Document r282213, kern.racct.enable tunable and RACCT_DISABLED
[freebsd.git] / release / doc / en_US.ISO8859-1 / relnotes / article.xml
1 <?xml version="1.0" encoding="iso-8859-1"?>
2 <!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3         "../../../share/xml/freebsd50.dtd" [
4 <!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
5  %release;
6 <!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
7  %sponsor;
8 <!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
9  %vendor;
10 <!ENTITY security SYSTEM "../../share/xml/security.xml">
11 <!ENTITY errata SYSTEM "../../share/xml/errata.xml">
12 ]>
13 <article xmlns="http://docbook.org/ns/docbook"
14   xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
15
16   <info>
17     <title>&os; &release.current; Release Notes</title>
18
19     <author>
20       <orgname>The &os; Project</orgname>
21     </author>
22
23     <pubdate>$FreeBSD$</pubdate>
24
25     <!-- Last rev: 282146 -->
26
27     <copyright>
28       <year>2015</year>
29       <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
30         Project</holder>
31     </copyright>
32
33     <legalnotice xml:id="trademarks" role="trademarks">
34       &tm-attrib.freebsd;
35       &tm-attrib.ibm;
36       &tm-attrib.ieee;
37       &tm-attrib.intel;
38       &tm-attrib.sparc;
39       &tm-attrib.general;
40     </legalnotice>
41
42     <abstract>
43       <para>The release notes for &os; &release.current; contain
44         a summary of the changes made to the &os; base system on the
45         &release.branch; development line.  This document lists
46         applicable security advisories that were issued since the last
47         release, as well as significant changes to the &os; kernel and
48         userland.  Some brief remarks on upgrading are also
49         presented.</para>
50     </abstract>
51   </info>
52
53   <sect1 xml:id="intro">
54     <title>Introduction</title>
55
56     <para>This document contains the release notes for &os;
57       &release.current;.  It describes recently added, changed, or
58       deleted features of &os;.  It also provides some notes on
59       upgrading from previous versions of &os;.</para>
60
61     <para releasetype="current">The &release.type; distribution to
62       which these release notes apply represents the latest point
63       along the &release.branch; development branch since
64       &release.branch; was created.  Information regarding pre-built,
65       binary &release.type; distributions along this branch can be
66       found at <uri
67         xlink:href="&release.url;">&release.url;</uri>.</para>
68
69     <para releasetype="snapshot">The &release.type; distribution to
70       which these release notes apply represents a point along the
71       &release.branch; development branch between &release.prev; and
72       the future &release.next;.  Information regarding pre-built,
73       binary &release.type; distributions along this branch can be
74       found at <uri
75         xlink:href="&release.url;">&release.url;</uri>.</para>
76
77     <para releasetype="release">This distribution of &os;
78       &release.current; is a &release.type; distribution.  It can be
79       found at <uri xlink:href="&release.url;">&release.url;</uri> or
80       any of its mirrors.  More information on obtaining this (or
81       other) &release.type; distributions of &os; can be found in the
82       <link
83         xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
84           &os;</quote> appendix</link> to the <link
85         xlink:href="&url.books.handbook;/">&os;
86         Handbook</link>.</para>
87
88     <para>All users are encouraged to consult the release errata
89       before installing &os;.  The errata document is updated with
90       <quote>late-breaking</quote> information discovered late in the
91       release cycle or after the release.  Typically, it contains
92       information on known bugs, security advisories, and corrections
93       to documentation.  An up-to-date copy of the errata for &os;
94       &release.current; can be found on the &os; Web site.</para>
95
96     <para>This document describes the most user-visible new or changed
97       features in &os; since &release.prev;.  In general, changes
98       described here are unique to the &release.branch; branch unless
99       specifically marked as &merged; features.</para>
100
101     <para>Typical release note items document recent security
102       advisories issued after &release.prev;, new drivers or hardware
103       support, new commands or options, major bug fixes, or
104       contributed software upgrades.  They may also list changes to
105       major ports/packages or release engineering practices.  Clearly
106       the release notes cannot list every single change made to &os;
107       between releases; this document focuses primarily on security
108       advisories, user-visible changes, and major architectural
109       improvements.</para>
110   </sect1>
111
112   <sect1 xml:id="upgrade">
113     <title>Upgrading from Previous Releases of &os;</title>
114
115     <para arch="amd64,i386">Binary upgrades between RELEASE versions
116       (and snapshots of the various security branches) are supported
117       using the &man.freebsd-update.8; utility.  The binary upgrade
118       procedure will update unmodified userland utilities, as well as
119       unmodified GENERIC kernels distributed as a part of an official
120       &os; release.  The &man.freebsd-update.8; utility requires that
121       the host being upgraded have Internet connectivity.</para>
122
123     <para>Source-based upgrades (those based on recompiling the &os;
124       base system from source code) from previous versions are
125       supported, according to the instructions in
126       <filename>/usr/src/UPDATING</filename>.</para>
127
128     <important>
129       <para>Upgrading &os; should only be attempted after backing up
130         <emphasis>all</emphasis> data and configuration files.</para>
131     </important>
132   </sect1>
133
134   <sect1 xml:id="security-errata">
135     <title>Security and Errata</title>
136
137     <para>This section lists the various Security Advisories and
138       Errata Notices since &release.prev;.</para>
139
140     <sect2 xml:id="security">
141       <title>Security Advisories</title>
142
143       &security;
144     </sect2>
145
146     <sect2 xml:id="errata">
147       <title>Errata Notices</title>
148
149       &errata;
150     </sect2>
151   </sect1>
152
153   <sect1 xml:id="userland">
154     <title>Userland</title>
155
156     <para>This section covers changes and additions to userland
157       applications, contributed software, and system utilities.</para>
158
159     <sect2 xml:id="userland-config">
160       <title>Userland Configuration Changes</title>
161
162       <para revision="266463">The default &man.newsyslog.conf.5; now
163         includes files in the
164         <filename>/etc/newsyslog.conf.d/</filename> and
165         <filename>/usr/local/etc/newsyslog.conf.d/</filename>
166         directories by default for &man.newsyslog.8;.</para>
