path: root/release/doc/en_US.ISO8859-1/relnotes/article.xml

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
	"../../../share/xml/freebsd50.dtd" [
<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
 %release;
<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
 %sponsor;
<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
 %vendor;
<!ENTITY security SYSTEM "../../share/xml/security.xml">
<!ENTITY errata SYSTEM "../../share/xml/errata.xml">
]>
<article xmlns="http://docbook.org/ns/docbook"
  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">

  <info>
    <title>&os; &release.current; Release Notes</title>

    <author>
      <orgname>The &os; Project</orgname>
    </author>

    <pubdate>$FreeBSD$</pubdate>

    <!-- Last rev: 288943 -->

    <copyright>
      <year>2015</year>
      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
	Project</holder>
    </copyright>

    <legalnotice xml:id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.ibm;
      &tm-attrib.ieee;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>

    <abstract>
      <para>The release notes for &os; &release.current; contain
	a summary of the changes made to the &os; base system on the
	&release.branch; development line.  This document lists
	applicable security advisories that were issued since the last
	release, as well as significant changes to the &os; kernel and
	userland.  Some brief remarks on upgrading are also
	presented.</para>
    </abstract>
  </info>

  <sect1 xml:id="intro">
    <title>Introduction</title>

    <para>This document contains the release notes for &os;
      &release.current;.  It describes recently added, changed, or
      deleted features of &os;.  It also provides some notes on
      upgrading from previous versions of &os;.</para>

    <para releasetype="current">The &release.type; distribution to
      which these release notes apply represents the latest point
      along the &release.branch; development branch since
      &release.branch; was created.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="snapshot">The &release.type; distribution to
      which these release notes apply represents a point along the
      &release.branch; development branch between &release.prev; and
      the future &release.next;.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
	xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="release">This distribution of &os;
      &release.current; is a &release.type; distribution.  It can be
      found at <uri xlink:href="&release.url;">&release.url;</uri> or
      any of its mirrors.  More information on obtaining this (or
      other) &release.type; distributions of &os; can be found in the
      <link
	xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
	  &os;</quote> appendix</link> to the <link
	xlink:href="&url.books.handbook;/">&os;
	Handbook</link>.</para>

    <para>All users are encouraged to consult the release errata
      before installing &os;.  The errata document is updated with
      <quote>late-breaking</quote> information discovered late in the
      release cycle or after the release.  Typically, it contains
      information on known bugs, security advisories, and corrections
      to documentation.  An up-to-date copy of the errata for &os;
      &release.current; can be found on the &os; Web site.</para>

    <para>This document describes the most user-visible new or changed
      features in &os; since &release.prev;.  In general, changes
      described here are unique to the &release.branch; branch unless
      specifically marked as &merged; features.</para>

    <para>Typical release note items document recent security
      advisories issued after &release.prev;, new drivers or hardware
      support, new commands or options, major bug fixes, or
      contributed software upgrades.  They may also list changes to
      major ports/packages or release engineering practices.  Clearly
      the release notes cannot list every single change made to &os;
      between releases; this document focuses primarily on security
      advisories, user-visible changes, and major architectural
      improvements.</para>
  </sect1>

  <sect1 xml:id="upgrade">
    <title>Upgrading from Previous Releases of &os;</title>

    <para arch="amd64,i386">Binary upgrades between RELEASE versions
      (and snapshots of the various security branches) are supported
      using the &man.freebsd-update.8; utility.  The binary upgrade
      procedure will update unmodified userland utilities, as well as
      unmodified GENERIC kernels distributed as a part of an official
      &os; release.  The &man.freebsd-update.8; utility requires that
      the host being upgraded have Internet connectivity.</para>

    <para>Source-based upgrades (those based on recompiling the &os;
      base system from source code) from previous versions are
      supported, according to the instructions in
      <filename>/usr/src/UPDATING</filename>.</para>

    <important>
      <para>Upgrading &os; should only be attempted after backing up
	<emphasis>all</emphasis> data and configuration files.</para>
    </important>
  </sect1>

  <sect1 xml:id="security-errata">
    <title>Security and Errata</title>

    <para>This section lists the various Security Advisories and
      Errata Notices since &release.prev;.</para>

    <sect2 xml:id="security">
      <title>Security Advisories</title>

      &security;
    </sect2>

    <sect2 xml:id="errata">
      <title>Errata Notices</title>

      &errata;
    </sect2>
  </sect1>

  <sect1 xml:id="userland">
    <title>Userland</title>

    <para>This section covers changes and additions to userland
      applications, contributed software, and system utilities.</para>

    <sect2 xml:id="userland-config">
      <title>Userland Configuration Changes</title>

      <para revision="266463">The default &man.newsyslog.conf.5; now
	includes files in the
	<filename>/etc/newsyslog.conf.d/</filename> and
	<filename>/usr/local/etc/newsyslog.conf.d/</filename>
	directories by default for &man.newsyslog.8;.</para>

      <para revision="270675">The &man.mailwrapper.8; utility has been
	updated to use &man.mailer.conf.5; from the
	<literal>LOCALBASE</literal> environment variable, which
	defaults to <filename class="directory">/usr/local</filename>
	if unset.</para>

      <para revision="272350">The <literal>MK_ARM_EABI</literal>
	&man.src.conf.5; option has been removed.</para>

      <para revision="298695">The <application>ntp</application> suite
	has been updated to version 4.2.8p7.</para>
    </sect2>

    <sect2 xml:id="userland-programs">
      <title>Userland Application Changes</title>

      <para revision="258838" contrib="sponsor" sponsor="&ff;,
	&google;" sponsorurl="">The &man.casperd.8; daemon has been
	added, which provides access to functionality that is not
	available in the <quote>capability mode</quote>
	sandbox.</para>

      <para revision="260594">When unable to load a kernel module with
	&man.kldload.8;, a message informing to view output of
	&man.dmesg.8; is now printed, opposed to the previous output
	<quote>Exec format error.</quote>.</para>

      <para revision="260910">Allow &man.pciconf.8; to identify PCI
	devices that are attached to a driver to be identified by
	their device name instead of just the selector.  Additionally,
	an optional device argument to the <literal>-l</literal> flag
	to restrict the output to only listing details about a single
	device.</para>

      <para revision="260913">A new flag, <quote>onifconsole</quote>
	has been added to <filename>/etc/ttys</filename>.  This allows
	the system to provide a login prompt via serial console if the
	device is an active kernel console, otherwise it is equivalent
	to <literal>off</literal>.</para>

      <para revision="260926">Support for displaying VPD for PCI
	devices via &man.pciconf.8; has been added.</para>

      <para revision="261498">&man.ping.8; protects against malicious
	network packets using the Capsicum framework to drop
	privileges.</para>

      <para revision="265229">The &man.ps.1; utility has been
	updated to include the <literal>-J</literal> flag, used to
	filter output by matching &man.jail.8; IDs and names.
	Additionally, argument <literal>0</literal> can be used to
	<literal>-J</literal> to only list processes running on the
	host system.</para>

      <para revision="265249">The &man.top.1; utility has been updated
	to filter by &man.jail.8; ID or name, in followup to the
	&man.ps.1; change in <literal>r265229</literal>.</para>

      <para revision="266209">The &man.pmcstat.8; utility has been
	updated to include a new flag, <literal>-l</literal>, which
	ends event collection after the specified number of
	seconds.</para>

      <para revision="270745">The &man.ps.1; utility has been updated
	to include a new keyword, <quote>tracer</quote>, which
	displays the <acronym>PID</acronym> of the tracing
	process.</para>

      <para revision="271482">Support for adding empty partitions has
	been added to the &man.mkimg.1; utility.</para>

      <para revision="272166">The &man.primes.6; utility has been
	updated to correctly enumerate prime numbers between
	<literal>4295098369</literal> and
	<literal>3825123056546413050</literal>, which prior to this
	change, it would be possible for returned values to be
	incorrectly identified as prime numbers.</para>

      <para revision="272198">The &man.mkimg.1; utility has been
	updated to include three options used to print information
	about &man.mkimg.1; itself:</para>

      <informaltable frame="none" pgwide="0">
	<tgroup cols="2">
	  <colspec colwidth="1*"/>
	  <colspec colwidth="1*"/>
	  <thead>
	    <row>
	      <entry>Option</entry>
	      <entry>Output</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><literal>--version</literal></entry>
	      <entry>The current version of the &man.mkimg.1;
		utility</entry>
	    </row>

