the release of the free cross-platform UNIX-like operating system . The OpenBSD project was founded by Theo de Raadt in 1995 after with the developers of NetBSD, which resulted in Theo being locked out of the NetBSD CVS repository. After that, Theo de Raadt and a group of like-minded individuals created a new open operating system based on the NetBSD source tree, with the main goals of portability ( 13 hardware platforms), standardization, reliability, active security, and integrated cryptographic tools. The size of the full installation of the base OpenBSD 6.6 system is 460 MB.
In addition to the operating system itself, the OpenBSD project is known for its components, which have been widely adopted in other systems and have proven to be among the most secure and high-quality solutions. Among them are: ( OpenSSL), , the packet filter , routing daemons , NTP server , mail server , terminal multiplexer (analogous to GNU screen) , the daemon with an implementation of the IDENT protocol, BSDL alternative to the GNU groff package — , a protocol for fault-tolerant systems CARP (Common Address Redundancy Protocol), lightweight , file synchronization utility .
Key :
- Included is a utility , for automatically upgrading the system to a new release. Sysupgrade downloads the necessary files for the upgrade, verifies them using , copies ramdisk bsd.rd to bsd.upgrade, and initiates a system reboot. The boot loader, upon detecting bsd.upgrade, begins automatic loading and automatic upgrading of the system. For the previous branch OpenBSD 6.5, a syspatch has been prepared that adds sysupgrade and allows using this utility to upgrade your system to OpenBSD 6.6 on amd64, arm64, and i386 architectures by executing "syspatch && sysupgrade";
- For Cavium OCTEON (mips64) processors, Clang is used as the primary compiler for the base system. Optional support for building with Clang has been added for the powerpc architecture. For armv7 and i386 architectures, the GCC compiler is disabled by default (only Clang is retained);
- Included is the driver for AMD GPUs. The (Direct Rendering Manager). Added the ability for unprivileged users to access the drm device by changing ownership of the device upon first access. The inteldrm and radeondrm driver code is synchronized with the Linux kernel 4.19.78. Support has been added for GPUs used in Intel Broxton/Apollo Lake, Amber Lake, Gemini Lake, Coffee Lake, Whiskey Lake, and Comet Lake chips;
- A Linux-compatible interface and support for ACPI has been added in the radeon and amdgpu drivers;
- Added driver for GPIO controllers used in Intel Apollo Lake SoCs;
- Improved support for SAS3 controllers, increased reliability in detecting drives during boot, and added support for 64-bit DMA in the mpii driver;
- Support for PCI devices as per the specification 1.0;
- Support has been added for cryptographic coprocessors used in AMD Ryzen CPUs/APUs. Added the ksmn driver for thermal sensors used in 17th generation AMD processors;
- Enhanced support for ARM64 architecture. Support has been added for systems based on Ampere eMAG CPUs. New drivers for Amlogic, Allwinner A64, i.MX8M, Armada 3700 SoCs have been added. Support for Cortex-A65 CPUs has been added;
- All wireless drivers have added the ability to transmit received packets in the network stack in batch mode, processing multiple packets within one interrupt;
- Improved file system cache performance on AMD64 architecture computers;
- Made startx and xinit work on modern systems using inteldrm, radeondrm, and amdgpu graphics drivers;
- Improved the unveil system call, which provides isolation for file system access. The number of applications from the base system that have been secured using unveil has increased to 77;
- Global locks have been removed from the getrlimit, setrlimit, read, and write system calls, as well as the code for accessing resource limits and file position changes;
- Improved the method for blocking Spectre vulnerabilities in Intel CPUs. Protection against MDS (Microarchitectural Data Sampling) vulnerabilities in Intel processors has been added;
- ntpd has a secure mode for setting and obtaining system clock values during boot, even without a battery-powered clock;
- The terminal multiplexer tmux now supports the use of regular expressions in the search, match, and substitute commands. A simple menu system has been added, allowing control via mouse or keyboard. The command 'display-menu' has been proposed for showing the menu in the status line. Automatic scrolling has been implemented when the mouse cursor moves beyond the top or bottom edges of the screen while selecting areas.
- The performance of bgpd has been enhanced. The code for matching community has been rewritten, significantly accelerating the operation of configurations with multiple communities and numerous peers. The command 'show mrt neighbors' has been added to bgpctl.
- In the DNS resolver support for blocklist has been added.
- A new utility has been added implementing a new SNMP client that replaces snmpctl.
- The OpenSMTPD mail server has been updated. An API for writing external filters has been added, which can be distributed separately through ports. Support for built-in filters that provide basic session rejection functionality has also been added. There is an option for delivering filtered mail to the Junk directory in mail.maildir. Support for the proxy-v2 protocol has been implemented, allowing the SMTP server to be placed behind a proxy. ECDSA certificate support has been added.
- The OpenSSH 8.1 package has been updated, and a detailed overview of the improvements can be viewed ;
- The LibreSSL package has been updated, completing the porting of the RSA_METHOD structure from OpenSSL 1.1, which allows the use of various function implementations for working with RSA.
- The number of ports for the AMD64 architecture reached 10,736, for aarch64 — 10,075, and for i386 — 10,682. Components from third-party developers included in OpenBSD 6.6 have been updated:
- The Xenocara graphic stack is based on X.Org 7.7 with xserver 1.20.5 + patches, freetype 2.10.1, fontconfig 2.12.4, Mesa 19.0.8, xterm 344, xkeyboard-config 2.20;
- LLVM/Clang 8.0.1 (with patches)
- GCC 4.2.1 (with patches) and 3.3.6 (with patches)
- Perl 5.28.2 (with patches)
- NSD 4.2.2
- Unbound 1.9.4
- Ncurses 5.7
- Binutils 2.17 (with patches)
- Gdb 6.3 (with patches)
- Awk Aug 10, 2011
- Expat 2.2.8
Source: opennet.ru
