.3.</para>
 422     </sect2>
 423
 424     <sect2 xml:id="userland-installer">
 425       <title>Installation and Configuration Tools</title>
 426
 427       <para revision="271539">The &man.bsdinstall.8; partition editor
 428         and &man.sade.8; utility have been updated to include native
 429         <acronym>ZFS</acronym> support.</para>
 430
 431       <para revision="272274">The &os; installation utility,
 432         &man.bsdinstall.8;, has been updated to set the
 433         <literal>canmount</literal> &man.zfs.8; property to
 434         <literal>off</literal> for the <filename
 435           class="directory">/var</filename> dataset, preventing the
 436         contents of directories within <filename
 437           class="directory">/var</filename> from conflicting when
 438         using multiple boot environments, such as that provided by
 439         <filename role="package">sysutils/beadm</filename>.</para>
 440
 441       <para revision="274394">The &man.bsdconfig.8; utility has been
 442         updated to skip the initial &man.tzsetup.8;
 443         <acronym>UTC</acronym> versus wall-clock time prompt when run
 444         in a virtual machine, determined when the
 445         <literal>kern.vm_guest</literal> &man.sysctl.8; is set to
 446         <literal>1</literal>.</para>
 447
 448       <para revision="275874">The &man.bsdinstall.8; utility has been
 449         updated to use the new &man.dpv.3; library to display progress
 450         when extracting the &os; distributions.</para>
 451     </sect2>
 452
 453     <sect2 xml:id="userland-rc">
 454       <title><filename class="directory">/etc/rc.d</filename>
 455         Scripts</title>
 456
 457       <para revision="270676">The &man.rc.8; subsystem has been
 458         updated to allow configuring services in <filename
 459           class="directory">&dollar;{LOCALBASE}/etc/rc.conf.d/</filename>.
 460         If <literal>LOCALBASE</literal> is unset, it defaults to
 461         <filename class="directory">/usr/local</filename>.</para>
 462
 463       <para revision="275299">The <filename>mrouted</filename>
 464         &man.rc.8; script has been removed from the base system.  An
 465         equivalent script is available from the <filename
 466           role="package">net/mrouted</filename> port.</para>
 467
 468       <para revision="279463" contrib="sponsor"
 469         sponsor="&sandvine;">A new &man.rc.8; script,
 470         <filename>iovctl</filename>, has been added, which allows
 471         automatically starting the &man.iovctl.8; utility at
 472         boot.</para>
 473     </sect2>
 474
 475     <sect2 xml:id="userland-periodic">
 476       <title><filename class="directory">/etc/periodic</filename>
 477         Scripts</title>
 478
 479       <para revision="271321">The daily &man.periodic.8; script
 480         <filename>110.clean-tmps</filename> has been updated to avoid
 481         crossing filesystem mount boundaries when cleaning files in
 482         <filename class="directory">/tmp</filename>.</para>
 483     </sect2>
 484
 485     <sect2 xml:id="userland-libraries">
 486       <title>Runtime Libraries and API</title>
 487
 488       <para revision="268461">The &man.readline.3; library is now
 489         statically linked in software within the base system, and the
 490         shared library is no longer installed, allowing the Ports
 491         Collection to use a modern version of the library.</para>
 492
 493       <para revision="272273">The &man.strptime.3; library has been
 494         updated to add support for <acronym>POSIX</acronym>-2001
 495         features <literal>%U</literal> and
 496         <literal>%W</literal>.</para>
 497
 498       <para revision="272842,272848" contrib="sponsor"
 499         sponsor="&ff;">The &man.dl.iterate.phdr.3; library has been
 500         changed to always return the path name of the
 501         <acronym>ELF</acronym> object in the
 502         <literal>dlpi_name</literal> structure member.</para>
 503
 504       <para revision="273562" contrib="sponsor"
 505         sponsor="&juniper;">The &man.libxo.3; library has been
 506         imported to the base system.</para>
 507
 508       <para revision="273806" contrib="sponsor" sponsor="&chelsio;">A
 509         userland library for Chelsio Terminator 5 based iWARP cards
 510         has been added, allowing userland <acronym>RDMA</acronym>
 511         applications to work over compatible
 512         <acronym>NIC</acronym>s.</para>
 513
 514       <para revision="274987">The &man.gpio.3; library has been added,
