Document r286750, zoneinfo update to 2015f.

[FreeBSD/FreeBSD.git] / release / doc / en_US.ISO8859-1 / relnotes / article.xml

<?xml version="1.0" encoding="iso-8859-1"?>
<!DOCTYPE article PUBLIC "-//FreeBSD//DTD DocBook XML V5.0-Based Extension//EN"
        "../../../share/xml/freebsd50.dtd" [
<!ENTITY % release PUBLIC "-//FreeBSD//ENTITIES Release Specification//EN" "release.ent">
 %release;
<!ENTITY % sponsor PUBLIC "-//FreeBSD//ENTITIES Sponsor Specification//EN" "sponsor.ent">
 %sponsor;
<!ENTITY % vendor PUBLIC "-//FreeBSD//ENTITIES Vendor Specification//EN" "vendor.ent">
 %vendor;
<!ENTITY security SYSTEM "../../share/xml/security.xml">
<!ENTITY errata SYSTEM "../../share/xml/errata.xml">
]>
<article xmlns="http://docbook.org/ns/docbook"
  xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0">

  <info>
    <title>&os; &release.current; Release Notes</title>

    <author>
      <orgname>The &os; Project</orgname>
    </author>

    <pubdate>$FreeBSD$</pubdate>

    <!-- Last rev: 284814 -->

    <copyright>
      <year>2015</year>
      <holder role="mailto:doc@FreeBSD.org">The &os; Documentation
        Project</holder>
    </copyright>

    <legalnotice xml:id="trademarks" role="trademarks">
      &tm-attrib.freebsd;
      &tm-attrib.ibm;
      &tm-attrib.ieee;
      &tm-attrib.intel;
      &tm-attrib.sparc;
      &tm-attrib.general;
    </legalnotice>

    <abstract>
      <para>The release notes for &os; &release.current; contain
        a summary of the changes made to the &os; base system on the
        &release.branch; development line.  This document lists
        applicable security advisories that were issued since the last
        release, as well as significant changes to the &os; kernel and
        userland.  Some brief remarks on upgrading are also
        presented.</para>
    </abstract>
  </info>

  <sect1 xml:id="intro">
    <title>Introduction</title>

    <para>This document contains the release notes for &os;
      &release.current;.  It describes recently added, changed, or
      deleted features of &os;.  It also provides some notes on
      upgrading from previous versions of &os;.</para>

    <para releasetype="current">The &release.type; distribution to
      which these release notes apply represents the latest point
      along the &release.branch; development branch since
      &release.branch; was created.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
        xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="snapshot">The &release.type; distribution to
      which these release notes apply represents a point along the
      &release.branch; development branch between &release.prev; and
      the future &release.next;.  Information regarding pre-built,
      binary &release.type; distributions along this branch can be
      found at <uri
        xlink:href="&release.url;">&release.url;</uri>.</para>

    <para releasetype="release">This distribution of &os;
      &release.current; is a &release.type; distribution.  It can be
      found at <uri xlink:href="&release.url;">&release.url;</uri> or
      any of its mirrors.  More information on obtaining this (or
      other) &release.type; distributions of &os; can be found in the
      <link
        xlink:href="&url.books.handbook;/mirrors.html"><quote>Obtaining
          &os;</quote> appendix</link> to the <link
        xlink:href="&url.books.handbook;/">&os;
        Handbook</link>.</para>

    <para>All users are encouraged to consult the release errata
      before installing &os;.  The errata document is updated with
      <quote>late-breaking</quote> information discovered late in the
      release cycle or after the release.  Typically, it contains
      information on known bugs, security advisories, and corrections
      to documentation.  An up-to-date copy of the errata for &os;
      &release.current; can be found on the &os; Web site.</para>

    <para>This document describes the most user-visible new or changed
      features in &os; since &release.prev;.  In general, changes
      described here are unique to the &release.branch; branch unless
      specifically marked as &merged; features.</para>

    <para>Typical release note items document recent security
      advisories issued after &release.prev;, new drivers or hardware
      support, new commands or options, major bug fixes, or
      contributed software upgrades.  They may also list changes to
      major ports/packages or release engineering practices.  Clearly
      the release notes cannot list every single change made to &os;
      between releases; this document focuses primarily on security
      advisories, user-visible changes, and major architectural
      improvements.</para>
  </sect1>

  <sect1 xml:id="upgrade">
    <title>Upgrading from Previous Releases of &os;</title>

    <para arch="amd64,i386">Binary upgrades between RELEASE versions
      (and snapshots of the various security branches) are supported
      using the &man.freebsd-update.8; utility.  The binary upgrade
      procedure will update unmodified userland utilities, as well as
      unmodified GENERIC kernels distributed as a part of an official
      &os; release.  The &man.freebsd-update.8; utility requires that
      the host being upgraded have Internet connectivity.</para>

    <para>Source-based upgrades (those based on recompiling the &os;
      base system from source code) from previous versions are
      supported, according to the instructions in
      <filename>/usr/src/UPDATING</filename>.</para>

    <important>
      <para>Upgrading &os; should only be attempted after backing up
        <emphasis>all</emphasis> data and configuration files.</para>
    </important>
  </sect1>

  <sect1 xml:id="security-errata">
    <title>Security and Errata</title>

    <para>This section lists the various Security Advisories and
      Errata Notices since &release.prev;.</para>

    <sect2 xml:id="security">
      <title>Security Advisories</title>

      &security;
    </sect2>

    <sect2 xml:id="errata">
      <title>Errata Notices</title>

      &errata;
    </sect2>
  </sect1>

  <sect1 xml:id="userland">
    <title>Userland</title>

    <para>This section covers changes and additions to userland
      applications, contributed software, and system utilities.</para>

    <sect2 xml:id="userland-config">
      <title>Userland Configuration Changes</title>

      <para revision="266463">The default &man.newsyslog.conf.5; now
        includes files in the
        <filename>/etc/newsyslog.conf.d/</filename> and
        <filename>/usr/local/etc/newsyslog.conf.d/</filename>
        directories by default for &man.newsyslog.8;.</para>

      <para revision="270675">The &man.mailwrapper.8; utility has been
        updated to use &man.mailer.conf.5; from the
        <literal>LOCALBASE</literal> environment variable, which
        defaults to <filename class="directory">/usr/local</filename>
        if unset.</para>

      <para revision="272350">The <literal>MK_ARM_EABI</literal>
        &man.src.conf.5; option has been removed.</para>

      <para revision="285169">The <application>ntp</application> suite
        has been updated to version 4.2.8p3.</para>
    </sect2>

    <sect2 xml:id="userland-programs">
      <title>Userland Application Changes</title>

      <para revision="258838" contrib="sponsor" sponsor="&ff;,
        &google;" sponsorurl="">The &man.casperd.8; daemon has been
        added, which provides access to functionality that is not
        available in the <quote>capability mode</quote>
        sandbox.</para>

      <para revision="260594">When unable to load a kernel module with
        &man.kldload.8;, a message informing to view output of
        &man.dmesg.8; is now printed, opposed to the previous output
        <quote>Exec format error.</quote>.</para>

      <para revision="260910">Allow &man.pciconf.8; to identify PCI
        devices that are attached to a driver to be identified by
        their device name instead of just the selector.  Additionally,
        an optional device argument to the <literal>-l</literal> flag
        to restrict the output to only listing details about a single
        device.</para>

      <para revision="260913">A new flag, <quote>onifconsole</quote>
        has been added to <filename>/etc/ttys</filename>.  This allows
        the system to provide a login prompt via serial console if the
        device is an active kernel console, otherwise it is equivalent
        to <literal>off</literal>.</para>

      <para revision="260926">Support for displaying VPD for PCI
        devices via &man.pciconf.8; has been added.</para>

      <para revision="261498">&man.ping.8; protects against malicious
        network packets using the Capsicum framework to drop
        privileges.</para>

      <para revision="265229">The &man.ps.1; utility has been
        updated to include the <literal>-J</literal> flag, used to
        filter output by matching &man.jail.8; IDs and names.
        Additionally, argument <literal>0</literal> can be used to
        <literal>-J</literal> to only list processes running on the
        host system.</para>

