this diff starts ypldap before ypbind instead of after.
ok deraadt@ ajacoutot@

reminded by mikeb@
ok sthen@

mostly from Kent R. Spillner
ok sthen@ robert@

for a while now and groups are usually stored outside of People.
ok sthen@

ok miod@

into an bogus pointer error instead of a segfault.
- Document that we use the assumption that a non-MAP_FIXED mmap() with
hint 0 never returns NULL.

usr.sbin/nginx using the distribution target

duid and device entries in fstab. As a bonus make commented out
lines in fstab in-eligable for altroot detection.
ok halex@ deraadt@

Reported by & fix tested by Dave Anderson. Thanks!
ok deraadt@

initially intended for YubiKey, jmc@ noted that list was out of date.
ok deraadt@, jmc@

the last node is deleted.  Instead, resolve the Coverity warning
by returning (node *)1 when you delete the root node.
based an idea from millert@.  ok otto@

ok deraadt

From danh@, ok aja@ giovanni@

Includes friendly linker warning to wake up those dumb enough to use it.
Committing for kettenis@, who ran away to the hills after writing it

ok guenther

ok ajacoutot sthen

okay millert@

Ok sthen@, millert@, dcoppa@

and add an 'rtableid' keyword to ps.
Add rtable id, thread id, and socket splice info to struct kinfo_file2
and make fstat display socket splice information.
Remove old KVM_PROC2 and kinfo_proc2 interfaces; bump libkvm major
Socket splice info and corrections from bluhm@  "Lovely" deraadt@

ok beck@, guenther@, millert@, miod@

instead of <pthread.h>.
ok guenther@, millert@

noticed by zepard at gmail
OK henning@

ok ratchov@

with input from and ok sthen@

ok sthen@

rename key1 to tsig1 to clearly identify this name as a transaction
signature digest; consistently use tsig key name on slave zone.
ok jakob@

configuration without service disruption which is not what -HUP does for
nsd(8).
Anyway, zone operations (...) should be done using nsdc(8) and not with
an rc script.
discussed with and ok sthen@

from ajacoutot@.
ok deraadt ajacoutot

ok jmc@

out by Arne Becker, who also supplied the diff, thanks!
ok schwarze@
agreed by many

regular user, member of the operator group); rm(1) was waiting for
interactive input to remove the runfiles which made no sense, so just
use `-f'.
issue spotted by weerd@
ok weerd@ robert@

Correct the namespace protections for sigreturn(), sigwait(), and psignal()
ok millert@

All facts from http://minnie.tuhs.org/cgi-bin/utree.pl, checked by sobrado@.
Feedback and ok jmc@ jmc@ (sic, Jason checked and ok'ed this twice).

fail with errno set to ERANGE if not enough room is provided. Similar for
getlogin_r() so remove minbytes enforcement attribute.
ok kettenis@ guenther@ deraadt@ on getcwd, deraadt@ on getlogin_r.

Pretty terse for now but will eventually come with some more complex
examples when ratchov@ finishes some ongoing work on aucat(1).
ok ratchov@ jmc@ deraadt@