 515         providing a wrapper around the &man.gpio.4; kernel
 516         interface.</para>
 517
 518       <para revision="277610">The <literal>futimens()</literal> and
 519         <literal>utimensat()</literal> system calls have been
 520         added.  See &man.utimensat.2; for more information.</para>
 521
 522       <para revision="278934">The &man.elf.3; compile-time dependency
 523         has been removed from <filename>dtri.o</filename>, which
 524         allows adding <application>DTrace</application> probes to
 525         userland applications and libraries without also linking
 526         against &man.elf.3;.</para>
 527
 528       <para revision="279186">The &man.setmode.3; function has been
 529         updated to consistently set <literal>errno</literal> on
 530         failure.</para>
 531
 532       <para revision="279663">The &man.qsort.3; functions have been
 533         updated to be able to handle 32-bit aligned data on 64-bit
 534         platforms, also providing a significant improvement in 32-bit
 535         workloads.</para>
 536
 537       <para revision="281130">Several standard include headers have
 538         been updated to use of <application>gcc</application>
 539         attributes, such as <literal>__result_use_check()</literal>,
 540         <literal>__alloc_size()</literal>, and
 541         <literal>__nonnull()</literal>.</para>
 542     </sect2>
 543
 544     <sect2 xml:id="userland-abi">
 545       <title>ABI Compatibility</title>
 546
 547       <para revision="271982">The &linux; compatibility version has
 548         been updated to <literal>2.6.18</literal>.  The
 549         <literal>compat.linux.osrelease</literal> &man.sysctl.8; is
 550         evaluated when building the <filename
 551           role="package">emulators/linux-c6</filename> and related
 552         ports.</para>
 553     </sect2>
 554   </sect1>
 555
 556   <sect1 xml:id="kernel">
 557     <title>Kernel</title>
 558
 559     <para>This section covers changes to kernel configurations, system
 560       tuning, and system control parameters that are not otherwise
 561       categorized.</para>
 562
 563     <sect2 xml:id="kernel-bugfix">
 564       <title>Kernel Bug Fixes</title>
 565
 566       <para revision="265876">A kernel bug that inhibited proper
 567         functionality of the <literal>dev.cpu.0.freq</literal>
 568         &man.sysctl.8; on &intel; processors with Turbo
 569         Boost&nbsp;&trade; enabled has been fixed.</para>
 570
 571       <para revision="271697" arch="powerpc">Support for
 572         &man.dtrace.1; stack tracing has been fixed for
 573         &os;/&arch.powerpc;, using the <literal>trapexit()</literal>
 574         and <literal>asttrapexit()</literal> functions instead of
 575         checking within addressed kernel space.</para>
 576
 577       <para revision="272089">A bug in &man.ipfw.4; that could
 578         potentially lead to a kernel panic when using &man.dummynet.4;
 579         at layer 2 has been fixed.</para>
 580
 581       <para revision="280930" contrib="sponsor" sponsor="&mitail;">The
 582         kernel <acronym>RPC</acronym> has been updated to include
 583         several enhancements:</para>
 584
 585       <itemizedlist>
 586         <listitem>
 587           <para>The 45 MiB limit on requests queued for
 588             &man.nfsd.8; threads has been removed.</para>
 589         </listitem>
 590
 591         <listitem>
 592           <para>Avoids unnecessary throttling by not deferring
 593             accounting for completed requests.</para>
 594         </listitem>
 595
 596         <listitem>
 597           <para>Fixes an integer overflow and signedness bugs.</para>
 598         </listitem>
 599       </itemizedlist>
 600
 601       <para revision="281261" arch="powerpc">Support for
 602         &man.dtrace.1; has been added for the
 603         Book-E&nbsp;&trade;.</para>
 604     </sect2>
 605
 606     <sect2 xml:id="kernel-config">
 607       <title>Kernel Configuration</title>
 608
 609       <para revision="266531">The <literal>IMAGACT_BINMISC</literal>
 610         kernel configuration option has been enabled by default,
 611         which enables application execution through emulators, such
 612         as <application>Qemu</application>.</para>
 613
 614       <para revision="268045">The <literal>VT</literal> kernel
 615         configuration file has been removed, and the &man.vt.4;
 616         driver is included in the <literal>GENERIC</literal> kernel.
