article.xml revision 288854
1272957Srodrigc<?xml version="1.0" encoding="iso-8859-1"?>
2264790Sbapt<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
3264790Sbapt	"../../../share/xml/freebsd50.dtd" [
4264790Sbapt<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
5264790Sbapt %release;
6264790Sbapt<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
7264790Sbapt %sponsor;
8264790Sbapt<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
9264790Sbapt %vendor;
10264790Sbapt<!ENTITY security SYSTEM "../../share/xml/security.xml">
11264790Sbapt<!ENTITY errata SYSTEM "../../share/xml/errata.xml">
12264790Sbapt]>
13264790Sbapt<article xmlns="http://docbook.org/ns/docbook"
14264790Sbapt  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">
15264790Sbapt
16264790Sbapt  <info>
17264790Sbapt    <title>&os; &release.current; Release Notes</title>
18264790Sbapt
19264790Sbapt    <author>
20264790Sbapt      <orgname>The &os; Project</orgname>
21264790Sbapt    </author>
22264790Sbapt
23264790Sbapt    <pubdate>$FreeBSD: head/release/doc/en_US.ISO8859-1/relnotes/article.xml 288854 2015-10-05 20:12:35Z gjb $</pubdate>
24264790Sbapt
25264790Sbapt    <!-- Last rev: 284814 -->
26264790Sbapt
27264790Sbapt    <copyright>
28264790Sbapt      <year>2015</year>
29264790Sbapt      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
30264790Sbapt	Project</holder>
31264790Sbapt    </copyright>
32264790Sbapt
33264790Sbapt    <legalnotice xml:id="trademarks" role="trademarks">
34264790Sbapt      &tm-attrib.freebsd;
35264790Sbapt      &tm-attrib.ibm;
36264790Sbapt      &tm-attrib.ieee;
37264790Sbapt      &tm-attrib.intel;
38264790Sbapt      &tm-attrib.sparc;
39264790Sbapt      &tm-attrib.general;
40264790Sbapt    </legalnotice>
41264790Sbapt
42264790Sbapt    <abstract>
43264790Sbapt      <para>The release notes for &os; &release.current; contain
44264790Sbapt	a summary of the changes made to the &os; base system on the
45264790Sbapt	&release.branch; development line.  This document lists
46264790Sbapt	applicable security advisories that were issued since the last
47264790Sbapt	release, as well as significant changes to the &os; kernel and
48264790Sbapt	userland.  Some brief remarks on upgrading are also
49264790Sbapt	presented.</para>
50264790Sbapt    </abstract>
51264790Sbapt  </info>
52264790Sbapt
53264790Sbapt  <sect1 xml:id="intro">
54264790Sbapt    <title>Introduction</title>
55264790Sbapt
56264790Sbapt    <para>This document contains the release notes for &os;
57264790Sbapt      &release.current;.  It describes recently added, changed, or
58264790Sbapt      deleted features of &os;.  It also provides some notes on
59264790Sbapt      upgrading from previous versions of &os;.</para>
60264790Sbapt
61264790Sbapt    <para releasetype="current">The &release.type; distribution to
62264790Sbapt      which these release notes apply represents the latest point
63264790Sbapt      along the &release.branch; development branch since
64264790Sbapt      &release.branch; was created.  Information regarding pre-built,
65264790Sbapt      binary &release.type; distributions along this branch can be
66264790Sbapt      found at <uri
67264790Sbapt	xlink:href="&release.url;">&release.url;</uri>.</para>
68264790Sbapt
69264790Sbapt    <para releasetype="snapshot">The &release.type; distribution to
70264790Sbapt      which these release notes apply represents a point along the
71264790Sbapt      &release.branch; development branch between &release.prev; and
72264790Sbapt      the future &release.next;.  Information regarding pre-built,
73264790Sbapt      binary &release.type; distributions along this branch can be
74264790Sbapt      found at <uri
75264790Sbapt	xlink:href="&release.url;">&release.url;</uri>.</para>
76264790Sbapt
77264790Sbapt    <para releasetype="release">This distribution of &os;
78264790Sbapt      &release.current; is a &release.type; distribution.  It can be
79264790Sbapt      found at <uri xlink:href="&release.url;">&release.url;</uri> or
80264790Sbapt      any of its mirrors.  More information on obtaining this (or
81264790Sbapt      other) &release.type; distributions of &os; can be found in the
82264790Sbapt      <link
83264790Sbapt	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
84264790Sbapt	  &os;</quote> appendix</link> to the <link
85264790Sbapt	xlink:href="&url.books.handbook;/">&os;
86264790Sbapt	Handbook</link>.</para>
87264790Sbapt
88264790Sbapt    <para>All users are encouraged to consult the release errata
89264790Sbapt      before installing &os;.  The errata document is updated with
90264790Sbapt      <quote>late-breaking</quote> information discovered late in the
91264790Sbapt      release cycle or after the release.  Typically, it contains
92264790Sbapt      information on known bugs, security advisories, and corrections
93264790Sbapt      to documentation.  An up-to-date copy of the errata for &os;
94264790Sbapt      &release.current; can be found on the &os; Web site.</para>
95264790Sbapt
96264790Sbapt    <para>This document describes the most user-visible new or changed
97264790Sbapt      features in &os; since &release.prev;.  In general, changes
98264790Sbapt      described here are unique to the &release.branch; branch unless
99264790Sbapt      specifically marked as &merged; features.</para>
100264790Sbapt
101264790Sbapt    <para>Typical release note items document recent security
102264790Sbapt      advisories issued after &release.prev;, new drivers or hardware
103264790Sbapt      support, new commands or options, major bug fixes, or
104264790Sbapt      contributed software upgrades.  They may also list changes to
105264790Sbapt      major ports/packages or release engineering practices.  Clearly
106264790Sbapt      the release notes cannot list every single change made to &os;
107264790Sbapt      between releases; this document focuses primarily on security
108264790Sbapt      advisories, user-visible changes, and major architectural
109264790Sbapt      improvements.</para>
110264790Sbapt  </sect1>
111264790Sbapt
112264790Sbapt  <sect1 xml:id="upgrade">
113264790Sbapt    <title>Upgrading from Previous Releases of &os;</title>
114264790Sbapt
115264790Sbapt    <para arch="amd64,i386">Binary upgrades between RELEASE versions
116264790Sbapt      (and snapshots of the various security branches) are supported
117264790Sbapt      using the &man.freebsd-update.8; utility.  The binary upgrade
118264790Sbapt      procedure will update unmodified userland utilities, as well as
119264790Sbapt      unmodified GENERIC kernels distributed as a part of an official
120264790Sbapt      &os; release.  The &man.freebsd-update.8; utility requires that
121264790Sbapt      the host being upgraded have Internet connectivity.</para>
122264790Sbapt
123264790Sbapt    <para>Source-based upgrades (those based on recompiling the &os;
124264790Sbapt      base system from source code) from previous versions are
125264790Sbapt      supported, according to the instructions in
126264790Sbapt      <filename>/usr/src/UPDATING</filename>.</para>
127264790Sbapt
128264790Sbapt    <important>
129264790Sbapt      <para>Upgrading &os; should only be attempted after backing up
130264790Sbapt	<emphasis>all</emphasis> data and configuration files.</para>
131264790Sbapt    </important>
132264790Sbapt  </sect1>
133264790Sbapt
134264790Sbapt  <sect1 xml:id="security-errata">
135264790Sbapt    <title>Security and Errata</title>
136264790Sbapt
137264790Sbapt    <para>This section lists the various Security Advisories and
138264790Sbapt      Errata Notices since &release.prev;.</para>
139264790Sbapt
140264790Sbapt    <sect2 xml:id="security">
141264790Sbapt      <title>Security Advisories</title>
142264790Sbapt
143264790Sbapt      &security;
144264790Sbapt    </sect2>
145264790Sbapt
146264790Sbapt    <sect2 xml:id="errata">
147264790Sbapt      <title>Errata Notices</title>
148264790Sbapt
149264790Sbapt      &errata;
150264790Sbapt    </sect2>
151264790Sbapt  </sect1>
152264790Sbapt
153264790Sbapt  <sect1 xml:id="userland">
154264790Sbapt    <title>Userland</title>
155264790Sbapt
156264790Sbapt    <para>This section covers changes and additions to userland
157264790Sbapt      applications, contributed software, and system utilities.</para>
158264790Sbapt
159264790Sbapt    <sect2 xml:id="userland-config">
160264790Sbapt      <title>Userland Configuration Changes</title>
161264790Sbapt
162264790Sbapt      <para revision="266463">The default &man.newsyslog.conf.5; now
163264790Sbapt	includes files in the
164264790Sbapt	<filename>/etc/newsyslog.conf.d/</filename> and
165264790Sbapt	<filename>/usr/local/etc/newsyslog.conf.d/</filename>
166264790Sbapt	directories by default for &man.newsyslog.8;.</para>
167264790Sbapt
168264790Sbapt      <para revision="270675">The &man.mailwrapper.8; utility has been
169264790Sbapt	updated to use &man.mailer.conf.5; from the
170264790Sbapt	<literal>LOCALBASE</literal> environment variable, which
171264790Sbapt	defaults to <filename class="directory">/usr/local</filename>
172264790Sbapt	if unset.</para>
173264790Sbapt
174264790Sbapt      <para revision="272350">The <literal>MK_ARM_EABI</literal>
175264790Sbapt	&man.src.conf.5; option has been removed.</para>
176264790Sbapt
177264790Sbapt      <para revision="285169">The <application>ntp</application> suite
178264790Sbapt	has been updated to version 4.2.8p3.</para>
179264790Sbapt    </sect2>
180264790Sbapt
181264790Sbapt    <sect2 xml:id="userland-programs">
182264790Sbapt      <title>Userland Application Changes</title>
183264790Sbapt
184264790Sbapt      <para revision="258838" contrib="sponsor" sponsor="&ff;,
185264790Sbapt	&google;" sponsorurl="">The &man.casperd.8; daemon has been
186264790Sbapt	added, which provides access to functionality that is not
187264790Sbapt	available in the <quote>capability mode</quote>
188264790Sbapt	sandbox.</para>
189264790Sbapt
190264790Sbapt      <para revision="260594">When unable to load a kernel module with
191264790Sbapt	&man.kldload.8;, a message informing to view output of
192264790Sbapt	&man.dmesg.8; is now printed, opposed to the previous output
193264790Sbapt	<quote>Exec format error.</quote>.</para>
194264790Sbapt
195264790Sbapt      <para revision="260910">Allow &man.pciconf.8; to identify PCI
196264790Sbapt	devices that are attached to a driver to be identified by
197264790Sbapt	their device name instead of just the selector.  Additionally,
198264790Sbapt	an optional device argument to the <literal>-l</literal> flag
199264790Sbapt	to restrict the output to only listing details about a single
200264790Sbapt	device.</para>
201264790Sbapt
202264790Sbapt      <para revision="260913">A new flag, <quote>onifconsole</quote>
203264790Sbapt	has been added to <filename>/etc/ttys</filename>.  This allows
204264790Sbapt	the system to provide a login prompt via serial console if the
205264790Sbapt	device is an active kernel console, otherwise it is equivalent
206264790Sbapt	to <literal>off</literal>.</para>
207264790Sbapt
208264790Sbapt      <para revision="260926">Support for displaying VPD for PCI
209264790Sbapt	devices via &man.pciconf.8; has been added.</para>
210264790Sbapt
211264790Sbapt      <para revision="261498">&man.ping.8; protects against malicious
212264790Sbapt	network packets using the Capsicum framework to drop
213264790Sbapt	privileges.</para>
214264790Sbapt
215264790Sbapt      <para revision="265229">The &man.ps.1; utility has been
216264790Sbapt	updated to include the <literal>-J</literal> flag, used to
217264790Sbapt	filter output by matching &man.jail.8; IDs and names.
