OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@
"The time is right." and much help getting the show on
the road deraadt@

ok todd

ok deraadt gilles todd

No.
Well, then tell them to stay out of the way.
ok deraadt

noticed by jsg, and important enough to make release

'miniroot and maxiroot')..
from chris

existing swap partition for an easier initial installation.

has fun effects on some manpages under some circumstances, as found out
by sthen@: the gindent manpage looks like shit when seen with that new
default man.conf on an uft8 terminal, e.g., quotes combine with the
previous character to yield accented letters for no reason.
this should be handled calmly after release, not rushed in at the last
minute (okay deraadt@)

add a more complete check for the rounds parameter. ok deraadt

ok deraadt@ bentley@

to refrain from trying to execute /etc/rc.d/ in that case.
Problem noticed by jasper@.
Opinions on this patch vary: "much nicer, ok" sthen@
"good god, what horrible shell voodoo, ok" ajacoutot@

introduce a new 'b' hash minor. still generate 'a' minors for now.
reported by solar designer. diff by some combination of solar and jca.
ok deraadt

ok sthen florian

as noticed by Arto Jonsson <ajonsson at kapsi dot fi>.
While here, give the full author names, which costs no additional work
because i had to cross-check against the original documents anyway.

dns process at normal priority.  Should improve latency on loaded machines.
ok henning@

Patch by Jean-Philippe Ouellet ; ok krw@

suggested by naddy@.  This solves the problem that occurs when a
server crashes or is hard booted and comes back up without tearing
down any connections to it, and packets from these connections don't
match any existing state or rule and are silenty dropped.
ok phessler@ henning@ claudio@ dlg@

the ball rolling. ok deraadt.

all the other tools do. changes option 'sensors' to 'Sensors'.
ok henning@, and grudgingly phessler@

spotted by tedu

marking up words that are not trademarks (ASCII, I/O, NFS, TCP, TELNET).
While here, remove .Tn markup from the same words in the body
of these pages, too.

Our dhclient only uses the bpf tap for broadcast packets (which bypass
pf) but lease renewals will use a regular socket and are blocked without
this change.  Rules are written so that accidential forwarding of packets
is not possible.
Diff from brad@, OK henning@, benno@, mikeb@

Found while testing mandocdb(8).

every time
ok jmc