commiting on behalf of mpi@

ok deraadt@

(ie. non-kernel) .h file

ok deraadt@

ok guenther

from Ryan Kavanagh <rak@debian.org>

pointed out by Ryan Kavannagh rak at debian dot org

ok kettenis

reported by ajacoutot and (much earlier, sorry) by Alexey Suslikov

mostly from armani.
ok miod, mpi, jsg and help from sthen

ok millert

default.
ok guenther millert

ok mikeb@

to <unistd.h> and confstr(3) per POSIX 1003.1-2008
Change confstr(_CS_PATH) to operate directly instead of calling sysctl(3)
ports build tested by espie@

ports build tested by espie@

defines.
ok deraadt@ millert@

ok sthen@ deraadt@

way, TCP packets of e.g. timed out states are blocked rather than
passed by the implicit default pass rule.
sthen@ benno@ phessler@ mikeb@ agrees

virtual disks).
input and ok kettenis@

the net/uccp package and is installed under /usr/local/. Since we don't
want a shell that default to /usr/local/..., use /sbin/nologin.
The uucp package will automatically change to the correct shell on
pkg_add / pkg_delete.
idea from and ok miod@

otherwise just kill it.
ok ajacoutot@ djm@ pirofti@, quite some time ago

ok millert@, mikeb@, lteo@

changed the build order.
Have release-sets depend on the kernels target, which restores the
order.
OK espie@

Feedback from millert@ guenther@
OK guenther@ man page bits OK jmc@

small for production servers now that pf is on by default.
OK phessler@

if there is need to send a SIGTERM to mountd(8), it should be done
manually as there is too much involved with RPC daemons to make it
automagic.
ok beck@

corner cases.  OK millert@.

paths which are rarely tried.  Problem reported by a few on the list.

Ok sthen@

They are not interesting, but they are annoying during system upgrades.
ok sthen@ ajacoutot@ henning@ dtucker@

expanded, but not enough due to precedence error. Spotted by Thorsten Glaser.