 617         To enable &man.vt.4;, enter <literal>set kern.vty=vt</literal>
 618         at the &man.loader.8; prompt during boot, or add
 619         <literal>kern.vty=vt</literal> to &man.loader.conf.5; and
 620         reboot the system.</para>
 621
 622       <para revision="277904">The &man.config.8; utility has been
 623         updated to allow using a non-standard <filename
 624           class="directory">src/</filename> tree, specified as an
 625         argument to the <literal>-s</literal> flag.</para>
 626
 627       <para revision="277990" arch="powerpc64">The
 628         &os;/&arch.powerpc64; kernel now builds as
 629         a position-independent executable, allowing the kernel to be
 630         loaded into and run from any physical or virtual
 631         address.</para>
 632
 633       <important>
 634         <para>This change requires an update to &man.loader.8;.
 635           The userland and kernel must be updated before rebooting the
 636           system.</para>
 637       </important>
 638
 639       <para revision="279189" contrib="sponsor" sponsor="&ff;"
 640         arch="powerpc">Kernel support for Vector-Scalar eXtension
 641         (<acronym>VSX</acronym>) found on POWER7 and POWER8 hardware
 642         has been added.</para>
 643
 644       <para revision="279252" contrib="sponsor" sponsor="&ff;"
 645         arch="powerpc">The &man.pmap.9; implementation for 64-bit
 646         &powerpc; processors has been overhaulded to improve
 647         concurrency.</para>
 648     </sect2>
 649
 650     <sect2 xml:id="kernel-sysctl">
 651       <title>System Tuning and Controls</title>
 652
 653       <para revision="275140" contrib="sponsor" sponsor="&ff;">The
 654         &man.hwpmc.4; default and maximum callchain depths have been
 655         increased.  The default has been increased from 16 to 32, and
 656         the maximum increased from 32 to 128.</para>
 657
 658       <para revision="279361">The <literal>kern.osrelease</literal>
 659         and <literal>kern.osreldate</literal> are now configurable
 660         &man.jail.8; parameters.</para>
 661
 662       <para revision="280308" contrib="sponsor" sponsor="&ix;">The
 663         &man.devfs.5; device filesystem has been changed to disable
 664         updating timestamps for read/write operations.  A new
 665         &man.sysctl.8;, <literal>vfs.devfs.dotimes</literal> has been
 666         added, which when set to a non-zero value, enables updating
 667         timestamps for these operations.</para>
 668     </sect2>
 669   </sect1>
 670
 671   <sect1 xml:id="drivers">
 672     <title>Devices and Drivers</title>
 673
 674     <para>This section covers changes and additions to devices and
 675       device drivers since &release.prev;.</para>
 676
 677     <sect2 xml:id="drivers-device">
 678       <title>Device Drivers</title>
 679
 680       <para revision="260903">Support for GPS ports has been added to
 681         &man.uhso.4;.</para>
 682
 683       <para revision="265132">The &man.full.4; device has been added,
 684         and the <literal>lindev(4)</literal> device has been removed.