	    <row>
	      <entry><literal>--formats</literal></entry>
	      <entry>The disk image file formats supported by
		&man.mkimg.1;</entry>
	    </row>

	    <row>
	      <entry><literal>--schemes</literal></entry>
	      <entry>The partition schemes supported by
		&man.mkimg.1;</entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>

      <para revision="272488">Userland &man.ctf.5; support in
	&man.dtrace.1; has been added.  With this change,
	&man.dtrace.1; is able to resolve type info for function and
	<acronym>USDT</acronym> probe arguments, and function return
	values.</para>

      <para revision="274960">The &man.elfdump.1; utility has been
	updated to support capability mode provided by
	&man.capsicum.4;.</para>

      <para revision="275680" contrib="sponsor" sponsor="&ff;">The
	&man.fstyp.8; utility has been added, which is used to
	determine the filesystem on a specified device.</para>

      <para revision="276881">The <literal>libedit</literal> library
	has been updated to support <acronym>UTF</acronym>-8, which
	additionally provides unicode support to &man.sh.1;.</para>

      <para revision="276893" contrib="sponsor" sponsor="&ff;">The
	&man.mkimg.1; utility has been updated to support the
	<acronym>MBR</acronym> <acronym>EFI</acronym> partition
	type.</para>

      <para revision="277166" arch="powerpc">The &man.ptrace.2; system
	call has been updated include support for Altivec registers on
	&os;/&arch.powerpc;.</para>

      <para revision="278320">A new device control utility,
	&man.devctl.8; has been added, which allows making
	administrative changes to individual devices, such as
	attaching and detaching drivers, and enabling and disabling
	devices.  The &man.devctl.8; utility uses the new
	&man.devctl.3; library.</para>

      <para revision="279122" contrib="sponsor"
	sponsor="&juniper;">The &man.netstat.1; utility has been
	updated to link against the &man.libxo.3; shared
	library.</para>

      <para revision="279139">A new flag, <literal>-c</literal>, has
	been added to the &man.mkimg.1; utility, which allows
	specifying the capacity of the target disk image.</para>

      <para revision="279315" contrib="sponsor" sponsor="&ff;">The
	&man.uefisign.8; utility has been added.</para>

      <para revision="279571" contrib="sponsor"
	sponsor="&scaleengine;">The &man.freebsd-update.8; utility has
	been updated to prevent fetching updated binary patches when
	a previous upgrade has not been thoroughly completed.</para>

      <para revision="280870">A regression in the &man.libarchive.3;
	library that would prevent a directory from being included in
	the archive when <literal>--one-file-system</literal> is used
	has been fixed.</para>

      <para revision="281311" contrib="sponsor" sponsor="&ff;">The
	&man.ar.1; utility has been updated to set
	<literal>ARCHIVE_EXTRACT_SECURE_SYMLINKS</literal> and
	<literal>ARCHIVE_EXTRACT_SECURE_NODOTDOT</literal> to disallow
	directory traversal when extracting an archive, similar to
	&man.tar.1;.</para>

      <para revision="281617">A race condition in &man.wc.1; that
	would cause final results to be sent to &man.stderr.4; when
	receiving the <literal>SIGINFO</literal> signal has been
	fixed.</para>

      <para revision="282208" contrib="sponsor"
	sponsor="&multiplay;">The &man.chflags.1;, &man.chgrp.1;,
	&man.chmod.1;, and &man.chown.8; utilities now affect symbolic
	links when the <literal>-R</literal> flag is specified, as
	documented in &man.symlink.7;.</para>

      <para revision="282608">The &man.date.1; utility has been
	updated to print the modification time of the file passed as
	an argument to the <literal>-r</literal> flag, improving
	compatibility with the <acronym>GNU</acronym> &man.date.1;
	utility behavior.</para>

      <para revision="283961">The &man.pw.8; utility has been updated
	with a new flag, <literal>-R</literal>, that sets the root
	directory within which the utility will operate.</para>

      <para revision="284297" contrib="sponsor"
	sponsor="&clusterhq;">The &man.lockstat.1; utility has been
	updated with several improvements:</para>

      <itemizedlist>
	<listitem>
	  <para>Spin locks are now reported as the amount of time
	    spinning, instead of loop iterations.</para>
	</listitem>

	<listitem>
	  <para>Reader locks are now recognized as adaptive that can
	    spin on &os;.</para>
	</listitem>

	<listitem>
	  <para>Lock aquisition events for successful reader try-lock
	    events are now reported.</para>
	</listitem>

	<listitem>
	  <para>Spin and block events are now reported before lock
	    acquisition events.</para>
	</listitem>
      </itemizedlist>

      <para revision="284589" contrib="sponsor"
	sponsor="&scaleengine;">The &man.fstyp.8; utility has been
	updated to be able to detect &man.zfs.8; and &man.geli.8;
	filesystems.</para>

      <para revision="284883">The &man.mkimg.1; utility has been
	updated to include support for <literal>NTFS</literal>
	filesystems in both <acronym>MBR</acronym> and
	<acronym>GPT</acronym> partitioning schemes.</para>

      <para revision="285253">The &man.quota.1; utility has been
	updated to include support for <acronym>IPv6</acronym>.</para>

      <para revision="285420">The &man.jexec.8; utility has been
	updated to include a new flag, <literal>-l</literal>, which
	ensures a clean environment in the target jail when used.
	Additionally, &man.jexec.8; will run a shell within the target
	jail when run no commands are specified.</para>

      <para revision="285550">The &man.w.1; utility has been updated
	to display the full IPv6 remote address of the host from which
	a user is connected.</para>

      <para revision="285685">The &man.jail.8; framework has been
	updated to allow mounting &man.linprocfs.5; and
	&man.linsysfs.5; within a jail.</para>

      <para revision="285772" contrib="sponsor"
	sponsor="&emcisilon;">The &man.patch.1; utility has been
	updated to include a new option to the <literal>-V</literal>
	flag, <literal>none</literal>, which disables backup file
	creation when applying a patch.</para>

      <para revision="286010" contrib="sponsor" sponsor="&ff;">The
	&man.ar.1; utility now enables deterministic mode
	(<literal>-D</literal>) by default.  This behavior can be
	disabled by specifying the <literal>-U</literal> flag.</para>

      <para revision="286289" contrib="sponsor"
	sponsor="&scaleengine;">The &man.xargs.1; utility has been
	updated to allow specifying <literal>0</literal> as an
	argument to the <literal>-P</literal> (parallel mode) flag,
	which allows creating as many concurrent processes as
	possible.</para>

      <para revision="286795">The &man.patch.1; utility has been
	updated to remove the automatic checkout feature.</para>

      <para revision="287473" contrib="sponsor" sponsor="&gandi;">A
	new utility, &man.sesutil.8;, has been added, which is used
	to manage &man.ses.4; devices.</para>

      <para revision="287522">The &man.pciconf.8; utility has been
	updated to use the PCI ID database from the <filename
	  role="package">misc/pciids</filename> package, if present,
	falling back to the PCI ID database in the &os; base
	system.</para>

      <para revision="287842" contrib="sponsor"
	sponsor="&scaleengine;">The &man.ifconfig.8; utility has been
	updated to always exit with an error code if an important
	&man.ioctl.2; fails.</para>
    </sect2>

    <sect2 xml:id="userland-contrib">
      <title>Contributed Software</title>

      <para revision="260445">&man.byacc.1; has been updated to
	version 20140101.</para>

      <para revision="296633"><application>OpenSSH</application> has
	been updated to 7.2p2.</para>

      <para revision="261344"><application>mdocml</application> has
	been updated to version 1.12.3.</para>

      <para revision="275718">The <application>binutils</application>
	suite of utilities has been updated to include upstream
	patches that add new relocations for &arch.powerpc;
	support.</para>

      <para revision="276398" contrib="sponsor" sponsor="&ff;">The
	<application>ELF Tool Chain</application> has been updated to
	upstream revision r3136.</para>

      <para revision="276551">The <application>texinfo</application>
	utility and <literal>info</literal> pages were removed from
	the base system.  The <filename
	  role="package">print/texinfo</filename> port should be
	installed on systems where <literal>info</literal> pages are
	needed.</para>

      <para revision="276796" contrib="sponsor" sponsor="&ff;">The ELF
	object manipulation tools
	<application>addr2line</application>,
	<application>elfcopy (strip)</application>,
	<application>nm</application>,
	<application>readelf</application>,
	<application>size</application>, and
	<application>strings</application> were switched to the
	versions from the ELF Tool Chain project.</para>

