eases things
tested by Jason Ackley <jason@ackley.net> Matthias Kilian
<kili@outback.escape.de> Stephen Marley <stephen@marley.org.uk> sturm@
theo ok

no longer needs initializing (we use mmap for malloc entirely now)
noticed by kjell, ok dhartmei, tested by me

(commented out).

relevant when the dummy ruleset can't be loaded, we still want to enable
pf, otherwise the real ruleset (even if that does load correctly) won't
be active. might happen on a non-GENERIC kernel or after an update (before
/etc is manually updated). reported by Jim Rees. ok frantzen@

unsigned but there is no ABI change.  OK deraadt@

should be generally usable, split this out into option 'P'. ok deraadt

ok beck@

from original author (David Mazieres)

- add a `method' capability to the whitelist example
ok beck@

stir after eating 400000 words.  ok + input deraadt

ACPI tables into kernel memory and attach ACPI and HPET timers currently.
In order to test this code, enabling the devices in GENERIC as well as
the ACPI_ENABLE option is needed.  This code does not do any thermal
control yet, so this should be done with care depending on the platform.
In the tree so more people can contribute to making this more fully
featured.
Ok niklas@ grange@ tedu@

explicit about mktemp(3) in the man page.

necessary for regular carp setups. There are situations where you need this,
but if you're going to use it, think hard about redesigning your network so
you don't have to.
ok deraadt@ mpf@ henning@

ok jaredy@ miod@

<kurt@roeckx.be> / bugs.debian.org/310586

they get a whole page and go right at the end of it. ok deraadt tdeval

lines on facility.  End sentences with a dot.  And some whitespace nits.
Matrix (debug mode) is equivalent.
ok otto millert

of interfaces.
This reduces the netstart script by 174 chars, 13 words, and 19 lines, but
more importantly, makes it more simple and less cluttered should more special
case/orderings be needed.
ok brad@ and pr 4197 submitter, inspired by and closes pr 4197

o move test for foo.conf into the foo_conf function proper

OK deraadt@

so do not redefine it.
Found out by the quite picky fixinc in recent gcc.
okay millert@, kettenis@

o update resource limits if kern.maxproc or kern.maxfiles is changed

ok deraadt@