      <para revision="265249">The &man.top.1; utility has been updated
        to filter by &man.jail.8; ID or name, in followup to the
        &man.ps.1; change in <literal>r265229</literal>.</para>

      <para revision="266209">The &man.pmcstat.8; utility has been
        updated to include a new flag, <literal>-l</literal>, which
        ends event collection after the specified number of
        seconds.</para>

      <para revision="270745">The &man.ps.1; utility has been updated
        to include a new keyword, <quote>tracer</quote>, which
        displays the <acronym>PID</acronym> of the tracing
        process.</para>

      <para revision="271482">Support for adding empty partitions has
        been added to the &man.mkimg.1; utility.</para>

      <para revision="272166">The &man.primes.6; utility has been
        updated to correctly enumerate prime numbers between
        <literal>4295098369</literal> and
        <literal>3825123056546413050</literal>, which prior to this
        change, it would be possible for returned values to be
        incorrectly identified as prime numbers.</para>

      <para revision="272198">The &man.mkimg.1; utility has been
        updated to include three options used to print information
        about &man.mkimg.1; itself:</para>

      <informaltable frame="none" pgwide="0">
        <tgroup cols="2">
          <colspec colwidth="1*"/>
          <colspec colwidth="1*"/>
          <thead>
            <row>
              <entry>Option</entry>
              <entry>Output</entry>
            </row>
          </thead>

          <tbody>
            <row>
              <entry><literal>--version</literal></entry>
              <entry>The current version of the &man.mkimg.1;
                utility</entry>
            </row>

            <row>
              <entry><literal>--formats</literal></entry>
              <entry>The disk image file formats supported by
                &man.mkimg.1;</entry>
            </row>

            <row>
              <entry><literal>--schemes</literal></entry>
              <entry>The partition schemes supported by
                &man.mkimg.1;</entry>
            </row>
          </tbody>
        </tgroup>
      </informaltable>

      <para revision="272488">Userland &man.ctf.5; support in
        &man.dtrace.1; has been added.  With this change,
        &man.dtrace.1; is able to resolve type info for function and
        <acronym>USDT</acronym> probe arguments, and function return
        values.</para>

      <para revision="274960">The &man.elfdump.1; utility has been
        updated to support capability mode provided by
        &man.capsicum.4;.</para>

      <para revision="275680" contrib="sponsor" sponsor="&ff;">The
        &man.fstyp.8; utility has been added, which is used to
        determine the filesystem on a specified device.</para>

      <para revision="276881">The <literal>libedit</literal> library
        has been updated to support <acronym>UTF</acronym>-8, which
        additionally provides unicode support to &man.sh.1;.</para>

      <para revision="276893" contrib="sponsor" sponsor="&ff;">The
        &man.mkimg.1; utility has been updated to support the
        <acronym>MBR</acronym> <acronym>EFI</acronym> partition
        type.</para>

      <para revision="277166" arch="powerpc">The &man.ptrace.2; system
        call has been updated include support for Altivec registers on
        &os;/&arch.powerpc;.</para>

      <para revision="278320">A new device control utility,
        &man.devctl.8; has been added, which allows making
        administrative changes to individual devices, such as
        attaching and detaching drivers, and enabling and disabling
        devices.  The &man.devctl.8; utility uses the new
        &man.devctl.3; library.</para>

      <para revision="279122" contrib="sponsor"
        sponsor="&juniper;">The &man.netstat.1; utility has been
        updated to link against the &man.libxo.3; shared
        library.</para>

      <para revision="279139">A new flag, <literal>-c</literal>, has
        been added to the &man.mkimg.1; utility, which allows
        specifying the capacity of the target disk image.</para>

      <para revision="279315" contrib="sponsor" sponsor="&ff;">The
        &man.uefisign.8; utility has been added.</para>

      <para revision="279571" contrib="sponsor"
        sponsor="&scaleengine;">The &man.freebsd-update.8; utility has
        been updated to prevent fetching updated binary patches when
        a previous upgrade has not been thoroughly completed.</para>

      <para revision="280870">A regression in the &man.libarchive.3;
        library that would prevent a directory from being included in
        the archive when <literal>--one-file-system</literal> is used
        has been fixed.</para>

      <para revision="281311" contrib="sponsor" sponsor="&ff;">The
        &man.ar.1; utility has been updated to set
        <literal>ARCHIVE_EXTRACT_SECURE_SYMLINKS</literal> and
        <literal>ARCHIVE_EXTRACT_SECURE_NODOTDOT</literal> to disallow
        directory traversal when extracting an archive, similar to
        &man.tar.1;.</para>

      <para revision="281617">A race condition in &man.wc.1; that
        would cause final results to be sent to &man.stderr.4; when
        receiving the <literal>SIGINFO</literal> signal has been
        fixed.</para>

      <para revision="282208" contrib="sponsor"
        sponsor="&multiplay;">The &man.chflags.1;, &man.chgrp.1;,
        &man.chmod.1;, and &man.chown.8; utilities now affect symbolic
        links when the <literal>-R</literal> flag is specified, as
        documented in &man.symlink.7;.</para>

      <para revision="282608">The &man.date.1; utility has been
        updated to print the modification time of the file passed as
        an argument to the <literal>-r</literal> flag, improving
        compatibility with the <acronym>GNU</acronym> &man.date.1;
        utility behavior.</para>

      <para revision="283961">The &man.pw.8; utility has been updated
        with a new flag, <literal>-R</literal>, that sets the root
        directory within which the utility will operate.</para>

      <para revision="284297" contrib="sponsor"
        sponsor="&clusterhq;">The &man.lockstat.1; utility has been
        updated with several improvements:</para>

      <itemizedlist>
        <listitem>
          <para>Spin locks are now reported as the amount of time
            spinning, instead of loop iterations.</para>
        </listitem>

        <listitem>
          <para>Reader locks are now recognized as adaptive that can
            spin on &os;.</para>
        </listitem>

        <listitem>
          <para>Lock aquisition events for successful reader try-lock
            events are now reported.</para>
        </listitem>

        <listitem>
          <para>Spin and block events are now reported before lock
            acquisition events.</para>
        </listitem>
      </itemizedlist>

      <para revision="284589" contrib="sponsor"
        sponsor="&scaleengine;">The &man.fstyp.8; utility has been
        updated to be able to detect &man.zfs.8; and &man.geli.8;
        filesystems.</para>

      <para revision="284883">The &man.mkimg.1; utility has been
        updated to include support for <literal>NTFS</literal>
        filesystems in both <acronym>MBR</acronym> and
        <acronym>GPT</acronym> partitioning schemes.</para>

      <para revision="285253">The &man.quota.1; utility has been
        updated to include support for <acronym>IPv6</acronym>.</para>

      <para revision="285420">The &man.jail.8; utility has been
        updated to include a new flag, <literal>-l</literal>, which
        ensures a clean environment in the target jail when used.
        Additionally, &man.jail.8; will run a shell within the target
        jail when run no commands are specified.</para>

      <para revision="285550">The &man.w.1; utility has been updated
        to display the full IPv6 remote address of the host from which
        a user is connected.</para>

      <para revision="285685">The &man.jail.8; framework has been
        updated to allow mounting &man.linprocfs.5; and
        &man.linsysfs.5; within a jail.</para>

      <para revision="285772" contrib="sponsor"
        sponsor="&emcisilon;">The &man.patch.1; utility has been
        updated to include a new option to the <literal>-V</literal>
        flag, <literal>none</literal>, which disables backup file
        creation when applying a patch.</para>

      <para revision="286010" contrib="sponsor" sponsor="&ff;">The
        &man.ar.1; utility now enables deterministic mode
        (<literal>-D</literal>) by default.  This behavior can be
        disabled by specifying the <literal>-U</literal> flag.</para>

      <para revision="286289" contrib="sponsor"
        sponsor="&scaleengine;">The &man.xargs.1; utility has been
        updated to allow specifying <literal>0</literal> as an
        argument to the <literal>-P</literal> (parallel mode) flag,
        which allows creating as many concurrent processes as
        possible.</para>
    </sect2>