 685         Prior to this change, <literal>lindev(4)</literal> provided
 686         only the <filename>/dev/full</filename> character device,
 687         returning <literal>ENOSPC</literal> on write attempts.  As
 688         this device is not specific to &linux;, a native &os; version
 689         has been added.</para>
 690
 691       <para revision="271705">Hardware context support has been
 692         added to the <literal>drm/i915</literal> driver, adding
 693         support for <application>Mesa</application> 9.2 and
 694         later.</para>
 695
 696       <para revision="273178">The &man.vt.4; driver has been updated,
 697         replacing the bitmapped <literal>kern.vt.spclkeys</literal>
 698         &man.sysctl.8; with individual
 699         <literal>kern.vt.kbd_*</literal> variants.</para>
 700
 701       <para revision="273598">The &man.hpet.4; driver has been updated
 702         to create a
 703         <filename>/dev/hpet<replaceable>N</replaceable></filename>
 704         device, providing access to <acronym>HPET</acronym> from
 705         userspace.</para>
 706
 707       <para revision="280183">The <literal>drm</literal> code has
 708         been updated to match &linux; version 3.8.13.</para>
 709     </sect2>
 710
 711     <sect2 xml:id="drivers-storage">
 712       <title>Storage Drivers</title>
 713
 714       <para revision="265236" contrib="sponsor"
 715         sponsor="&lsi;, &spectralogic;" sponsorurl="">The &man.mpr.4;
 716         device has been added, providing support for LSI Fusion-MPT
 717         3 12Gb SCSI/SATA controllers.</para>
 718
 719       <para revision="265555" contrib="sponsor"
 720           sponsor="&lsi;">The &man.mrsas.4; driver has been added,
 721         providing support for LSI MegaRAID SAS controllers.  The
 722         &man.mfi.4; driver will attach to the controller, by default.
 723         To enable &man.mrsas.4; add
 724         <literal>hw.mfi.mrsas_enable=1</literal> to
 725         <filename>/boot/loader.conf</filename>, which turns off
 726         &man.mfi.4; device probing.</para>
 727
 728       <note>
 729         <para>At this time, the &man.mfiutil.8; utility and the &os;
 730           version of <application>MegaCLI</application> and
 731           <application>StorCli</application> do not work with
 732           &man.mrsas.4;.</para>
 733       </note>
 734
 735       <para revision="275461" contrib="sponsor" sponsor="&ix;">The
 736         &man.ctl.4; subsystem has been updated, increasing the ports
 737         limit from <literal>128</literal> to <literal>256</literal>,
 738         and <acronym>LUN</acronym> limit from <literal>256</literal>
 739         to <literal>1024</literal>.</para>
 740
 741       <para revision="276526">The <literal>asr(4)</literal> driver has
 742         been removed, and is no longer supported.</para>
 743     </sect2>
 744
 745     <sect2 xml:id="drivers-network">
 746       <title>Network Drivers</title>
 747
 748       <para revision="258830">Support for Broadcom chipsets BCM57764,
 749         BCM57767, BCM57782, BCM57786 and BCM57787 has been added to
 750         &man.bge.4;.</para>
 751
 752       <para revision="260448">Support for the &intel; Centrino&trade;
 753         Wireless-N 135 chipset has been added.</para>
 754
 755       <para revision="260552">Firmware for &intel; Centrino&trade;
 756         Wireless-N 105 devices has been added to the base
 757         system.</para>
 758
 759       <para revision="261975">The deprecated nve(4) driver has been
 760         removed.  Users of NVIDIA nForce MCP network adapters are
 761         advised to use the &man.nfe.4; driver instead, which has been
 762         the default driver for this hardware since
 763         &os;&nbsp;7.0.</para>
 764
 765       <para revision="264601" contrib="sponsor"
 766         sponsor="&darpa_afrl;">The <literal>if_nf10bmac(4)</literal>