167
168       <para revision="270675">The &man.mailwrapper.8; utility has been
169         updated to use &man.mailer.conf.5; from the
170         <literal>LOCALBASE</literal> environment variable, which
171         defaults to <filename class="directory">/usr/local</filename>
172         if unset.</para>
173
174       <para revision="272350">The <literal>MK_ARM_EABI</literal>
175         &man.src.conf.5; option has been removed.</para>
176     </sect2>
177
178     <sect2 xml:id="userland-programs">
179       <title>Userland Application Changes</title>
180
181       <para revision="258838" contrib="sponsor" sponsor="&ff;,
182         &google;" sponsorurl="">The &man.casperd.8; daemon has been
183         added, which provides access to functionality that is not
184         available in the <quote>capability mode</quote>
185         sandbox.</para>
186
187       <para revision="260594">When unable to load a kernel module with
188         &man.kldload.8;, a message informing to view output of
189         &man.dmesg.8; is now printed, opposed to the previous output
190         <quote>Exec format error.</quote>.</para>
191
192       <para revision="260910">Allow &man.pciconf.8; to identify PCI
193         devices that are attached to a driver to be identified by
194         their device name instead of just the selector.  Additionally,
195         an optional device argument to the <literal>-l</literal> flag
196         to restrict the output to only listing details about a single
197         device.</para>
198
199       <para revision="260913">A new flag, <quote>onifconsole</quote>
200         has been added to <filename>/etc/ttys</filename>.  This allows
201         the system to provide a login prompt via serial console if the
202         device is an active kernel console, otherwise it is equivalent
203         to <literal>off</literal>.</para>
204
205       <para revision="260926">Support for displaying VPD for PCI
206         devices via &man.pciconf.8; has been added.</para>
207
208       <para revision="261498">&man.ping.8; protects against malicious
209         network packets using the Capsicum framework to drop
210         privileges.</para>
211
212       <para revision="265229">The &man.ps.1; utility has been
213         updated to include the <literal>-J</literal> flag, used to
214         filter output by matching &man.jail.8; IDs and names.
215         Additionally, argument <literal>0</literal> can be used to
216         <literal>-J</literal> to only list processes running on the
217         host system.</para>
218
219       <para revision="265249">The &man.top.1; utility has been updated
220         to filter by &man.jail.8; ID or name, in followup to the
221         &man.ps.1; change in <literal>r265229</literal>.</para>
222
223       <para revision="265995">The Blowfish &man.crypt.3; default
224         format has been changed to
225         <literal>&dollar;2b&dollar;</literal>.</para>
226
227       <para revision="266209">The &man.pmcstat.8; utility has been
228         updated to include a new flag, <literal>-l</literal>, which
229         ends event collection after the specified number of
230         seconds.</para>
231
232       <para revision="270745">The &man.ps.1; utility has been updated
233         to include a new keyword, <quote>tracer</quote>, which
234         displays the <acronym>PID</acronym> of the tracing
235         process.</para>
236
237       <para revision="271482">Support for adding empty partitions has
238         been added to the &man.mkimg.1; utility.</para>
239
240       <para revision="272166">The &man.primes.6; utility has been
241         updated to correctly enumerate prime numbers between
242         <literal>4295098369</literal> and
243         <literal>3825123056546413050</literal>, which prior to this
244         change, it would be possible for returned values to be
245         incorrectly identified as prime numbers.</para>
246
247       <para revision="272198">The &man.mkimg.1; utility has been
248         updated to include three options used to print information
249         about &man.mkimg.1; itself:</para>
250
251       <informaltable frame="none" pgwide="0">
252         <tgroup cols="2">
253           <colspec colwidth="1*"/>
254           <colspec colwidth="1*"/>
255           <thead>
256             <row>
257               <entry>Option</entry>
258               <entry>Output</entry>
259             </row>
260           </thead>
261
262           <tbody>
263             <row>
264               <entry><literal>--version</literal></entry>
265               <entry>The current version of the &man.mkimg.1;
266                 utility</entry>
267             </row>
268
269             <row>
270               <entry><literal>--formats</literal></entry>
271               <entry>The disk image file formats supported by
272                 &man.mkimg.1;</entry>
273             </row>
274
275             <row>
276               <entry><literal>--schemes</literal></entry>
277               <entry>The partition schemes supported by
278                 &man.mkimg.1;</entry>
279             </row>
280           </tbody>
281         </tgroup>
282       </informaltable>
283
284       <para revision="272488">Userland &man.ctf.5; support in
285         &man.dtrace.1; has been added.  With this change,
286         &man.dtrace.1; is able to resolve type info for function and
287         <acronym>USDT</acronym> probe arguments, and function return
288         values.</para>
289
290       <para revision="274960">The &man.elfdump.1; utility has been
291         updated to support capability mode provided by
292         &man.capsicum.4;.</para>
293
294       <para revision="275680" contrib="sponsor" sponsor="&ff;">The
295         &man.fstyp.8; utility has been added, which is used to
296         determine the filesystem on a specified device.</para>
297
298       <para revision="276881">The <literal>libedit</literal> library
299         has been updated to support <acronym>UTF</acronym>-8, which
300         additionally provides unicode support to &man.sh.1;.</para>
301
302       <para revision="277166" arch="powerpc">The &man.ptrace.2; system
303         call has been updated include support for Altivec registers on
304         &os;/&arch.powerpc;.</para>
305
306       <para revision="278320">A new device control utility,
307         &man.devctl.8; has been added, which allows making
308         administrative changes to individual devices, such as
309         attaching and detaching drivers, and enabling and disabling
310         devices.  The &man.devctl.8; utility uses the new
311         &man.devctl.3; library.</para>
312
313       <para revision="279315" contrib="sponsor" sponsor="&ff;">The
314         &man.uefisign.8; utility has been added.</para>
315
316       <para revision="279571" contrib="sponsor"
317         sponsor="&scaleengine;">The &man.freebsd-update.8; utility has
318         been updated to prevent fetching updated binary patches when
319         a previous upgrade has not been thoroughly completed.</para>
320
321       <para revision="279122" contrib="sponsor"
