ProHoster > Blog > litaba tsa inthanete > Ho lokolloa ha OpenBSD 6.5

Ho lokolloa ha OpenBSD 6.5

o bone lesedi tokollo ea sistimi ea mahala e fapaneng ea UNIX e ts'oanang le sethala OpenBSD 6.5. Morero oa OpenBSD o thehiloe ke Theo de Raadt ka 1995, kamora khohlano le bahlahisi ba NetBSD, ka lebaka leo Teo a hanetsoeng ho fihlella polokelong ea NetBSD CVS. Kamora sena, Theo de Raadt le sehlopha sa batho ba nang le maikutlo a tšoanang ba thehile sistimi e ncha e bulehileng ea ts'ebetso e thehiloeng ho sefate sa mohloli oa NetBSD, sepheo sa eona se seholo e neng e le portability ()tšehetsoa ke Li-platform tsa 13 tsa Hardware), maemo, ts'ebetso e nepahetseng, ts'ireletso e sebetsang le lisebelisoa tse kopaneng tsa li-cryptographic. Saese e felletseng ea ho kenya Setšoantšo sa ISO OpenBSD 6.5 base system ke 407 MB.

Ntle le tsamaiso ea ts'ebetso ka boeona, morero oa OpenBSD o tsejoa ka likarolo tsa oona, tse seng li atile lits'ebetsong tse ling 'me li ipakile e le e' ngoe ea tharollo e sireletsehileng ka ho fetisisa le ea boleng bo phahameng. Har'a bona: FreeSSL (fereko OpenSSL), OpenSSH, filthara ea pakete PF, ho tsamaisa li-daemone OpenBGPD le OpenOSPFD, seva sa NTP OpenNTPD, seva sa mangolo OpenSMTPD, multiplexer ea mongolo (e ts'oanang le skrine ea GNU) tmux, daemon identd ka ts'ebetsong ea protocol ea IDENT, mofuta o mong oa BSDL ho sephutheloana sa GNU groff - mandoc, protocol ea ho hlophisa mekhoa e mamellang liphoso CARP (Common Address Redundancy Protocol), e bobebe http seva, sesebelisoa sa ho hokahanya lifaele OpenRSYNC.

Har'a liphetoho tse hlokomelehang: ho hlahisitsoe mofuta o nkehang oa bgpd, o ikamahanyang le mosebetsi ho li-OS tse ling, ts'ebeliso ea Xenocara le litokelo tsa metso ea tcpdump e felisitsoe, sehokelo sa LDD se nolofalitsoe ka ho sa feleng bakeng sa amd64 le i386, tšehetso ea MPLS e felisitsoe. e ntlafalitsoe haholo, 'me ts'ireletso khahlanong le liketso tse sebelisoang ka mekhoa ea ho khutlela morao e matlafalitsoe.Programming oriented (ROP), mokhoa o bonolo ka ho fetisisa oa ho khutlisa seva oa DNS o kenyelitsoe, mochine o sa hlalosoang oa boitšoaro o kenyelelitsoe kernel,' me ts'ebetsong ea rona ea ts'ebeliso ea rsync e tsebisitsoe.

ka sehloohong ntlafatso:

  • Ha o hahela meralo ea amd64 le i386, sehokelo sa LDD se ntlafalitsoeng ke projeke ea LLVM se sebelisoa ka ho sa feleng. Bakeng sa meralo ea mips64, tšehetso ea moaho o sebelisang Clang e kentsoe;
  • Bakhanni ba pvclock ba bacha ba paravirtualized KVM timer le ixl bakeng sa Intel Ethernet 700. Mokhanni oa uaudio o nketsoe sebaka ke ts'ebetsong e ncha ka tšehetso ea USB Audio 2.0.
  • Ts'ebetso e ntlafetseng ea bakhanni ba lisebelisoa tse se nang mohala bwfm, iwn, iwm le athn. Ts'ehetso bakeng sa melaetsa ea RTM_80211INFO e kenyelelitsoe ho stack ea waelese ho fetisetsa lintlha tse qaqileng tsa boemo ba sebopeho ho dhclient le litaelo tsa litsela. Boitšoaro bo khutsitseng ha u hokela marang-rang a se nang mohala bo fetotsoe - haeba u na le lethathamo le lokiselitsoeng la li-auto-connect, OpenBSD ha e sa kopana le marang-rang a sa tsejoeng a bulehileng (ho khutlisetsa boitšoaro bo fetileng, o ka eketsa marang-rang a se nang letho lethathamong);
  • The netweke stack e hlahisa bpe e ncha (Backbone Provider Edge) le mpip (MPLS IP layer 2) bakhanni ba pseudo-device. Tšehetso e ekelitsoeng bakeng sa ho hlophisa libaka tse ling tsa litsela bakeng sa li-interface tsa MPLS. Mokhanni oa vlan o nolofalitsoe hore a se ke a feta tatellano ea mela le tlhahiso ka kotloloho ho sebopeho sa marang-rang sa motsoali. E kenyellelitsoe mokhoa oa txprio ho ifconfig ho laola khouto ea pele lihloohong tsa lipakete tse kentsoeng (tse tšehelitsoeng bakeng sa bakhanni ba vlan, gre, gif le etherip);
  • Ts'ebetsong ea filthara ea bpf, ho ile ha khoneha ho sebelisa mochine oa ho theoha ntle le ho hapa lipakete. Karolo ena e sebelisoa ho tcpdump ho sefa qalong ea pakete e amoheloang ke sesebelisoa;
  • The installer e fana ka tšehetso rdsetroot ho eketsa setšoantšo sa disk ho kernel RAMDISK. E netefalitse ho tlosoa ha likarolo tse ling tsa likhatiso tsa khale nakong ea ts'ebetso ea ntlafatso ea sistimi;
  • Mohala o ntlafalitsoeng oa sistimi senola, e fanang ka ho itšehla thajana ho sistimi ea faele. Phetolelo e ncha e eketsa ho fumanoa ha lipapali tse amanang le lenane la ts'ebetso la ts'ebetso ea hona joale ha ho bapisoa litsela tse amanang. Ts'ebeliso ea lipalo le phihlello ea likarolo tsa tsela ea faele e thibetsoeng e thibetsoe. Bakeng sa lits'ebetso ospfd, ospf6d, rebound, getconf, kvm_mkdb, bdftopcf, Xserver, passwd, spamlogd, spamd, sensorsd, snmpd, htpasswd le ifstated, ts'ireletso e sebelisang unveil e kentsoe ts'ebetsong;
  • Clang e ntlafalitse lisebelisoa tsa ho thibela tšebeliso ea mekhoa ea ho khutlela morao-rao (ROP), e fokotsitseng haholo palo ea lisebelisoa tsa polymorphic tse fumanoang lifaeleng tse ka phethisoang tse hlahisoang bakeng sa meralo ea i386 le amd64;
  • Clang e ntlafalitse ts'ebetso le ts'ireletso ha e sebelisoa
    mochine oa tšireletso MOTS'ELISI, e reretsoeng ho thatafatsa ts'ebetsong ea mesebetsi e hahiloeng ka ho alima likotoana tsa khoutu le mekhoa ea ho khutlela morao. Ho potlakisa ts'ebetso, data e kenngoa lirejistareng ho fapana le stack neng kapa neng ha ho khonahala, 'me cache ea processor e sebelisoa ka mokhoa o atlehileng haholoanyane ha o khutla. RETGUARD e se e boetse e sebelisoa sebakeng sa ts'ireletso ea setso ho li-amd64 le li-arm64;