 767         device has been added, providing support for NetFPGA-10G
 768         Embedded CPU Ethernet Core.</para>
 769
 770       <note>
 771         <para>The <literal>if_nf10bmac(4)</literal> driver operates on
 772           the FPGA, and is not suited for the PCI host
 773           interface.</para>
 774       </note>
 775
 776       <para revision="265348" contrib="sponsor"
 777         sponsor="&netgate;">The &man.ath.hal.4; driver has been
 778         updated to support the Atheros AR1111 chipset.</para>
 779
 780       <para revision="266770">Support for the &intel; Centrino&trade;
 781         Wireless-N 105 chipset has been added.</para>
 782
 783       <para revision="266757" contrib="sponsor"
 784         sponsor="&chelsio;">Support for the &man.cxgbe.4; Terminator
 785         5 (T5) 10G/40G cards has been added to &man.netmap.4;.</para>
 786
 787       <para revision="272730">The &man.alc.4; driver has been updated
 788         to support AR816x and AR817x ethernet controllers.</para>
 789
 790       <para revision="273331">The &man.vxlan.4; driver has been added,
 791         which creates a virtual Layer 2 (Ethernet) network overlaid in
 792         a Layer 3 (IP/UDP) network.  The &man.vxlan.4; driver is
 793         analogous to &man.vlan.4;, but is designed to be better suited
 794         for large, multiple-tenant datacenter environments.</para>
 795
 796       <para revision="274246" contrib="sponsor" sponsor="&yandex;">The
 797         &man.gre.4; driver has been significantly overhauled, and has
 798         been split into two separate modules, &man.gre.4; and
 799         &man.me.4;.</para>
 800     </sect2>
 801   </sect1>
 802
 803   <sect1 xml:id="hardware">
 804     <title>Hardware Support</title>
 805
 806     <para>This section covers general hardware support for physical
 807       machines, hypervisors, and virtualization environments, as well
 808       as hardware changes and updates that do not otherwise fit in
 809       other sections of this document.</para>
 810
 811     <sect2 xml:id="hardware-support">
 812       <title>Hardware Support</title>
 813
 814       <para revision="268303">The &man.asmc.4; driver has been
 815         updated to support the &apple;&nbsp;MacMini 3,1.</para>
 816
 817       <para revision="268351">Support for &os;/ia64 has been dropped
 818         as of &os;&nbsp;11.</para>
 819
 820       <para revision="274386">An issue that could cause a system to
 821         hang when entering <acronym>ACPI</acronym>
 822         <literal>S3</literal> state (suspend to
 823         <acronym>RAM</acronym>) has been corrected in the &man.acpi.4;
 824         and &man.pci.4; drivers.</para>
 825
 826       <para revision="274733" arch="powerpc">The power management unit
 827         subsystem has been updated to support power button events on
 828         certain &arch.powerpc; hardware, such as aluminum
 829         PowerBook&nbsp;&reg;.</para>
 830
 831       <para revision="275171,275190" arch="powerpc">The &man.hwpmc.4;
 832         driver has been updated to correct performance counter
 833         sampling on G4 (MPC74xxx) and G5 class processors.</para>
 834
 835       <para revision="275732" contrib="sponsor"
 836         sponsor="&ff;,&netgate;">The
 837         <application>OpenCrypto</application> framework has been
 838         updated to include <literal>AES-ICM</literal> and
 839         <literal>AES-GCM</literal> modes, both of which have also been
 840         added to the &man.aesni.4; driver.</para>
 841     </sect2>
 842
 843     <sect2 xml:id="hardware-virtualization">
 844       <title>Virtualization Support</title>
 845
 846       <para revision="260410">Support for the <quote>Virtual Interrupt
 847           Delivery</quote> feature of &intel;&nbsp;VT-x is enabled if
 848         supported by the CPU.  This feature can be disabled by running
 849         <literal>sysctl hw.vmm.vmx.use_apic_vid=0</literal>.