    <sect2 xml:id="userland-contrib">
      <title>Contributed Software</title>

      <para revision="258884" contrib="sponsor"
        sponsor="&darpa_afrl;">&man.lldb.1; has been updated to
        upstream snapshot version r196259.</para>

      <para revision="260445">&man.byacc.1; has been updated to
        version 20140101.</para>

      <para revision="261071">&man.jemalloc.3; has been updated to
        version 3.5.0.</para>

      <para revision="261283"><application>libc++</application> has
        been updated to version 3.4.</para>

      <para revision="261320"><application>OpenSSH</application> has
        been updated to 6.5p1.</para>

      <para revision="261344"><application>mdocml</application> has
        been updated to version 1.12.3.</para>

      <para revision="261991"><application>LLVM</application> and
        <application>Clang</application> have been updated to
        version 3.4.</para>

      <para revision="275718">The <application>binutils</application>
        suite of utilities has been updated to include upstream
        patches that add new relocations for &arch.powerpc;
        support.</para>

      <para revision="276398" contrib="sponsor" sponsor="&ff;">The
        <application>ELF Tool Chain</application> has been updated to
        upstream revision r3136.</para>

      <para revision="276551">The <application>texinfo</application>
        utility and <literal>info</literal> pages were removed from
        the base system.  The <filename
          role="package">print/texinfo</filename> port should be
        installed on systems where <literal>info</literal> pages are
        needed.</para>

      <para revision="276796" contrib="sponsor" sponsor="&ff;">The ELF
        object manipulation tools
        <application>addr2line</application>,
        <application>elfcopy (strip)</application>,
        <application>nm</application>,
        <application>readelf</application>,
        <application>size</application>, and
        <application>strings</application> were switched to the
        versions from the ELF Tool Chain project.</para>

      <para revision="276881">The <literal>libedit</literal> library
        has been updated to include <acronym>UTF-8</acronym> support,
        adding <acronym>UTF-8</acronym> support to the &man.sh.1;
        shell.</para>

      <para revision="278433">The &man.xz.1; utility has been updated
        to support multi-threaded compression.</para>

      <para revision="280932" contrib="sponsor" sponsor="&ff;">The
        <application>elftoolchain</application> utilities have been
        updated to version 3179.</para>

      <para revision="281316">The &man.xz.1; utility has been updated
        to version 5.2.1.</para>

      <para revision="281373">The &man.nvi.1; utility has been updated
        to version 2.1.3.</para>

      <para revision="281806">The &man.wpa.supplicant.8; and
        &man.hostapd.8; utilities have been updated to version
        2.4.</para>

      <para revision="282089">The &man.unbound.8; utility has been
        updated to version 1.5.3.</para>

      <para revision="282434" contrib="sponsor" sponsor="&ff;">The
        &man.resolvconf.8; utility has been updated to version
        3.7.0.</para>

      <para revision="282613">The &man.nc.1; utility has been updated
        to the OpenBSD 5.7 version.</para>

      <para revision="284237">The &man.file.1; utility has been
        updated to version 5.23.</para>

      <para revision="284254"><application>bmake</application> has
        been updated to version 20150606.</para>

      <para revision="285229"><application>sendmail</application> has
        been updated to 8.15.2.  Starting with &os;&nbsp;11.0 and
        sendmail 8.15, sendmail uses uncompressed IPv6 addresses by
        default, i.e., they will not contain <quote>::</quote>.  For
        example, instead of <quote>::1</quote>, it will be
        <quote>0:0:0:0:0:0:0:1</quote>.  This permits a zero subnet to
        have a more specific match, such as different map entries for
        IPv6:0:0 versus IPv6:0.  This change requires that
        configuration data (including maps, files, classes, custom
        ruleset, etc.) must use the same format, so make certain such
        configuration data is upgrading.  As a very simple check
        search for patterns like 'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'.
        To return to the old behavior, set the m4 option
        <literal>confUSE_COMPRESSED_IPV6_ADDRESSES</literal> or the cf
        option <literal>UseCompressedIPv6Addresses</literal>.</para>

      <para revision="285275">The &man.tcpdump.1; utility has been
        updated to version 4.7.4.</para>

      <para revision="285329"><application>OpenSSL</application> has
        been updated to version 1.0.1p.</para>

      <para revision="285642" contrib="sponsor" sponsor="&dell;">The
        &man.ssh.1; utility has been updated to re-implement hostname
        canonicalization before locating the host in
        <filename>known_hosts</filename>.</para>

      <para revision="285972">The &man.libarchive.3; library has been
        updated to properly skip a sparse file entry in a &man.tar.1;
        file, which would previously produce errors.</para>

      <para revision="286503">The <application>apr</application>
        library used by &man.svnlite.1; has been updated to version
        1.5.2.</para>

      <para revision="286505">The <application>serf</application>
        library used by &man.svnlite.1; has been updated to version
        1.3.8.</para>

      <para revision="286505">The &man.svnlite.1; utility has been
        updated to version 1.8.14.</para>

      <para revision="286510">The <application>sqlite3</application>
        library used by &man.svnlite.1; and &man.kerberos.8; has been
        updated to version 3.8.11.1.</para>

      <para revision="286750">Timezone data files have been updated to
        version 2015f.</para>

      <para revision="287168">The &man.acpi.4; subsystem has been
        updated to version 20150818.</para>
    </sect2>

    <sect2 xml:id="userland-installer">
      <title>Installation and Configuration Tools</title>

      <para revision="271539">The &man.bsdinstall.8; partition editor
        and &man.sade.8; utility have been updated to include native
        <acronym>ZFS</acronym> support.</para>

      <para revision="272274">The &os; installation utility,
        &man.bsdinstall.8;, has been updated to set the
        <literal>canmount</literal> &man.zfs.8; property to
        <literal>off</literal> for the <filename
          class="directory">/var</filename> dataset, preventing the
        contents of directories within <filename
          class="directory">/var</filename> from conflicting when
        using multiple boot environments, such as that provided by
        <filename role="package">sysutils/beadm</filename>.</para>

      <para revision="274394">The &man.bsdconfig.8; utility has been
        updated to skip the initial &man.tzsetup.8;
        <acronym>UTC</acronym> versus wall-clock time prompt when run
        in a virtual machine, determined when the
        <literal>kern.vm_guest</literal> &man.sysctl.8; is set to
        <literal>1</literal>.</para>

      <para revision="275874">The &man.bsdinstall.8; utility has been
        updated to use the new &man.dpv.3; library to display progress
        when extracting the &os; distributions.</para>

      <para revision="285557" contrib="sponsor"
        sponsor="&scaleengine;">Support for detecting and implementing
        aligning partitions on 1Mb boundaries has been added to
        &man.bsdinstall.8;.</para>

      <para revision="285679" contrib="sponsor"
        sponsor="&scaleengine;">Support for detecting and implementing
        a workaround for various laptops and motherboards that do not
        boot properly from <acronym>GPT</acronym>-partitioned disks
        has been added to &man.bsdinstall.8;.  Additionally, the
        <literal>active</literal> flag will be set on the partition
        when needed.</para>

      <para revision="285679" contrib="sponsor"
        sponsor="&scaleengine;">Support for selecting the partitioning
        scheme when installing on the <acronym>UFS</acronym>
        filesystem has been added to &man.bsdinstall.8;.</para>
    </sect2>

    <sect2 xml:id="userland-rc">
      <title><filename class="directory">/etc/rc.d</filename>
        Scripts</title>

      <para revision="270676">The &man.rc.8; subsystem has been
        updated to allow configuring services in <filename
          class="directory">&dollar;{LOCALBASE}/etc/rc.conf.d/</filename>.
        If <literal>LOCALBASE</literal> is unset, it defaults to
        <filename class="directory">/usr/local</filename>.</para>

      <para revision="273955">A new &man.rc.8; script,
        <filename>growfs</filename>, has been added, which will resize
        the root filesystem on boot if <filename>/firstboot</filename>
        exists.</para>

      <para revision="275299">The <filename>mrouted</filename>
        &man.rc.8; script has been removed from the base system.  An
        equivalent script is available from the <filename
          role="package">net/mrouted</filename> port.</para>