      <para revision="276881">The <literal>libedit</literal> library
	has been updated to include <acronym>UTF-8</acronym> support,
	adding <acronym>UTF-8</acronym> support to the &man.sh.1;
	shell.</para>

      <para revision="278433">The &man.xz.1; utility has been updated
	to support multi-threaded compression.</para>

      <para revision="280932" contrib="sponsor" sponsor="&ff;">The
	<application>elftoolchain</application> utilities have been
	updated to version 3179.</para>

      <para revision="281316">The &man.xz.1; utility has been updated
	to version 5.2.1.</para>

      <para revision="281373">The &man.nvi.1; utility has been updated
	to version 2.1.3.</para>

      <para revision="281806">The &man.wpa.supplicant.8; and
	&man.hostapd.8; utilities have been updated to version
	2.4.</para>

      <para revision="282434" contrib="sponsor" sponsor="&ff;">The
	&man.resolvconf.8; utility has been updated to version
	3.7.0.</para>

      <para revision="284254"><application>bmake</application> has
	been updated to version 20150606.</para>

      <para revision="285229"><application>sendmail</application> has
	been updated to 8.15.2.  Starting with &os;&nbsp;11.0 and
	sendmail 8.15, sendmail uses uncompressed IPv6 addresses by
	default, i.e., they will not contain <quote>::</quote>.  For
	example, instead of <quote>::1</quote>, it will be
	<quote>0:0:0:0:0:0:0:1</quote>.  This permits a zero subnet to
	have a more specific match, such as different map entries for
	IPv6:0:0 versus IPv6:0.  This change requires that
	configuration data (including maps, files, classes, custom
	ruleset, etc.) must use the same format, so make certain such
	configuration data is upgrading.  As a very simple check
	search for patterns like 'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'.
	To return to the old behavior, set the m4 option
	<literal>confUSE_COMPRESSED_IPV6_ADDRESSES</literal> or the cf
	option <literal>UseCompressedIPv6Addresses</literal>.</para>

      <para revision="285275">The &man.tcpdump.1; utility has been
	updated to version 4.7.4.</para>

      <para revision="285329"><application>OpenSSL</application> has
	been updated to version 1.0.1p.</para>

      <para revision="285642" contrib="sponsor" sponsor="&dell;">The
	&man.ssh.1; utility has been updated to re-implement hostname
	canonicalization before locating the host in
	<filename>known_hosts</filename>.</para>

      <para revision="285972">The &man.libarchive.3; library has been
	updated to properly skip a sparse file entry in a &man.tar.1;
	file, which would previously produce errors.</para>

      <para revision="286503">The <application>apr</application>
	library used by &man.svnlite.1; has been updated to version
	1.5.2.</para>

      <para revision="286505">The <application>serf</application>
	library used by &man.svnlite.1; has been updated to version
	1.3.8.</para>

      <para revision="286505">The &man.svnlite.1; utility has been
	updated to version 1.8.14.</para>

      <para revision="298161">The <application>sqlite3</application>
	library used by &man.svnlite.1; and &man.kerberos.8; has been
	updated to version 3.12.1.</para>

      <para revision="286750">Timezone data files have been updated to
	version 2015f.</para>

      <para revision="287168">The &man.acpi.4; subsystem has been
	updated to version 20150818.</para>

      <para revision="287917">The &man.unbound.8; utility has been
	updated to version 1.5.4.</para>

      <para revision="288090">&man.jemalloc.3; has been updated to
	version 4.0.2.</para>

      <para revision="298192">The &man.file.1; utility has been
	updated to version 5.26.</para>

      <para revision="288303">The &man.nc.1; utility has been updated
	to the OpenBSD 5.8 version.</para>

      <para revision="296417"><application>Clang</application> has
	been updated to version 3.8.0.</para>

      <para revision="296417"><application>LLVM</application> has
	been updated to version 3.8.0.</para>

      <para revision="296417"><application>LLDB</application> has
	been updated to version 3.8.0.</para>

      <para revision="296417"><application>libc++</application> has
	been updated to version 3.8.0.</para>

      <para revision="296417">The
	<application>compiler_rt</application> utility has been
	updated to version 3.8.0.</para>
    </sect2>

    <sect2 xml:id="userland-installer">
      <title>Installation and Configuration Tools</title>

      <para revision="271539">The &man.bsdinstall.8; partition editor
	and &man.sade.8; utility have been updated to include native
	<acronym>ZFS</acronym> support.</para>

      <para revision="272274">The &os; installation utility,
	&man.bsdinstall.8;, has been updated to set the
	<literal>canmount</literal> &man.zfs.8; property to
	<literal>off</literal> for the <filename
	  class="directory">/var</filename> dataset, preventing the
	contents of directories within <filename
	  class="directory">/var</filename> from conflicting when
	using multiple boot environments, such as that provided by
	<filename role="package">sysutils/beadm</filename>.</para>

      <para revision="274394">The &man.bsdconfig.8; utility has been
	updated to skip the initial &man.tzsetup.8;
	<acronym>UTC</acronym> versus wall-clock time prompt when run
	in a virtual machine, determined when the
	<literal>kern.vm_guest</literal> &man.sysctl.8; is set to
	<literal>1</literal>.</para>

      <para revision="275874">The &man.bsdinstall.8; utility has been
	updated to use the new &man.dpv.3; library to display progress
	when extracting the &os; distributions.</para>

      <para revision="285557" contrib="sponsor"
	sponsor="&scaleengine;">Support for detecting and implementing
	aligning partitions on 1Mb boundaries has been added to
	&man.bsdinstall.8;.</para>

      <para revision="285679" contrib="sponsor"
	sponsor="&scaleengine;">Support for detecting and implementing
	a workaround for various laptops and motherboards that do not
	boot properly from <acronym>GPT</acronym>-partitioned disks
	has been added to &man.bsdinstall.8;.  Additionally, the
	<literal>active</literal> flag will be set on the partition
	when needed.</para>

      <para revision="285679" contrib="sponsor"
	sponsor="&scaleengine;">Support for selecting the partitioning
	scheme when installing on the <acronym>UFS</acronym>
	filesystem has been added to &man.bsdinstall.8;.</para>
    </sect2>

    <sect2 xml:id="userland-rc">
      <title><filename class="directory">/etc/rc.d</filename>
	Scripts</title>

      <para revision="270676">The &man.rc.8; subsystem has been
	updated to allow configuring services in <filename
	  class="directory">&dollar;{LOCALBASE}/etc/rc.conf.d/</filename>.
	If <literal>LOCALBASE</literal> is unset, it defaults to
	<filename class="directory">/usr/local</filename>.</para>

      <para revision="273955">A new &man.rc.8; script,
	<filename>growfs</filename>, has been added, which will resize
	the root filesystem on boot if <filename>/firstboot</filename>
	exists.</para>

      <para revision="275299">The <filename>mrouted</filename>
	&man.rc.8; script has been removed from the base system.  An
	equivalent script is available from the <filename
	  role="package">net/mrouted</filename> port.</para>

      <para revision="279463" contrib="sponsor"
	sponsor="&sandvine;">A new &man.rc.8; script,
	<filename>iovctl</filename>, has been added, which allows
	automatically starting the &man.iovctl.8; utility at
	boot.</para>

      <para revision="287576" contrib="sponsor"
	sponsor="&scaleengine;">The &man.service.8; utility has been
	updated to honor entries within <filename
	  class="directory">/etc/rc.conf.d/</filename>.</para>

    </sect2>

    <sect2 xml:id="userland-periodic">
      <title><filename class="directory">/etc/periodic</filename>
	Scripts</title>

      <para revision="271321">The daily &man.periodic.8; script
	<filename>110.clean-tmps</filename> has been updated to avoid
	crossing filesystem mount boundaries when cleaning files in
	<filename class="directory">/tmp</filename>.</para>

      <para revision="277216" contrib="sponsor" sponsor="&ff;">A new
	&man.periodic.8; script,
	<filename>510.status-world-kernel</filename>, has been added,
	which evaluates the running userland and kernel versions from
	the &man.uname.1; <literal>-U</literal> and
	<literal>-K</literal> arguments, and prints an error if the
	system userland and kernel are not in sync.</para>
    </sect2>

    <sect2 xml:id="userland-libraries">
      <title>Runtime Libraries and API</title>

