into the hash; hoping the system has some ASLR or PIE.  This replaces and
substantially improves upon &main which proved problematic with some picky
linkers.
Work with kettenis, testing by beck

ok beck

to sysmerge sum files generation.
discussed by deraadt@

/etc/examples.
ok deraadt@

flag for fsck and mount to check and mount the iscsi file systems (marked
with option net) right after the mount -a.
"Get it in" deraadt@
rpe@ is OK with this going in but it may need further changes

makes it much harder.
ok bcook@ kettenis@

distractions to people testing and seeing link errors in some setups.
This will come back in another form
ok deraadt@

req. by deraadt@

no objection from deraadt@

OK: beck@

add a function to use function pointers that does not take sizeof(fptr).
OK beck@

done for other symmetric algorithms recently.

can copy this file (plus chacha_private.h) directly and reuse it
trivially.  Well, as long as they have a getentropy() as well..
ok beck

* you can #include <sys/endian.h> instead of <machine/endian.h>,
and ditto <endian.h>  (fixes code that pulls in <sys/endian.h> first)
* those will always export the symbols that POSIX specified for
<endian.h>, including the new {be,le}{16,32,64}toh() set.  c.f.
http://austingroupbugs.net/view.php?id=162
if __BSD_VISIBLE then you also get the symbols that our <machine/endian.h>
currently exports (ntohs, NTOHS, dlg's bemtoh*, etc)
* when doing POSIX compiles (not __BSD_VISIBLE), then <netinet/in.h> and
<arpa/inet.h> will *stop* exporting the extra symbols like BYTE_ORDER
and betoh*
ok deraadt@

That means sysmerge(8) may be a little more interactive the next time you
run it.

keep linux distros happy that don't have it.
ok bcook@

"move ahead" deraadt@

methods

number and make the file easier on the eyes.
discussed with deraadt@

found by pelikan@; ok pelikan@ henning@

"fine" claudio@ deraadt@

now using this as upstream code.  The particular problem is systems
that contain older arc4random derivations lacking arc4random_uniform().
ok tedu miod

using O_NOFOLLOW - cope with it as best as possible by trying two
different paths. - written by deraadt@ and kettenis@

script.
From now on rc.conf has a fixed syntax (key=val) and it is not allowed
to add anything to it besides the supported syntax, it all going to be
ignored.
discussed with and help from deraadt@ and halex@

- some unofficial services became official
- move kerberos next to afs

directory.
ok robert

is

ok sthen@ deraadt@

to maintain. The eval's must stay to make the aliases expand at run
time instead of at parse time.
ok krw@

still managed by changelist, as long as the marker is + and they are in
the correct distrib/sets/* files
Bit of help from ajacoutot

hand-edit services(5) which moved to base; some more to come probably.
ok deraadt@

ok florian bluhm benno stsp

eval seems to be needed for reaching the aliases which otherwise aren't
available from within functions...