      <para revision="279463" contrib="sponsor"
        sponsor="&sandvine;">A new &man.rc.8; script,
        <filename>iovctl</filename>, has been added, which allows
        automatically starting the &man.iovctl.8; utility at
        boot.</para>
    </sect2>

    <sect2 xml:id="userland-periodic">
      <title><filename class="directory">/etc/periodic</filename>
        Scripts</title>

      <para revision="271321">The daily &man.periodic.8; script
        <filename>110.clean-tmps</filename> has been updated to avoid
        crossing filesystem mount boundaries when cleaning files in
        <filename class="directory">/tmp</filename>.</para>

      <para revision="277216" contrib="sponsor" sponsor="&ff;">A new
        &man.periodic.8; script,
        <filename>510.status-world-kernel</filename>, has been added,
        which evaluates the running userland and kernel versions from
        the &man.uname.1; <literal>-U</literal> and
        <literal>-K</literal> arguments, and prints an error if the
        system userland and kernel are not in sync.</para>
    </sect2>

    <sect2 xml:id="userland-libraries">
      <title>Runtime Libraries and API</title>

      <para revision="265995">The Blowfish &man.crypt.3; default
        format has been changed to
        <literal>&dollar;2b&dollar;</literal>.</para>

      <para revision="268461">The &man.readline.3; library is now
        statically linked in software within the base system, and the
        shared library is no longer installed, allowing the Ports
        Collection to use a modern version of the library.</para>

      <para revision="272273">The &man.strptime.3; library has been
        updated to add support for <acronym>POSIX</acronym>-2001
        features <literal>%U</literal> and
        <literal>%W</literal>.</para>

      <para revision="272842,272848" contrib="sponsor"
        sponsor="&ff;">The &man.dl.iterate.phdr.3; library has been
        changed to always return the path name of the
        <acronym>ELF</acronym> object in the
        <literal>dlpi_name</literal> structure member.</para>

      <para revision="273562" contrib="sponsor"
        sponsor="&juniper;">The &man.libxo.3; library has been
        imported to the base system.</para>

      <para revision="273806" contrib="sponsor" sponsor="&chelsio;">A
        userland library for Chelsio Terminator 5 based iWARP cards
        has been added, allowing userland <acronym>RDMA</acronym>
        applications to work over compatible
        <acronym>NIC</acronym>s.</para>

      <para revision="274987">The &man.gpio.3; library has been added,
        providing a wrapper around the &man.gpio.4; kernel
        interface.</para>

      <para revision="275800" contrib="sponsor" sponsor="&ff;">The
        &man.procctl.2; system call has been updated to include
        a facility for non-&man.init.8; processes to be declared as
        the reaper of child processes and their decendants.</para>

      <para revision="277610">The <literal>futimens()</literal> and
        <literal>utimensat()</literal> system calls have been
        added.  See &man.utimensat.2; for more information.</para>

      <para revision="278934">The &man.elf.3; compile-time dependency
        has been removed from <filename>dtri.o</filename>, which
        allows adding <application>DTrace</application> probes to
        userland applications and libraries without also linking
        against &man.elf.3;.</para>

      <para revision="279186">The &man.setmode.3; function has been
        updated to consistently set <literal>errno</literal> on
        failure.</para>

      <para revision="279663">The &man.qsort.3; functions have been
        updated to be able to handle 32-bit aligned data on 64-bit
        platforms, also providing a significant improvement in 32-bit
        workloads.</para>

      <para revision="281130">Several standard include headers have
        been updated to use of <application>gcc</application>
        attributes, such as <literal>__result_use_check()</literal>,
        <literal>__alloc_size()</literal>, and
        <literal>__nonnull()</literal>.</para>

      <para revision="281845">Support for file verification in
        <acronym>MAC</acronym> has been added.</para>

      <para revision="282973" contrib="sponsor" sponsor="&ff;">The
        <literal>libgomp</literal> library is now only built when
        building <acronym>GCC</acronym> from the base system.  An
        up-to-date version is available in the Ports Collection as
        <filename
          role="package">devel/libiomp5-devel</filename>.</para>

      <para revision="282988">The <filename>stdlib.h</filename> and
        <filename>malloc.h</filename> headers have been updated to
        make use of the <application>gcc</application>
        <literal>alloc_align()</literal> attribute.</para>

      <para revision="284483" contrib="sponsor"
        sponsor="&scaleengine;">The Blowfish &man.crypt.3; library
        has been updated to support &dollar;2y&dollar; hashes.</para>

      <para revision="285277">The &man.execl.3; and &man.execlp.3;
        library functions have been updated to use the
        <literal>__sentinel</literal> <application>gcc</application>
        attribute.</para>
    </sect2>

    <sect2 xml:id="userland-abi">
      <title>ABI Compatibility</title>

      <para revision="271982">The &linux; compatibility version has
        been updated to <literal>2.6.18</literal>.  The
        <literal>compat.linux.osrelease</literal> &man.sysctl.8; is
        evaluated when building the <filename
          role="package">emulators/linux-c6</filename> and related
        ports.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="kernel">
    <title>Kernel</title>

    <para>This section covers changes to kernel configurations, system
      tuning, and system control parameters that are not otherwise
      categorized.</para>

    <sect2 xml:id="kernel-bugfix">
      <title>Kernel Bug Fixes</title>

      <para revision="265876">A kernel bug that inhibited proper
        functionality of the <literal>dev.cpu.0.freq</literal>
        &man.sysctl.8; on &intel; processors with Turbo
        Boost&nbsp;&trade; enabled has been fixed.</para>

      <para revision="271697" arch="powerpc">Support for
        &man.dtrace.1; stack tracing has been fixed for
        &os;/&arch.powerpc;, using the <literal>trapexit()</literal>
        and <literal>asttrapexit()</literal> functions instead of
        checking within addressed kernel space.</para>

      <para revision="271917">A kernel panic triggered when destroying
        a &man.vnet.9; &man.jail.8; configured with &man.gif.4; has
        been fixed.</para>

      <para revision="271918">A kernel panic triggered when destroying
        a &man.vnet.9; &man.jail.8; configured with &man.gre.4; has
        been fixed.</para>

      <para revision="272089">A bug in &man.ipfw.4; that could
        potentially lead to a kernel panic when using &man.dummynet.4;
        at layer 2 has been fixed.</para>

      <para revision="280930" contrib="sponsor" sponsor="&mitail;">The
        kernel <acronym>RPC</acronym> has been updated to include
        several enhancements:</para>

      <itemizedlist>
        <listitem>
          <para>The 45 MiB limit on requests queued for
            &man.nfsd.8; threads has been removed.</para>
        </listitem>

        <listitem>
          <para>Avoids unnecessary throttling by not deferring
            accounting for completed requests.</para>
        </listitem>

        <listitem>
          <para>Fixes an integer overflow and signedness bugs.</para>
        </listitem>
      </itemizedlist>

      <para revision="281261" arch="powerpc">Support for
        &man.dtrace.1; has been added for the
        Book-E&nbsp;&trade;.</para>
    </sect2>

    <sect2 xml:id="kernel-config">
      <title>Kernel Configuration</title>

      <para revision="266531">The <literal>IMAGACT_BINMISC</literal>
        kernel configuration option has been enabled by default,
        which enables application execution through emulators, such
        as <application>Qemu</application>.</para>

      <para revision="268045">The <literal>VT</literal> kernel
        configuration file has been removed, and the &man.vt.4;
        driver is included in the <literal>GENERIC</literal> kernel.
        To enable &man.vt.4;, enter <literal>set kern.vty=vt</literal>
        at the &man.loader.8; prompt during boot, or add
        <literal>kern.vty=vt</literal> to &man.loader.conf.5; and
        reboot the system.</para>

      <para revision="277904">The &man.config.8; utility has been
        updated to allow using a non-standard <filename
          class="directory">src/</filename> tree, specified as an
        argument to the <literal>-s</literal> flag.</para>

      <para revision="277990" arch="powerpc64">The
        &os;/&arch.powerpc64; kernel now builds as
        a position-independent executable, allowing the kernel to be
        loaded into and run from any physical or virtual
        address.</para>