 850         Additionally, to persist this setting across reboots, add
 851         <literal>hw.vmm.vmx.use_apic_vid=0</literal> to
 852         <filename>/etc/sysctl.conf</filename>.</para>
 853
 854       <para revision="260532">Support for <quote>Posted Interrupt
 855           Processing</quote> is enabled if supported by the CPU.  This
 856         feature can be disabled by running <literal>sysctl
 857           hw.vmm.vmx.use_apic_pir=0</literal>.  Additionally, to
 858         persist this setting across reboots, add
 859         <literal>hw.vmm.vmx.use_apic_pir=0</literal> to
 860         <filename>/etc/sysctl.conf</filename>.</para>
 861
 862       <para revision="260582">Unmapped IO support has been added to
 863         &man.virtio_blk.4;.</para>
 864
 865       <para revision="260583">Unmapped IO support has been added to
 866         &man.virtio_scsi.4;.</para>
 867
 868       <para revision="260847">The &man.virtio_random.4; driver has
 869         been added to harvest entropy from the host system.</para>
 870
 871       <para revision="261504">&os;/&arch.i386; guests can be run under
 872         bhyve.</para>
 873
 874       <para revision="267536" contrib="sponsor"
 875         sponsor="&citrix.rd;">Support for running a &os;/&arch.amd64;
 876         <application>Xen</application> guest instance as
 877         <acronym>PVH</acronym> guest has been added.
 878         <acronym>PVH</acronym> mode, short for <quote>Para-Virtualized
 879           Hardware</quote>, uses para-virtualized drivers for boot and
 880         I/O, and uses hardware virtualization extensions for all other
 881         tasks, without the need for emulation.</para>
 882
 883       <para revision="273515">The &man.virtio.console.4; driver has
 884         been added, which provides an interface to VirtIO console
 885         devices through a &man.tty.4; device.</para>
 886
 887       <para revision="279957">The &man.bhyve.8; hypervisor has been
 888         updated to support <literal>DSM TRIM</literal> commands for
 889         virtual <acronym>AHCI</acronym> disks.</para>
 890     </sect2>
 891
 892     <sect2 xml:id="hardware-arm">
 893       <title>ARM Support</title>
 894
 895       <para revision="260921">The &man.nand.4; device is enabled for
 896         ARM devices by default.</para>
 897
 898       <para revision="273264" arch="armv6">An issue that could cause
 899         instability when detecting <acronym>SD</acronym> cards on the
 900         Raspberry Pi <acronym>SOC</acronym> has been fixed.</para>
 901
 902       <para revision="275963">The <literal>bcm2835_cpufreq</literal>
 903         driver has been added, which supports <acronym>CPU</acronym>
 904         frequency and voltage control on the Raspberry Pi
 905         <acronym>SOC</acronym>.</para>
 906
 907       <para revision="280259" contrib="sponsor" sponsor="&ff;">Initial
 908         support for the ARM AArch64 architecture has been
 909         added.</para>
 910     </sect2>
 911   </sect1>
 912
 913   <sect1 xml:id="storage">
 914     <title>Storage</title>
 915
 916     <para>This section covers changes and additions to file systems
 917       and other storage subsystems, both local and networked.</para>
 918
 919     <sect2 xml:id="storage-general">
 920       <title>General Storage</title>
 921
 922       <para revision="278037" contrib="sponsor" sponsor="&ix;">The
 923         &man.ctl.4; <acronym>LUN</acronym> mapping has been rewritten,
 924         replacing <acronym>iSCSI</acronym>-specific mapping mechanisms
 925         with a new mechanism that works for any port.</para>
 926
 927       <para revision="278354" contrib="sponsor" sponsor="&ix;">The
 928         &man.ctld.8; utility has been updated to allow controlling
 929         non-<acronym>iSCSI</acronym> &man.ctl.4; ports.</para>
 930     </sect2>
 931
 932     <sect2 xml:id="storage-net">
 933       <title>Networked Storage</title>
 934
 935       <para revision="270096" contrib="sponsor" sponsor="&ff;">The new
 936         filesystem automount facility, &man.autofs.5;, has been added.