322         sponsor="&juniper;">The &man.netstat.1; utility has been
323         updated to link against the &man.libxo.3; shared
324         library.</para>
325
326       <para revision="280870">A regression in the &man.libarchive.3;
327         library that would prevent a directory from being included in
328         the archive when <literal>--one-file-system</literal> is used
329         has been fixed.</para>
330
331       <para revision="281311" contrib="sponsor" sponsor="&ff;">The
332         &man.ar.1; utility has been updated to set
333         <literal>ARCHIVE_EXTRACT_SECURE_SYMLINKS</literal> and
334         <literal>ARCHIVE_EXTRACT_SECURE_NODOTDOT</literal> to disallow
335         directory traversal when extracting an archive, similar to
336         &man.tar.1;.</para>
337
338       <para revision="282208" contrib="sponsor"
339         sponsor="&multiplay;">The &man.chflags.1;, &man.chgrp.1;,
340         &man.chmod.1;, and &man.chown.8; utilities now affect symbolic
341         links when the <literal>-R</literal> flag is specified, as
342         documented in &man.symlink.7;.</para>
343     </sect2>
344
345     <sect2 xml:id="userland-contrib">
346       <title>Contributed Software</title>
347
348       <para revision="258884" contrib="sponsor"
349         sponsor="&darpa_afrl;">&man.lldb.1; has been updated to
350         upstream snapshot version r196259.</para>
351
352       <para revision="259626">Timezone data files have been updated to
353         version 2013i.</para>
354
355       <para revision="260445">&man.byacc.1; has been updated to
356         version 20140101.</para>
357
358       <para revision="261071">&man.jemalloc.3; has been updated to
359         version 3.5.0.</para>
360
361       <para revision="261283"><application>libc++</application> has
362         been updated to version 3.4.</para>
363
364       <para revision="261320"><application>OpenSSH</application> has
365         been updated to 6.5p1.</para>
366
367       <para revision="261344"><application>mdocml</application> has
368         been updated to version 1.12.3.</para>
369
370       <para revision="261991"><application>LLVM</application> and
371         <application>Clang</application> have been updated to
372         version 3.4.</para>
373
374       <para revision="266527"
375         role="merged"><application>Sendmail</application> has been
376         updated from 8.14.7 to 8.14.9.</para>
377
378       <para revision="276577"><application>file</application> has been
379         updated to version 5.22.</para>
380
381       <para revision="275718">The <application>binutils</application>
382         suite of utilities has been updated to include upstream
383         patches that add new relocations for &arch.powerpc;
384         support.</para>
385
386       <para revision="276398" contrib="sponsor" sponsor="&ff;">The
387         <application>ELF Tool Chain</application> has been updated to
388         upstream revision r3136.</para>
389
390       <para revision="276551">The <application>texinfo</application>
391         utility and <literal>info</literal> pages were removed from
392         the base system.  The <filename
393           role="package">print/texinfo</filename> port should be
394         installed on systems where <literal>info</literal> pages are
395         needed.</para>
396
397       <para revision="276796" contrib="sponsor" sponsor="&ff;">The ELF
398         object manipulation tools
399         <application>addr2line</application>,
400         <application>elfcopy (strip)</application>,
401         <application>nm</application>,
402         <application>readelf</application>,
403         <application>size</application>, and
404         <application>strings</application> were switched to the
405         versions from the ELF Tool Chain project.</para>
406
407       <para revision="276881">The <literal>libedit</literal> library
408         has been updated to include <acronym>UTF-8</acronym> support,
409         adding <acronym>UTF-8</acronym> support to the &man.sh.1;
410         shell.</para>
411
412       <para revision="278433">The &man.xz.1; utility has been updated
413         to support multi-threaded compression.</para>
414
415       <para revision="280297"><application>OpenSSL</application> has
416         been updated to version 1.0.1m.</para>
417
418       <para revision="280932" contrib="sponsor" sponsor="&ff;">The
419         <application>elftoolchain</application> utilities have been
420         updated to version 3179.</para>
421
422       <para revision="281316">The &man.xz.1; utility has been updated
423         to version 5.2.1.</para>
424
425       <para revision="281373">The &man.nvi.1; utility has been updated
426         to version 2.1.3.</para>
427
428       <para revision="281396">The &man.acpi.4; subsystem has been
429         updated to version 20150410.</para>
430
431       <para revision="281806">The &man.wpa.supplicant.8; and
432         &man.hostapd.8; utilities have been updated to version
433         2.4.</para>
434
435       <para revision="281812"><application>bmake</application> has
436         been updated to version 20150418.</para>
437
438       <para revision="282089">The &man.unbound.8; utility has been
439         updated to version 1.5.3.</para>
440     </sect2>
441
442     <sect2 xml:id="userland-installer">
443       <title>Installation and Configuration Tools</title>
444
445       <para revision="271539">The &man.bsdinstall.8; partition editor
446         and &man.sade.8; utility have been updated to include native
447         <acronym>ZFS</acronym> support.</para>
448
449       <para revision="272274">The &os; installation utility,
450         &man.bsdinstall.8;, has been updated to set the
451         <literal>canmount</literal> &man.zfs.8; property to
452         <literal>off</literal> for the <filename
453           class="directory">/var</filename> dataset, preventing the
454         contents of directories within <filename
455           class="directory">/var</filename> from conflicting when
456         using multiple boot environments, such as that provided by
457         <filename role="package">sysutils/beadm</filename>.</para>
458
459       <para revision="274394">The &man.bsdconfig.8; utility has been
460         updated to skip the initial &man.tzsetup.8;
461         <acronym>UTC</acronym> versus wall-clock time prompt when run
462         in a virtual machine, determined when the
463         <literal>kern.vm_guest</literal> &man.sysctl.8; is set to
464         <literal>1</literal>.</para>
465
466       <para revision="275874">The &man.bsdinstall.8; utility has been
467         updated to use the new &man.dpv.3; library to display progress
468         when extracting the &os; distributions.</para>
469     </sect2>
470
471     <sect2 xml:id="userland-rc">
472       <title><filename class="directory">/etc/rc.d</filename>
473         Scripts</title>
474
475       <para revision="270676">The &man.rc.8; subsystem has been
476         updated to allow configuring services in <filename
477           class="directory">&dollar;{LOCALBASE}/etc/rc.conf.d/</filename>.