      <important>
        <para>This change requires an update to &man.loader.8;.
          The userland and kernel must be updated before rebooting the
          system.</para>
      </important>

      <para revision="278338" arch="arm">A new module for creating
        <filename>rpi.dtb</filename> has been added for the Raspberry
        Pi.</para>

      <para revision="278340" arch="arm">The
        <filename>rpi.dtb</filename> module is now installed to
        <filename class="directory">/boot/dtb/</filename> by
        default for the Raspberry Pi system.</para>

      <para revision="279189" contrib="sponsor" sponsor="&ff;"
        arch="powerpc">Kernel support for Vector-Scalar eXtension
        (<acronym>VSX</acronym>) found on POWER7 and POWER8 hardware
        has been added.</para>

      <para revision="279252" contrib="sponsor" sponsor="&ff;"
        arch="powerpc">The &man.pmap.9; implementation for 64-bit
        &powerpc; processors has been overhaulded to improve
        concurrency.</para>

      <para revision="279824" arch="arm">A new module for creating
        the <filename>dtb</filename> module for AM335x systems has
        been added.</para>

      <para revision="281495" contrib="sponsor" sponsor="&ff;">The
        <literal>PAE_TABLES</literal> kernel configuration option has
        been added for &os;/&arch.i386;, which instructs &man.pmap.9;
        to use <acronym>PAE</acronym> format for page tables while
        maintaining a 32-bit physical address size elsewhere in the
        kernel.  The use of this option can enhance application-level
        security by enabling the creation of <quote>no execute</quote>
        mappings on modern &arch.i386; processors.  Unlike the
        <literal>PAE</literal> option, <literal>PAE_TABLES</literal>
        preserves kernel binary interface (<acronym>KBI</acronym>)
        compatibility with non-<literal>PAE</literal> kernels,
        allowing non-<literal>PAE</literal> kernel modules and drivers
        to work with a <literal>PAE_TABLES</literal>-enabled kernel.
        Additionally, system limits are tuned for 4GB maximum
        <acronym>RAM</acronym>, avoiding kernel virtual address space
        (<acronym>KVA</acronym>) exhaustion.</para>

      <para revision="282215">The <literal>SIFTR</literal> kernel
        configuration has been added, allowing building &man.siftr.4;
        statically into the kernel.</para>

      <para revision="282731" arch="arm">The &arch.arm; boot loader,
        <filename>ubldr</filename>, is now relocatable.  In addition,
        <filename>ubldr.bin</filename> is now created during build
        time, which is a stripped binary with an entry point of
        <literal>0</literal>, providing the ability to specify the
        load address by running <literal>go
          &dollar;{loadaddr}</literal> in
        <literal>u-boot</literal>.</para>

      <para revision="282921" contrib="sponsor" sponsor="&intelcorp;"
        arch="amd64,i386">The &man.nvd.4; and &man.nvme.4; drivers are
        now included in the <filename>GENERIC</filename> kernel
        configuration by default.</para>

      <para revision="283959" contrib="sponsor"
        sponsor="&limelight;">A new kernel configuration option,
        <literal>EM_MULTIQUEUE</literal>, has been added which enables
        multi-queue support in the &man.em.4; driver.</para>

      <note>
        <para>Multi-queue support in the &man.em.4; driver is not
          officially supported by &intel;.</para>
      </note>

      <para revision="285142" contrib="sponsor"
        sponsor="&netgate;">The <filename>GENERIC</filename> kernel
        configuration has been updated to include the
        <literal>IPSEC</literal> option by default.</para>

      <para revision="285387" contrib="sponsor"
        sponsor="&norse;, &dell;">Initial <acronym>NUMA</acronym>
        affinity and policy configuration has been added.  See
        &man.numactl.1;, and &man.numa.getaffinity.2;, for usage
        details.</para>

      <para revision="286231">The &man.pms.4; driver has been added
        to the <filename>GENERIC</filename> kernel configuration for
        supported architectures.</para>
    </sect2>

    <sect2 xml:id="kernel-sysctl">
      <title>System Tuning and Controls</title>

      <para revision="275140" contrib="sponsor" sponsor="&ff;">The
        &man.hwpmc.4; default and maximum callchain depths have been
        increased.  The default has been increased from 16 to 32, and
        the maximum increased from 32 to 128.</para>

      <para revision="279361">The <literal>kern.osrelease</literal>
        and <literal>kern.osreldate</literal> are now configurable
        &man.jail.8; parameters.</para>

      <para revision="280308,280949" contrib="sponsor"
        sponsor="&ix;, &ff;">The &man.devfs.5; device filesystem has
        been changed to update timestamps for read/write operations
        using seconds precision.  A new &man.sysctl.8;,
        <literal>vfs.devfs.dotimes</literal> has been added, which
        when set to a non-zero value, enables default precision
        timestamps for these operations.</para>

      <para revision="282213" contrib="sponsor" sponsor="&ff;">A new
        &man.sysctl.8;, <literal>kern.racct.enable</literal>, has been
        added, which when set to a non-zero value allows using
        &man.rctl.8; with the <literal>GENERIC</literal> kernel.
        A new kernel configuration option,
        <literal>RACCT_DISABLED</literal> has also been added.</para>

      <para revision="282901" contrib="sponsor" sponsor="&ff;">The
        <literal>GENERIC</literal> kernel configuration now includes
        <literal>RACCT</literal> and <literal>RCTL</literal> by
        default.</para>

      <note>
        <para>To enable <literal>RACCT</literal> and
          <literal>RCTL</literal> on a system using the
          <literal>GENERIC</literal> kernel configuration, add
          <literal>kern.racct.enable=1</literal> to
          &man.loader.conf.5;, and reboot the system.</para>
      </note>

      <para revision="283136" contrib="sponsor"
        sponsor="&limelight;">A new &man.sysctl.8;,
        <literal>net.inet.tcp.hostcache.purgenow</literal>, has
        been added, which when set to <literal>1</literal> during
        runtime will flush all
        <literal>net.inet.tcp.hostcache</literal> entries.</para>

      <para revision="285524">A new &man.sysctl.8;,
        <literal>hw.model</literal>, has been added, which displays
        <acronym>CPU</acronym> model information.</para>

      <para revision="286591">The &man.uart.4; driver has been
        updated to allow tuning packets per second captured during
        runtime.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="drivers">
    <title>Devices and Drivers</title>

    <para>This section covers changes and additions to devices and
      device drivers since &release.prev;.</para>

    <sect2 xml:id="drivers-device">
      <title>Device Drivers</title>

      <para revision="260903">Support for GPS ports has been added to
        &man.uhso.4;.</para>

      <para revision="265132">The &man.full.4; device has been added,
        and the <literal>lindev(4)</literal> device has been removed.
        Prior to this change, <literal>lindev(4)</literal> provided
        only the <filename>/dev/full</filename> character device,
        returning <literal>ENOSPC</literal> on write attempts.  As
        this device is not specific to &linux;, a native &os; version
        has been added.</para>

      <para revision="271705">Hardware context support has been
        added to the <literal>drm/i915</literal> driver, adding
        support for <application>Mesa</application> 9.2 and
        later.</para>

      <para revision="273178">The &man.vt.4; driver has been updated,
        replacing the bitmapped <literal>kern.vt.spclkeys</literal>
        &man.sysctl.8; with individual
        <literal>kern.vt.kbd_*</literal> variants.</para>

      <para revision="273598">The &man.hpet.4; driver has been updated
        to create a
        <filename>/dev/hpet<replaceable>N</replaceable></filename>
        device, providing access to <acronym>HPET</acronym> from
        userspace.</para>

      <para revision="280183">The <literal>drm</literal> code has
        been updated to match &linux; version 3.8.13.</para>

      <para revision="281440">The &man.psm.4; driver has been updated
        to include improved support for newer Synaptics&nbsp;&reg;
        touchpads and the ClickPad&nbsp;&reg; mouse on newer
        Lenovo&nbsp;&trade; laptops.</para>

      <para revision="282783" arch="powerpc">Support for the Freescale
        <acronym>PCI</acronym> Root Complex device has been
        added.</para>