  • Lisebelisoa tse amanang le marang-rang a marang-rang li ntlafalitsoe: Tšehetso ea ho sefa lipakete tsa MPLS e kenyelitsoe ho pcap-filter. Bokhoni ba ho hlophisa lintho tse tlang pele ho routing bo kentsoe ho ospfd, ospf6d le ripd. IN
    ripd added mechanism based tshireletso pledge. E kenyellelitse sff le mekhoa ea sffdump ho ifconfig ho fumana lintlha tsa tlhahlobo ho tsoa ho li-transmitters tsa optical;

  • Phatlalatso ea pele ea tharollo e ncha e hlahisitsoe sa tsebe, e sebetsanang le lipotso tsa DNS tse iphetang 'me e amohela likhokahano feela ho interface 127.0.0.1.
    Unwind e etselitsoe ho sebelisoa lits'ebetsong tsa bareki, joalo ka lilaptop, tse tsamaeang lipakeng tsa marang-rang a fapaneng a waelese. Haeba e lemoha ho thibela sephethephethe sa DNS marang-rang a sebaka sa heno, tlosa li-switches ho sebelisa aterese ea seva sa DNS se fetisitsoeng ka DHCP, empa se tsoela pele ho leka ho rarolla ka nako e le 'ngoe' me hang ha likōpo tse tobileng li qala ho feta, e khutlela ho fihlella ka boithatelo. li-server tsa DNS;