478         If <literal>LOCALBASE</literal> is unset, it defaults to
479         <filename class="directory">/usr/local</filename>.</para>
480
481       <para revision="275299">The <filename>mrouted</filename>
482         &man.rc.8; script has been removed from the base system.  An
483         equivalent script is available from the <filename
484           role="package">net/mrouted</filename> port.</para>
485
486       <para revision="279463" contrib="sponsor"
487         sponsor="&sandvine;">A new &man.rc.8; script,
488         <filename>iovctl</filename>, has been added, which allows
489         automatically starting the &man.iovctl.8; utility at
490         boot.</para>
491     </sect2>
492
493     <sect2 xml:id="userland-periodic">
494       <title><filename class="directory">/etc/periodic</filename>
495         Scripts</title>
496
497       <para revision="271321">The daily &man.periodic.8; script
498         <filename>110.clean-tmps</filename> has been updated to avoid
499         crossing filesystem mount boundaries when cleaning files in
500         <filename class="directory">/tmp</filename>.</para>
501     </sect2>
502
503     <sect2 xml:id="userland-libraries">
504       <title>Runtime Libraries and API</title>
505
506       <para revision="268461">The &man.readline.3; library is now
507         statically linked in software within the base system, and the
508         shared library is no longer installed, allowing the Ports
509         Collection to use a modern version of the library.</para>
510
511       <para revision="272273">The &man.strptime.3; library has been
512         updated to add support for <acronym>POSIX</acronym>-2001
513         features <literal>%U</literal> and
514         <literal>%W</literal>.</para>
515
516       <para revision="272842,272848" contrib="sponsor"
517         sponsor="&ff;">The &man.dl.iterate.phdr.3; library has been
518         changed to always return the path name of the
519         <acronym>ELF</acronym> object in the
520         <literal>dlpi_name</literal> structure member.</para>
521
522       <para revision="273562" contrib="sponsor"
523         sponsor="&juniper;">The &man.libxo.3; library has been
524         imported to the base system.</para>
525
526       <para revision="273806" contrib="sponsor" sponsor="&chelsio;">A
527         userland library for Chelsio Terminator 5 based iWARP cards
528         has been added, allowing userland <acronym>RDMA</acronym>
529         applications to work over compatible
530         <acronym>NIC</acronym>s.</para>
531
532       <para revision="274987">The &man.gpio.3; library has been added,
533         providing a wrapper around the &man.gpio.4; kernel
534         interface.</para>
535
536       <para revision="277610">The <literal>futimens()</literal> and
537         <literal>utimensat()</literal> system calls have been
538         added.  See &man.utimensat.2; for more information.</para>
539
540       <para revision="278934">The &man.elf.3; compile-time dependency
541         has been removed from <filename>dtri.o</filename>, which
542         allows adding <application>DTrace</application> probes to
543         userland applications and libraries without also linking
544         against &man.elf.3;.</para>
545
546       <para revision="279186">The &man.setmode.3; function has been
547         updated to consistently set <literal>errno</literal> on
548         failure.</para>
549
550       <para revision="279663">The &man.qsort.3; functions have been
551         updated to be able to handle 32-bit aligned data on 64-bit
552         platforms, also providing a significant improvement in 32-bit
553         workloads.</para>
554
555       <para revision="281130">Several standard include headers have
556         been updated to use of <application>gcc</application>
557         attributes, such as <literal>__result_use_check()</literal>,
558         <literal>__alloc_size()</literal>, and
559         <literal>__nonnull()</literal>.</para>
560
561       <para revision="281845">Support for file verification in
562         <acronym>MAC</acronym> has been added.</para>
563     </sect2>
564
565     <sect2 xml:id="userland-abi">
566       <title>ABI Compatibility</title>
567
568       <para revision="271982">The &linux; compatibility version has
569         been updated to <literal>2.6.18</literal>.  The
570         <literal>compat.linux.osrelease</literal> &man.sysctl.8; is
571         evaluated when building the <filename
572           role="package">emulators/linux-c6</filename> and related
573         ports.</para>
574     </sect2>
575   </sect1>
576
577   <sect1 xml:id="kernel">
578     <title>Kernel</title>
579
580     <para>This section covers changes to kernel configurations, system
581       tuning, and system control parameters that are not otherwise
582       categorized.</para>
583
584     <sect2 xml:id="kernel-bugfix">
585       <title>Kernel Bug Fixes</title>
586
587       <para revision="265876">A kernel bug that inhibited proper
588         functionality of the <literal>dev.cpu.0.freq</literal>
589         &man.sysctl.8; on &intel; processors with Turbo
590         Boost&nbsp;&trade; enabled has been fixed.</para>
591
592       <para revision="271697" arch="powerpc">Support for
593         &man.dtrace.1; stack tracing has been fixed for
594         &os;/&arch.powerpc;, using the <literal>trapexit()</literal>
595         and <literal>asttrapexit()</literal> functions instead of
596         checking within addressed kernel space.</para>
597
598       <para revision="272089">A bug in &man.ipfw.4; that could
599         potentially lead to a kernel panic when using &man.dummynet.4;
600         at layer 2 has been fixed.</para>
601
602       <para revision="280930" contrib="sponsor" sponsor="&mitail;">The
603         kernel <acronym>RPC</acronym> has been updated to include
604         several enhancements:</para>
605
606       <itemizedlist>
607         <listitem>
608           <para>The 45 MiB limit on requests queued for
609             &man.nfsd.8; threads has been removed.</para>
610         </listitem>
611
612         <listitem>
613           <para>Avoids unnecessary throttling by not deferring
614             accounting for completed requests.</para>
615         </listitem>
616
617         <listitem>
618           <para>Fixes an integer overflow and signedness bugs.</para>
619         </listitem>
620       </itemizedlist>
621
622       <para revision="281261" arch="powerpc">Support for
623         &man.dtrace.1; has been added for the
624         Book-E&nbsp;&trade;.</para>
625     </sect2>
626
627     <sect2 xml:id="kernel-config">
628       <title>Kernel Configuration</title>
629
630       <para revision="266531">The <literal>IMAGACT_BINMISC</literal>
631         kernel configuration option has been enabled by default,
632         which enables application execution through emulators, such
633         as <application>Qemu</application>.</para>
634
635       <para revision="268045">The <literal>VT</literal> kernel
636         configuration file has been removed, and the &man.vt.4;
637         driver is included in the <literal>GENERIC</literal> kernel.