      <para revision="265995">The Blowfish &man.crypt.3; default
	format has been changed to
	<literal>&dollar;2b&dollar;</literal>.</para>

      <para revision="268461">The &man.readline.3; library is now
	statically linked in software within the base system, and the
	shared library is no longer installed, allowing the Ports
	Collection to use a modern version of the library.</para>

      <para revision="272273">The &man.strptime.3; library has been
	updated to add support for <acronym>POSIX</acronym>-2001
	features <literal>%U</literal> and
	<literal>%W</literal>.</para>

      <para revision="272842,272848" contrib="sponsor"
	sponsor="&ff;">The &man.dl.iterate.phdr.3; library has been
	changed to always return the path name of the
	<acronym>ELF</acronym> object in the
	<literal>dlpi_name</literal> structure member.</para>

      <para revision="273562" contrib="sponsor"
	sponsor="&juniper;">The &man.libxo.3; library has been
	imported to the base system.</para>

      <para revision="273806" contrib="sponsor" sponsor="&chelsio;">A
	userland library for Chelsio Terminator 5 based iWARP cards
	has been added, allowing userland <acronym>RDMA</acronym>
	applications to work over compatible
	<acronym>NIC</acronym>s.</para>

      <para revision="274987">The &man.gpio.3; library has been added,
	providing a wrapper around the &man.gpio.4; kernel
	interface.</para>

      <para revision="275800" contrib="sponsor" sponsor="&ff;">The
	&man.procctl.2; system call has been updated to include
	a facility for non-&man.init.8; processes to be declared as
	the reaper of child processes and their decendants.</para>

      <para revision="277610">The <literal>futimens()</literal> and
	<literal>utimensat()</literal> system calls have been
	added.  See &man.utimensat.2; for more information.</para>

      <para revision="278934">The &man.elf.3; compile-time dependency
	has been removed from <filename>dtri.o</filename>, which
	allows adding <application>DTrace</application> probes to
	userland applications and libraries without also linking
	against &man.elf.3;.</para>

      <para revision="279186">The &man.setmode.3; function has been
	updated to consistently set <literal>errno</literal> on
	failure.</para>

      <para revision="279663">The &man.qsort.3; functions have been
	updated to be able to handle 32-bit aligned data on 64-bit
	platforms, also providing a significant improvement in 32-bit
	workloads.</para>

      <para revision="281130">Several standard include headers have
	been updated to use of <application>gcc</application>
	attributes, such as <literal>__result_use_check()</literal>,
	<literal>__alloc_size()</literal>, and
	<literal>__nonnull()</literal>.</para>

      <para revision="281845">Support for file verification in
	<acronym>MAC</acronym> has been added.</para>

      <para revision="282973" contrib="sponsor" sponsor="&ff;">The
	<literal>libgomp</literal> library is now only built when
	building <acronym>GCC</acronym> from the base system.  An
	up-to-date version is available in the Ports Collection as
	<filename
	  role="package">devel/libiomp5-devel</filename>.</para>

      <para revision="282988">The <filename>stdlib.h</filename> and
	<filename>malloc.h</filename> headers have been updated to
	make use of the <application>gcc</application>
	<literal>alloc_align()</literal> attribute.</para>

      <para revision="284483" contrib="sponsor"
	sponsor="&scaleengine;">The Blowfish &man.crypt.3; library
	has been updated to support &dollar;2y&dollar; hashes.</para>

      <para revision="285277">The &man.execl.3; and &man.execlp.3;
	library functions have been updated to use the
	<literal>__sentinel</literal> <application>gcc</application>
	attribute.</para>
    </sect2>

    <sect2 xml:id="userland-abi">
      <title>ABI Compatibility</title>

      <para revision="271982">The &linux; compatibility version has
	been updated to <literal>2.6.18</literal>.  The
	<literal>compat.linux.osrelease</literal> &man.sysctl.8; is
	evaluated when building the <filename
	  role="package">emulators/linux-c6</filename> and related
	ports.</para>

      <para revision="288669">The stack protector has been upgraded to
	the "strong" level, elevating the protection against buffer
	overflows.  While this significantly improves the security of
	the system, extensive testing was done to ensure there are no
	measurable side effects in performance or
	functionality.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="kernel">
    <title>Kernel</title>

    <para>This section covers changes to kernel configurations, system
      tuning, and system control parameters that are not otherwise
      categorized.</para>

    <sect2 xml:id="kernel-bugfix">
      <title>Kernel Bug Fixes</title>

      <para revision="265876">A kernel bug that inhibited proper
	functionality of the <literal>dev.cpu.0.freq</literal>
	&man.sysctl.8; on &intel; processors with Turbo
	Boost&nbsp;&trade; enabled has been fixed.</para>

      <para revision="271697" arch="powerpc">Support for
	&man.dtrace.1; stack tracing has been fixed for
	&os;/&arch.powerpc;, using the <literal>trapexit()</literal>
	and <literal>asttrapexit()</literal> functions instead of
	checking within addressed kernel space.</para>

      <para revision="271917">A kernel panic triggered when destroying
	a &man.vnet.9; &man.jail.8; configured with &man.gif.4; has
	been fixed.</para>

      <para revision="271918">A kernel panic triggered when destroying
	a &man.vnet.9; &man.jail.8; configured with &man.gre.4; has
	been fixed.</para>

      <para revision="272089">A bug in &man.ipfw.4; that could
	potentially lead to a kernel panic when using &man.dummynet.4;
	at layer 2 has been fixed.</para>

      <para revision="280930" contrib="sponsor" sponsor="&mitail;">The
	kernel <acronym>RPC</acronym> has been updated to include
	several enhancements:</para>

      <itemizedlist>
	<listitem>
	  <para>The 45 MiB limit on requests queued for
	    &man.nfsd.8; threads has been removed.</para>
	</listitem>

	<listitem>
	  <para>Avoids unnecessary throttling by not deferring
	    accounting for completed requests.</para>
	</listitem>

	<listitem>
	  <para>Fixes an integer overflow and signedness bugs.</para>
	</listitem>
      </itemizedlist>

      <para revision="281261" arch="powerpc">Support for
	&man.dtrace.1; has been added for the
	Book-E&nbsp;&trade;.</para>

      <para revision="287886" contrib="sponsor"
	sponsor="&multiplay;">The &man.kqueue.2; system call has been
	updated to handle write events to files larger than 2
	gigabytes.</para>
    </sect2>

    <sect2 xml:id="kernel-config">
      <title>Kernel Configuration</title>

      <para revision="266531">The <literal>IMAGACT_BINMISC</literal>
	kernel configuration option has been enabled by default,
	which enables application execution through emulators, such
	as <application>Qemu</application>.</para>

      <para revision="268045">The <literal>VT</literal> kernel
	configuration file has been removed, and the &man.vt.4;
	driver is included in the <literal>GENERIC</literal> kernel.
	To enable &man.vt.4;, enter <literal>set kern.vty=vt</literal>
	at the &man.loader.8; prompt during boot, or add
	<literal>kern.vty=vt</literal> to &man.loader.conf.5; and
	reboot the system.</para>

      <para revision="277904">The &man.config.8; utility has been
	updated to allow using a non-standard <filename
	  class="directory">src/</filename> tree, specified as an
	argument to the <literal>-s</literal> flag.</para>

      <para revision="277990" arch="powerpc64">The
	&os;/&arch.powerpc64; kernel now builds as
	a position-independent executable, allowing the kernel to be
	loaded into and run from any physical or virtual
	address.</para>

      <important>
	<para>This change requires an update to &man.loader.8;.
	  The userland and kernel must be updated before rebooting the
	  system.</para>
      </important>

      <para revision="278338" arch="arm">A new module for creating
	<filename>rpi.dtb</filename> has been added for the Raspberry
	Pi.</para>

      <para revision="278340" arch="arm">The
	<filename>rpi.dtb</filename> module is now installed to
	<filename class="directory">/boot/dtb/</filename> by
	default for the Raspberry Pi system.</para>

      <para revision="279189" contrib="sponsor" sponsor="&ff;"
	arch="powerpc">Kernel support for Vector-Scalar eXtension
	(<acronym>VSX</acronym>) found on POWER7 and POWER8 hardware
	has been added.</para>

      <para revision="279252" contrib="sponsor" sponsor="&ff;"
	arch="powerpc">The &man.pmap.9; implementation for 64-bit
	&powerpc; processors has been overhaulded to improve
	concurrency.</para>