218264790Sbapt	Additionally, argument <literal>0</literal> can be used to
219264790Sbapt	<literal>-J</literal> to only list processes running on the
220264790Sbapt	host system.</para>
221264790Sbapt
222264790Sbapt      <para revision="265249">The &man.top.1; utility has been updated
223264790Sbapt	to filter by &man.jail.8; ID or name, in followup to the
224264790Sbapt	&man.ps.1; change in <literal>r265229</literal>.</para>
225264790Sbapt
226264790Sbapt      <para revision="266209">The &man.pmcstat.8; utility has been
227264790Sbapt	updated to include a new flag, <literal>-l</literal>, which
228264790Sbapt	ends event collection after the specified number of
229264790Sbapt	seconds.</para>
230264790Sbapt
231264790Sbapt      <para revision="270745">The &man.ps.1; utility has been updated
232264790Sbapt	to include a new keyword, <quote>tracer</quote>, which
233264790Sbapt	displays the <acronym>PID</acronym> of the tracing
234264790Sbapt	process.</para>
235264790Sbapt
236264790Sbapt      <para revision="271482">Support for adding empty partitions has
237264790Sbapt	been added to the &man.mkimg.1; utility.</para>
238264790Sbapt
239264790Sbapt      <para revision="272166">The &man.primes.6; utility has been
240264790Sbapt	updated to correctly enumerate prime numbers between
241264790Sbapt	<literal>4295098369</literal> and
242264790Sbapt	<literal>3825123056546413050</literal>, which prior to this
243264790Sbapt	change, it would be possible for returned values to be
244264790Sbapt	incorrectly identified as prime numbers.</para>
245264790Sbapt
246264790Sbapt      <para revision="272198">The &man.mkimg.1; utility has been
247264790Sbapt	updated to include three options used to print information
248264790Sbapt	about &man.mkimg.1; itself:</para>
249264790Sbapt
250264790Sbapt      <informaltable frame="none" pgwide="0">
251264790Sbapt	<tgroup cols="2">
252264790Sbapt	  <colspec colwidth="1*"/>
253264790Sbapt	  <colspec colwidth="1*"/>
254264790Sbapt	  <thead>
255264790Sbapt	    <row>
256264790Sbapt	      <entry>Option</entry>
257264790Sbapt	      <entry>Output</entry>
258264790Sbapt	    </row>
259264790Sbapt	  </thead>
260264790Sbapt
261264790Sbapt	  <tbody>
262264790Sbapt	    <row>
263264790Sbapt	      <entry><literal>--version</literal></entry>
264264790Sbapt	      <entry>The current version of the &man.mkimg.1;
265264790Sbapt		utility</entry>
266264790Sbapt	    </row>
267264790Sbapt
268264790Sbapt	    <row>
269264790Sbapt	      <entry><literal>--formats</literal></entry>
270264790Sbapt	      <entry>The disk image file formats supported by
271264790Sbapt		&man.mkimg.1;</entry>
272264790Sbapt	    </row>
273264790Sbapt
274264790Sbapt	    <row>
275264790Sbapt	      <entry><literal>--schemes</literal></entry>
276264790Sbapt	      <entry>The partition schemes supported by
277264790Sbapt		&man.mkimg.1;</entry>
278264790Sbapt	    </row>
279264790Sbapt	  </tbody>
280264790Sbapt	</tgroup>
281264790Sbapt      </informaltable>
282264790Sbapt
283264790Sbapt      <para revision="272488">Userland &man.ctf.5; support in
284264790Sbapt	&man.dtrace.1; has been added.  With this change,
285264790Sbapt	&man.dtrace.1; is able to resolve type info for function and
286264790Sbapt	<acronym>USDT</acronym> probe arguments, and function return
287264790Sbapt	values.</para>
288264790Sbapt
289264790Sbapt      <para revision="274960">The &man.elfdump.1; utility has been
290264790Sbapt	updated to support capability mode provided by
291264790Sbapt	&man.capsicum.4;.</para>
292264790Sbapt
293264790Sbapt      <para revision="275680" contrib="sponsor" sponsor="&ff;">The
294264790Sbapt	&man.fstyp.8; utility has been added, which is used to
295264790Sbapt	determine the filesystem on a specified device.</para>
296264790Sbapt
297264790Sbapt      <para revision="276881">The <literal>libedit</literal> library
298264790Sbapt	has been updated to support <acronym>UTF</acronym>-8, which
299264790Sbapt	additionally provides unicode support to &man.sh.1;.</para>
300264790Sbapt
301264790Sbapt      <para revision="276893" contrib="sponsor" sponsor="&ff;">The
302264790Sbapt	&man.mkimg.1; utility has been updated to support the
303264790Sbapt	<acronym>MBR</acronym> <acronym>EFI</acronym> partition
304264790Sbapt	type.</para>
305264790Sbapt
306264790Sbapt      <para revision="277166" arch="powerpc">The &man.ptrace.2; system
307264790Sbapt	call has been updated include support for Altivec registers on
308264790Sbapt	&os;/&arch.powerpc;.</para>
309264790Sbapt
310264790Sbapt      <para revision="278320">A new device control utility,
311264790Sbapt	&man.devctl.8; has been added, which allows making
312264790Sbapt	administrative changes to individual devices, such as
313264790Sbapt	attaching and detaching drivers, and enabling and disabling
314264790Sbapt	devices.  The &man.devctl.8; utility uses the new
315264790Sbapt	&man.devctl.3; library.</para>
316264790Sbapt
317264790Sbapt      <para revision="279122" contrib="sponsor"
318264790Sbapt	sponsor="&juniper;">The &man.netstat.1; utility has been
319264790Sbapt	updated to link against the &man.libxo.3; shared
320264790Sbapt	library.</para>
321264790Sbapt
322264790Sbapt      <para revision="279139">A new flag, <literal>-c</literal>, has
323264790Sbapt	been added to the &man.mkimg.1; utility, which allows
324264790Sbapt	specifying the capacity of the target disk image.</para>
325264790Sbapt
326264790Sbapt      <para revision="279315" contrib="sponsor" sponsor="&ff;">The
327264790Sbapt	&man.uefisign.8; utility has been added.</para>
328264790Sbapt
329264790Sbapt      <para revision="279571" contrib="sponsor"
330264790Sbapt	sponsor="&scaleengine;">The &man.freebsd-update.8; utility has
331264790Sbapt	been updated to prevent fetching updated binary patches when
332264790Sbapt	a previous upgrade has not been thoroughly completed.</para>
333264790Sbapt
334264790Sbapt      <para revision="280870">A regression in the &man.libarchive.3;
335264790Sbapt	library that would prevent a directory from being included in
336264790Sbapt	the archive when <literal>--one-file-system</literal> is used
337264790Sbapt	has been fixed.</para>
338264790Sbapt
339264790Sbapt      <para revision="281311" contrib="sponsor" sponsor="&ff;">The
340264790Sbapt	&man.ar.1; utility has been updated to set
341264790Sbapt	<literal>ARCHIVE_EXTRACT_SECURE_SYMLINKS</literal> and
342264790Sbapt	<literal>ARCHIVE_EXTRACT_SECURE_NODOTDOT</literal> to disallow
343264790Sbapt	directory traversal when extracting an archive, similar to
344264790Sbapt	&man.tar.1;.</para>
345264790Sbapt
346264790Sbapt      <para revision="281617">A race condition in &man.wc.1; that
347264790Sbapt	would cause final results to be sent to &man.stderr.4; when
348264790Sbapt	receiving the <literal>SIGINFO</literal> signal has been
349264790Sbapt	fixed.</para>
350264790Sbapt
351264790Sbapt      <para revision="282208" contrib="sponsor"
352264790Sbapt	sponsor="&multiplay;">The &man.chflags.1;, &man.chgrp.1;,
353264790Sbapt	&man.chmod.1;, and &man.chown.8; utilities now affect symbolic
354264790Sbapt	links when the <literal>-R</literal> flag is specified, as
355264790Sbapt	documented in &man.symlink.7;.</para>
356264790Sbapt
357264790Sbapt      <para revision="282608">The &man.date.1; utility has been
358264790Sbapt	updated to print the modification time of the file passed as
359264790Sbapt	an argument to the <literal>-r</literal> flag, improving
360264790Sbapt	compatibility with the <acronym>GNU</acronym> &man.date.1;
361264790Sbapt	utility behavior.</para>
362264790Sbapt
363264790Sbapt      <para revision="283961">The &man.pw.8; utility has been updated
364264790Sbapt	with a new flag, <literal>-R</literal>, that sets the root
365264790Sbapt	directory within which the utility will operate.</para>
366264790Sbapt
367264790Sbapt      <para revision="284297" contrib="sponsor"
368264790Sbapt	sponsor="&clusterhq;">The &man.lockstat.1; utility has been
369264790Sbapt	updated with several improvements:</para>
370264790Sbapt
371264790Sbapt      <itemizedlist>
372264790Sbapt	<listitem>
373264790Sbapt	  <para>Spin locks are now reported as the amount of time
374264790Sbapt	    spinning, instead of loop iterations.</para>
375264790Sbapt	</listitem>
376264790Sbapt
377264790Sbapt	<listitem>
378264790Sbapt	  <para>Reader locks are now recognized as adaptive that can
379264790Sbapt	    spin on &os;.</para>
380264790Sbapt	</listitem>
381264790Sbapt
382264790Sbapt	<listitem>
383264790Sbapt	  <para>Lock aquisition events for successful reader try-lock
384264790Sbapt	    events are now reported.</para>
385264790Sbapt	</listitem>
386264790Sbapt
387264790Sbapt	<listitem>
388264790Sbapt	  <para>Spin and block events are now reported before lock
389264790Sbapt	    acquisition events.</para>
390264790Sbapt	</listitem>
391264790Sbapt      </itemizedlist>
392264790Sbapt
393264790Sbapt      <para revision="284589" contrib="sponsor"
394264790Sbapt	sponsor="&scaleengine;">The &man.fstyp.8; utility has been
395264790Sbapt	updated to be able to detect &man.zfs.8; and &man.geli.8;
396264790Sbapt	filesystems.</para>
397264790Sbapt
398264790Sbapt      <para revision="284883">The &man.mkimg.1; utility has been
399264790Sbapt	updated to include support for <literal>NTFS</literal>
400264790Sbapt	filesystems in both <acronym>MBR</acronym> and
401264790Sbapt	<acronym>GPT</acronym> partitioning schemes.</para>
402264790Sbapt
403264790Sbapt      <para revision="285253">The &man.quota.1; utility has been
404264790Sbapt	updated to include support for <acronym>IPv6</acronym>.</para>
405264790Sbapt
406264790Sbapt      <para revision="285420">The &man.jail.8; utility has been
407264790Sbapt	updated to include a new flag, <literal>-l</literal>, which
408264790Sbapt	ensures a clean environment in the target jail when used.
