Theo de Raadt <deraadt <at> openbsd.org> writes:
> so thanks for your suggestion. have you ever noticed how suggestions
> are taken less seriously when they are not formatted as a diff?
--- 59.html.orig Thu Feb 18 11:45:24 2016
+++ 59.html Thu Feb 18 12:03:29 2016
@@ -100,21 +100,21 @@
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=dhclient&sektion=8">dhclient(8)</a> no longer exits if a desired
route cannot be added. It now just reports the fact.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=dhclient&sektion=8">dhclient(8)</a> now takes a much more careful
approach to received packets to ensure only received data is used to process
the packet. Packets with incorrect length information or lacking appropriate
header information are now dropped.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=dhclient&sektion=8">dhclient(8)</a> again disables pending
timeouts if the interface link is lost, preventing endless retries at
obtaining a lease.
- <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=dhclient&sektion=8">dhclient(8)</a> was pledged.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=dhcpd&sektion=8">dhcpd(8)</a> again properly utilizes default-
lease-time, max-lease-time and bootp-lease-time options.
- <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=dhcpd&sektion=8">dhcpd(8)</a> was pledged.
<li>...
</ul>
<p>
<li>Security improvements:
<ul>
- <li>...
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi/?
query=pledge">pledge(2)</a>, a new subsystem for restricting operations in
programs, was added.
+ <li>More than 200 daemons and programs was pledged, among them: <a
href="http://www.openbsd.org/cgi-bin/man.cgi?
query=dhclient&sektion=8">dhclient(8)</a>, <a
href="http://www.openbsd.org/cgi-bin/man.cgi?
query=dhcpd&sektion=8">dhcpd(8), <a href="http://www.openbsd.org/cgi-
bin/man.cgi?query=fdisk&sektion=8">fdisk(8)</a>, <a
href="http://www.openbsd.org/cgi-bin/man.cgi/?
query=pdisk§ion=8&arch=macppc">pdisk(8)</a>.
<li>Support for looking up hosts via YP has been removed from libc.
The 'yp' lookup method in
<a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=resolv.conf&sektion=5">resolv.conf</a>
is no longer available.
<li>Support for the HOSTALIASES environment variable has been removed
from libc.
+ <li>...
</ul>
<p>
@@ -123,7 +123,7 @@
<li>doas is a little friendlier to use
<li>Updated flex
<li>Updated and improved less
- <li><a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-
current/man8/macppc/pdisk.8?query=pdisk">pdisk(8)</a> was largely rewritten
and pledged.
+ <li><a href="http://www.openbsd.org/cgi-bin/man.cgi/?
query=pdisk§ion=8&arch=macppc">pdisk(8)</a> was largely rewritten.
<li>Renaming files in the root directory of a MSDOS filesystem was
fixed.
<li>Many obsolete <a href="http://www.openbsd.org/cgi-
bin/man.cgi/OpenBSD-current/man5/disktab.5?query=disktab">disktab(5)</a>
attributes and entries were removed.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-
current/man4/softraid.4?query=softraid">softraid(4)</a> volumes now
correctly look for the disklabel in the first OpenBSD disk partition, not
the last.
@@ -132,7 +132,6 @@
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=fdisk&sektion=8">fdisk(8)</a> now has a '-b' flag that specifies
the size of the EFI System partition to create.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=fdisk&sektion=8">fdisk(8)</a> now has a '-v' flag that causes a
verbose display of both MBR and GPT information.
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=fdisk&sektion=8">fdisk(8)</a> now provides full interactive GPT
editing.
- <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?
query=fdisk&sektion=8">fdisk(8)</a> was pledged.
<li>Disks with sector sizes other than 512 bytes can now be partitioned
with a GPT.
<li>The GPT kernel option was removed and GPT support is part of all
GENERIC and GENERIC derived kernels.
<li>Many improvements were made to the GPT kernel support to ensure
safe and reliable operation of GPT and MBR processing.