      <para revision="279824" arch="arm">A new module for creating
	the <filename>dtb</filename> module for AM335x systems has
	been added.</para>

      <para revision="281495" contrib="sponsor" sponsor="&ff;">The
	<literal>PAE_TABLES</literal> kernel configuration option has
	been added for &os;/&arch.i386;, which instructs &man.pmap.9;
	to use <acronym>PAE</acronym> format for page tables while
	maintaining a 32-bit physical address size elsewhere in the
	kernel.  The use of this option can enhance application-level
	security by enabling the creation of <quote>no execute</quote>
	mappings on modern &arch.i386; processors.  Unlike the
	<literal>PAE</literal> option, <literal>PAE_TABLES</literal>
	preserves kernel binary interface (<acronym>KBI</acronym>)
	compatibility with non-<literal>PAE</literal> kernels,
	allowing non-<literal>PAE</literal> kernel modules and drivers
	to work with a <literal>PAE_TABLES</literal>-enabled kernel.
	Additionally, system limits are tuned for 4GB maximum
	<acronym>RAM</acronym>, avoiding kernel virtual address space
	(<acronym>KVA</acronym>) exhaustion.</para>

      <para revision="282215">The <literal>SIFTR</literal> kernel
	configuration has been added, allowing building &man.siftr.4;
	statically into the kernel.</para>

      <para revision="282731" arch="arm">The &arch.arm; boot loader,
	<filename>ubldr</filename>, is now relocatable.  In addition,
	<filename>ubldr.bin</filename> is now created during build
	time, which is a stripped binary with an entry point of
	<literal>0</literal>, providing the ability to specify the
	load address by running <literal>go
	  &dollar;{loadaddr}</literal> in
	<literal>u-boot</literal>.</para>

      <para revision="282921" contrib="sponsor" sponsor="&intelcorp;"
	arch="amd64,i386">The &man.nvd.4; and &man.nvme.4; drivers are
	now included in the <filename>GENERIC</filename> kernel
	configuration by default.</para>

      <para revision="283959" contrib="sponsor"
	sponsor="&limelight;">A new kernel configuration option,
	<literal>EM_MULTIQUEUE</literal>, has been added which enables
	multi-queue support in the &man.em.4; driver.</para>

      <note>
	<para>Multi-queue support in the &man.em.4; driver is not
	  officially supported by &intel;.</para>
      </note>

      <para revision="285142" contrib="sponsor"
	sponsor="&netgate;">The <filename>GENERIC</filename> kernel
	configuration has been updated to include the
	<literal>IPSEC</literal> option by default.</para>

      <para revision="285387" contrib="sponsor"
	sponsor="&norse;, &dell;">Initial <acronym>NUMA</acronym>
	affinity and policy configuration has been added.  See
	&man.numactl.1;, and &man.numa.getaffinity.2;, for usage
	details.</para>

      <para revision="286231">The &man.pms.4; driver has been added
	to the <filename>GENERIC</filename> kernel configuration for
	supported architectures.</para>

      <para revision="287306" arch="arm">The
	<filename>CUBIEBOARD2</filename> kernel configuration has been
	renamed to <filename>A20</filename>.</para>

      <para revision="288176" contrib="sponsor" sponsor="&ff;">Kernel
	debugging symbols are now installed to <filename
	  class="directory">/usr/lib/debug/boot/kernel/</filename>.
	To retain the previous behavior, add
	<literal>KERN_DEBUGDIR=""</literal> to
	&man.src.conf.5;.</para>
    </sect2>

    <sect2 xml:id="kernel-sysctl">
      <title>System Tuning and Controls</title>

      <para revision="275140" contrib="sponsor" sponsor="&ff;">The
	&man.hwpmc.4; default and maximum callchain depths have been
	increased.  The default has been increased from 16 to 32, and
	the maximum increased from 32 to 128.</para>

      <para revision="279361">The <literal>kern.osrelease</literal>
	and <literal>kern.osreldate</literal> are now configurable
	&man.jail.8; parameters.</para>

      <para revision="280308,280949" contrib="sponsor"
	sponsor="&ix;, &ff;">The &man.devfs.5; device filesystem has
	been changed to update timestamps for read/write operations
	using seconds precision.  A new &man.sysctl.8;,
	<literal>vfs.devfs.dotimes</literal> has been added, which
	when set to a non-zero value, enables default precision
	timestamps for these operations.</para>

      <para revision="282213" contrib="sponsor" sponsor="&ff;">A new
	&man.sysctl.8;, <literal>kern.racct.enable</literal>, has been
	added, which when set to a non-zero value allows using
	&man.rctl.8; with the <literal>GENERIC</literal> kernel.
	A new kernel configuration option,
	<literal>RACCT_DISABLED</literal> has also been added.</para>

      <para revision="282901" contrib="sponsor" sponsor="&ff;">The
	<literal>GENERIC</literal> kernel configuration now includes
	<literal>RACCT</literal> and <literal>RCTL</literal> by
	default.</para>

      <note>
	<para>To enable <literal>RACCT</literal> and
	  <literal>RCTL</literal> on a system using the
	  <literal>GENERIC</literal> kernel configuration, add
	  <literal>kern.racct.enable=1</literal> to
	  &man.loader.conf.5;, and reboot the system.</para>
      </note>

      <para revision="283136" contrib="sponsor"
	sponsor="&limelight;">A new &man.sysctl.8;,
	<literal>net.inet.tcp.hostcache.purgenow</literal>, has
	been added, which when set to <literal>1</literal> during
	runtime will flush all
	<literal>net.inet.tcp.hostcache</literal> entries.</para>

      <para revision="285524">A new &man.sysctl.8;,
	<literal>hw.model</literal>, has been added, which displays
	<acronym>CPU</acronym> model information.</para>

      <para revision="286591">The &man.uart.4; driver has been
	updated to allow tuning pulses per second captured in the
	CTS line during runtime, whereas previously only the DCD line
	could be used without rebuilding the kernel.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="drivers">
    <title>Devices and Drivers</title>

    <para>This section covers changes and additions to devices and
      device drivers since &release.prev;.</para>

    <sect2 xml:id="drivers-device">
      <title>Device Drivers</title>

      <para revision="260903">Support for GPS ports has been added to
	&man.uhso.4;.</para>

      <para revision="265132">The &man.full.4; device has been added,
	and the <literal>lindev(4)</literal> device has been removed.
	Prior to this change, <literal>lindev(4)</literal> provided
	only the <filename>/dev/full</filename> character device,
	returning <literal>ENOSPC</literal> on write attempts.  As
	this device is not specific to &linux;, a native &os; version
	has been added.</para>

      <para revision="271705">Hardware context support has been
	added to the <literal>drm/i915</literal> driver, adding
	support for <application>Mesa</application> 9.2 and
	later.</para>

      <para revision="273178">The &man.vt.4; driver has been updated,
	replacing the bitmapped <literal>kern.vt.spclkeys</literal>
	&man.sysctl.8; with individual
	<literal>kern.vt.kbd_*</literal> variants.</para>

      <para revision="273598">The &man.hpet.4; driver has been updated
	to create a
	<filename>/dev/hpet<replaceable>N</replaceable></filename>
	device, providing access to <acronym>HPET</acronym> from
	userspace.</para>

      <para revision="280183">The <literal>drm</literal> code has
	been updated to match &linux; version 3.8.13.</para>

      <para revision="281440">The &man.psm.4; driver has been updated
	to include improved support for newer Synaptics&nbsp;&reg;
	touchpads and the ClickPad&nbsp;&reg; mouse on newer
	Lenovo&nbsp;&trade; laptops.</para>

      <para revision="282783" arch="powerpc">Support for the Freescale
	<acronym>PCI</acronym> Root Complex device has been
	added.</para>

      <para revision="285876">The &man.cyapa.4; driver has been added,
	supporting the Cypress APA I2C trackpad.</para>

      <para revision="285883">The &man.isl.4; driver has been added,
	supporting the Intersil I2C ISL29018 digital ambient light
	sensor.</para>
    </sect2>

    <sect2 xml:id="drivers-storage">
      <title>Storage Drivers</title>

      <para revision="265236" contrib="sponsor"
	sponsor="&lsi;, &spectralogic;" sponsorurl="">The &man.mpr.4;
	device has been added, providing support for LSI Fusion-MPT
	3 12Gb SCSI/SATA controllers.</para>