409264790Sbapt	Additionally, &man.jail.8; will run a shell within the target
410264790Sbapt	jail when run no commands are specified.</para>
411264790Sbapt
412264790Sbapt      <para revision="285550">The &man.w.1; utility has been updated
413264790Sbapt	to display the full IPv6 remote address of the host from which
414264790Sbapt	a user is connected.</para>
415264790Sbapt
416264790Sbapt      <para revision="285685">The &man.jail.8; framework has been
417264790Sbapt	updated to allow mounting &man.linprocfs.5; and
418264790Sbapt	&man.linsysfs.5; within a jail.</para>
419264790Sbapt
420264790Sbapt      <para revision="285772" contrib="sponsor"
421264790Sbapt	sponsor="&emcisilon;">The &man.patch.1; utility has been
422264790Sbapt	updated to include a new option to the <literal>-V</literal>
423264790Sbapt	flag, <literal>none</literal>, which disables backup file
424264790Sbapt	creation when applying a patch.</para>
425264790Sbapt    </sect2>
426264790Sbapt
427264790Sbapt    <sect2 xml:id="userland-contrib">
428264790Sbapt      <title>Contributed Software</title>
429264790Sbapt
430264790Sbapt      <para revision="258884" contrib="sponsor"
431264790Sbapt	sponsor="&darpa_afrl;">&man.lldb.1; has been updated to
432264790Sbapt	upstream snapshot version r196259.</para>
433264790Sbapt
434264790Sbapt      <para revision="260445">&man.byacc.1; has been updated to
435264790Sbapt	version 20140101.</para>
436264790Sbapt
437264790Sbapt      <para revision="261071">&man.jemalloc.3; has been updated to
438264790Sbapt	version 3.5.0.</para>
439264790Sbapt
440264790Sbapt      <para revision="261283"><application>libc++</application> has
441264790Sbapt	been updated to version 3.4.</para>
442264790Sbapt
443264790Sbapt      <para revision="261320"><application>OpenSSH</application> has
444264790Sbapt	been updated to 6.5p1.</para>
445264790Sbapt
446264790Sbapt      <para revision="261344"><application>mdocml</application> has
447264790Sbapt	been updated to version 1.12.3.</para>
448264790Sbapt
449264790Sbapt      <para revision="261991"><application>LLVM</application> and
450264790Sbapt	<application>Clang</application> have been updated to
451264790Sbapt	version 3.4.</para>
452264790Sbapt
453264790Sbapt      <para revision="275718">The <application>binutils</application>
454264790Sbapt	suite of utilities has been updated to include upstream
455264790Sbapt	patches that add new relocations for &arch.powerpc;
456264790Sbapt	support.</para>
457264790Sbapt
458264790Sbapt      <para revision="276398" contrib="sponsor" sponsor="&ff;">The
459264790Sbapt	<application>ELF Tool Chain</application> has been updated to
460264790Sbapt	upstream revision r3136.</para>
461264790Sbapt
462264790Sbapt      <para revision="276551">The <application>texinfo</application>
463264790Sbapt	utility and <literal>info</literal> pages were removed from
464264790Sbapt	the base system.  The <filename
465264790Sbapt	  role="package">print/texinfo</filename> port should be
466264790Sbapt	installed on systems where <literal>info</literal> pages are
467264790Sbapt	needed.</para>
468264790Sbapt
469264790Sbapt      <para revision="276796" contrib="sponsor" sponsor="&ff;">The ELF
470264790Sbapt	object manipulation tools
471264790Sbapt	<application>addr2line</application>,
472264790Sbapt	<application>elfcopy (strip)</application>,
473264790Sbapt	<application>nm</application>,
474264790Sbapt	<application>readelf</application>,
475264790Sbapt	<application>size</application>, and
476264790Sbapt	<application>strings</application> were switched to the
477264790Sbapt	versions from the ELF Tool Chain project.</para>
478264790Sbapt
479264790Sbapt      <para revision="276881">The <literal>libedit</literal> library
480264790Sbapt	has been updated to include <acronym>UTF-8</acronym> support,
481264790Sbapt	adding <acronym>UTF-8</acronym> support to the &man.sh.1;
482264790Sbapt	shell.</para>
483264790Sbapt
484264790Sbapt      <para revision="278433">The &man.xz.1; utility has been updated
485264790Sbapt	to support multi-threaded compression.</para>
486264790Sbapt
487264790Sbapt      <para revision="280932" contrib="sponsor" sponsor="&ff;">The
488264790Sbapt	<application>elftoolchain</application> utilities have been
489264790Sbapt	updated to version 3179.</para>
490264790Sbapt
491264790Sbapt      <para revision="281316">The &man.xz.1; utility has been updated
492264790Sbapt	to version 5.2.1.</para>
493264790Sbapt
494264790Sbapt      <para revision="281373">The &man.nvi.1; utility has been updated
495264790Sbapt	to version 2.1.3.</para>
496264790Sbapt
497264790Sbapt      <para revision="281806">The &man.wpa.supplicant.8; and
498264790Sbapt	&man.hostapd.8; utilities have been updated to version
499264790Sbapt	2.4.</para>
500264790Sbapt
501264790Sbapt      <para revision="282089">The &man.unbound.8; utility has been
502264790Sbapt	updated to version 1.5.3.</para>
503264790Sbapt
504264790Sbapt      <para revision="282434" contrib="sponsor" sponsor="&ff;">The
505264790Sbapt	&man.resolvconf.8; utility has been updated to version
506264790Sbapt	3.7.0.</para>
507264790Sbapt
508264790Sbapt      <para revision="282613">The &man.nc.1; utility has been updated
509264790Sbapt	to the OpenBSD 5.7 version.</para>
510264790Sbapt
511264790Sbapt      <para revision="284237">The &man.file.1; utility has been
512264790Sbapt	updated to version 5.23.</para>
513264790Sbapt
514264790Sbapt      <para revision="284254"><application>bmake</application> has
515264790Sbapt	been updated to version 20150606.</para>
516264790Sbapt
517264790Sbapt      <para revision="284397">Timezone data files have been updated to
518264790Sbapt	version 2015e.</para>
519264790Sbapt
520264790Sbapt      <para revision="285229"><application>sendmail</application> has
521264790Sbapt	been updated to 8.15.2.  Starting with &os;&nbsp;11.0 and
522264790Sbapt	sendmail 8.15, sendmail uses uncompressed IPv6 addresses by
523264790Sbapt	default, i.e., they will not contain <quote>::</quote>.  For
524264790Sbapt	example, instead of <quote>::1</quote>, it will be
525264790Sbapt	<quote>0:0:0:0:0:0:0:1</quote>.  This permits a zero subnet to
526264790Sbapt	have a more specific match, such as different map entries for
527264790Sbapt	IPv6:0:0 versus IPv6:0.  This change requires that
528264790Sbapt	configuration data (including maps, files, classes, custom
529264790Sbapt	ruleset, etc.) must use the same format, so make certain such
530264790Sbapt	configuration data is upgrading.  As a very simple check
531264790Sbapt	search for patterns like 'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'.