638         To enable &man.vt.4;, enter <literal>set kern.vty=vt</literal>
639         at the &man.loader.8; prompt during boot, or add
640         <literal>kern.vty=vt</literal> to &man.loader.conf.5; and
641         reboot the system.</para>
642
643       <para revision="277904">The &man.config.8; utility has been
644         updated to allow using a non-standard <filename
645           class="directory">src/</filename> tree, specified as an
646         argument to the <literal>-s</literal> flag.</para>
647
648       <para revision="277990" arch="powerpc64">The
649         &os;/&arch.powerpc64; kernel now builds as
650         a position-independent executable, allowing the kernel to be
651         loaded into and run from any physical or virtual
652         address.</para>
653
654       <important>
655         <para>This change requires an update to &man.loader.8;.
656           The userland and kernel must be updated before rebooting the
657           system.</para>
658       </important>
659
660       <para revision="279189" contrib="sponsor" sponsor="&ff;"
661         arch="powerpc">Kernel support for Vector-Scalar eXtension
662         (<acronym>VSX</acronym>) found on POWER7 and POWER8 hardware
663         has been added.</para>
664
665       <para revision="279252" contrib="sponsor" sponsor="&ff;"
666         arch="powerpc">The &man.pmap.9; implementation for 64-bit
667         &powerpc; processors has been overhaulded to improve
668         concurrency.</para>
669     </sect2>
670
671     <sect2 xml:id="kernel-sysctl">
672       <title>System Tuning and Controls</title>
673
674       <para revision="275140" contrib="sponsor" sponsor="&ff;">The
675         &man.hwpmc.4; default and maximum callchain depths have been
676         increased.  The default has been increased from 16 to 32, and
677         the maximum increased from 32 to 128.</para>
678
679       <para revision="279361">The <literal>kern.osrelease</literal>
680         and <literal>kern.osreldate</literal> are now configurable
681         &man.jail.8; parameters.</para>
682
683       <para revision="280308,280949" contrib="sponsor"
684         sponsor="&ix;, &ff;">The &man.devfs.5; device filesystem has
685         been changed to update timestamps for read/write operations
686         using seconds precision.  A new &man.sysctl.8;,
687         <literal>vfs.devfs.dotimes</literal> has been added, which
688         when set to a non-zero value, enables default precision
689         timestamps for these operations.</para>
690
691       <para revision="282213" contrib="sponsor" sponsor="&ff;">A new
692         &man.sysctl.8;, <literal>kern.racct.enable</literal>, has been
693         added, which when set to a non-zero value allows using
694         &man.rctl.8; with the <literal>GENERIC</literal> kernel. A new
695         kernel configuration option, <literal>RACCT_DISABLED</literal>
696         has also been added.</para>
697     </sect2>
698   </sect1>
699
700   <sect1 xml:id="drivers">
701     <title>Devices and Drivers</title>
702
703     <para>This section covers changes and additions to devices and
704       device drivers since &release.prev;.</para>
705
706     <sect2 xml:id="drivers-device">
707       <title>Device Drivers</title>
708
709       <para revision="260903">Support for GPS ports has been added to
710         &man.uhso.4;.</para>
711
712       <para revision="265132">The &man.full.4; device has been added,
713         and the <literal>lindev(4)</literal> device has been removed.
714         Prior to this change, <literal>lindev(4)</literal> provided
715         only the <filename>/dev/full</filename> character device,
716         returning <literal>ENOSPC</literal> on write attempts.  As
717         this device is not specific to &linux;, a native &os; version
718         has been added.</para>
719
720       <para revision="271705">Hardware context support has been
721         added to the <literal>drm/i915</literal> driver, adding
722         support for <application>Mesa</application> 9.2 and
723         later.</para>
724
725       <para revision="273178">The &man.vt.4; driver has been updated,
726         replacing the bitmapped <literal>kern.vt.spclkeys</literal>
727         &man.sysctl.8; with individual
728         <literal>kern.vt.kbd_*</literal> variants.</para>
729
730       <para revision="273598">The &man.hpet.4; driver has been updated
731         to create a
732         <filename>/dev/hpet<replaceable>N</replaceable></filename>
733         device, providing access to <acronym>HPET</acronym> from
734         userspace.</para>
735
736       <para revision="280183">The <literal>drm</literal> code has
737         been updated to match &linux; version 3.8.13.</para>
738     </sect2>
739
740     <sect2 xml:id="drivers-storage">
741       <title>Storage Drivers</title>
742
743       <para revision="265236" contrib="sponsor"
744         sponsor="&lsi;, &spectralogic;" sponsorurl="">The &man.mpr.4;
745         device has been added, providing support for LSI Fusion-MPT
746         3 12Gb SCSI/SATA controllers.</para>
747
748       <para revision="265555" contrib="sponsor"
749           sponsor="&lsi;">The &man.mrsas.4; driver has been added,
750         providing support for LSI MegaRAID SAS controllers.  The
751         &man.mfi.4; driver will attach to the controller, by default.