 937         The new &man.autofs.5; facility is similar to that found in
 938         other &unix;-like operating systems, such as OS&nbsp;X&trade;
 939         and Solaris&trade;.  The &man.autofs.5; facility uses
 940         a &sun;-compatible &man.auto.master.5; configuration file, and
 941         is administered with the &man.automount.8; userland utility,
 942         and the &man.automountd.8; and &man.autounmountd.8;
 943         daemons.</para>
 944     </sect2>
 945
 946     <sect2 xml:id="storage-zfs">
 947       <title>ZFS</title>
 948
 949       <para revision="275748">The <literal>arc_meta_limit</literal>
 950         statistics are now visible through the
 951         <literal>kstat</literal> &man.sysctl.8;.  As a result of this
 952         change, the <literal>vfs.zfs.arc_meta_used</literal>
 953         &man.sysctl.8; has been removed, and replaced with the
 954         <literal>kstat.zfs.misc.arcstats.arc_meta_used</literal>
 955         &man.sysctl.8;.</para>
 956     </sect2>
 957
 958     <sect2 xml:id="storage-geom">
 959       <title>&man.geom.4;</title>
 960
 961       <para revision="267359">Support for the
 962         <literal>disklabel64</literal> partitioning scheme has been
 963         added to &man.gpart.8;.</para>
 964     </sect2>
 965   </sect1>
 966
 967   <sect1 xml:id="boot">
 968     <title>Boot Loader Changes</title>
 969
 970     <para>This section covers the boot loader, boot menu, and other
 971       boot-related changes.</para>
 972
 973     <sect2 xml:id="boot-loader">
 974       <title>Boot Loader Changes</title>
 975
 976       <para revision="274085">The &man.vt.4; driver has been made the
 977         default system console driver.  The &man.syscons.4; driver is
 978         still available, and can be enabled by adding
 979         <literal>kern.vty=sc</literal> in &man.loader.conf.5;.
 980         Alternatively, &man.syscons.4; can be enabled at boot time by
 981         entering <literal>set kern.vty=sc</literal> at the
 982         &man.loader.8; prompt.</para>
 983
 984       <para revision="281616">The boot loader has been updated to
 985         support entering the <acronym>GELI</acronym> passphrase before
 986         loading the kernel.  To enable this behavior, add
 987         <literal>geom_eli_passphrase_prompt="YES"</literal> to
 988         &man.loader.conf.5;.</para>
 989     </sect2>
 990
 991     <sect2 xml:id="boot-menu">
 992       <title>Boot Menu Changes</title>
 993
 994       <para>&nbsp;</para>
 995     </sect2>
 996   </sect1>
 997
 998   <sect1 xml:id="network">
 999     <title>Networking</title>
1000
1001     <para>This section describes changes that affect networking in
1002       &os;.</para>
1003
1004     <sect2 xml:id="network-protocols">
1005       <title>Network Procols</title>
1006
1007       <para revision="263140">Support for the IPX network transport
1008         protocol has been removed, and will not be supported in
1009         &os;&nbsp;11 and later releases.</para>
1010
1011       <para revision="272720" contrib="sponsor"
1012         sponsor="&limelight;">Support for <acronym>PLPMTUD</acronym>
1013         blackhole detection (<acronym>RFC</acronym> 4821) has been
1014         added to the &man.tcp.4; stack, disabled by default.  New
1015         control tunables have been added:</para>
1016
1017       <informaltable frame="none" pgwide="0">
1018         <tgroup cols="2">
1019           <colspec colwidth="1*"/>
1020           <colspec colwidth="1*"/>
1021           <thead>
1022             <row>
1023               <entry>Tunable</entry>
1024               <entry>Description</entry>
1025             </row>
1026           </thead>
1027
1028           <tbody>
1029             <row>
1030               <entry><literal>net.inet.tcp.pmtud_blackhole_detection</literal></entry>
1031               <entry>Enables or disables <acronym>PLPMTUD</acronym>
1032                 blackhole detection</entry>
1033             </row>
1034
1035             <row>
1036               <entry><literal>net.inet.tcp.pmtud_blackhole_mss</literal></entry>
1037               <entry><acronym>MSS</acronym> to try for IPv4</entry>
1038             </row>
1039