      <para revision="285876">The &man.cyapa.4; driver has been added,
        supporting the Cypress APA I2C trackpad.</para>

      <para revision="285883">The &man.isl.4; driver has been added,
        supporting the Intersil I2C ISL29018 digital ambient light
        sensor.</para>
    </sect2>

    <sect2 xml:id="drivers-storage">
      <title>Storage Drivers</title>

      <para revision="265236" contrib="sponsor"
        sponsor="&lsi;, &spectralogic;" sponsorurl="">The &man.mpr.4;
        device has been added, providing support for LSI Fusion-MPT
        3 12Gb SCSI/SATA controllers.</para>

      <para revision="265555" contrib="sponsor"
          sponsor="&lsi;">The &man.mrsas.4; driver has been added,
        providing support for LSI MegaRAID SAS controllers.  The
        &man.mfi.4; driver will attach to the controller, by default.
        To enable &man.mrsas.4; add
        <literal>hw.mfi.mrsas_enable=1</literal> to
        <filename>/boot/loader.conf</filename>, which turns off
        &man.mfi.4; device probing.</para>

      <note>
        <para>At this time, the &man.mfiutil.8; utility and the &os;
          version of <application>MegaCLI</application> and
          <application>StorCli</application> do not work with
          &man.mrsas.4;.</para>
      </note>

      <para revision="275461" contrib="sponsor" sponsor="&ix;">The
        &man.ctl.4; subsystem has been updated, increasing the ports
        limit from <literal>128</literal> to <literal>256</literal>,
        and <acronym>LUN</acronym> limit from <literal>256</literal>
        to <literal>1024</literal>.</para>

      <para revision="276526">The <literal>asr(4)</literal> driver has
        been removed, and is no longer supported.</para>

      <para revision="281387">The &man.hptnr.4; driver has been
        updated to version 1.1.1.</para>

      <para revision="285662">The &man.pms.4; driver has been added,
        providing support for the PMC Sierra line of
        <acronym>SAS</acronym>/<acronym>SATA</acronym> host bus
        adapters.</para>
    </sect2>

    <sect2 xml:id="drivers-network">
      <title>Network Drivers</title>

      <para revision="258830">Support for Broadcom chipsets BCM57764,
        BCM57767, BCM57782, BCM57786 and BCM57787 has been added to
        &man.bge.4;.</para>

      <para revision="260448">Support for the &intel; Centrino&trade;
        Wireless-N 135 chipset has been added.</para>

      <para revision="260552">Firmware for &intel; Centrino&trade;
        Wireless-N 105 devices has been added to the base
        system.</para>

      <para revision="261975">The deprecated nve(4) driver has been
        removed.  Users of NVIDIA nForce MCP network adapters are
        advised to use the &man.nfe.4; driver instead, which has been
        the default driver for this hardware since
        &os;&nbsp;7.0.</para>

      <para revision="264601" contrib="sponsor"
        sponsor="&darpa_afrl;">The <literal>if_nf10bmac(4)</literal>
        device has been added, providing support for NetFPGA-10G
        Embedded CPU Ethernet Core.</para>

      <note>
        <para>The <literal>if_nf10bmac(4)</literal> driver operates on
          the FPGA, and is not suited for the PCI host
          interface.</para>
      </note>

      <para revision="265348" contrib="sponsor"
        sponsor="&netgate;">The &man.ath.hal.4; driver has been
        updated to support the Atheros AR1111 chipset.</para>

      <para revision="266770">Support for the &intel; Centrino&trade;
        Wireless-N 105 chipset has been added.</para>

      <para revision="266757" contrib="sponsor"
        sponsor="&chelsio;">Support for the &man.cxgbe.4; Terminator
        5 (T5) 10G/40G cards has been added to &man.netmap.4;.</para>

      <para revision="272730">The &man.alc.4; driver has been updated
        to support AR816x and AR817x ethernet controllers.</para>

      <para revision="272906">The &man.pf.4; packet filter default hash
        has been changed from <literal>Jenkins</literal> to
        <literal>Murmur3</literal>, providing a 3-percent performance
        increase in packets-per-second.</para>

      <para revision="273331">The &man.vxlan.4; driver has been added,
        which creates a virtual Layer 2 (Ethernet) network overlaid in
        a Layer 3 (IP/UDP) network.  The &man.vxlan.4; driver is
        analogous to &man.vlan.4;, but is designed to be better suited
        for large, multiple-tenant datacenter environments.</para>

      <para revision="274246" contrib="sponsor" sponsor="&yandex;">The
        &man.gre.4; driver has been significantly overhauled, and has
        been split into two separate modules, &man.gre.4; and
        &man.me.4;.</para>

      <para revision="278551">The &man.ral.4; driver has been updated
        to support the RT5390 and RT5392 chipsets.</para>

      <para revision="283514" contrib="sponsor"
        sponsor="&solarflare;">The &man.sfxge.4; driver has been
        updated to support Solarflare Flareon Ultra 7000-series
        chipsets.</para>

      <para revision="283766" contrib="sponsor"
        sponsor="&limelight;">The &man.em.4; driver has been updated
        with improved transmission queue hang detection.</para>

      <para revision="284125">The &man.cdce.4; driver has been updated
        to include support for the RTL8153 chipset.</para>

      <para revision="286441">The &man.iwm.4; driver has been imported
        from OpenBSD, providing support for &intel; 3160/7260/7265
        wireless chipsets.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="hardware">
    <title>Hardware Support</title>

    <para>This section covers general hardware support for physical
      machines, hypervisors, and virtualization environments, as well
      as hardware changes and updates that do not otherwise fit in
      other sections of this document.</para>

    <sect2 xml:id="hardware-support">
      <title>Hardware Support</title>

      <para revision="268303">The &man.asmc.4; driver has been
        updated to support the &apple;&nbsp;MacMini 3,1.</para>

      <para revision="268351">Support for &os;/ia64 has been dropped
        as of &os;&nbsp;11.</para>

      <para revision="274386">An issue that could cause a system to
        hang when entering <acronym>ACPI</acronym>
        <literal>S3</literal> state (suspend to
        <acronym>RAM</acronym>) has been corrected in the &man.acpi.4;
        and &man.pci.4; drivers.</para>

      <para revision="274733" arch="powerpc">The power management unit
        subsystem has been updated to support power button events on
        certain &arch.powerpc; hardware, such as aluminum
        PowerBook&nbsp;&reg;.</para>

      <para revision="275171,275190" arch="powerpc">The &man.hwpmc.4;
        driver has been updated to correct performance counter
        sampling on G4 (MPC74xxx) and G5 class processors.</para>

      <para revision="275732" contrib="sponsor"
        sponsor="&ff;,&netgate;">The
        <application>OpenCrypto</application> framework has been
        updated to include <literal>AES-ICM</literal> and
        <literal>AES-GCM</literal> modes, both of which have also been
        added to the &man.aesni.4; driver.</para>

      <para revision="281713" arch="powerpc">The &man.hwpmc.4;
        driver has been updated to support the Freescale e500
        core.</para>

      <para revision="283766">The &man.ig4.4; driver has been added,
        providing support for the fourth generation &intel;
        <acronym>I2C</acronym> SMBus.</para>

      <para>The &man.uart.4; driver has been updated to support
        <acronym>AMT</acronym> devices on newer systems.</para>

      <para revision="285316" contrib="sponsor" sponsor="&ff;"
        arch="arm64">Initial <acronym>SMP</acronym> support has been
        added to the &os;/&arch.arm64; port.</para>
    </sect2>

    <sect2 xml:id="hardware-virtualization">
      <title>Virtualization Support</title>

      <para revision="260410">Support for the <quote>Virtual Interrupt
          Delivery</quote> feature of &intel;&nbsp;VT-x is enabled if
        supported by the CPU.  This feature can be disabled by running
        <literal>sysctl hw.vmm.vmx.use_apic_vid=0</literal>.
        Additionally, to persist this setting across reboots, add
        <literal>hw.vmm.vmx.use_apic_vid=0</literal> to
        <filename>/etc/sysctl.conf</filename>.</para>