752         To enable &man.mrsas.4; add
753         <literal>hw.mfi.mrsas_enable=1</literal> to
754         <filename>/boot/loader.conf</filename>, which turns off
755         &man.mfi.4; device probing.</para>
756
757       <note>
758         <para>At this time, the &man.mfiutil.8; utility and the &os;
759           version of <application>MegaCLI</application> and
760           <application>StorCli</application> do not work with
761           &man.mrsas.4;.</para>
762       </note>
763
764       <para revision="275461" contrib="sponsor" sponsor="&ix;">The
765         &man.ctl.4; subsystem has been updated, increasing the ports
766         limit from <literal>128</literal> to <literal>256</literal>,
767         and <acronym>LUN</acronym> limit from <literal>256</literal>
768         to <literal>1024</literal>.</para>
769
770       <para revision="276526">The <literal>asr(4)</literal> driver has
771         been removed, and is no longer supported.</para>
772
773       <para revision="281387">The &man.hptnr.4; driver has been
774         updated to version 1.1.1.</para>
775     </sect2>
776
777     <sect2 xml:id="drivers-network">
778       <title>Network Drivers</title>
779
780       <para revision="258830">Support for Broadcom chipsets BCM57764,
781         BCM57767, BCM57782, BCM57786 and BCM57787 has been added to
782         &man.bge.4;.</para>
783
784       <para revision="260448">Support for the &intel; Centrino&trade;
785         Wireless-N 135 chipset has been added.</para>
786
787       <para revision="260552">Firmware for &intel; Centrino&trade;
788         Wireless-N 105 devices has been added to the base
789         system.</para>
790
791       <para revision="261975">The deprecated nve(4) driver has been
792         removed.  Users of NVIDIA nForce MCP network adapters are
793         advised to use the &man.nfe.4; driver instead, which has been
794         the default driver for this hardware since
795         &os;&nbsp;7.0.</para>
796
797       <para revision="264601" contrib="sponsor"
798         sponsor="&darpa_afrl;">The <literal>if_nf10bmac(4)</literal>
799         device has been added, providing support for NetFPGA-10G
800         Embedded CPU Ethernet Core.</para>
801
802       <note>
803         <para>The <literal>if_nf10bmac(4)</literal> driver operates on
804           the FPGA, and is not suited for the PCI host
805           interface.</para>
806       </note>
807
808       <para revision="265348" contrib="sponsor"
809         sponsor="&netgate;">The &man.ath.hal.4; driver has been
810         updated to support the Atheros AR1111 chipset.</para>
811
812       <para revision="266770">Support for the &intel; Centrino&trade;
813         Wireless-N 105 chipset has been added.</para>
814
815       <para revision="266757" contrib="sponsor"
816         sponsor="&chelsio;">Support for the &man.cxgbe.4; Terminator
817         5 (T5) 10G/40G cards has been added to &man.netmap.4;.</para>
818
819       <para revision="272730">The &man.alc.4; driver has been updated
820         to support AR816x and AR817x ethernet controllers.</para>
821
822       <para revision="273331">The &man.vxlan.4; driver has been added,
823         which creates a virtual Layer 2 (Ethernet) network overlaid in
824         a Layer 3 (IP/UDP) network.  The &man.vxlan.4; driver is
825         analogous to &man.vlan.4;, but is designed to be better suited
826         for large, multiple-tenant datacenter environments.</para>
827
828       <para revision="274246" contrib="sponsor" sponsor="&yandex;">The
829         &man.gre.4; driver has been significantly overhauled, and has
830         been split into two separate modules, &man.gre.4; and
831         &man.me.4;.</para>
832     </sect2>
833   </sect1>
834
835   <sect1 xml:id="hardware">
836     <title>Hardware Support</title>
837
838     <para>This section covers general hardware support for physical
839       machines, hypervisors, and virtualization environments, as well
840       as hardware changes and updates that do not otherwise fit in
841       other sections of this document.</para>
842
843     <sect2 xml:id="hardware-support">
844       <title>Hardware Support</title>
845
846       <para revision="268303">The &man.asmc.4; driver has been
847         updated to support the &apple;&nbsp;MacMini 3,1.</para>
848
849       <para revision="268351">Support for &os;/ia64 has been dropped
850         as of &os;&nbsp;11.</para>
851
852       <para revision="274386">An issue that could cause a system to
853         hang when entering <acronym>ACPI</acronym>
854         <literal>S3</literal> state (suspend to
855         <acronym>RAM</acronym>) has been corrected in the &man.acpi.4;
856         and &man.pci.4; drivers.</para>
857
858       <para revision="274733" arch="powerpc">The power management unit
859         subsystem has been updated to support power button events on
860         certain &arch.powerpc; hardware, such as aluminum
861         PowerBook&nbsp;&reg;.</para>
862
863       <para revision="275171,275190" arch="powerpc">The &man.hwpmc.4;
864         driver has been updated to correct performance counter
865         sampling on G4 (MPC74xxx) and G5 class processors.</para>
866
867       <para revision="281713" arch="powerpc">The &man.hwpmc.4;
868         driver has been updated to support the Freescale e500
869         core.</para>
870
871       <para revision="275732" contrib="sponsor"
872         sponsor="&ff;,&netgate;">The
873         <application>OpenCrypto</application> framework has been
874         updated to include <literal>AES-ICM</literal> and
875         <literal>AES-GCM</literal> modes, both of which have also been
876         added to the &man.aesni.4; driver.</para>
877     </sect2>
878
879     <sect2 xml:id="hardware-virtualization">
880       <title>Virtualization Support</title>
881
882       <para revision="260410">Support for the <quote>Virtual Interrupt
883           Delivery</quote> feature of &intel;&nbsp;VT-x is enabled if
884         supported by the CPU.  This feature can be disabled by running
885         <literal>sysctl hw.vmm.vmx.use_apic_vid=0</literal>.
886         Additionally, to persist this setting across reboots, add
887         <literal>hw.vmm.vmx.use_apic_vid=0</literal> to
888         <filename>/etc/sysctl.conf</filename>.</para>
889
890       <para revision="260532">Support for <quote>Posted Interrupt
891           Processing</quote> is enabled if supported by the CPU.  This
892         feature can be disabled by running <literal>sysctl
893           hw.vmm.vmx.use_apic_pir=0</literal>.  Additionally, to
894         persist this setting across reboots, add
895         <literal>hw.vmm.vmx.use_apic_pir=0</literal> to
896         <filename>/etc/sysctl.conf</filename>.</para>
897
898       <para revision="260582">Unmapped IO support has been added to
899         &man.virtio_blk.4;.</para>
900
901       <para revision="260583">Unmapped IO support has been added to
902         &man.virtio_scsi.4;.</para>
903
904       <para revision="260847">The &man.virtio_random.4; driver has
905         been added to harvest entropy from the host system.</para>
906
907       <para revision="261504">&os;/&arch.i386; guests can be run under
908         bhyve.</para>
909
910       <para revision="267536" contrib="sponsor"
911         sponsor="&citrix.rd;">Support for running a &os;/&arch.amd64;
912         <application>Xen</application> guest instance as
913         <acronym>PVH</acronym> guest has been added.
