time.  We've been summing the one from the previous build (then additional
goo I run has been cleaning it up..)

we run netstart
ok tedu, djm liked it too

in particular a single write will result in a single re-key event,
rather than 64 writes causing 64 re-keys -- wasting the kernel's time.
ok guenther

easily use it in rc scripts instead of copying/pasting the same huge
command lines everywhere.
ok robert@ sthen@

let's use it. If not, then fall back to using daemon.
While here, do some reordering.
"I like this" sthen@, ok robert@

As schwarze@ also stated, this will prevent anyone from calling it
(which would be an error) and makes it clearer that rc.subr is not just
a functions container.
No functionnal change, unless you were calling rc_conf from an rc script
which would have been wrong anyway.
ok schwarze@ robert@

script; instead, rc.subr can call rc_conf itself right after reading in
rc.conf.
from schwarze@ (committing on his behalf)
ok robert@

local_rcconf would get overwritten by flags from the rc script itself.
Based on an original idea and diff from robert@, create an rc_conf
function that we add in the rc_script after the defaults daemon*
variables.
This way we can use defaults variables names in other part of the script
(when defining a specific pexp for instance).
While here, simplify setting up the default daemon variables so that we
don't need to do any substitution in rc_start.
rc scripts must include daemon variables before calling rc_conf. All
other locally modified variables (pexp, rc_reload, local additions...)
must come after.
feedback from and works for sthen@
ok robert@

ok kjell otto miod

ok deraadt

ok sthen@ deraadt@

Also noticed and agreed by eric@
ok robert@

the last su(1) commit

corresponding variable to NO.
e.g.
rc_reload=NO
This will save us the trouble of copying the same rc_reload() function
(or others) all over the tree.
ok robert@

requested by okan@, ok robert@

method to handle  _class, _user and _shell as we do for _flags.
discussed with and ok ajacoutot@

and use su to start the daemons.
By default if there is no class defined, daemon will be used. For a shell
it defaults to /bin/sh.

While there extend the current IPv4 filterset.
OK sthen@, henning@

ok mcbride@ claudio@ henning@

ok robert@

ok robert@

call to rc.firstime doesn't output anything to mail(1).
ok deraadt@ halex@

"makes sense" schwarze@, ok robert@

files to not include -. This way we can easily overwrite
daemon flags from rc.conf.local.

ok robert@

need two functions doing the same thing, and also allow check to run as
non-root.

services installed by the ports system (for now).
It only uses pgrep/pkill to handle these processes. A manual page will
come later.
'put it in' deraadt@

manuals on demand by man(1), even though a few manuals may still have
formatting issues with mandoc, and a tiny fraction may still make
mandoc error out.
Also remove the .me and .ms _build rules: we don't support these
formats any longer, and don't have any such manuals in base.
OK deraadt@ sthen@

out what to do with vgrind.

sometimes needs groff, but there it is pulled in as a build-dependency, and
it is the newer groff.  We are able to do this now due to the hard work if ingo.