half of Diana's problem) ok todd

ok drahn@

stats' and 'rndc recursing' commands in /var/named/tmp (instead of
/var/named), which is writable by the 'named' user.
feedback and ok jakob@ deraadt@, also agreed by fkr@ and msf@

ok krw@

ok miod@, deraadt@

with deraadt@ some time ago

ok drahn@

ok henning@ deraadt@

/etc/isamkpd.  Noticed by ajacoutot@lphp.org, thanks!
ok mcbride

This makes it readable by unprivileged uses, simplifying configuration,
and there is no reason for it to be secret.
ok msf deraadt hshoexer

rc checks pflog0 existance before starting pflogd0, pbly to not print an
error message on pflog-less kernels... ugh. ok mcbride

and deleted. previously this script only generated diffs for existing
files.
ok lots of people including millert@ msf@ mcbride@ todd@ and probably more.

ok claudio@

(output logs are still umask 077)
"i think this is right" deraadt@

ok claudio@

Encountered by henning@; ok millert@ robert@ deraadt@

Unfortunately this does not fix existing file permissions.
Spotted by Antti Harri <iku at openbsd dot fi>.
OK millert@.

sector forwarding on those ide/esdi disks.

OK deraadt@, henning@, mcbride@

ok beck@

ok miod

If a user is running sasyncd, start isakmpd with -S.
In this mode isakmpd starts off passsive and doesn't
delete SA's on shutdown.
OK ho@, hshoexer@, deraadt@