532264790Sbapt	To return to the old behavior, set the m4 option
533264790Sbapt	<literal>confUSE_COMPRESSED_IPV6_ADDRESSES</literal> or the cf
534264790Sbapt	option <literal>UseCompressedIPv6Addresses</literal>.</para>
535264790Sbapt
536264790Sbapt      <para revision="285275">The &man.tcpdump.1; utility has been
537264790Sbapt	updated to version 4.7.4.</para>
538264790Sbapt
539264790Sbapt      <para revision="285329"><application>OpenSSL</application> has
540264790Sbapt	been updated to version 1.0.1p.</para>
541264790Sbapt
542264790Sbapt      <para revision="285642" contrib="sponsor" sponsor="&dell;">The
543264790Sbapt	&man.ssh.1; utility has been updated to re-implement hostname
544264790Sbapt	canonicalization before locating the host in
545264790Sbapt	<filename>known_hosts</filename>.</para>
546264790Sbapt
547264790Sbapt      <para revision="r287168">The &man.acpi.4; subsystem has been
548264790Sbapt	updated to version 20150818.</para>
549264790Sbapt    </sect2>
550264790Sbapt
551264790Sbapt    <sect2 xml:id="userland-installer">
552264790Sbapt      <title>Installation and Configuration Tools</title>
553264790Sbapt
554264790Sbapt      <para revision="271539">The &man.bsdinstall.8; partition editor
555264790Sbapt	and &man.sade.8; utility have been updated to include native
556264790Sbapt	<acronym>ZFS</acronym> support.</para>
557264790Sbapt
558264790Sbapt      <para revision="272274">The &os; installation utility,
559264790Sbapt	&man.bsdinstall.8;, has been updated to set the
560264790Sbapt	<literal>canmount</literal> &man.zfs.8; property to
561264790Sbapt	<literal>off</literal> for the <filename
562264790Sbapt	  class="directory">/var</filename> dataset, preventing the
563264790Sbapt	contents of directories within <filename
564264790Sbapt	  class="directory">/var</filename> from conflicting when
565264790Sbapt	using multiple boot environments, such as that provided by
566264790Sbapt	<filename role="package">sysutils/beadm</filename>.</para>
567264790Sbapt
568264790Sbapt      <para revision="274394">The &man.bsdconfig.8; utility has been
569264790Sbapt	updated to skip the initial &man.tzsetup.8;
570264790Sbapt	<acronym>UTC</acronym> versus wall-clock time prompt when run
571264790Sbapt	in a virtual machine, determined when the
572264790Sbapt	<literal>kern.vm_guest</literal> &man.sysctl.8; is set to
573264790Sbapt	<literal>1</literal>.</para>
574264790Sbapt
575264790Sbapt      <para revision="275874">The &man.bsdinstall.8; utility has been
576264790Sbapt	updated to use the new &man.dpv.3; library to display progress
577264790Sbapt	when extracting the &os; distributions.</para>
578264790Sbapt
579264790Sbapt      <para revision="285557" contrib="sponsor"
580264790Sbapt	sponsor="&scaleengine;">Support for detecting and implementing
581264790Sbapt	aligning partitions on 1Mb boundaries has been added to
582264790Sbapt	&man.bsdinstall.8;.</para>
583264790Sbapt
584264790Sbapt      <para revision="285679" contrib="sponsor"
585264790Sbapt	sponsor="&scaleengine;">Support for detecting and implementing
586264790Sbapt	a workaround for various laptops and motherboards that do not
587264790Sbapt	boot properly from <acronym>GPT</acronym>-partitioned disks
588264790Sbapt	has been added to &man.bsdinstall.8;.  Additionally, the
589264790Sbapt	<literal>active</literal> flag will be set on the partition
590264790Sbapt	when needed.</para>
591264790Sbapt
592264790Sbapt      <para revision="285679" contrib="sponsor"
593264790Sbapt	sponsor="&scaleengine;">Support for selecting the partitioning
594264790Sbapt	scheme when installing on the <acronym>UFS</acronym>
595264790Sbapt	filesystem has been added to &man.bsdinstall.8;.</para>
596264790Sbapt    </sect2>
597264790Sbapt
598264790Sbapt    <sect2 xml:id="userland-rc">
599264790Sbapt      <title><filename class="directory">/etc/rc.d</filename>
600264790Sbapt	Scripts</title>
601264790Sbapt
602264790Sbapt      <para revision="270676">The &man.rc.8; subsystem has been
603264790Sbapt	updated to allow configuring services in <filename
604264790Sbapt	  class="directory">&dollar;{LOCALBASE}/etc/rc.conf.d/</filename>.
605264790Sbapt	If <literal>LOCALBASE</literal> is unset, it defaults to
606264790Sbapt	<filename class="directory">/usr/local</filename>.</para>
607264790Sbapt
608264790Sbapt      <para revision="273955">A new &man.rc.8; script,
609264790Sbapt	<filename>growfs</filename>, has been added, which will resize
610264790Sbapt	the root filesystem on boot if <filename>/firstboot</filename>
611264790Sbapt	exists.</para>
612264790Sbapt
613264790Sbapt      <para revision="275299">The <filename>mrouted</filename>
614264790Sbapt	&man.rc.8; script has been removed from the base system.  An
615264790Sbapt	equivalent script is available from the <filename
616264790Sbapt	  role="package">net/mrouted</filename> port.</para>
617264790Sbapt
618264790Sbapt      <para revision="279463" contrib="sponsor"
619264790Sbapt	sponsor="&sandvine;">A new &man.rc.8; script,
620264790Sbapt	<filename>iovctl</filename>, has been added, which allows
621264790Sbapt	automatically starting the &man.iovctl.8; utility at
622264790Sbapt	boot.</para>
623264790Sbapt    </sect2>
624264790Sbapt
625264790Sbapt    <sect2 xml:id="userland-periodic">
626264790Sbapt      <title><filename class="directory">/etc/periodic</filename>
627264790Sbapt	Scripts</title>
628264790Sbapt
629264790Sbapt      <para revision="271321">The daily &man.periodic.8; script
630264790Sbapt	<filename>110.clean-tmps</filename> has been updated to avoid
631264790Sbapt	crossing filesystem mount boundaries when cleaning files in
632264790Sbapt	<filename class="directory">/tmp</filename>.</para>
633264790Sbapt
634264790Sbapt      <para revision="277216" contrib="sponsor" sponsor="&ff;">A new
635264790Sbapt	&man.periodic.8; script,
636264790Sbapt	<filename>510.status-world-kernel</filename>, has been added,
637264790Sbapt	which evaluates the running userland and kernel versions from
638264790Sbapt	the &man.uname.1; <literal>-U</literal> and
639264790Sbapt	<literal>-K</literal> arguments, and prints an error if the
640264790Sbapt	system userland and kernel are not in sync.</para>
641264790Sbapt    </sect2>
642264790Sbapt
643264790Sbapt    <sect2 xml:id="userland-libraries">
644264790Sbapt      <title>Runtime Libraries and API</title>
645264790Sbapt
646264790Sbapt      <para revision="265995">The Blowfish &man.crypt.3; default
647264790Sbapt	format has been changed to
648264790Sbapt	<literal>&dollar;2b&dollar;</literal>.</para>
649264790Sbapt
650264790Sbapt      <para revision="268461">The &man.readline.3; library is now
651264790Sbapt	statically linked in software within the base system, and the
652264790Sbapt	shared library is no longer installed, allowing the Ports
653264790Sbapt	Collection to use a modern version of the library.</para>
654264790Sbapt
655264790Sbapt      <para revision="272273">The &man.strptime.3; library has been
656264790Sbapt	updated to add support for <acronym>POSIX</acronym>-2001
657264790Sbapt	features <literal>%U</literal> and
658264790Sbapt	<literal>%W</literal>.</para>
659264790Sbapt
660264790Sbapt      <para revision="272842,272848" contrib="sponsor"
661264790Sbapt	sponsor="&ff;">The &man.dl.iterate.phdr.3; library has been
662264790Sbapt	changed to always return the path name of the
663264790Sbapt	<acronym>ELF</acronym> object in the
664264790Sbapt	<literal>dlpi_name</literal> structure member.</para>
665264790Sbapt
666264790Sbapt      <para revision="273562" contrib="sponsor"
667264790Sbapt	sponsor="&juniper;">The &man.libxo.3; library has been
668	imported to the base system.</para>
669
670      <para revision="273806" contrib="sponsor" sponsor="&chelsio;">A
671	userland library for Chelsio Terminator 5 based iWARP cards
672	has been added, allowing userland <acronym>RDMA</acronym>
673	applications to work over compatible
674	<acronym>NIC</acronym>s.</para>
675
676      <para revision="274987">The &man.gpio.3; library has been added,
677	providing a wrapper around the &man.gpio.4; kernel
678	interface.</para>
679
680      <para revision="275800" contrib="sponsor" sponsor="&ff;">The
681	&man.procctl.2; system call has been updated to include
682	a facility for non-&man.init.8; processes to be declared as
683	the reaper of child processes and their decendants.</para>
684
685      <para revision="277610">The <literal>futimens()</literal> and
686	<literal>utimensat()</literal> system calls have been
687	added.  See &man.utimensat.2; for more information.</para>
688
689      <para revision="278934">The &man.elf.3; compile-time dependency
690	has been removed from <filename>dtri.o</filename>, which
691	allows adding <application>DTrace</application> probes to
692	userland applications and libraries without also linking
693	against &man.elf.3;.</para>
694
695      <para revision="279186">The &man.setmode.3; function has been
696	updated to consistently set <literal>errno</literal> on
697	failure.</para>
698
699      <para revision="279663">The &man.qsort.3; functions have been
700	updated to be able to handle 32-bit aligned data on 64-bit
701	platforms, also providing a significant improvement in 32-bit
702	workloads.</para>
703
704      <para revision="281130">Several standard include headers have
705	been updated to use of <application>gcc</application>
706	attributes, such as <literal>__result_use_check()</literal>,
707	<literal>__alloc_size()</literal>, and
708	<literal>__nonnull()</literal>.</para>
709
710      <para revision="281845">Support for file verification in
711	<acronym>MAC</acronym> has been added.</para>
712
713      <para revision="282973" contrib="sponsor" sponsor="&ff;">The
714	<literal>libgomp</literal> library is now only built when
