SSH2-RSA size; ok hshoexer@, no objection from miod@

instead of just 1.
ok todd@

pointed out by jmc@

spotted by rainer@, ok uwe@

discussed with and ok uwe@

ok fries, hshoexer, claudio

but that is OK because both minor 3 and 4 now do the same thing.  eventually,
2 releases from now, everyone will have forgotten about minor 4 and we can
delete the support code for it from sys/dev/rnd.c
various versions of this looked at by millert and todd

spamd-setup hanging if there are various (network?) issues and the system
not proceeding to multiuser so that this can be debugged.  We do not use
& for startup in /etc/rc because this makes the spamd-setup a child of the
rc scripts after bootup (that is gross)
Problem reported in PR 5864, change discussed with beck, ok millert

that should expect to read the manual anyway and it's caused some
confusion in the past.
Add example entries for fixed-address and pxeboot.
ok krw@

Closes PR 5625
ok ajacoutot@, jakob@

- spamd(8) configuration now lives in /etc/mail, too
- sort some items that were out of order
ok jmc@.  no objections millert@

yes, I know, afs on vax, who would want this?

ok djm@ millert@

ok miod@ jasper@

and now that the behaviour of -g has changed to be more in line
with posix, we get group ID by default anyway;
kick started by PR 5784 from Jacek Masiulaniec;
discussed with otto and sobrado;
ok deraadt millert

and not available at that time. Rewrite the hostname.if permission check
to use only /bin/ls and the shell. Requested by deraadt.
ok todd, "Twisted." deraadt

ok krw@

exists. From wcmaier@.
Check target of symbolic links to avoid noise at boot and in
seucrity output where you have several interfaces symlinked to one
config file.
"If you think this is the right thing to do" deraadt@

available on amd64.

contents of /etc/services so as to avoid randomly allocating
source ports that correspond to well-known services. Auto-filling
of the baddynamic tables is performed before reading sysctl.conf,
so it is still possible to add or subtract ports, or override the
autofilling entirely there.
Note that this requires a new kernel and /sbin/sysctl.
feedback markus@ ok markus@ deraadt@ millert@

"Special purpose devices" section, since a hardware driver which uses
video(4) also could be none-USB as long it uses the V4L2 API.
OK todd@