aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorHiroki Sato <hrs@FreeBSD.org>2005-01-21 11:16:10 +0000
committerHiroki Sato <hrs@FreeBSD.org>2005-01-21 11:16:10 +0000
commit1ad8babf96c260879545a2163223e6066571dbc9 (patch)
tree4296077d956486e28033472cd76650bdae0c7c2f
parent53887285f9bf1e67a86a0ebb632a85c08d287c93 (diff)
downloadsrc-1ad8babf96c260879545a2163223e6066571dbc9.tar.gz
src-1ad8babf96c260879545a2163223e6066571dbc9.zip
New release notes:
XFree86 4.4.0. Update release notes: - Move pbio(4) to the platform specific section. - more port randomization related sysctl: net.inet.ip.portrange.randomcps net.inet.ip.portrange.randomtime - net.inet.tcp.insecure_rst=1 is required for RFC 793. Approved by: re (implicitly)
Notes
Notes: svn path=/releng/4.11/; revision=140570
-rw-r--r--release/doc/en_US.ISO8859-1/relnotes/common/new.sgml36
1 files changed, 25 insertions, 11 deletions
diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
index db33638aacc5..2ae992fc9177 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
@@ -125,21 +125,14 @@
<title>Kernel Changes</title>
<para arch="i386">The &man.cp.4; driver has been added for Cronyx Tau-PCI
- synchronous serial adapters.
- </para>
+ synchronous serial adapters.</para>
<para arch="alpha">The &man.em.4; driver has been added to the kernel
- on the installation media.
- </para>
+ on the installation media.</para>
<para>A bug in &man.mmap.2; that pages marked as <literal>PROT_NONE</literal>
may become readable under certain circumstances, has been fixed.</para>
- <para arch="i386">The &man.pbio.4; driver,
- which supports direct access to
- the Intel 8255A programmable peripheral interface (PPI)
- chip running in mode 0 (simple I/O) has been added.</para>
-
<para>Bugs in <function>vm_object_madvise()</function>,
<function>vm_object_sync()</function>, and
<function>contigmalloc()</function>
@@ -155,6 +148,11 @@
<sect3 id="proc">
<title>Platform-Specific Hardware Support</title>
+ <para arch="i386">The &man.pbio.4; driver,
+ which supports direct access to
+ the Intel 8255A programmable peripheral interface (PPI)
+ chip running in mode 0 (simple I/O) has been added.</para>
+
<para arch="alpha">Support for the floppy interface is broken on
DS10-class systems. The kernel probes the hardware correctly but
the floppy does not work properly. Booting and installing from
@@ -211,7 +209,17 @@
<para>The random ephemeral port allocation, which come from OpenBSD
has been implemented. This is enabled by default and can be disabled
using the <varname>net.inet.ip.portrange.randomized</varname>
- sysctl.</para>
+ sysctl. Note that the randomization can lead to extremely
+ fast port reuse at high connection rates, which is causing
+ problems for some users. To retain the security advantage
+ of random ports and ensure correct operation, it is disabled
+ during periods of high connection rates.
+ More specifically, when the connection rate exceeds
+ the value of the <varname>net.inet.ip.portrange.randomcps</varname> sysctl
+ (<literal>10</literal> by default), the randomization will be disabled for
+ seconds specified in the
+ <varname>net.inet.ip.portrange.randomtime</varname> sysctl
+ (<literal>45</literal> by default).</para>
<para>&man.ipfw.4; now supports lookup tables. This feature is
useful for handling large sparse address sets.</para>
@@ -231,7 +239,8 @@
be silently dropped. For connections in all other states,
a reset anywhere in the window will cause the connection
to be reset. All other segments will be silently dropped.
- You can still disable this and use the conventional behavior
+ Note that this breaks the RFC 793 specification and you
+ can still disable this and use the conventional behavior
by setting a new sysctl <varname>net.inet.tcp.insecure_rst</varname>
to <literal>1</literal>.</para>
</sect3>
@@ -342,6 +351,11 @@
to <filename role="package">linux_base-8</filename>
(based on Red Hat Linux 8.0).</para>
+ <para>The supported release of <application>X Window System</application>
+ has been updated to <application>XFree86</application> 4.4.0.
+ Note that Xorg X11R6.8.1 is also available in the FreeBSD Ports Collection
+ (<filename role="package">x11/xorg</filename>).</para>
+
<para>The <varname>NOSECURE</varname> variable in <filename>make.conf</filename>
has been removed because it is broken and no longer supported.
If you had been using the <varname>NOSECURE</varname>,