715	building <acronym>GCC</acronym> from the base system.  An
716	up-to-date version is available in the Ports Collection as
717	<filename
718	  role="package">devel/libiomp5-devel</filename>.</para>
719
720      <para revision="282988">The <filename>stdlib.h</filename> and
721	<filename>malloc.h</filename> headers have been updated to
722	make use of the <application>gcc</application>
723	<literal>alloc_align()</literal> attribute.</para>
724
725      <para revision="284483" contrib="sponsor"
726	sponsor="&scaleengine;">The Blowfish &man.crypt.3; library
727	has been updated to support &dollar;2y&dollar; hashes.</para>
728
729      <para revision="285277">The &man.execl.3; and &man.execlp.3;
730	library functions have been updated to use the
731	<literal>__sentinel</literal> <application>gcc</application>
732	attribute.</para>
733    </sect2>
734
735    <sect2 xml:id="userland-abi">
736      <title>ABI Compatibility</title>
737
738      <para revision="271982">The &linux; compatibility version has
739	been updated to <literal>2.6.18</literal>.  The
740	<literal>compat.linux.osrelease</literal> &man.sysctl.8; is
741	evaluated when building the <filename
742	  role="package">emulators/linux-c6</filename> and related
743	ports.</para>
744    </sect2>
745  </sect1>
746
747  <sect1 xml:id="kernel">
748    <title>Kernel</title>
749
750    <para>This section covers changes to kernel configurations, system
751      tuning, and system control parameters that are not otherwise
752      categorized.</para>
753
754    <sect2 xml:id="kernel-bugfix">
755      <title>Kernel Bug Fixes</title>
756
757      <para revision="265876">A kernel bug that inhibited proper
758	functionality of the <literal>dev.cpu.0.freq</literal>
759	&man.sysctl.8; on &intel; processors with Turbo
760	Boost&nbsp;&trade; enabled has been fixed.</para>
761
762      <para revision="271697" arch="powerpc">Support for
763	&man.dtrace.1; stack tracing has been fixed for
764	&os;/&arch.powerpc;, using the <literal>trapexit()</literal>
765	and <literal>asttrapexit()</literal> functions instead of
766	checking within addressed kernel space.</para>
767
768      <para revision="271917">A kernel panic triggered when destroying
769	a &man.vnet.9; &man.jail.8; configured with &man.gif.4; has
770	been fixed.</para>
771
772      <para revision="271918">A kernel panic triggered when destroying
773	a &man.vnet.9; &man.jail.8; configured with &man.gre.4; has
774	been fixed.</para>
775
776      <para revision="272089">A bug in &man.ipfw.4; that could
777	potentially lead to a kernel panic when using &man.dummynet.4;
778	at layer 2 has been fixed.</para>
779
780      <para revision="280930" contrib="sponsor" sponsor="&mitail;">The
781	kernel <acronym>RPC</acronym> has been updated to include
782	several enhancements:</para>
783
784      <itemizedlist>
785	<listitem>
786	  <para>The 45 MiB limit on requests queued for
787	    &man.nfsd.8; threads has been removed.</para>
788	</listitem>
789
790	<listitem>
791	  <para>Avoids unnecessary throttling by not deferring
792	    accounting for completed requests.</para>
793	</listitem>
794
795	<listitem>
796	  <para>Fixes an integer overflow and signedness bugs.</para>
797	</listitem>
798      </itemizedlist>
799
800      <para revision="281261" arch="powerpc">Support for
801	&man.dtrace.1; has been added for the
802	Book-E&nbsp;&trade;.</para>
803    </sect2>
804
805    <sect2 xml:id="kernel-config">
806      <title>Kernel Configuration</title>
807
808      <para revision="266531">The <literal>IMAGACT_BINMISC</literal>
809	kernel configuration option has been enabled by default,
810	which enables application execution through emulators, such
811	as <application>Qemu</application>.</para>
812
813      <para revision="268045">The <literal>VT</literal> kernel
814	configuration file has been removed, and the &man.vt.4;
815	driver is included in the <literal>GENERIC</literal> kernel.
816	To enable &man.vt.4;, enter <literal>set kern.vty=vt</literal>
817	at the &man.loader.8; prompt during boot, or add
818	<literal>kern.vty=vt</literal> to &man.loader.conf.5; and
819	reboot the system.</para>
820
821      <para revision="277904">The &man.config.8; utility has been
822	updated to allow using a non-standard <filename
823	  class="directory">src/</filename> tree, specified as an
824	argument to the <literal>-s</literal> flag.</para>
825
826      <para revision="277990" arch="powerpc64">The
827	&os;/&arch.powerpc64; kernel now builds as
828	a position-independent executable, allowing the kernel to be
829	loaded into and run from any physical or virtual
830	address.</para>
831
832      <important>
833	<para>This change requires an update to &man.loader.8;.
834	  The userland and kernel must be updated before rebooting the
835	  system.</para>
836      </important>
837
838      <para revision="278338" arch="arm">A new module for creating
839	<filename>rpi.dtb</filename> has been added for the Raspberry
840	Pi.</para>
841
842      <para revision="278340" arch="arm">The
843	<filename>rpi.dtb</filename> module is now installed to
844	<filename class="directory">/boot/dtb/</filename> by
845	default for the Raspberry Pi system.</para>
846
847      <para revision="279189" contrib="sponsor" sponsor="&ff;"
848	arch="powerpc">Kernel support for Vector-Scalar eXtension
849	(<acronym>VSX</acronym>) found on POWER7 and POWER8 hardware
850	has been added.</para>
851
852      <para revision="279252" contrib="sponsor" sponsor="&ff;"
853	arch="powerpc">The &man.pmap.9; implementation for 64-bit
854	&powerpc; processors has been overhaulded to improve
855	concurrency.</para>
856
857      <para revision="279824" arch="arm">A new module for creating
858	the <filename>dtb</filename> module for AM335x systems has
859	been added.</para>
860
861      <para revision="281495" contrib="sponsor" sponsor="&ff;">The
862	<literal>PAE_TABLES</literal> kernel configuration option has
863	been added for &os;/&arch.i386;, which instructs &man.pmap.9;
864	to use <acronym>PAE</acronym> format for page tables while
865	maintaining a 32-bit physical address size elsewhere in the
866	kernel.  The use of this option can enhance application-level
867	security by enabling the creation of <quote>no execute</quote>
868	mappings on modern &arch.i386; processors.  Unlike the
869	<literal>PAE</literal> option, <literal>PAE_TABLES</literal>
870	preserves kernel binary interface (<acronym>KBI</acronym>)
871	compatibility with non-<literal>PAE</literal> kernels,
872	allowing non-<literal>PAE</literal> kernel modules and drivers
873	to work with a <literal>PAE_TABLES</literal>-enabled kernel.
874	Additionally, system limits are tuned for 4GB maximum
875	<acronym>RAM</acronym>, avoiding kernel virtual address space
876	(<acronym>KVA</acronym>) exhaustion.</para>
877
878      <para revision="282215">The <literal>SIFTR</literal> kernel
879	configuration has been added, allowing building &man.siftr.4;
880	statically into the kernel.</para>
881
882      <para revision="282731" arch="arm">The &arch.arm; boot loader,
883	<filename>ubldr</filename>, is now relocatable.  In addition,
884	<filename>ubldr.bin</filename> is now created during build
885	time, which is a stripped binary with an entry point of
886	<literal>0</literal>, providing the ability to specify the
887	load address by running <literal>go
888	  &dollar;{loadaddr}</literal> in
889	<literal>u-boot</literal>.</para>
890
891      <para revision="282921" contrib="sponsor" sponsor="&intelcorp;"
892	arch="amd64,i386">The &man.nvd.4; and &man.nvme.4; drivers are
893	now included in the <filename>GENERIC</filename> kernel
894	configuration by default.</para>
895
896      <para revision="283959" contrib="sponsor"
897	sponsor="&limelight;">A new kernel configuration option,
898	<literal>EM_MULTIQUEUE</literal>, has been added which enables
899	multi-queue support in the &man.em.4; driver.</para>
900
901      <note>
902	<para>Multi-queue support in the &man.em.4; driver is not
903	  officially supported by &intel;.</para>
904      </note>
905
906      <para revision="285142" contrib="sponsor"
907	sponsor="&netgate;">The <filename>GENERIC</filename> kernel
908	configuration has been updated to include the
909	<literal>IPSEC</literal> option by default.</para>
910
911      <para revision="285387" contrib="sponsor"
912	sponsor="&norse;, &dell;">Initial <acronym>NUMA</acronym>
913	affinity and policy configuration has been added.  See
914	&man.numactl.1;, and &man.numa.getaffinity.2;, for usage
915	details.</para>
916    </sect2>
917
918    <sect2 xml:id="kernel-sysctl">
919      <title>System Tuning and Controls</title>
920
921      <para revision="275140" contrib="sponsor" sponsor="&ff;">The
922	&man.hwpmc.4; default and maximum callchain depths have been
923	increased.  The default has been increased from 16 to 32, and
924	the maximum increased from 32 to 128.</para>
925
926      <para revision="279361">The <literal>kern.osrelease</literal>
927	and <literal>kern.osreldate</literal> are now configurable
928	&man.jail.8; parameters.</para>
929
930      <para revision="280308,280949" contrib="sponsor"
931	sponsor="&ix;, &ff;">The &man.devfs.5; device filesystem has
932	been changed to update timestamps for read/write operations
933	using seconds precision.  A new &man.sysctl.8;,
934	<literal>vfs.devfs.dotimes</literal> has been added, which
935	when set to a non-zero value, enables default precision
936	timestamps for these operations.</para>
937
938      <para revision="282213" contrib="sponsor" sponsor="&ff;">A new
939	&man.sysctl.8;, <literal>kern.racct.enable</literal>, has been
940	added, which when set to a non-zero value allows using
941	&man.rctl.8; with the <literal>GENERIC</literal> kernel.