      <para revision="260532">Support for <quote>Posted Interrupt
          Processing</quote> is enabled if supported by the CPU.  This
        feature can be disabled by running <literal>sysctl
          hw.vmm.vmx.use_apic_pir=0</literal>.  Additionally, to
        persist this setting across reboots, add
        <literal>hw.vmm.vmx.use_apic_pir=0</literal> to
        <filename>/etc/sysctl.conf</filename>.</para>

      <para revision="260582">Unmapped IO support has been added to
        &man.virtio_blk.4;.</para>

      <para revision="260583">Unmapped IO support has been added to
        &man.virtio_scsi.4;.</para>

      <para revision="260847">The &man.virtio_random.4; driver has
        been added to harvest entropy from the host system.</para>

      <para revision="261504">&os;/&arch.i386; guests can be run under
        bhyve.</para>

      <para revision="267536" contrib="sponsor"
        sponsor="&citrix.rd;">Support for running a &os;/&arch.amd64;
        <application>Xen</application> guest instance as
        <acronym>PVH</acronym> guest has been added.
        <acronym>PVH</acronym> mode, short for <quote>Para-Virtualized
          Hardware</quote>, uses para-virtualized drivers for boot and
        I/O, and uses hardware virtualization extensions for all other
        tasks, without the need for emulation.</para>

      <para revision="273375">The &man.bhyve.8; hypervisor has been
        updated to support &amd; processors with
        <acronym>SVM</acronym> and <acronym>AMD-V</acronym> hardware
        extensions.</para>

      <para revision="273515">The &man.virtio.console.4; driver has
        been added, which provides an interface to VirtIO console
        devices through a &man.tty.4; device.</para>

      <para revision="279957">The &man.bhyve.8; hypervisor has been
        updated to support <literal>DSM TRIM</literal> commands for
        virtual <acronym>AHCI</acronym> disks.</para>

      <para revision="281439" arch="arm">Support for the
        <application>QEMU</application> <literal>virt</literal> system
        has been added.</para>

      <para revision="282212" contrib="sponsor" sponsor="&msostc;">The
        Hyper-V&trade; drivers have been updated with several
        enhancements:</para>

      <itemizedlist>
        <listitem>
          <para>The &man.hv.vmbus.4; driver now has multi-channel
            support.</para>
        </listitem>

        <listitem>
          <para>The &man.hv.storvsc.4; driver now has scatter/gather
            support, in addition to performance improvements.</para>
        </listitem>

        <listitem>
          <para>The &man.hv.kvp.4; driver has received several bug
            fixes.</para>
        </listitem>
      </itemizedlist>

      <para revision="282274">Support for &man.xen.4; para-virtualized
        <literal>domU</literal> kernels has been removed.</para>

      <para revision="284746" contrib="sponsor" sponsor="&msostc;">The
        &man.hv.netvsc.4; driver has been updated to support checksum
        offloading and <acronym>TSO</acronym>.</para>

      <para revision="286062">The &man.xen.4; driver has been updated
        to include support for <literal>blkif</literal> indirect
        segment I/O.</para>
    </sect2>

    <sect2 xml:id="hardware-arm">
      <title>ARM Support</title>

      <para revision="260921">The &man.nand.4; device is enabled for
        ARM devices by default.</para>

      <para revision="266943" arch="arm">Support for the Exynos 5420
        Octa system has been added.</para>

      <para revision="267390" arch="arm">The <acronym>SMP</acronym>
        option has been enabled for all Exynos 5 systems supported by
        &os;.</para>

      <para revision="268838" arch="arm">Support for the Toradex
        Apalis i.MX6 development board has been added.</para>

      <para revision="273264" arch="armv6">An issue that could cause
        instability when detecting <acronym>SD</acronym> cards on the
        Raspberry Pi <acronym>SOC</acronym> has been fixed.</para>

      <para revision="275963">The <literal>bcm2835_cpufreq</literal>
        driver has been added, which supports <acronym>CPU</acronym>
        frequency and voltage control on the Raspberry Pi
        <acronym>SOC</acronym>.</para>

      <para revision="277042" arch="arm">Support to turn off the
        BeagleBone Black system with the &man.shutdown.8;
        <literal>-p</literal> flag or by invoking &man.poweroff.8; has
        been added.</para>

      <para revision="277644" arch="arm">Audio transmission drivers
        have been added for Digital Audio Multiplexer
        (<acronym>AUDMUXM</acronym>), Smart Direct Memory Access
        Controller (<acronym>SDMA</acronym>), and Syncronous Serial
        Interface (<acronym>SSI</acronym>).</para>

      <para revision="280259" contrib="sponsor" sponsor="&ff;">Initial
        support for the ARM AArch64 architecture has been
        added.</para>

      <para revision="282779" arch="arm">Kernel support for Thumb-2
        userland has been added.</para>

      <para revision="282827">Support for the hardware power button
        on the BeagleBone Black system has been added.</para>

      <para revision="284273" contrib="sponsor"
        sponsor="&ff;">Initial
        <acronym>ACPI</acronym> support has been added for
        &os;/&arch.arm64;.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="storage">
    <title>Storage</title>

    <para>This section covers changes and additions to file systems
      and other storage subsystems, both local and networked.</para>

    <sect2 xml:id="storage-general">
      <title>General Storage</title>

      <para revision="278037" contrib="sponsor" sponsor="&ix;">The
        &man.ctl.4; <acronym>LUN</acronym> mapping has been rewritten,
        replacing <acronym>iSCSI</acronym>-specific mapping mechanisms
        with a new mechanism that works for any port.</para>

      <para revision="278354" contrib="sponsor" sponsor="&ix;">The
        &man.ctld.8; utility has been updated to allow controlling
        non-<acronym>iSCSI</acronym> &man.ctl.4; ports.</para>

      <para revision="275681" contrib="sponsor" sponsor="&ff;">The
        &man.autofs.5; subsystem has been updated to include a new
        &man.auto.master.5; map, <literal>-media</literal>, which
        allows automatically mounting removable media, such as
        <acronym>CD</acronym> drives or <acronym>USB</acronym> flash
        drives.</para>

      <para revision="279955" contrib="sponsor" sponsor="&ff;">The
        &man.autofs.5; subsystem has been updated to include a new
        &man.auto.master.5; map, <literal>-noauto</literal>, which
        handles &man.fstab.5; entries set to
        <literal>noauto</literal>.</para>

      <para revision="286444">The <acronym>GELI</acronym> class has
        been updated to support the <literal>BIO_DELETE</literal>
        &man.g.bio.9; <literal>bio_cmd</literal> field, providing
        <acronym>TRIM</acronym>/<acronym>UNMAP</acronym> support on
        <acronym>GELI</acronym>-backed <acronym>SSD</acronym> storage
        providers.</para>
    </sect2>

    <sect2 xml:id="storage-net">
      <title>Networked Storage</title>

      <para revision="270096" contrib="sponsor" sponsor="&ff;">The new
        filesystem automount facility, &man.autofs.5;, has been added.
        The new &man.autofs.5; facility is similar to that found in
        other &unix;-like operating systems, such as OS&nbsp;X&trade;
        and Solaris&trade;.  The &man.autofs.5; facility uses
        a &sun;-compatible &man.auto.master.5; configuration file, and
        is administered with the &man.automount.8; userland utility,
        and the &man.automountd.8; and &man.autounmountd.8;
        daemons.</para>

      <para revision="273849" contrib="sponsor" sponsor="&ff;">Support
        for the <literal>timeo</literal>, <literal>actimeo</literal>,
        <literal>noac</literal>, and <literal>proto</literal> options
        have been added to &man.mount.nfs.8;.</para>
    </sect2>

    <sect2 xml:id="storage-zfs">
      <title>ZFS</title>

      <para revision="275748">The <literal>arc_meta_limit</literal>
        statistics are now visible through the
        <literal>kstat</literal> &man.sysctl.8;.  As a result of this
        change, the <literal>vfs.zfs.arc_meta_used</literal>
        &man.sysctl.8; has been removed, and replaced with the
        <literal>kstat.zfs.misc.arcstats.arc_meta_used</literal>
        &man.sysctl.8;.</para>
    </sect2>