      <para revision="265555" contrib="sponsor"
	  sponsor="&lsi;">The &man.mrsas.4; driver has been added,
	providing support for LSI MegaRAID SAS controllers.  The
	&man.mfi.4; driver will attach to the controller, by default.
	To enable &man.mrsas.4; add
	<literal>hw.mfi.mrsas_enable=1</literal> to
	<filename>/boot/loader.conf</filename>, which turns off
	&man.mfi.4; device probing.</para>

      <note>
	<para>At this time, the &man.mfiutil.8; utility and the &os;
	  version of <application>MegaCLI</application> and
	  <application>StorCli</application> do not work with
	  &man.mrsas.4;.</para>
      </note>

      <para revision="275461" contrib="sponsor" sponsor="&ix;">The
	&man.ctl.4; subsystem has been updated, increasing the ports
	limit from <literal>128</literal> to <literal>256</literal>,
	and <acronym>LUN</acronym> limit from <literal>256</literal>
	to <literal>1024</literal>.</para>

      <para revision="276526">The <literal>asr(4)</literal> driver has
	been removed, and is no longer supported.</para>

      <para revision="281387">The &man.hptnr.4; driver has been
	updated to version 1.1.1.</para>

      <para revision="285662">The &man.pms.4; driver has been added,
	providing support for the PMC Sierra line of
	<acronym>SAS</acronym>/<acronym>SATA</acronym> host bus
	adapters.</para>

      <para revision="287117" contrib="sponsor"
	sponsor="&emcisilon;">The &man.ioat.4; driver has been added,
	providing support for the <acronym>PSE</acronym> (Platform
	Storage Extension).</para>

      <para revision="287621" contrib="sponsor" sponsor="&ix;">The
	<acronym>CTL</acronym> High Availability implementation has
	been rewritten.</para>

      <para revision="288310">The &man.ctl.4; driver has been updated
	to support CD-ROM and removable devices.</para>

      <para contrib="sponsor" sponsor="&ix;">The &man.isp.4; driver has
	been updated and improved: added support for 16Gbps FC cards,
	improved target mode support, completed Multi-ID (NPIV)
	functionality.</para>
    </sect2>

    <sect2 xml:id="drivers-network">
      <title>Network Drivers</title>

      <para revision="258830">Support for Broadcom chipsets BCM57764,
	BCM57767, BCM57782, BCM57786 and BCM57787 has been added to
	&man.bge.4;.</para>

      <para revision="260448">Support for the &intel; Centrino&trade;
	Wireless-N 135 chipset has been added.</para>

      <para revision="260552">Firmware for &intel; Centrino&trade;
	Wireless-N 105 devices has been added to the base
	system.</para>

      <para revision="261975">The deprecated nve(4) driver has been
	removed.  Users of NVIDIA nForce MCP network adapters are
	advised to use the &man.nfe.4; driver instead, which has been
	the default driver for this hardware since
	&os;&nbsp;7.0.</para>

      <para revision="264601" contrib="sponsor"
	sponsor="&darpa_afrl;">The <literal>if_nf10bmac(4)</literal>
	device has been added, providing support for NetFPGA-10G
	Embedded CPU Ethernet Core.</para>

      <note>
	<para>The <literal>if_nf10bmac(4)</literal> driver operates on
	  the FPGA, and is not suited for the PCI host
	  interface.</para>
      </note>

      <para revision="265348" contrib="sponsor"
	sponsor="&netgate;">The &man.ath.hal.4; driver has been
	updated to support the Atheros AR1111 chipset.</para>

      <para revision="266770">Support for the &intel; Centrino&trade;
	Wireless-N 105 chipset has been added.</para>

      <para revision="266757" contrib="sponsor"
	sponsor="&chelsio;">Support for the &man.cxgbe.4; Terminator
	5 (T5) 10G/40G cards has been added to &man.netmap.4;.</para>

      <para revision="272730">The &man.alc.4; driver has been updated
	to support AR816x and AR817x ethernet controllers.</para>

      <para revision="272906">The &man.pf.4; packet filter default
	hash has been changed from <literal>Jenkins</literal> to
	<literal>Murmur3</literal>, providing a 3-percent performance
	increase in packets-per-second.</para>

      <para revision="273331">The &man.vxlan.4; driver has been added,
	which creates a virtual Layer 2 (Ethernet) network overlaid in
	a Layer 3 (IP/UDP) network.  The &man.vxlan.4; driver is
	analogous to &man.vlan.4;, but is designed to be better suited
	for large, multiple-tenant datacenter environments.</para>

      <para revision="274246" contrib="sponsor" sponsor="&yandex;">The
	&man.gre.4; driver has been significantly overhauled, and has
	been split into two separate modules, &man.gre.4; and
	&man.me.4;.</para>

      <para revision="278551">The &man.ral.4; driver has been updated
	to support the RT5390 and RT5392 chipsets.</para>

      <para revision="283514" contrib="sponsor"
	sponsor="&solarflare;">The &man.sfxge.4; driver has been
	updated to support Solarflare Flareon Ultra 7000-series
	chipsets.</para>

      <para revision="283766" contrib="sponsor"
	sponsor="&limelight;">The &man.em.4; driver has been updated
	with improved transmission queue hang detection.</para>

      <para revision="284125">The &man.cdce.4; driver has been updated
	to include support for the RTL8153 chipset.</para>

      <para revision="286441">The &man.iwm.4; driver has been imported
	from OpenBSD, providing support for &intel; 3160/7260/7265
	wireless chipsets.</para>

      <para revision="286829" contrib="sponsor"
	sponsor="&limelight;">The &man.em.4; driver has been updated
	to allow disabling <acronym>CRC</acronym> stripping.</para>

      <para revision="287222">The &man.pf.4; implementation has been
	updated to remove support for the <literal>scrub fragment
	  crop|drop-ovl</literal> filtering rule.  Systems with this
	rule in &man.pf.conf.5; will implicitly be converted to the
	<literal>scrub fragment reassemble</literal> filtering rule,
	without necessary intervention.</para>

      <para revision="288654">The &man.lagg.4; driver has been updated
	to remove support for the <literal>fec</literal>
	protocol.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="hardware">
    <title>Hardware Support</title>

    <para>This section covers general hardware support for physical
      machines, hypervisors, and virtualization environments, as well
      as hardware changes and updates that do not otherwise fit in
      other sections of this document.</para>

    <sect2 xml:id="hardware-support">
      <title>Hardware Support</title>

      <para revision="268303">The &man.asmc.4; driver has been
	updated to support the &apple;&nbsp;MacMini 3,1.</para>

      <para revision="268351">Support for &os;/ia64 has been dropped
	as of &os;&nbsp;11.</para>

      <para revision="274386">An issue that could cause a system to
	hang when entering <acronym>ACPI</acronym>
	<literal>S3</literal> state (suspend to
	<acronym>RAM</acronym>) has been corrected in the &man.acpi.4;
	and &man.pci.4; drivers.</para>

      <para revision="274733" arch="powerpc">The power management unit
	subsystem has been updated to support power button events on
	certain &arch.powerpc; hardware, such as aluminum
	PowerBook&nbsp;&reg;.</para>

      <para revision="275171,275190" arch="powerpc">The &man.hwpmc.4;
	driver has been updated to correct performance counter
	sampling on G4 (MPC74xxx) and G5 class processors.</para>

      <para revision="275732" contrib="sponsor"
	sponsor="&ff;,&netgate;">The
	<application>OpenCrypto</application> framework has been
	updated to include <literal>AES-ICM</literal> and
	<literal>AES-GCM</literal> modes, both of which have also been
	added to the &man.aesni.4; driver.</para>

      <para revision="281713" arch="powerpc">The &man.hwpmc.4;
	driver has been updated to support the Freescale e500
	core.</para>

      <para revision="283766">The &man.ig4.4; driver has been added,
	providing support for the fourth generation &intel;
	<acronym>I2C</acronym> SMBus.</para>

      <para>The &man.uart.4; driver has been updated to support
	<acronym>AMT</acronym> devices on newer systems.</para>

      <para revision="285316" contrib="sponsor" sponsor="&ff;"
	arch="arm64">Initial <acronym>SMP</acronym> support has been
	added to the &os;/&arch.arm64; port.</para>
    </sect2>

    <sect2 xml:id="hardware-virtualization">
      <title>Virtualization Support</title>