1040             <row>
1041               <entry><literal>net.inet.tcp.v6pmtud_blackhole_mss</literal></entry>
1042               <entry><acronym>MSS to try for IPv6</acronym></entry>
1043             </row>
1044           </tbody>
1045         </tgroup>
1046       </informaltable>
1047
1048       <para>New monitoring &man.sysctl.8;s haven been added:</para>
1049
1050       <informaltable frame="none" pgwide="0">
1051         <tgroup cols="2">
1052           <colspec colwidth="1*"/>
1053           <colspec colwidth="1*"/>
1054           <thead>
1055             <row>
1056               <entry>Tunable</entry>
1057               <entry>Description</entry>
1058             </row>
1059           </thead>
1060
1061           <tbody>
1062             <row>
1063               <entry><literal>net.inet.tcp.pmtud_blackhole_activated</literal></entry>
1064               <entry>Number of times the code was activated to attempt
1065                 downshifting the <acronym>MSS</acronym></entry>
1066             </row>
1067
1068             <row>
1069               <entry><literal>net.inet.tcp.pmtud_blackhole_min_activated</literal></entry>
1070               <entry>Number of times the blackhole
1071                 <acronym>MSS</acronym> was used in an attempt to
1072                 downshift</entry>
1073             </row>
1074
1075             <row>
1076               <entry><literal>net.inet.tcp.pmtud_blackhole_failed</literal></entry>
1077               <entry>Number of times that the blackhole failed to
1078                 connect after downshifting the
1079                 <acronym>MSS</acronym></entry>
1080             </row>
1081           </tbody>
1082         </tgroup>
1083       </informaltable>
1084
1085       <para revision="280971" contrib="sponsor"
1086         sponsor="&netflix;, &nginx;">Support for <acronym>IP</acronym>
1087         identification for atomic datagrams (<acronym>RFC</acronym>
1088         6864) has been added.  Support for this feature can be toggled
1089         with the <literal>net.inet.ip.rfc6864</literal>
1090         &man.sysctl.8;, which is enabled by default.</para>
1091     </sect2>
1092   </sect1>
1093
1094   <sect1 xml:id="ports">
1095     <title>Ports Collection and Package Infrastructure</title>
1096
1097     <para>This section covers changes to the &os;&nbsp;Ports
1098       Collection, package infrastructure, and package maintenance and
1099       installation tools.</para>
1100
1101     <sect2 xml:id="ports-infrastructure">
1102       <title>Infrastructure Changes</title>
1103
1104       <para>&nbsp;</para>
1105     </sect2>
1106
1107     <sect2 xml:id="ports-packages ">
1108       <title>Packaging Changes</title>
1109
1110       <para>&nbsp;</para>
1111     </sect2>
1112   </sect1>
1113
1114   <sect1 xml:id="doc">
1115     <title>Documentation</title>
1116
1117     <para>This section covers changes to the &os;&nbsp;Documentation
1118       Project sources and toolchain.</para>
1119
1120     <sect2 xml:id="doc-sources">
1121       <title>Documentation Source Changes</title>
1122
1123       <para>&nbsp;</para>
1124     </sect2>
1125
1126     <sect2 xml:id="doc-toolchain">
1127       <title>Documentation Toolchain Changes</title>
1128
1129       <para>&nbsp;</para>
1130     </sect2>
1131   </sect1>
1132
1133   <sect1 xml:id="releng">
1134     <title>Release Engineering and Integration</title>
1135
1136     <para>This section convers changes that are specific to the
1137       &os;&nbsp;Release Engineering processes.</para>
1138
1139     <sect2 xml:id="releng-changes">
1140       <title>Integration Changes</title>
1141
1142       <para revision="277458" contrib="sponsor" sponsor="&ff;">The
1143         Release Engineering build tools have been updated to include
1144         support for producing virtual machine disk images for various
1145         cloud hosting providers.</para>
1146
1147       <para revision="278926">The Release Engineering build tools have
1148         been updated to use multi-threaded &man.xz.1;.  By default,
1149         the number of &man.xz.1; threads is set to the number of cores
1150         available.</para>
1151     </sect2>
1152   </sect1>
1153 </article>