FreeBSD 13.1 kumasulidwa

Pambuyo pa chaka cha chitukuko, FreeBSD 13.1 idatulutsidwa. Zithunzi zoyikapo zilipo amd64, i386, powerpc, powerpc64, powerpc64le, powerpcspe, armv6, armv7, aarch64 ndi riscv64 zomangamanga. Kuphatikiza apo, misonkhano ikuluikulu yakonzedwa kuti ikhale ndi machitidwe owonera (QCOW2, VHD, VMDK, yaiwisi) ndi malo amtambo Amazon EC2, Google Compute Engine ndi Vagrant.

Mu mtundu watsopano:

• Dalaivala wa iwlwifi waperekedwa kwa makhadi opanda zingwe a Intel othandizidwa ndi tchipisi tatsopano ndi muyezo wa 802.11ac. Dalaivala amachokera pa dalaivala wa Linux ndi code kuchokera ku net80211 Linux subsystem, yomwe imayenda pa FreeBSD pogwiritsa ntchito wosanjikiza wa linuxkpi.
• Kukhazikitsa kwamafayilo a ZFS kwasinthidwa mpaka kutulutsidwa kwa OpenZFS 2.1 mothandizidwa ndiukadaulo wa dRAID (Distributed Spare RAID) komanso kukhathamiritsa kwakukulu kwa magwiridwe antchito.
• Ma rc script zfkeys atsopano awonjezedwa, momwe mungapangire kumasulira kwachinsinsi kwa magawo obisika a ZFS pagawo la boot.
• Netiweki staki yasintha machitidwe a ma adilesi a IPv4 okhala ndi ziro trailing number (x.x.x.0), yomwe tsopano itha kugwiritsidwa ntchito ngati Host ndipo samawulutsidwa mwachisawawa. Khalidwe lakale litha kubwezedwa pogwiritsa ntchito sysctl net.inet.ip.broadcast_lowest.
• Pazomangamanga za 64-bit, kumanga maziko oyambira pogwiritsa ntchito PIE (Position Independent Executable) kumayatsidwa mwachisawawa. Kuti muyimitse, zochunira za WITHOUT_PIE zaperekedwa.
• Yawonjezera kuthekera koyimbira chroot mosasamala ndi NO_NEW_PRIVS mbendera. Njirayi imayatsidwa pogwiritsa ntchito sysctl security.bsd.unprivileged_chroot. Njira ya "-n" yawonjezedwa ku chroot utility, yomwe imayika NO_NEW_PRIVS mbendera ya ndondomekoyi isanazipatula.
• Njira yosinthira magawo a disk partitions yawonjezedwa ku bsdinstall installer, kukulolani kuti mulumikize zolemba zogawanika zomwe zimagwira ntchito popanda kulowererapo kwa mayina osiyanasiyana a disk. Zomwe akufunsidwazi zimathandizira kupanga makina oyika okhawo okhazikika pamakina ndi makina omwe ali ndi ma disks osiyanasiyana.
• Kupititsa patsogolo chithandizo cha boot pa machitidwe a UEFI. Bootloader imathandizira kusintha kosinthika kwa parameter ya copy_staging kutengera kuthekera kwa kernel yodzaza.
• Ntchito yachitidwa kuti apititse patsogolo ntchito ya bootloader, nvme, rtsold, kuyambitsa jenereta ya pseudo-random manambala ndi mawerengedwe a nthawi, zomwe zinapangitsa kuti nthawi yoyambira ikhale yochepa.
• Thandizo lowonjezera la NFS panjira yolumikizirana yosungidwa pa TLS 1.3. Kukhazikitsa kwatsopano kumagwiritsa ntchito stack ya TLS yoperekedwa ndi kernel kuti ithandizire kuthamanga kwa hardware. Imamanga njira za rpc.tlsclntd ndi rpc.tlsservd ndi kasitomala wa NFS-over-TLS ndi kukhazikitsa seva, zomwe zimayatsidwa mwachisawawa pamapangidwe a amd64 ndi arm64.
• Kwa NFSv4.1 ndi 4.2, njira ya nconnect mount yakhala ikugwiritsidwa ntchito, yomwe imatsimikizira chiwerengero cha maulumikizidwe a TCP okhazikitsidwa ndi seva. Kulumikizana koyamba kumagwiritsidwa ntchito pamawu ang'onoang'ono a RPC, ndipo ena onse amagwiritsidwa ntchito kulinganiza kuchuluka kwa magalimoto ndi data yofalitsidwa.