942	A new kernel configuration option,
943	<literal>RACCT_DISABLED</literal> has also been added.</para>
944
945      <para revision="282901" contrib="sponsor" sponsor="&ff;">The
946	<literal>GENERIC</literal> kernel configuration now includes
947	<literal>RACCT</literal> and <literal>RCTL</literal> by
948	default.</para>
949
950      <note>
951	<para>To enable <literal>RACCT</literal> and
952	  <literal>RCTL</literal> on a system using the
953	  <literal>GENERIC</literal> kernel configuration, add
954	  <literal>kern.racct.enable=1</literal> to
955	  &man.loader.conf.5;, and reboot the system.</para>
956      </note>
957
958      <para revision="283136" contrib="sponsor"
959	sponsor="&limelight;">A new &man.sysctl.8;,
960	<literal>net.inet.tcp.hostcache.purgenow</literal>, has
961	been added, which when set to <literal>1</literal> during
962	runtime will flush all
963	<literal>net.inet.tcp.hostcache</literal> entries.</para>
964
965      <para revision="285524">A new &man.sysctl.8;,
966	<literal>hw.model</literal>, has been added, which displays
967	<acronym>CPU</acronym> model information.</para>
968    </sect2>
969  </sect1>
970
971  <sect1 xml:id="drivers">
972    <title>Devices and Drivers</title>
973
974    <para>This section covers changes and additions to devices and
975      device drivers since &release.prev;.</para>
976
977    <sect2 xml:id="drivers-device">
978      <title>Device Drivers</title>
979
980      <para revision="260903">Support for GPS ports has been added to
981	&man.uhso.4;.</para>
982
983      <para revision="265132">The &man.full.4; device has been added,
984	and the <literal>lindev(4)</literal> device has been removed.
985	Prior to this change, <literal>lindev(4)</literal> provided
986	only the <filename>/dev/full</filename> character device,
987	returning <literal>ENOSPC</literal> on write attempts.  As
988	this device is not specific to &linux;, a native &os; version
989	has been added.</para>
990
991      <para revision="271705">Hardware context support has been
992	added to the <literal>drm/i915</literal> driver, adding
993	support for <application>Mesa</application> 9.2 and
994	later.</para>
995
996      <para revision="273178">The &man.vt.4; driver has been updated,
997	replacing the bitmapped <literal>kern.vt.spclkeys</literal>
998	&man.sysctl.8; with individual
999	<literal>kern.vt.kbd_*</literal> variants.</para>
1000
1001      <para revision="273598">The &man.hpet.4; driver has been updated
1002	to create a
1003	<filename>/dev/hpet<replaceable>N</replaceable></filename>
1004	device, providing access to <acronym>HPET</acronym> from
1005	userspace.</para>
1006
1007      <para revision="280183">The <literal>drm</literal> code has
1008	been updated to match &linux; version 3.8.13.</para>
1009
1010      <para revision="281440">The &man.psm.4; driver has been updated
1011	to include improved support for newer Synaptics&nbsp;&reg;
1012	touchpads and the ClickPad&nbsp;&reg; mouse on newer
1013	Lenovo&nbsp;&trade; laptops.</para>
1014
1015      <para revision="282783" arch="powerpc">Support for the Freescale
1016	<acronym>PCI</acronym> Root Complex device has been
1017	added.</para>
1018
1019      <para revision="285876">The &man.cyapa.4; driver has been added,
1020	supporting the Cypress APA I2C trackpad.</para>
1021
1022      <para revision="285883">The &man.isl.4; driver has been added,
1023	supporting the Intersil I2C ISL29018 digital ambient light
1024	sensor.</para>
1025    </sect2>
1026
1027    <sect2 xml:id="drivers-storage">
1028      <title>Storage Drivers</title>
1029
1030      <para revision="265236" contrib="sponsor"
1031	sponsor="&lsi;, &spectralogic;" sponsorurl="">The &man.mpr.4;
1032	device has been added, providing support for LSI Fusion-MPT
1033	3 12Gb SCSI/SATA controllers.</para>
1034
1035      <para revision="265555" contrib="sponsor"
1036	  sponsor="&lsi;">The &man.mrsas.4; driver has been added,
1037	providing support for LSI MegaRAID SAS controllers.  The
1038	&man.mfi.4; driver will attach to the controller, by default.
1039	To enable &man.mrsas.4; add
1040	<literal>hw.mfi.mrsas_enable=1</literal> to
1041	<filename>/boot/loader.conf</filename>, which turns off
1042	&man.mfi.4; device probing.</para>
1043
1044      <note>
1045	<para>At this time, the &man.mfiutil.8; utility and the &os;
1046	  version of <application>MegaCLI</application> and
1047	  <application>StorCli</application> do not work with
1048	  &man.mrsas.4;.</para>
1049      </note>
1050
1051      <para revision="275461" contrib="sponsor" sponsor="&ix;">The
1052	&man.ctl.4; subsystem has been updated, increasing the ports
1053	limit from <literal>128</literal> to <literal>256</literal>,
1054	and <acronym>LUN</acronym> limit from <literal>256</literal>
1055	to <literal>1024</literal>.</para>
1056
1057      <para revision="276526">The <literal>asr(4)</literal> driver has
1058	been removed, and is no longer supported.</para>
1059
1060      <para revision="281387">The &man.hptnr.4; driver has been
1061	updated to version 1.1.1.</para>
1062
1063      <para revision="285662">The &man.pms.4; driver has been added,
1064	providing support for the PMC Sierra line of
1065	<acronym>SAS</acronym>/<acronym>SATA</acronym> host bus
1066	adapters.</para>
1067    </sect2>
1068
1069    <sect2 xml:id="drivers-network">
1070      <title>Network Drivers</title>
1071
1072      <para revision="258830">Support for Broadcom chipsets BCM57764,
1073	BCM57767, BCM57782, BCM57786 and BCM57787 has been added to
1074	&man.bge.4;.</para>
1075
1076      <para revision="260448">Support for the &intel; Centrino&trade;
1077	Wireless-N 135 chipset has been added.</para>
1078
1079      <para revision="260552">Firmware for &intel; Centrino&trade;
1080	Wireless-N 105 devices has been added to the base
1081	system.</para>
1082
1083      <para revision="261975">The deprecated nve(4) driver has been
1084	removed.  Users of NVIDIA nForce MCP network adapters are
1085	advised to use the &man.nfe.4; driver instead, which has been
1086	the default driver for this hardware since
1087	&os;&nbsp;7.0.</para>
1088
1089      <para revision="264601" contrib="sponsor"
1090	sponsor="&darpa_afrl;">The <literal>if_nf10bmac(4)</literal>
1091	device has been added, providing support for NetFPGA-10G
1092	Embedded CPU Ethernet Core.</para>
1093
1094      <note>
1095	<para>The <literal>if_nf10bmac(4)</literal> driver operates on
1096	  the FPGA, and is not suited for the PCI host
1097	  interface.</para>
1098      </note>
1099
1100      <para revision="265348" contrib="sponsor"
1101	sponsor="&netgate;">The &man.ath.hal.4; driver has been
1102	updated to support the Atheros AR1111 chipset.</para>
1103
1104      <para revision="266770">Support for the &intel; Centrino&trade;
1105	Wireless-N 105 chipset has been added.</para>
1106
1107      <para revision="266757" contrib="sponsor"
1108	sponsor="&chelsio;">Support for the &man.cxgbe.4; Terminator
1109	5 (T5) 10G/40G cards has been added to &man.netmap.4;.</para>
1110
1111      <para revision="272730">The &man.alc.4; driver has been updated
1112	to support AR816x and AR817x ethernet controllers.</para>
1113
1114      <para revision="272906">The &man.pf.4; packet filter default hash
1115	has been changed from <literal>Jenkins</literal> to
1116	<literal>Murmur3</literal>, providing a 3-percent performance
1117	increase in packets-per-second.</para>
1118
1119      <para revision="273331">The &man.vxlan.4; driver has been added,
1120	which creates a virtual Layer 2 (Ethernet) network overlaid in
1121	a Layer 3 (IP/UDP) network.  The &man.vxlan.4; driver is
1122	analogous to &man.vlan.4;, but is designed to be better suited
1123	for large, multiple-tenant datacenter environments.</para>
1124
1125      <para revision="274246" contrib="sponsor" sponsor="&yandex;">The
1126	&man.gre.4; driver has been significantly overhauled, and has
1127	been split into two separate modules, &man.gre.4; and
1128	&man.me.4;.</para>
1129
1130      <para revision="278551">The &man.ral.4; driver has been updated
1131	to support the RT5390 and RT5392 chipsets.</para>
1132
1133      <para revision="283514" contrib="sponsor"
1134	sponsor="&solarflare;">The &man.sfxge.4; driver has been
1135	updated to support Solarflare Flareon Ultra 7000-series
1136	chipsets.</para>
1137
1138      <para revision="283766" contrib="sponsor"
1139	sponsor="&limelight;">The &man.em.4; driver has been updated
1140	with improved transmission queue hang detection.</para>
1141
1142      <para revision="284125">The &man.cdce.4; driver has been updated
1143	to include support for the RTL8153 chipset.</para>
1144    </sect2>
1145  </sect1>
1146
1147  <sect1 xml:id="hardware">
1148    <title>Hardware Support</title>
1149
1150    <para>This section covers general hardware support for physical
1151      machines, hypervisors, and virtualization environments, as well
1152      as hardware changes and updates that do not otherwise fit in
1153      other sections of this document.</para>
1154
1155    <sect2 xml:id="hardware-support">
1156      <title>Hardware Support</title>
1157
1158      <para revision="268303">The &man.asmc.4; driver has been
1159	updated to support the &apple;&nbsp;MacMini 3,1.</para>
1160
1161      <para revision="268351">Support for &os;/ia64 has been dropped
1162	as of &os;&nbsp;11.</para>
1163
1164      <para revision="274386">An issue that could cause a system to
1165	hang when entering <acronym>ACPI</acronym>
1166	<literal>S3</literal> state (suspend to
1167	<acronym>RAM</acronym>) has been corrected in the &man.acpi.4;
1168	and &man.pci.4; drivers.</para>
1169
1170      <para revision="274733" arch="powerpc">The power management unit
1171	subsystem has been updated to support power button events on
1172	certain &arch.powerpc; hardware, such as aluminum
1173	PowerBook&nbsp;&reg;.</para>
1174
1175      <para revision="275171,275190" arch="powerpc">The &man.hwpmc.4;
1176	driver has been updated to correct performance counter
1177	sampling on G4 (MPC74xxx) and G5 class processors.</para>
1178
1179      <para revision="275732" contrib="sponsor"
1180	sponsor="&ff;,&netgate;">The
1181	<application>OpenCrypto</application> framework has been
1182	updated to include <literal>AES-ICM</literal> and
1183	<literal>AES-GCM</literal> modes, both of which have also been
1184	added to the &man.aesni.4; driver.</para>
1185
1186      <para revision="281713" arch="powerpc">The &man.hwpmc.4;
1187	driver has been updated to support the Freescale e500
1188	core.</para>
1189
1190      <para revision="283766">The &man.ig4.4; driver has been added,
1191	providing support for the fourth generation &intel;
1192	<acronym>I2C</acronym> SMBus.</para>
1193
1194      <para>The &man.uart.4; driver has been updated to support
1195	<acronym>AMT</acronym> devices on newer systems.</para>
1196
1197      <para revision="285316" contrib="sponsor" sponsor="&ff;"
1198	arch="arm64">Initial <acronym>SMP</acronym> support has been
1199	added to the &os;/&arch.arm64; port.</para>
1200    </sect2>
1201
1202    <sect2 xml:id="hardware-virtualization">
1203      <title>Virtualization Support</title>
1204
1205      <para revision="260410">Support for the <quote>Virtual Interrupt
1206	  Delivery</quote> feature of &intel;&nbsp;VT-x is enabled if
1207	supported by the CPU.  This feature can be disabled by running
1208	<literal>sysctl hw.vmm.vmx.use_apic_vid=0</literal>.