      <para revision="260410">Support for the <quote>Virtual Interrupt
	  Delivery</quote> feature of &intel;&nbsp;VT-x is enabled if
	supported by the CPU.  This feature can be disabled by running
	<literal>sysctl hw.vmm.vmx.use_apic_vid=0</literal>.
	Additionally, to persist this setting across reboots, add
	<literal>hw.vmm.vmx.use_apic_vid=0</literal> to
	<filename>/etc/sysctl.conf</filename>.</para>

      <para revision="260532">Support for <quote>Posted Interrupt
	  Processing</quote> is enabled if supported by the CPU.  This
	feature can be disabled by running <literal>sysctl
	  hw.vmm.vmx.use_apic_pir=0</literal>.  Additionally, to
	persist this setting across reboots, add
	<literal>hw.vmm.vmx.use_apic_pir=0</literal> to
	<filename>/etc/sysctl.conf</filename>.</para>

      <para revision="260582">Unmapped IO support has been added to
	&man.virtio_blk.4;.</para>

      <para revision="260583">Unmapped IO support has been added to
	&man.virtio_scsi.4;.</para>

      <para revision="260847">The &man.virtio_random.4; driver has
	been added to harvest entropy from the host system.</para>

      <para revision="261504">&os;/&arch.i386; guests can be run under
	bhyve.</para>

      <para revision="267536" contrib="sponsor"
	sponsor="&citrix.rd;">Support for running a &os;/&arch.amd64;
	<application>Xen</application> guest instance as
	<acronym>PVH</acronym> guest has been added.
	<acronym>PVH</acronym> mode, short for <quote>Para-Virtualized
	  Hardware</quote>, uses para-virtualized drivers for boot and
	I/O, and uses hardware virtualization extensions for all other
	tasks, without the need for emulation.</para>

      <para revision="273375">The &man.bhyve.8; hypervisor has been
	updated to support &amd; processors with
	<acronym>SVM</acronym> and <acronym>AMD-V</acronym> hardware
	extensions.</para>

      <para revision="273515">The &man.virtio.console.4; driver has
	been added, which provides an interface to VirtIO console
	devices through a &man.tty.4; device.</para>

      <para revision="279957">The &man.bhyve.8; hypervisor has been
	updated to support <literal>DSM TRIM</literal> commands for
	virtual <acronym>AHCI</acronym> disks.</para>

      <para revision="281439" arch="arm">Support for the
	<application>QEMU</application> <literal>virt</literal> system
	has been added.</para>

      <para revision="282212" contrib="sponsor" sponsor="&msostc;">The
	Hyper-V&trade; drivers have been updated with several
	enhancements:</para>

      <itemizedlist>
	<listitem>
	  <para>The &man.hv.vmbus.4; driver now has multi-channel
	    support.</para>
	</listitem>

	<listitem>
	  <para>The &man.hv.storvsc.4; driver now has scatter/gather
	    support, in addition to performance improvements.</para>
	</listitem>

	<listitem>
	  <para>The &man.hv.kvp.4; driver has received several bug
	    fixes.</para>
	</listitem>
      </itemizedlist>

      <para revision="282274">Support for &man.xen.4; para-virtualized
	<literal>domU</literal> kernels has been removed.</para>

      <para revision="284746" contrib="sponsor" sponsor="&msostc;">The
	&man.hv.netvsc.4; driver has been updated to support checksum
	offloading and <acronym>TSO</acronym>.</para>

      <para revision="286062">The &man.xen.4; driver has been updated
	to include support for <literal>blkif</literal> indirect
	segment I/O.</para>
    </sect2>

    <sect2 xml:id="hardware-arm">
      <title>ARM Support</title>

      <para revision="260921">The &man.nand.4; device is enabled for
	ARM devices by default.</para>

      <para revision="266943" arch="arm">Support for the Exynos 5420
	Octa system has been added.</para>

      <para revision="267390" arch="arm">The <acronym>SMP</acronym>
	option has been enabled for all Exynos 5 systems supported by
	&os;.</para>

      <para revision="268838" arch="arm">Support for the Toradex
	Apalis i.MX6 development board has been added.</para>

      <para revision="273264" arch="armv6">An issue that could cause
	instability when detecting <acronym>SD</acronym> cards on the
	Raspberry Pi <acronym>SOC</acronym> has been fixed.</para>

      <para revision="275963">The <literal>bcm2835_cpufreq</literal>
	driver has been added, which supports <acronym>CPU</acronym>
	frequency and voltage control on the Raspberry Pi
	<acronym>SOC</acronym>.</para>

      <para revision="277042" arch="arm">Support to turn off the
	BeagleBone Black system with the &man.shutdown.8;
	<literal>-p</literal> flag or by invoking &man.poweroff.8; has
	been added.</para>

      <para revision="277644" arch="arm">Audio transmission drivers
	have been added for Digital Audio Multiplexer
	(<acronym>AUDMUXM</acronym>), Smart Direct Memory Access
	Controller (<acronym>SDMA</acronym>), and Syncronous Serial
	Interface (<acronym>SSI</acronym>).</para>

      <para revision="280259" contrib="sponsor" sponsor="&ff;">Initial
	support for the ARM AArch64 architecture has been
	added.</para>

      <para revision="282779" arch="arm">Kernel support for Thumb-2
	userland has been added.</para>

      <para revision="282827">Support for the hardware power button
	on the BeagleBone Black system has been added.</para>

      <para revision="284273" contrib="sponsor"
	sponsor="&ff;">Initial
	<acronym>ACPI</acronym> support has been added for
	&os;/&arch.arm64;.</para>

      <para revision="287225">Support for 1-Wire devices has been
	added, providing support for 1-Wire hardware through
	&man.gpio.4;.  See &man.ow.4;, &man.owc.4;, and
	&man.ow.temp.4; for more information.</para>

      <para revision="287371" arch="arm64" contrib="sponsor"
	sponsor="&abt;">Support for the HiSilicon HI6220 SoC has been
	added.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="storage">
    <title>Storage</title>

    <para>This section covers changes and additions to file systems
      and other storage subsystems, both local and networked.</para>

    <sect2 xml:id="storage-general">
      <title>General Storage</title>

      <para revision="278037" contrib="sponsor" sponsor="&ix;">The
	&man.ctl.4; <acronym>LUN</acronym> mapping has been rewritten,
	replacing <acronym>iSCSI</acronym>-specific mapping mechanisms
	with a new mechanism that works for any port.</para>

      <para revision="278354" contrib="sponsor" sponsor="&ix;">The
	&man.ctld.8; utility has been updated to allow controlling
	non-<acronym>iSCSI</acronym> &man.ctl.4; ports.</para>

      <para revision="275681" contrib="sponsor" sponsor="&ff;">The
	&man.autofs.5; subsystem has been updated to include a new
	&man.auto.master.5; map, <literal>-media</literal>, which
	allows automatically mounting removable media, such as
	<acronym>CD</acronym> drives or <acronym>USB</acronym> flash
	drives.</para>

      <para revision="279955" contrib="sponsor" sponsor="&ff;">The
	&man.autofs.5; subsystem has been updated to include a new
	&man.auto.master.5; map, <literal>-noauto</literal>, which
	handles &man.fstab.5; entries set to
	<literal>noauto</literal>.</para>

      <para revision="286444">The <acronym>GELI</acronym> class has
	been updated to support the <literal>BIO_DELETE</literal>
	&man.g.bio.9; <literal>bio_cmd</literal> field, providing
	<acronym>TRIM</acronym>/<acronym>UNMAP</acronym> support on
	<acronym>GELI</acronym>-backed <acronym>SSD</acronym> storage
	providers.</para>
    </sect2>

    <sect2 xml:id="storage-net">
      <title>Networked Storage</title>

      <para revision="270096" contrib="sponsor" sponsor="&ff;">The new
	filesystem automount facility, &man.autofs.5;, has been added.
	The new &man.autofs.5; facility is similar to that found in
	other &unix;-like operating systems, such as OS&nbsp;X&trade;
	and Solaris&trade;.  The &man.autofs.5; facility uses
	a &sun;-compatible &man.auto.master.5; configuration file, and
	is administered with the &man.automount.8; userland utility,
	and the &man.automountd.8; and &man.autounmountd.8;
	daemons.</para>

      <para revision="273849" contrib="sponsor" sponsor="&ff;">Support
	for the <literal>timeo</literal>, <literal>actimeo</literal>,
	<literal>noac</literal>, and <literal>proto</literal> options
	have been added to &man.mount.nfs.8;.</para>
    </sect2>