• Kwa seva ya NFS, sysctl vfs.nfsd.srvmaxio yawonjezedwa, zomwe zimakulolani kuti musinthe kukula kwakukulu kwa block I / O (osasintha 128Kb).
• Kupititsa patsogolo chithandizo cha hardware. Thandizo la wolamulira wa Intel I225 Ethernet wawonjezedwa kwa dalaivala wa igc. Thandizo labwino la machitidwe a Big-endian. Wowonjezera mgb wa zida za Microchip LAN7430 PCIe Gigabit Ethernet Ethernet controller
• Dalaivala ya ayezi yomwe imagwiritsidwa ntchito pa owongolera a Intel E800 Ethernet yasinthidwa kukhala 1.34.2-k, yomwe tsopano ikuphatikiza kuthandizira kuwonetsa zochitika za firmware mu chipika chadongosolo ndikukhazikitsa koyambirira kwa ma protocol a DCB (Data center bridging) awonjezedwa.
• Zithunzi za Amazon EC2 zimayatsidwa mwachisawawa kuti ziyambe kugwiritsa ntchito UEFI m'malo mwa BIOS.
• The bhyve hypervisor yasintha zida zotsatsira ma drive a NVMe kuti zithandizire kutsimikizika kwa NVMe 1.4. Kuthetsa mavuto ndi NVMe iovec pa I/O yayikulu.
• Laibulale ya CAM yasinthidwa kuti igwiritse ntchito kuyimba kwa realpath pokonza mayina a zida, zomwe zimalola maulalo ophiphiritsa kuzipangizo kuti agwiritsidwe ntchito muzinthu za camcontrol ndi smartctl. camcontrol imathetsa mavuto pakutsitsa firmware pazida.
• svnlite utility wasiya kumanga pa maziko dongosolo.
• Zida zowonjezera za Linux zowerengera ma checksums (md5sum, sha1sum, ndi zina zotero) zomwe zimagwiritsidwa ntchito poyitana zida za BSD zomwe zilipo (md5, sha1, etc.) ndi "-r" njira.
• Thandizo la kasamalidwe ka NCQ lawonjezedwa ku mpsutil utility ndipo zambiri za adaputala zawonetsedwa.
• Mu /etc/defaults/rc.conf, mwachisawawa, njira ya "-i" imayatsidwa poyitana njira za rtsol ndi rtsold, zomwe zimakhala ndi udindo wotumiza mauthenga a ICMPv6 RS (Router Solicitation). Izi zimalepheretsa kuchedwa kwachisawawa musanatumize uthenga.
• Zomangamanga za riscv64 ndi riscv64sf, kumanga malaibulale okhala ndi ASAN (address sanitizer), UBSAN (Undefined Behavior Sanitizer), OpenMP ndi OFED (Open Fabrics Enterprise Distribution) ndiyothandizidwa.
• Mavuto odziwa njira zowonjezeretsa ma hardware a cryptographic ntchito zothandizidwa ndi ARMv7 ndi ARM64 processors zathetsedwa, zomwe zathandizira kwambiri ntchito ya aes-256-gcm ndi sha256 algorithms pa machitidwe a ARM.
• Kwa zomangamanga za powerpc, phukusi lalikulu limaphatikizapo LLDB debugger, yopangidwa ndi polojekiti ya LLVM.
• Laibulale ya OpenSSL yasinthidwa kukhala 1.1.1o ndikukulitsidwa ndi kukhathamiritsa kwapang'onopang'ono kwa zomangamanga za powerpc, powerpc64 ndi powerpc64le.
• Seva ya SSH ndi kasitomala zasinthidwa kukhala OpenSSH 8.8p1 mothandizidwa ndi siginecha ya digito ya rsa-sha yoyimitsidwa ndikuthandizira kutsimikizika kwazinthu ziwiri pogwiritsa ntchito zida zotengera protocol ya FIDO/U2F. Kuti mulumikizane ndi zida za FIDO/U2F, mitundu yatsopano yofunikira "ecdsa-sk" ndi "ed25519-sk" yawonjezedwa, yomwe imagwiritsa ntchito ma algorithms a ECDSA ndi Ed25519 digito siginecha, kuphatikiza ndi SHA-256 hash.
• Mawonekedwe osinthidwa a mapulogalamu a chipani chachitatu omwe akuphatikizidwa mu dongosolo loyambira: awk 20210215 (ndi zigamba zomwe zimalepheretsa kugwiritsa ntchito malo pamagulu ndikusintha kugwirizana ndi gawk ndi mawk), zlib 1.2.12, libarchive 3.6.0.

Source: opennet.ru