---

2.1 Kernel Changes

acct(2) has been changed to open the accounting file in append mode, so that accton(8) can be used to enable accounting to an append-only file.

RLIMIT_VMEM support has been added. This feature defines a new resource limit that covers a process's entire virtual memory space, including mmap(2) space. This limit can be configured in login.conf(5) via the new vmemoryuse variable.

A bug in the sendfile(2) system call, in which headers counted against the size of the file to be sent, has been fixed.

The ucom(4) device driver has been added, to support USB modems, serial devices, and other programs that need to look like a tty. The related uplcom(4) and uvscom(4) drivers provide specific support for the Prolific PL-2303 serial adapter and the SUNTAC Slipper U VS-10U, respectively.

The uvisor(4) driver for connecting Handspring Visors via USB has been added.

---

2.2 Security Advisories

The original fix for security advisory SA-02:23 (which addressed the use of file descriptors by set-user-id or set-group-id programs) contained an error. It was still possible for systems using procfs(5) or linprocfs(5) to be exploited. This error has now been corrected; a revised version of security advisory FreeBSD-SA-02:23 contains more details.

A buffer overflow in the resolver, which could be exploited by a malicious domain name server or an attacker forging DNS messages, has been fixed. See security advisory FreeBSD-SA-02:28 for more details.

A buffer overflow in tcpdump(1), which could be triggered by badly-formed NFS packets, has been fixed. See security advisory FreeBSD-SA-02:29 for more details.

ktrace(1) can no longer trace the operation of formerly privileged processes; this prevents the leakage of sensitive information that the process could have obtained before abandoning its privileges. For a discussion of this issue, see security advisory FreeBSD-SA-02:30 for more details.

A race condition in pppd(8), which could be used to change the permissions of an arbitrary file, has been corrected. For more information, see security advisory FreeBSD-SA-02:32.

Multiple buffer overflows in OpenSSL have been corrected, by way of an upgrade to the base system version of OpenSSL. More details can be found in security advisory FreeBSD-SA-02:33.

A heap buffer overflow in the XDR decoder has been fixed. For more details, see security advisory FreeBSD-SA-02:34.

A bug that could allow local users to read and write arbitrary blocks on an FFS filesystem has been corrected. More details can be found in security advisory FreeBSD-SA-02:35.

A bug in the NFS server code, which could allow a remote denial of service attack, has been fixed. Security advisory FreeBSD-SA-02:36 has more details.

A bug that could allow local users to panic a system using the kqueue(2) mechanism has been fixed. More information is contained in security advisory FreeBSD-SA-02:37.

Several bounds-checking bugs in system calls, which could result in some system calls returning a large portion of kernel memory, have been fixed. More information can be found in security advisory FreeBSD-SA-02:38.

A bug that could allow applications using libkvm to leak sensitive file descriptors has been corrected. (See security advisory FreeBSD-SA-02:39 for more details.)

---

2.3 Userland Changes

biff(1) now accepts a b argument to enable ``bell notification'' of new mail (which does not disturb the terminal contents as biff y would).

cp(1) now takes a (nonstandard) -n option to automatically answer ``no'' when it would ask to overwrite a file.

The daemon(8) program, a command-line interface to daemon(3), has been added. It detaches itself from its controlling terminal and executes a program specified on the command line. This allows the user to run an arbitrary program as if it were written to be a daemon.

dump(8) now supports a new -S flag to allow it to just print out the dump size estimates and exit.

finger(1) now has support for a .pubkey file.

finger(1) now supports a -g flag to restrict the printing of GECOS information to the user's full name only.

finger(1) now supports the -4 and -6 flags to specify an address family for remote queries.

fold(1) now supports a -b flag to break at byte positions and a -s flag to break at word boundaries.

ftp(1) now supports the epsv4 command to switch between using the new EPSV/EPRT and plain old PASV/PORT requests when talking over IPv4. This command is intended to remedy the problem arising when running ftp(1) through IPFilter or another firewall not supporting the newer FTP requests.

ftpd(8) now supports the -m option to permit guest users to modify existing files if allowed by filesystem permissions. In particular, this enables guest users to resume uploads.

ftpd(8) now supports the -M option to prevent guest users from creating directories.

ftpd(8) now supports the -W option to disable logging FTP sessions to wtmp(5).

ifconfig(8) now supports a eui64 command to fill in the lowermost 64 bits of an IPv6 address automatically. This makes prefix(8) obsolete.

ifconfig(8) now has the ability to set promiscuous mode on an interface, via the new promisc flag.

inetd(8) now has the capability for limiting the maximum number of simultaneous invocations of each service from a single IP address.

lock(1) now accepts a -v to disable switching VTYs while the current terminal is locked. This permits locking the entire console from a single terminal.

The ls(1) program now supports a -m flag to list files across a page, a -p flag to force printing of a / after directories, and a -x flag to sort filenames across a page.

mv(1) now takes a (nonstandard) -n option to automatically answer ``no'' when it would ask to overwrite a file.

nice(1) now uses the -n option to specify the ``niceness'' of the utility being run.

od(1) now supports the -A option to specify the input address base, the -N option to specify the number of bytes to dump, the -j option to specify the number of bytes to skip, the -s option to output signed decimal shorts, and the -t option to specify output type.

pam_opie(8) no longer emits fake challenges when the no_fake_prompts variable is specified.

A pam_opieaccess(8) module has been added.

pam_radius(8), pam_ssh(8), and pam_tacplus(8) have been synchronized with the versions in FreeBSD -CURRENT as of 3 July 2002.

pam_unix(8) has been synchronized with the version in FreeBSD -CURRENT as of 9 March 2002 (pre-OpenPAM).

pwd(1) now supports the -L flag to print the logical current working directory.

The renice(8) command implements a -n option, which specifies an increment to be applied to the priority of a process.

sed(1) now takes a -i option to enable in-place editing of files.

sh(1) now supports a -C option to prevent existing regular files from being overwritten by output redirection, and a -u to give an error if an unset variable is expanded.

The sh(1) built-in cd command now supports -L and -P flags to invoke logical or physical modes of operation, respectively. Logical mode is the default, but the default can be changed with the physical sh(1) option.

The sh(1) built-in jobs command now supports a -s flag to output PIDs only and a -l flag to add PIDs to the output.

The sh(1) built-in export and readonly commands now support a -p flag to print their output in ``portable'' format.

sh(1) no longer accepts invalid constructs as command & && command, && command, or || command.

split(1) now supports a -a option to specify the number of letters to use for the suffix of split files.

su(1) now has support for Kerberos V authentication.

tr(1) now has basic support for equivalence classes for locales that support them.

unexpand(1) now supports a -t to specify tabstabs analogous to expand(1).

vidcontrol(1) now accepts a -S to allow the user to disable VTY switching.

who(1) now has a number of new options: -H shows column headings; -T shows mesg(1) state; -m is an equivalent to am i; -u shows idle time; -q to list names in columns.

xargs(1) now supports a -I replstr option that allows the user to tell xargs(1) to insert the data read from standard input at specific points in the command line arguments rather than at the end. (A FreeBSD-specific -J option is similar, but is now deprecated in favor of the more portable -I option.)

xargs(1) now supports a -L option to force its utility argument to be called after some number of lines.

---

2.4 Release Engineering and Integration

A bug that caused /usr/share/examples to be incompletely populated on fresh installs has been fixed.

It is now possible to make releases of FreeBSD 5-CURRENT on a FreeBSD 4-STABLE host and vice versa. Cross-architecture (building a release for a target architecture on a host of a different architecture) releases are also possible. See release(7) for details.