    <sect2 xml:id="storage-geom">
      <title>&man.geom.4;</title>

      <para revision="267359">Support for the
        <literal>disklabel64</literal> partitioning scheme has been
        added to &man.gpart.8;.</para>

      <para revision="282465">Support for the
        <literal>apple-boot</literal>, <literal>apple-hfs</literal>,
        and <literal>apple-ufs</literal> <acronym>MBR</acronym>
        partitioning schemes have been added to &man.gpart.8;.</para>

      <para revision="285594" contrib="sponsor"
        sponsor="&scaleengine;">The &man.gpart.8; utility has been
        updated to include a new attribute for <acronym>GPT</acronym>
        partitions, <literal>lenovofix</literal>, which when set,
        which works around <acronym>BIOS</acronym> compatibility
        issues reported on several Lenovo&nbsp;&trade; laptops.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="boot">
    <title>Boot Loader Changes</title>

    <para>This section covers the boot loader, boot menu, and other
      boot-related changes.</para>

    <sect2 xml:id="boot-loader">
      <title>Boot Loader Changes</title>

      <para revision="258431" contrib="sponsor" sponsor="&ff;">The
        memory test run at boot time on &os;/&arch.amd64; platforms
        has been disabled by default.</para>

      <para revision="262955">A new &man.ttys.5; class,
        <literal>3wire</literal>, has been added.  This is similar to
        the existing terminal classes, but does not have a defined
        baudrate.</para>

      <para revision="274085">The &man.vt.4; driver has been made the
        default system console driver.  The &man.syscons.4; driver is
        still available, and can be enabled by adding
        <literal>kern.vty=sc</literal> in &man.loader.conf.5;.
        Alternatively, &man.syscons.4; can be enabled at boot time by
        entering <literal>set kern.vty=sc</literal> at the
        &man.loader.8; prompt.</para>

      <para revision="279950">Support for <literal>bzipfs</literal>
        has been added to the <acronym>EFI</acronym> loader.</para>

      <para revision="281616">The boot loader has been updated to
        support entering the <acronym>GELI</acronym> passphrase before
        loading the kernel.  To enable this behavior, add
        <literal>geom_eli_passphrase_prompt="YES"</literal> to
        &man.loader.conf.5;.</para>

      <para revision="284683" contrib="sponsor" sponsor="&ff;"
        arch="arm">The &man.ttys.5; file for &os;/&arch.arm; has been
        updated to enable <filename>ttyu1</filename>,
        <filename>ttyu2</filename>, and <filename>ttyu3</filename> by
        default, if the callin port is an active console port.</para>
    </sect2>

    <sect2 xml:id="boot-menu">
      <title>Boot Menu Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="network">
    <title>Networking</title>

    <para>This section describes changes that affect networking in
      &os;.</para>

    <sect2 xml:id="network-protocols">
      <title>Network Protocols</title>

      <para revision="263140">Support for the IPX network transport
        protocol has been removed, and will not be supported in
        &os;&nbsp;11 and later releases.</para>

      <para revision="272720" contrib="sponsor"
        sponsor="&limelight;">Support for <acronym>PLPMTUD</acronym>
        blackhole detection (<acronym>RFC</acronym> 4821) has been
        added to the &man.tcp.4; stack, disabled by default.  New
        control tunables have been added:</para>

      <informaltable frame="none" pgwide="0">
        <tgroup cols="2">
          <colspec colwidth="1*"/>
          <colspec colwidth="1*"/>
          <thead>
            <row>
              <entry>Tunable</entry>
              <entry>Description</entry>
            </row>
          </thead>

          <tbody>
            <row>
              <entry><literal>net.inet.tcp.pmtud_blackhole_detection</literal></entry>
              <entry>Enables or disables <acronym>PLPMTUD</acronym>
                blackhole detection</entry>
            </row>

            <row>
              <entry><literal>net.inet.tcp.pmtud_blackhole_mss</literal></entry>
              <entry><acronym>MSS</acronym> to try for IPv4</entry>
            </row>

            <row>
              <entry><literal>net.inet.tcp.v6pmtud_blackhole_mss</literal></entry>
              <entry><acronym>MSS to try for IPv6</acronym></entry>
            </row>
          </tbody>
        </tgroup>
      </informaltable>

      <para>New monitoring &man.sysctl.8;s haven been added:</para>

      <informaltable frame="none" pgwide="0">
        <tgroup cols="2">
          <colspec colwidth="1*"/>
          <colspec colwidth="1*"/>
          <thead>
            <row>
              <entry>Tunable</entry>
              <entry>Description</entry>
            </row>
          </thead>

          <tbody>
            <row>
              <entry><literal>net.inet.tcp.pmtud_blackhole_activated</literal></entry>
              <entry>Number of times the code was activated to attempt
                downshifting the <acronym>MSS</acronym></entry>
            </row>

            <row>
              <entry><literal>net.inet.tcp.pmtud_blackhole_min_activated</literal></entry>
              <entry>Number of times the blackhole
                <acronym>MSS</acronym> was used in an attempt to
                downshift</entry>
            </row>

            <row>
              <entry><literal>net.inet.tcp.pmtud_blackhole_failed</literal></entry>
              <entry>Number of times that the blackhole failed to
                connect after downshifting the
                <acronym>MSS</acronym></entry>
            </row>
          </tbody>
        </tgroup>
      </informaltable>

      <para revision="280971" contrib="sponsor"
        sponsor="&netflix;, &nginx;">Support for <acronym>IP</acronym>
        identification for atomic datagrams (<acronym>RFC</acronym>
        6864) has been added.  Support for this feature can be toggled
        with the <literal>net.inet.ip.rfc6864</literal>
        &man.sysctl.8;, which is enabled by default.</para>

      <para revision="285336" contrib="sponsor"
        sponsor="&netgate;">The <acronym>IPSEC</acronym> has been
        updated to include support for <acronym>AES</acronym> modes on
        both software-only and hardware-backed (&man.aesni.4;)
        systems.</para>
    </sect2>
  </sect1>

  <sect1 xml:id="ports">
    <title>Ports Collection and Package Infrastructure</title>

    <para>This section covers changes to the &os;&nbsp;Ports
      Collection, package infrastructure, and package maintenance and
      installation tools.</para>

    <sect2 xml:id="ports-infrastructure">
      <title>Infrastructure Changes</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="ports-packages ">
      <title>Packaging Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="doc">
    <title>Documentation</title>

    <para>This section covers changes to the &os;&nbsp;Documentation
      Project sources and toolchain.</para>

    <sect2 xml:id="doc-sources">
      <title>Documentation Source Changes</title>

      <para>&nbsp;</para>
    </sect2>

    <sect2 xml:id="doc-toolchain">
      <title>Documentation Toolchain Changes</title>

      <para>&nbsp;</para>
    </sect2>
  </sect1>

  <sect1 xml:id="releng">
    <title>Release Engineering and Integration</title>

    <para>This section convers changes that are specific to the
      &os;&nbsp;Release Engineering processes.</para>

    <sect2 xml:id="releng-changes">
      <title>Integration Changes</title>

      <para revision="277458" contrib="sponsor" sponsor="&ff;">The
        Release Engineering build tools have been updated to include
        support for producing virtual machine disk images for various
        cloud hosting providers.</para>

      <para revision="278926">The Release Engineering build tools have
        been updated to use multi-threaded &man.xz.1;.  By default,
        the number of &man.xz.1; threads is set to the number of cores
        available.</para>

      <para revision="281802" contrib="sponsor" sponsor="&ff;">The
        Release Engineering build tools have been updated to include
        support for building &os;/&arch.arm64; virtual machine and
        memory stick installation images.</para>

      <para revision="282693" contrib="sponsor" sponsor="&ff;">The
        Release Engineering build tools have been updated to support
        building &os;/&arch.arm; images without external utilities for
        supported boards where a corresponding
        <literal>u-boot</literal> port exists in the Ports
        Collection.</para>

      <para revision="283307" contrib="sponsor" sponsor="&ff;">The
        &os;/&arch.i386; memory stick installation images are now
        created using the &man.mkimg.1; utility, matching the way
        the &os;/&arch.amd64; images are created.</para>
    </sect2>
  </sect1>
</article>