    <sect2 xml:id="storage-zfs">
      <title>ZFS</title>

      <para revision="275748">The <literal>arc_meta_limit</literal>
	statistics are now visible through the
	<literal>kstat</literal> &man.sysctl.8;.  As a result of this
	change, the <literal>vfs.zfs.arc_meta_used</literal>
	&man.sysctl.8; has been removed, and replaced with the
	<literal>kstat.zfs.misc.arcstats.arc_meta_used</literal>
	&man.sysctl.8;.</para>

      <para revision="287099" contrib="sponsor"
	sponsor="&clusterhq;">The &man.zfs.8; <literal>l2arc</literal>
	code has been updated to take <literal>ashift</literal> into
	account when gathering buffers to be written to the
	<literal>l2arc</literal> device.</para>
    </sect2>

    <sect2 xml:id="storage-geom">
      <title>&man.geom.4;</title>

      <para revision="267359">Support for the
	<literal>disklabel64</literal> partitioning scheme has been
	added to &man.gpart.8;.</para>

      <para revision="282465">Support for the
	<literal>apple-boot</literal>, <literal>apple-hfs</literal>,
	and <literal>apple-ufs</literal> <acronym>MBR</acronym>
	partitioning schemes have been added to &man.gpart.8;.</para>

      <para revision="285594" contrib="sponsor"
	sponsor="&scaleengine;">The &man.gpart.8; utility has been
	updated to include a new attribute for <acronym>GPT</acronym>
	partitions, <literal>lenovofix</literal>, which when set,
	which works around <acronym>BIOS</acronym> compatibility
	issues reported on several Lenovo&nbsp;&trade; laptops.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="boot">
    <title>Boot Loader Changes</title>

    <para>This section covers the boot loader, boot menu, and other
      boot-related changes.</para>

    <sect2 xml:id="boot-loader">
      <title>Boot Loader Changes</title>

      <para revision="258431" contrib="sponsor" sponsor="&ff;">The
	memory test run at boot time on &os;/&arch.amd64; platforms
	has been disabled by default.</para>

      <para revision="262955">A new &man.ttys.5; class,
	<literal>3wire</literal>, has been added.  This is similar to
	the existing terminal classes, but does not have a defined
	baudrate.</para>

      <para revision="274085">The &man.vt.4; driver has been made the
	default system console driver.  The &man.syscons.4; driver is
	still available, and can be enabled by adding
	<literal>kern.vty=sc</literal> in &man.loader.conf.5;.
	Alternatively, &man.syscons.4; can be enabled at boot time by
	entering <literal>set kern.vty=sc</literal> at the
	&man.loader.8; prompt.</para>

      <para revision="279950">Support for <literal>bzipfs</literal>
	has been added to the <acronym>EFI</acronym> loader.</para>

      <para revision="281616">The boot loader has been updated to
	support entering the <acronym>GELI</acronym> passphrase before
	loading the kernel.  To enable this behavior, add
	<literal>geom_eli_passphrase_prompt="YES"</literal> to
	&man.loader.conf.5;.</para>

      <para revision="284683" contrib="sponsor" sponsor="&ff;"
	arch="arm">The &man.ttys.5; file for &os;/&arch.arm; has been
	updated to enable <filename>ttyu1</filename>,
	<filename>ttyu2</filename>, and <filename>ttyu3</filename> by
	default, if the callin port is an active console port.</para>
    </sect2>

    <sect2 xml:id="boot-menu">
      <title>Boot Menu Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="network">
    <title>Networking</title>

    <para>This section describes changes that affect networking in
      &os;.</para>

    <sect2 xml:id="network-protocols">
      <title>Network Protocols</title>

      <para revision="263140">Support for the IPX network transport
	protocol has been removed, and will not be supported in
	&os;&nbsp;11 and later releases.</para>

      <para revision="272720" contrib="sponsor"
	sponsor="&limelight;">Support for <acronym>PLPMTUD</acronym>
	blackhole detection (<acronym>RFC</acronym> 4821) has been
	added to the &man.tcp.4; stack, disabled by default.  New
	control tunables have been added:</para>

      <informaltable frame="none" pgwide="0">
	<tgroup cols="2">
	  <colspec colwidth="1*"/>
	  <colspec colwidth="1*"/>
	  <thead>
	    <row>
	      <entry>Tunable</entry>
	      <entry>Description</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_detection</literal></entry>
	      <entry>Enables or disables <acronym>PLPMTUD</acronym>
		blackhole detection</entry>
	    </row>

	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_mss</literal></entry>
	      <entry><acronym>MSS</acronym> to try for IPv4</entry>
	    </row>

	    <row>
	      <entry><literal>net.inet.tcp.v6pmtud_blackhole_mss</literal></entry>
	      <entry><acronym>MSS to try for IPv6</acronym></entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>

      <para>New monitoring &man.sysctl.8;s haven been added:</para>

      <informaltable frame="none" pgwide="0">
	<tgroup cols="2">
	  <colspec colwidth="1*"/>
	  <colspec colwidth="1*"/>
	  <thead>
	    <row>
	      <entry>Tunable</entry>
	      <entry>Description</entry>
	    </row>
	  </thead>

	  <tbody>
	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_activated</literal></entry>
	      <entry>Number of times the code was activated to attempt
		downshifting the <acronym>MSS</acronym></entry>
	    </row>

	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_min_activated</literal></entry>
	      <entry>Number of times the blackhole
		<acronym>MSS</acronym> was used in an attempt to
		downshift</entry>
	    </row>

	    <row>
	      <entry><literal>net.inet.tcp.pmtud_blackhole_failed</literal></entry>
	      <entry>Number of times that the blackhole failed to
		connect after downshifting the
		<acronym>MSS</acronym></entry>
	    </row>
	  </tbody>
	</tgroup>
      </informaltable>

      <para revision="280971" contrib="sponsor"
	sponsor="&netflix;, &nginx;">Support for <acronym>IP</acronym>
	identification for atomic datagrams (<acronym>RFC</acronym>
	6864) has been added.  Support for this feature can be toggled
	with the <literal>net.inet.ip.rfc6864</literal>
	&man.sysctl.8;, which is enabled by default.</para>

      <para revision="285336" contrib="sponsor"
	sponsor="&netgate;">The <acronym>IPSEC</acronym> has been
	updated to include support for <acronym>AES</acronym> modes on
	both software-only and hardware-backed (&man.aesni.4;)
	systems.</para>

      <para revision="287798" contrib="sponsor" sponsor="&dell;">The
	network stack has been updated to fix handling of
	<acronym>IPv6</acronym> On-Link redirects.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="ports">
    <title>Ports Collection and Package Infrastructure</title>

    <para>This section covers changes to the &os;&nbsp;Ports
      Collection, package infrastructure, and package maintenance and
      installation tools.</para>

    <sect2 xml:id="ports-infrastructure">
      <title>Infrastructure Changes</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="ports-packages ">
      <title>Packaging Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="doc">
    <title>Documentation</title>

    <para>This section covers changes to the &os;&nbsp;Documentation
      Project sources and toolchain.</para>

    <sect2 xml:id="doc-sources">
      <title>Documentation Source Changes</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="doc-toolchain">
      <title>Documentation Toolchain Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="releng">
    <title>Release Engineering and Integration</title>

    <para>This section convers changes that are specific to the
      &os;&nbsp;Release Engineering processes.</para>

    <sect2 xml:id="releng-changes">
      <title>Integration Changes</title>

      <para revision="277458" contrib="sponsor" sponsor="&ff;">The
	Release Engineering build tools have been updated to include
	support for producing virtual machine disk images for various
	cloud hosting providers.</para>

      <para revision="278926">The Release Engineering build tools have
	been updated to use multi-threaded &man.xz.1;.  By default,
	the number of &man.xz.1; threads is set to the number of cores
	available.</para>

      <para revision="281802" contrib="sponsor" sponsor="&ff;">The
	Release Engineering build tools have been updated to include
	support for building &os;/&arch.arm64; virtual machine and
	memory stick installation images.</para>

      <para revision="282693" contrib="sponsor" sponsor="&ff;">The
	Release Engineering build tools have been updated to support
	building &os;/&arch.arm; images without external utilities for
	supported boards where a corresponding
	<literal>u-boot</literal> port exists in the Ports
	Collection.</para>

      <para revision="283307" contrib="sponsor" sponsor="&ff;">The
	&os;/&arch.i386; memory stick installation images are now
	created using the &man.mkimg.1; utility, matching the way
	the &os;/&arch.amd64; images are created.</para>
    </sect2>
  </sect1>
</article>