914         <acronym>PVH</acronym> mode, short for <quote>Para-Virtualized
915           Hardware</quote>, uses para-virtualized drivers for boot and
916         I/O, and uses hardware virtualization extensions for all other
917         tasks, without the need for emulation.</para>
918
919       <para revision="273515">The &man.virtio.console.4; driver has
920         been added, which provides an interface to VirtIO console
921         devices through a &man.tty.4; device.</para>
922
923       <para revision="279957">The &man.bhyve.8; hypervisor has been
924         updated to support <literal>DSM TRIM</literal> commands for
925         virtual <acronym>AHCI</acronym> disks.</para>
926
927       <para revision="281439" arch="arm">Support for the
928         <application>QEMU</application> <literal>virt</literal> system
929         has been added.</para>
930
931       <para revision="282212" contrib="sponsor" sponsor="&msostc;">The
932         HyperV&trade; drivers have been updated with several
933         enhancements:</para>
934
935       <itemizedlist>
936         <listitem>
937           <para>The &man.hv.vmbus.4; driver now has multi-channel
938             support.</para>
939         </listitem>
940
941         <listitem>
942           <para>The &man.hv.storvsc.4; driver now has scatter/gather
943             support, in addition to performance improvements.</para>
944         </listitem>
945
946         <listitem>
947           <para>The &man.hv.kvp.4; driver has received several bug
948             fixes.</para>
949         </listitem>
950       </itemizedlist>
951     </sect2>
952
953     <sect2 xml:id="hardware-arm">
954       <title>ARM Support</title>
955
956       <para revision="260921">The &man.nand.4; device is enabled for
957         ARM devices by default.</para>
958
959       <para revision="273264" arch="armv6">An issue that could cause
960         instability when detecting <acronym>SD</acronym> cards on the
961         Raspberry Pi <acronym>SOC</acronym> has been fixed.</para>
962
963       <para revision="275963">The <literal>bcm2835_cpufreq</literal>
964         driver has been added, which supports <acronym>CPU</acronym>
965         frequency and voltage control on the Raspberry Pi
966         <acronym>SOC</acronym>.</para>
967
968       <para revision="280259" contrib="sponsor" sponsor="&ff;">Initial
969         support for the ARM AArch64 architecture has been
970         added.</para>
971     </sect2>
972   </sect1>
973
974   <sect1 xml:id="storage">
975     <title>Storage</title>
976
977     <para>This section covers changes and additions to file systems
978       and other storage subsystems, both local and networked.</para>
979
980     <sect2 xml:id="storage-general">
981       <title>General Storage</title>
982
983       <para revision="278037" contrib="sponsor" sponsor="&ix;">The
984         &man.ctl.4; <acronym>LUN</acronym> mapping has been rewritten,
985         replacing <acronym>iSCSI</acronym>-specific mapping mechanisms
986         with a new mechanism that works for any port.</para>
987
988       <para revision="278354" contrib="sponsor" sponsor="&ix;">The
989         &man.ctld.8; utility has been updated to allow controlling
990         non-<acronym>iSCSI</acronym> &man.ctl.4; ports.</para>
991     </sect2>
992
993     <sect2 xml:id="storage-net">
994       <title>Networked Storage</title>
995
996       <para revision="270096" contrib="sponsor" sponsor="&ff;">The new
997         filesystem automount facility, &man.autofs.5;, has been added.
998         The new &man.autofs.5; facility is similar to that found in
999         other &unix;-like operating systems, such as OS&nbsp;X&trade;
1000         and Solaris&trade;.  The &man.autofs.5; facility uses
1001         a &sun;-compatible &man.auto.master.5; configuration file, and
1002         is administered with the &man.automount.8; userland utility,
1003         and the &man.automountd.8; and &man.autounmountd.8;
1004         daemons.</para>
1005     </sect2>
1006
1007     <sect2 xml:id="storage-zfs">
1008       <title>ZFS</title>
1009
1010       <para revision="275748">The <literal>arc_meta_limit</literal>
1011         statistics are now visible through the
1012         <literal>kstat</literal> &man.sysctl.8;.  As a result of this
1013         change, the <literal>vfs.zfs.arc_meta_used</literal>
1014         &man.sysctl.8; has been removed, and replaced with the
1015         <literal>kstat.zfs.misc.arcstats.arc_meta_used</literal>
1016         &man.sysctl.8;.</para>
1017     </sect2>
1018
1019     <sect2 xml:id="storage-geom">
1020       <title>&man.geom.4;</title>
1021
1022       <para revision="267359">Support for the
1023         <literal>disklabel64</literal> partitioning scheme has been
1024         added to &man.gpart.8;.</para>
1025     </sect2>
1026   </sect1>
1027
1028   <sect1 xml:id="boot">
1029     <title>Boot Loader Changes</title>
1030
1031     <para>This section covers the boot loader, boot menu, and other
1032       boot-related changes.</para>
1033
1034     <sect2 xml:id="boot-loader">
1035       <title>Boot Loader Changes</title>
1036
1037       <para revision="274085">The &man.vt.4; driver has been made the
1038         default system console driver.  The &man.syscons.4; driver is
1039         still available, and can be enabled by adding
1040         <literal>kern.vty=sc</literal> in &man.loader.conf.5;.