1209	Additionally, to persist this setting across reboots, add
1210	<literal>hw.vmm.vmx.use_apic_vid=0</literal> to
1211	<filename>/etc/sysctl.conf</filename>.</para>
1212
1213      <para revision="260532">Support for <quote>Posted Interrupt
1214	  Processing</quote> is enabled if supported by the CPU.  This
1215	feature can be disabled by running <literal>sysctl
1216	  hw.vmm.vmx.use_apic_pir=0</literal>.  Additionally, to
1217	persist this setting across reboots, add
1218	<literal>hw.vmm.vmx.use_apic_pir=0</literal> to
1219	<filename>/etc/sysctl.conf</filename>.</para>
1220
1221      <para revision="260582">Unmapped IO support has been added to
1222	&man.virtio_blk.4;.</para>
1223
1224      <para revision="260583">Unmapped IO support has been added to
1225	&man.virtio_scsi.4;.</para>
1226
1227      <para revision="260847">The &man.virtio_random.4; driver has
1228	been added to harvest entropy from the host system.</para>
1229
1230      <para revision="261504">&os;/&arch.i386; guests can be run under
1231	bhyve.</para>
1232
1233      <para revision="267536" contrib="sponsor"
1234	sponsor="&citrix.rd;">Support for running a &os;/&arch.amd64;
1235	<application>Xen</application> guest instance as
1236	<acronym>PVH</acronym> guest has been added.
1237	<acronym>PVH</acronym> mode, short for <quote>Para-Virtualized
1238	  Hardware</quote>, uses para-virtualized drivers for boot and
1239	I/O, and uses hardware virtualization extensions for all other
1240	tasks, without the need for emulation.</para>
1241
1242      <para revision="273375">The &man.bhyve.8; hypervisor has been
1243	updated to support &amd; processors with
1244	<acronym>SVM</acronym> and <acronym>AMD-V</acronym> hardware
1245	extensions.</para>
1246
1247      <para revision="273515">The &man.virtio.console.4; driver has
1248	been added, which provides an interface to VirtIO console
1249	devices through a &man.tty.4; device.</para>
1250
1251      <para revision="279957">The &man.bhyve.8; hypervisor has been
1252	updated to support <literal>DSM TRIM</literal> commands for
1253	virtual <acronym>AHCI</acronym> disks.</para>
1254
1255      <para revision="281439" arch="arm">Support for the
1256	<application>QEMU</application> <literal>virt</literal> system
1257	has been added.</para>
1258
1259      <para revision="282212" contrib="sponsor" sponsor="&msostc;">The
1260	Hyper-V&trade; drivers have been updated with several
1261	enhancements:</para>
1262
1263      <itemizedlist>
1264	<listitem>
1265	  <para>The &man.hv.vmbus.4; driver now has multi-channel
1266	    support.</para>
1267	</listitem>
1268
1269	<listitem>
1270	  <para>The &man.hv.storvsc.4; driver now has scatter/gather
1271	    support, in addition to performance improvements.</para>
1272	</listitem>
1273
1274	<listitem>
1275	  <para>The &man.hv.kvp.4; driver has received several bug
1276	    fixes.</para>
1277	</listitem>
1278      </itemizedlist>
1279
1280      <para revision="282274">Support for &man.xen.4; para-virtualized
1281	<literal>domU</literal> kernels has been removed.</para>
1282
1283      <para revision="284746" contrib="sponsor" sponsor="&msostc;">The
1284	&man.hv.netvsc.4; driver has been updated to support checksum
1285	offloading and <acronym>TSO</acronym>.</para>
1286    </sect2>
1287
1288    <sect2 xml:id="hardware-arm">
1289      <title>ARM Support</title>
1290
1291      <para revision="260921">The &man.nand.4; device is enabled for
1292	ARM devices by default.</para>
1293
1294      <para revision="266943" arch="arm">Support for the Exynos 5420
1295	Octa system has been added.</para>
1296
1297      <para revision="267390" arch="arm">The <acronym>SMP</acronym>
1298	option has been enabled for all Exynos 5 systems supported by
1299	&os;.</para>
1300
1301      <para revision="268838" arch="arm">Support for the Toradex
1302	Apalis i.MX6 development board has been added.</para>
1303
1304      <para revision="273264" arch="armv6">An issue that could cause
1305	instability when detecting <acronym>SD</acronym> cards on the
1306	Raspberry Pi <acronym>SOC</acronym> has been fixed.</para>
1307
1308      <para revision="275963">The <literal>bcm2835_cpufreq</literal>
1309	driver has been added, which supports <acronym>CPU</acronym>
1310	frequency and voltage control on the Raspberry Pi
1311	<acronym>SOC</acronym>.</para>
1312
1313      <para revision="277042" arch="arm">Support to turn off the
1314	BeagleBone Black system with the &man.shutdown.8;
1315	<literal>-p</literal> flag or by invoking &man.poweroff.8; has
1316	been added.</para>
1317
1318      <para revision="277644" arch="arm">Audio transmission drivers
1319	have been added for Digital Audio Multiplexer
1320	(<acronym>AUDMUXM</acronym>), Smart Direct Memory Access
1321	Controller (<acronym>SDMA</acronym>), and Syncronous Serial
1322	Interface (<acronym>SSI</acronym>).</para>
1323
1324      <para revision="280259" contrib="sponsor" sponsor="&ff;">Initial
1325	support for the ARM AArch64 architecture has been
1326	added.</para>
1327
1328      <para revision="282779" arch="arm">Kernel support for Thumb-2
1329	userland has been added.</para>
1330
1331      <para revision="282827">Support for the hardware power button
1332	on the BeagleBone Black system has been added.</para>
1333
1334      <para revision="284273" contrib="sponsor"
1335	sponsor="&ff;">Initial
1336	<acronym>ACPI</acronym> support has been added for
1337	&os;/&arch.arm64;.</para>
1338    </sect2>
1339  </sect1>
1340
1341  <sect1 xml:id="storage">
1342    <title>Storage</title>
1343
1344    <para>This section covers changes and additions to file systems
1345      and other storage subsystems, both local and networked.</para>
1346
1347    <sect2 xml:id="storage-general">
1348      <title>General Storage</title>
1349
1350      <para revision="278037" contrib="sponsor" sponsor="&ix;">The
1351	&man.ctl.4; <acronym>LUN</acronym> mapping has been rewritten,
1352	replacing <acronym>iSCSI</acronym>-specific mapping mechanisms
1353	with a new mechanism that works for any port.</para>
1354
1355      <para revision="278354" contrib="sponsor" sponsor="&ix;">The
1356	&man.ctld.8; utility has been updated to allow controlling
1357	non-<acronym>iSCSI</acronym> &man.ctl.4; ports.</para>
1358
1359      <para revision="275681" contrib="sponsor" sponsor="&ff;">The
1360	&man.autofs.5; subsystem has been updated to include a new
1361	&man.auto.master.5; map, <literal>-media</literal>, which
1362	allows automatically mounting removable media, such as
1363	<acronym>CD</acronym> drives or <acronym>USB</acronym> flash
1364	drives.</para>
1365
1366      <para revision="279955" contrib="sponsor" sponsor="&ff;">The
1367	&man.autofs.5; subsystem has been updated to include a new
1368	&man.auto.master.5; map, <literal>-noauto</literal>, which
1369	handles &man.fstab.5; entries set to
1370	<literal>noauto</literal>.</para>
1371    </sect2>
1372
1373    <sect2 xml:id="storage-net">
1374      <title>Networked Storage</title>
1375
1376      <para revision="270096" contrib="sponsor" sponsor="&ff;">The new
1377	filesystem automount facility, &man.autofs.5;, has been added.
