return -1 like POSIX requires.

This is used by a few programs such as man and su.

daily, weekly, and monthly.  Closes PR 3017.

as shortcuts for long ones, but only if this would not conflict with
a short option in optstring.  Now binutils gas works.

We don't want to use the sysctl() by default since we are reading more
than just a few bytes of entropy when setting up the state.

o Check for long options even when not at the beginning of an option.
For instance, if -a is a short option w/o an arg and -static is a
boolean long option then -astatic is valid for getopt_long_only().
o If a potential long argument does not match longopts and the first
character is not a short option, print a warning and skip the rest
of the argument.
Also clean up some trailing whitespace and change return value of
parse_long_options() from -2 to -1 when unmatched and in long_only mode.
With these fixes the binutils ld seems happy with our getopt_long_only()

is in optstring.

In order for getopt_only_only() to work we need to check for long
options before short ones.  I have merged getopt_internal and
getopt_long_internal into a single function with the actual long
args parsing broken out into a separate function.
This also simplifies the flow of control.

pointed out by todd@

ok, deraadt@

getopt_long_only().  At some point this should replace the BSD
getopt(3) but we are not there yet.
While I am here add protection from the multiple getopt() definitions
due to conflicting standards.

now build libraries with propolice enabled.  Without this, existing
binaries (such as ports/packages) that link with any system library
other than libc will fail with an undefined symbol of "___guard"
(__guard on ELF).
Pointed out by markus@ and discussed with deraadt@

when I committed atoll(3).

STDERR_FILENO instead of 2.
OK millert@

from sam smith, thx
henning@ ok

ok millert@

shadow -> _shadow, tokenadm -> _token, and also add _radius.

of setuid root.  deraadt@ OK

group.  This changes getpw* to always try the shadow db first and
then fall back to the db w/o password hashes.  In the future,
/usr/libexec/auth/login_passwd (and others) will be setgid shadow
instead of setuid root.  OK deraadt@
If you track -current you should do the following:
o add group shadow to /etc/group
o chgrp shadow /etc/spwd.db
o chmod 640 /etc/spwd.db
o rebuild and install src/usr.sbin/pwd_mkdb
You do not need to rebuild libc yet, but it would't hurt to do so.

can properly boot rulesets with dns addresses in it.

newsyslog.conf to reflect that.  More people seem to prefer that,
and it can be easily changed if you like it another way.
millert, fgs and others verbally agree

The J root server changed IPs.
ok millert@

only one.
X11 is configured here to start on ttyC5, like on i386 again. This requires
alpha-specific changes to the X servers, that went in the tree before 3.2
was released.
On tga-compatible boards, there are no virtual consoles available, and these
changes will have no effect.