1041         Alternatively, &man.syscons.4; can be enabled at boot time by
1042         entering <literal>set kern.vty=sc</literal> at the
1043         &man.loader.8; prompt.</para>
1044
1045       <para revision="281616">The boot loader has been updated to
1046         support entering the <acronym>GELI</acronym> passphrase before
1047         loading the kernel.  To enable this behavior, add
1048         <literal>geom_eli_passphrase_prompt="YES"</literal> to
1049         &man.loader.conf.5;.</para>
1050     </sect2>
1051
1052     <sect2 xml:id="boot-menu">
1053       <title>Boot Menu Changes</title>
1054
1055       <para>&nbsp;</para>
1056     </sect2>
1057   </sect1>
1058
1059   <sect1 xml:id="network">
1060     <title>Networking</title>
1061
1062     <para>This section describes changes that affect networking in
1063       &os;.</para>
1064
1065     <sect2 xml:id="network-protocols">
1066       <title>Network Procols</title>
1067
1068       <para revision="263140">Support for the IPX network transport
1069         protocol has been removed, and will not be supported in
1070         &os;&nbsp;11 and later releases.</para>
1071
1072       <para revision="272720" contrib="sponsor"
1073         sponsor="&limelight;">Support for <acronym>PLPMTUD</acronym>
1074         blackhole detection (<acronym>RFC</acronym> 4821) has been
1075         added to the &man.tcp.4; stack, disabled by default.  New
1076         control tunables have been added:</para>
1077
1078       <informaltable frame="none" pgwide="0">
1079         <tgroup cols="2">
1080           <colspec colwidth="1*"/>
1081           <colspec colwidth="1*"/>
1082           <thead>
1083             <row>
1084               <entry>Tunable</entry>
1085               <entry>Description</entry>
1086             </row>
1087           </thead>
1088
1089           <tbody>
1090             <row>
1091               <entry><literal>net.inet.tcp.pmtud_blackhole_detection</literal></entry>
1092               <entry>Enables or disables <acronym>PLPMTUD</acronym>
1093                 blackhole detection</entry>
1094             </row>
1095
1096             <row>
1097               <entry><literal>net.inet.tcp.pmtud_blackhole_mss</literal></entry>
1098               <entry><acronym>MSS</acronym> to try for IPv4</entry>
1099             </row>
1100
1101             <row>
1102               <entry><literal>net.inet.tcp.v6pmtud_blackhole_mss</literal></entry>
1103               <entry><acronym>MSS to try for IPv6</acronym></entry>
1104             </row>
1105           </tbody>
1106         </tgroup>
1107       </informaltable>
1108
1109       <para>New monitoring &man.sysctl.8;s haven been added:</para>
1110
1111       <informaltable frame="none" pgwide="0">
1112         <tgroup cols="2">
1113           <colspec colwidth="1*"/>
1114           <colspec colwidth="1*"/>
1115           <thead>
1116             <row>
1117               <entry>Tunable</entry>
1118               <entry>Description</entry>
1119             </row>
1120           </thead>
1121
1122           <tbody>
1123             <row>
1124               <entry><literal>net.inet.tcp.pmtud_blackhole_activated</literal></entry>
1125               <entry>Number of times the code was activated to attempt
1126                 downshifting the <acronym>MSS</acronym></entry>
1127             </row>
1128
1129             <row>
1130               <entry><literal>net.inet.tcp.pmtud_blackhole_min_activated</literal></entry>
1131               <entry>Number of times the blackhole
1132                 <acronym>MSS</acronym> was used in an attempt to
1133                 downshift</entry>
1134             </row>
1135
1136             <row>
1137               <entry><literal>net.inet.tcp.pmtud_blackhole_failed</literal></entry>
1138               <entry>Number of times that the blackhole failed to
1139                 connect after downshifting the
1140                 <acronym>MSS</acronym></entry>
1141             </row>
1142           </tbody>
1143         </tgroup>
1144       </informaltable>
1145
1146       <para revision="280971" contrib="sponsor"
1147         sponsor="&netflix;, &nginx;">Support for <acronym>IP</acronym>
1148         identification for atomic datagrams (<acronym>RFC</acronym>
1149         6864) has been added.  Support for this feature can be toggled
1150         with the <literal>net.inet.ip.rfc6864</literal>
1151         &man.sysctl.8;, which is enabled by default.</para>
1152     </sect2>
1153   </sect1>
1154
1155   <sect1 xml:id="ports">
1156     <title>Ports Collection and Package Infrastructure</title>
1157
1158     <para>This section covers changes to the &os;&nbsp;Ports
1159       Collection, package infrastructure, and package maintenance and
1160       installation tools.</para>
1161
1162     <sect2 xml:id="ports-infrastructure">
1163       <title>Infrastructure Changes</title>
1164
1165       <para>&nbsp;</para>
1166     </sect2>
1167
1168     <sect2 xml:id="ports-packages ">
1169       <title>Packaging Changes</title>
1170
1171       <para>&nbsp;</para>
1172     </sect2>
1173   </sect1>
1174
1175   <sect1 xml:id="doc">
1176     <title>Documentation</title>
1177
1178     <para>This section covers changes to the &os;&nbsp;Documentation
1179       Project sources and toolchain.</para>
1180
1181     <sect2 xml:id="doc-sources">
1182       <title>Documentation Source Changes</title>
1183
1184       <para>&nbsp;</para>
1185     </sect2>
1186
1187     <sect2 xml:id="doc-toolchain">
1188       <title>Documentation Toolchain Changes</title>
1189
1190       <para>&nbsp;</para>
1191     </sect2>
1192   </sect1>
1193
1194   <sect1 xml:id="releng">
1195     <title>Release Engineering and Integration</title>
1196
1197     <para>This section convers changes that are specific to the
1198       &os;&nbsp;Release Engineering processes.</para>
1199
1200     <sect2 xml:id="releng-changes">
1201       <title>Integration Changes</title>
1202
1203       <para revision="277458" contrib="sponsor" sponsor="&ff;">The
1204         Release Engineering build tools have been updated to include
1205         support for producing virtual machine disk images for various
1206         cloud hosting providers.</para>
1207
1208       <para revision="278926">The Release Engineering build tools have
1209         been updated to use multi-threaded &man.xz.1;.  By default,
1210         the number of &man.xz.1; threads is set to the number of cores
1211         available.</para>
1212     </sect2>
1213   </sect1>
1214 </article>