1378	The new &man.autofs.5; facility is similar to that found in
1379	other &unix;-like operating systems, such as OS&nbsp;X&trade;
1380	and Solaris&trade;.  The &man.autofs.5; facility uses
1381	a &sun;-compatible &man.auto.master.5; configuration file, and
1382	is administered with the &man.automount.8; userland utility,
1383	and the &man.automountd.8; and &man.autounmountd.8;
1384	daemons.</para>
1385
1386      <para revision="273849" contrib="sponsor" sponsor="&ff;">Support
1387	for the <literal>timeo</literal>, <literal>actimeo</literal>,
1388	<literal>noac</literal>, and <literal>proto</literal> options
1389	have been added to &man.mount.nfs.8;.</para>
1390    </sect2>
1391
1392    <sect2 xml:id="storage-zfs">
1393      <title>ZFS</title>
1394
1395      <para revision="275748">The <literal>arc_meta_limit</literal>
1396	statistics are now visible through the
1397	<literal>kstat</literal> &man.sysctl.8;.  As a result of this
1398	change, the <literal>vfs.zfs.arc_meta_used</literal>
1399	&man.sysctl.8; has been removed, and replaced with the
1400	<literal>kstat.zfs.misc.arcstats.arc_meta_used</literal>
1401	&man.sysctl.8;.</para>
1402    </sect2>
1403
1404    <sect2 xml:id="storage-geom">
1405      <title>&man.geom.4;</title>
1406
1407      <para revision="267359">Support for the
1408	<literal>disklabel64</literal> partitioning scheme has been
1409	added to &man.gpart.8;.</para>
1410
1411      <para revision="282465">Support for the
1412	<literal>apple-boot</literal>, <literal>apple-hfs</literal>,
1413	and <literal>apple-ufs</literal> <acronym>MBR</acronym>
1414	partitioning schemes have been added to &man.gpart.8;.</para>
1415
1416      <para revision="285594" contrib="sponsor"
1417	sponsor="&scaleengine;">The &man.gpart.8; utility has been
1418	updated to include a new attribute for <acronym>GPT</acronym>
1419	partitions, <literal>lenovofix</literal>, which when set,
1420	which works around <acronym>BIOS</acronym> compatibility
1421	issues reported on several Lenovo&nbsp;&trade; laptops.</para>
1422    </sect2>
1423  </sect1>
1424
1425  <sect1 xml:id="boot">
1426    <title>Boot Loader Changes</title>
1427
1428    <para>This section covers the boot loader, boot menu, and other
1429      boot-related changes.</para>
1430
1431    <sect2 xml:id="boot-loader">
1432      <title>Boot Loader Changes</title>
1433
1434      <para revision="258431" contrib="sponsor" sponsor="&ff;">The
1435	memory test run at boot time on &os;/&arch.amd64; platforms
1436	has been disabled by default.</para>
1437
1438      <para revision="262955">A new &man.ttys.5; class,
1439	<literal>3wire</literal>, has been added.  This is similar to
1440	the existing terminal classes, but does not have a defined
1441	baudrate.</para>
1442
1443      <para revision="274085">The &man.vt.4; driver has been made the
1444	default system console driver.  The &man.syscons.4; driver is
1445	still available, and can be enabled by adding
1446	<literal>kern.vty=sc</literal> in &man.loader.conf.5;.
1447	Alternatively, &man.syscons.4; can be enabled at boot time by
1448	entering <literal>set kern.vty=sc</literal> at the
1449	&man.loader.8; prompt.</para>
1450
1451      <para revision="279950">Support for <literal>bzipfs</literal>
1452	has been added to the <acronym>EFI</acronym> loader.</para>
1453
1454      <para revision="281616">The boot loader has been updated to
1455	support entering the <acronym>GELI</acronym> passphrase before
1456	loading the kernel.  To enable this behavior, add
1457	<literal>geom_eli_passphrase_prompt="YES"</literal> to
1458	&man.loader.conf.5;.</para>
1459
1460      <para revision="284683" contrib="sponsor" sponsor="&ff;"
1461	arch="arm">The &man.ttys.5; file for &os;/&arch.arm; has been
1462	updated to enable <filename>ttyu1</filename>,
1463	<filename>ttyu2</filename>, and <filename>ttyu3</filename> by
1464	default, if the callin port is an active console port.</para>
1465    </sect2>
1466
1467    <sect2 xml:id="boot-menu">
1468      <title>Boot Menu Changes</title>
1469
1470      <para>&nbsp;</para>
1471    </sect2>
1472  </sect1>
1473
1474  <sect1 xml:id="network">
1475    <title>Networking</title>
1476
1477    <para>This section describes changes that affect networking in
1478      &os;.</para>
1479
1480    <sect2 xml:id="network-protocols">
1481      <title>Network Protocols</title>
1482
1483      <para revision="263140">Support for the IPX network transport
1484	protocol has been removed, and will not be supported in
1485	&os;&nbsp;11 and later releases.</para>
1486
1487      <para revision="272720" contrib="sponsor"
1488	sponsor="&limelight;">Support for <acronym>PLPMTUD</acronym>
1489	blackhole detection (<acronym>RFC</acronym> 4821) has been
1490	added to the &man.tcp.4; stack, disabled by default.  New
1491	control tunables have been added:</para>
1492
1493      <informaltable frame="none" pgwide="0">
1494	<tgroup cols="2">
1495	  <colspec colwidth="1*"/>
1496	  <colspec colwidth="1*"/>
1497	  <thead>
1498	    <row>
1499	      <entry>Tunable</entry>
1500	      <entry>Description</entry>
1501	    </row>
1502	  </thead>
1503
1504	  <tbody>
1505	    <row>
1506	      <entry><literal>net.inet.tcp.pmtud_blackhole_detection</literal></entry>
1507	      <entry>Enables or disables <acronym>PLPMTUD</acronym>
1508		blackhole detection</entry>
1509	    </row>
1510
1511	    <row>
1512	      <entry><literal>net.inet.tcp.pmtud_blackhole_mss</literal></entry>
1513	      <entry><acronym>MSS</acronym> to try for IPv4</entry>
1514	    </row>
1515
1516	    <row>
1517	      <entry><literal>net.inet.tcp.v6pmtud_blackhole_mss</literal></entry>
1518	      <entry><acronym>MSS to try for IPv6</acronym></entry>
1519	    </row>
1520	  </tbody>
1521	</tgroup>
1522      </informaltable>
1523
1524      <para>New monitoring &man.sysctl.8;s haven been added:</para>
1525
1526      <informaltable frame="none" pgwide="0">
1527	<tgroup cols="2">
1528	  <colspec colwidth="1*"/>
1529	  <colspec colwidth="1*"/>
1530	  <thead>
1531	    <row>
1532	      <entry>Tunable</entry>
1533	      <entry>Description</entry>
1534	    </row>
1535	  </thead>
1536
1537	  <tbody>
1538	    <row>
1539	      <entry><literal>net.inet.tcp.pmtud_blackhole_activated</literal></entry>
1540	      <entry>Number of times the code was activated to attempt
1541		downshifting the <acronym>MSS</acronym></entry>
1542	    </row>
1543
1544	    <row>
1545	      <entry><literal>net.inet.tcp.pmtud_blackhole_min_activated</literal></entry>
1546	      <entry>Number of times the blackhole
1547		<acronym>MSS</acronym> was used in an attempt to
1548		downshift</entry>
1549	    </row>
1550
1551	    <row>
1552	      <entry><literal>net.inet.tcp.pmtud_blackhole_failed</literal></entry>
1553	      <entry>Number of times that the blackhole failed to
1554		connect after downshifting the
1555		<acronym>MSS</acronym></entry>
1556	    </row>
1557	  </tbody>
1558	</tgroup>
1559      </informaltable>
1560
1561      <para revision="280971" contrib="sponsor"
1562	sponsor="&netflix;, &nginx;">Support for <acronym>IP</acronym>
1563	identification for atomic datagrams (<acronym>RFC</acronym>
1564	6864) has been added.  Support for this feature can be toggled
1565	with the <literal>net.inet.ip.rfc6864</literal>
1566	&man.sysctl.8;, which is enabled by default.</para>
1567
1568      <para revision="285336" contrib="sponsor"
1569	sponsor="&netgate;">The <acronym>IPSEC</acronym> has been
1570	updated to include support for <acronym>AES</acronym> modes on
1571	both software-only and hardware-backed (&man.aesni.4;)
1572	systems.</para>
1573    </sect2>
1574  </sect1>
1575
1576  <sect1 xml:id="ports">
1577    <title>Ports Collection and Package Infrastructure</title>
1578
1579    <para>This section covers changes to the &os;&nbsp;Ports
1580      Collection, package infrastructure, and package maintenance and
1581      installation tools.</para>
1582
1583    <sect2 xml:id="ports-infrastructure">
1584      <title>Infrastructure Changes</title>
1585
1586      <para>&nbsp;</para>
1587    </sect2>
1588
1589    <sect2 xml:id="ports-packages ">
1590      <title>Packaging Changes</title>
1591
1592      <para>&nbsp;</para>
1593    </sect2>
1594  </sect1>
1595
1596  <sect1 xml:id="doc">
1597    <title>Documentation</title>
1598
1599    <para>This section covers changes to the &os;&nbsp;Documentation
1600      Project sources and toolchain.</para>
1601
1602    <sect2 xml:id="doc-sources">
1603      <title>Documentation Source Changes</title>
1604
1605      <para>&nbsp;</para>
1606    </sect2>
1607
1608    <sect2 xml:id="doc-toolchain">
1609      <title>Documentation Toolchain Changes</title>
1610
1611      <para>&nbsp;</para>
1612    </sect2>
1613  </sect1>
1614
1615  <sect1 xml:id="releng">
1616    <title>Release Engineering and Integration</title>
1617
1618    <para>This section convers changes that are specific to the
1619      &os;&nbsp;Release Engineering processes.</para>
1620
1621    <sect2 xml:id="releng-changes">
1622      <title>Integration Changes</title>
1623
1624      <para revision="277458" contrib="sponsor" sponsor="&ff;">The
1625	Release Engineering build tools have been updated to include
1626	support for producing virtual machine disk images for various
1627	cloud hosting providers.</para>
1628
1629      <para revision="278926">The Release Engineering build tools have
1630	been updated to use multi-threaded &man.xz.1;.  By default,
1631	the number of &man.xz.1; threads is set to the number of cores
1632	available.</para>
1633
1634      <para revision="281802" contrib="sponsor" sponsor="&ff;">The
1635	Release Engineering build tools have been updated to include
1636	support for building &os;/&arch.arm64; virtual machine and
1637	memory stick installation images.</para>
1638
1639      <para revision="282693" contrib="sponsor" sponsor="&ff;">The
1640	Release Engineering build tools have been updated to support
1641	building &os;/&arch.arm; images without external utilities for
1642	supported boards where a corresponding
1643	<literal>u-boot</literal> port exists in the Ports
1644	Collection.</para>
1645
1646      <para revision="283307" contrib="sponsor" sponsor="&ff;">The
1647	&os;/&arch.i386; memory stick installation images are now
1648	created using the &man.mkimg.1; utility, matching the way
1649	the &os;/&arch.amd64; images are created.</para>
1650    </sect2>
1651  </sect1>
1652</article>
1653