  • Ho bgpd, mosebetsi o entsoe ho fokotsa ts'ebeliso ea mohopolo, ho kenyellelitsoe melao e bonolo ea ho hloekisa (ho kopanya melao ea ho sefa e fapaneng feela ka li-filters), mokhoa oa tlhophiso oa BGP MPLS VPN o fetotsoe, tšehetso ea IPv6 BGP MPLS VPN e kenyelitsoe. , le ts'ebetso ea "as-override" e kentsoe ts'ebetsong ea ho nkela moahelani oa AS sebaka sa AS litseleng, e ekelitse bokhoni ba ho lumellana le sechaba se 'maloa ka molao o le mong, e ekelitse likarolo tse ncha tse tšoanang "*", "local-as" le "moahelani." -joaloka", mosebetsi o ntlafetseng o nang le lihlopha tse kholo tsa melao, o ekelitse litaelo tse ncha bakeng sa ho sebetsa le lihlopha tsa boahelani tse ikemetseng ("bgpctl sehlopha sa boahelani", "bgpctl bontša sehlopha sa boahelani", "bgpctl bontša sehlopha sa boahelani"), bokhoni ba ho eketsa marang-rang. ho litafole tsa BGP VPN li kentsoe ho bgpctl. Ka lekhetlo la pele, ho lokisitsoe mofuta o nkehang oa OpenBGPD-portable, o ikemiselitse ho sebetsa litsamaisong tse ling ntle le OpenBSD;
  • Khetho e ekelitsoeng hobsan ho bona linyeoe tsa boitšoaro bo sa hlalosoang kernel ea OpenBSD.
  • Ts'ebeliso ea tcpdump e felisa ka botlalo ts'ebeliso ea litokelo tsa metso;
  • Ts'ebetso e ntlafalitsoeng ea malloc lits'ebetsong tse nang le likhoele tse ngata;
  • Mofuta oa pele oa lenaneo o kentsoe sebopehong OpenRSYNC ka ts'ebetsong ea eona ea ts'ebeliso ea khokahano ea faele ea rsync;
  • Phetolelo ea seva sa mangolo sa OpenSMTPD e ntlafalitsoe, moo ho kenyellelitsoeng mokhoa o mocha oa papiso "ho tloha ho rdns" ho smtpd.conf, e leng se u lumellang hore u khethe linako tse thehiloeng ho reverse DNS resolution (ho khetholla lebitso la moeti ka IP). Ha ho batloa litafoleng, ho kenyelitsoe bokhoni ba ho sebelisa lipolelo tse tloaelehileng;
  • Sephutheloana sa OpenSSH 8.0 se ntlafalitsoe, ho ka fumanoa lintlha tse felletseng tsa ntlafatso mona;
  • Sephutheloana sa LibreSSL se ntlafalitsoe, tlhaloso e qaqileng ea ntlafatso e ka fumanoa liphatlalatsong tsa tokollo 2.9.0 и 2.9.1;
  • Mandoc e ntlafalitse haholo tlhahiso ea HTML, phetolelo e ntlafalitsoeng ea litafole, 'me e kentse folakha ea "-O" ho bula leqephe le nang le tlhaloso ea lentsoe le boletsoeng;
  • Bokhoni ba "graphics stack" ea Xenocara bo atolositsoe: seva sa X ha se sa hloka ho kenngoa ka folakha ea setuid ho sebetsa. Mokhanni oa radeonsi Mesa o kenyelletsa ts'ehetso ea ho potlakisa hardware bakeng sa Lihlekehleke tsa Southern (Radeon HD 7000) le Lihlekehleke tsa Leoatle (Radeon HD 8000) GPUs;
  • Likou tsa C++ tsa meralo e sa tšehetsoeng ke Clang joale li hlophisitsoe ho sebelisoa GCC ho tsoa likoung. Palo ea likou tsa meralo ea AMD64 e ne e le 10602, bakeng sa aarch64 - 9654, bakeng sa i386 - 10535. Har'a likopo tse fumanehang likoung, tse latelang li hlokometsoe:
    • Naleli ea linaleli 16.2.1
    • Tlhahlobo ea 2.3.1
    • CMake 3.10.2
    • Chromium 73.0.3683.86
    • Tlatsi ea 4.1.3
    • GCC 4.9.4 le 8.3.0
    • GNOME 3.30.2.1
    • E-ea 1.12.1
    • JDK 8u202 le 11.0.2+9-3
    • LLVM/Clang 7.0.1
    • LibreOffice 6.2.2.2
    • Lua 5.1.5, 5.2.4 le 5.3.5
    • MariaDB 10.0.38
    • Tshwene 5.18.1.0
    • Mozilla Firefox 66.0.2 le ESR 60.6.1
    • Mozilla Thunderbird 60.6.1
    • Node.js 10.15.0
    • OpenLDAP 2.3.43 le 2.4.47
    • PHP 7.1.28, 7.2.17 le 7.3.4
    • Postfix 3.3.3 le 3.4.20190106
    • PostgreSQL 11.2
    • Python 2.7.16 le 3.6.8
    • R 3.5.3
    • Ruby 2.4.6, 2.5.5 le 2.6.2
    • Mafome 1.33.0
    • Sendmail 8.16.0.41
    • SQLite3 3.27.2
    • Meerkat 4.1.3
    • Tcl/Tk 8.5.19 le 8.6.8
    • TeX Live 2018
    • Vim 8.1.1048 le Neovim 0.3.4
    • Xfce 4.12
  • Likarolo tsa mokha oa boraro li kenyellelitsoe le OpenBSD 6.5:
    • Xenocara Grafiken stack e thehiloeng ho seva sa X.Org 1.19.7 e nang le li-patches, freetype 2.9.1, fontconfig 2.12.4, Mesa 18.3.5, xterm 344, xkeyboard-config 2.20;
    • LLVM/Clang 7.0.1 (e nang le li-patches)
    • GCC 4.2.1 (e nang le li-patches) le 3.3.6 (e nang le li-patches)
    • Perl 5.28.1 (e nang le li-patches)
    • NSD 4.1.27
    • E sa lekanyetsoang 1.9.1
    • Baoki 5.7
    • Binutils 2.17 (e nang le li-patches)
    • Gdb 6.3 (e nang le li-patches)
    • Awk Aug 10, 2011
    • Expat 2.2.6

Source: opennet.ru

Eketsa ka tlhaloso