ok claudio@

OK deraadt@, henning@, mcbride@

If a user is running sasyncd, start isakmpd with -S.
In this mode isakmpd starts off passsive and doesn't
delete SA's on shutdown.
OK ho@, hshoexer@, deraadt@

you do not want a machine that is in the middle of rc and does not have
all network daemons (that possibly increase the carp demotion counter
further) to become master just because the other one lost 2 bgp sessions
or similar for other daemons (esp sasyncd) and as such has a demotion
count of >1.
ok mcbride mpf deraadt

ok deraadt@ cloder@

booted, allowing for daemons to sync with peers before we take over.
ok deraadt@ mpf@ moritz@

ok henning@

ok derradt@

requested by deraadt@

- new sysctl vfs.nfs.privport to require NFS mount requests to be on
reserved ports when set to 1 (the default).
- mountd now automatically sets the sysctl depending on the -n flag.
- add mountd_flags to rc.conf to enable the -n flag at boot.
deraadt@ ok

suggested and ok by kettenis@

ok naddy@ todd@

to (for instance) interrupt dhclient with a ^C instead of a 'CAPS-LOCK C'
from e@molioner.dk checked by matthieu

doubly mounted mfs partitions. Also, at the end of the mount dance,
try mount all partitions, not just nfs partitions. Handles a case
where local paritition mounted inside a nfs partition where not
mounted by rc (/usr on nfs with a local /usr/obj, for example).
ok deraadt@ henning@

also start ntpd at this time.
discussed with jmc@; ok deraadt@

ok henning beck

but I put it at a different place, watchdogd is really not a network daemon

client; from amh@POBOX.COM

graceful shutdown work correctly.
ok mpf@ deraadt@ a long time ago, committed to local repository by accident.

relevant when the dummy ruleset can't be loaded, we still want to enable
pf, otherwise the real ruleset (even if that does load correctly) won't
be active. might happen on a non-GENERIC kernel or after an update (before
/etc is manually updated). reported by Jim Rees. ok frantzen@

ACPI tables into kernel memory and attach ACPI and HPET timers currently.
In order to test this code, enabling the devices in GENERIC as well as
the ACPI_ENABLE option is needed.  This code does not do any thermal
control yet, so this should be done with care depending on the platform.
In the tree so more people can contribute to making this more fully
featured.
Ok niklas@ grange@ tedu@

o move test for foo.conf into the foo_conf function proper

OK deraadt@

o update resource limits if kern.maxproc or kern.maxfiles is changed

a dhclient that crashed so hard it was unable to swap the file back,
and hence, finish that job.  i convinced krw and henning that this is
right right place (not in netstart)

somehow he got his YP and DNS screwed up and nslookup $h was dealing with h = ""
which was doing nslookup "", which is bad and hangs boots.  be more careful
by doing echo $h | nslookup instead.

From: Jason Crawford <jasonrcrawford@gmail.com>, whitespace fixes me

OK deraadt@ and fgsch@

via mixerctl.conf.
ok deraadt@, earlier version ok henning@

to an interface; no change in default config
from Toni Mueller <support@oeko.net>, ja ja ja ja bob

by form@pdp-11.org.ru.
ok todd@ henning@

changes

by jmc

use in the comment in rc.conf again, idea & ok theo

ok miod@ henning@ deraadt@

ok ho@ henning@

ok deraadt@

deals with it at startup; noticed by wilfried, millert ok

ok krw@ deraadt@

mcbride and i think this diff looks good but do not feel like doing the
250 meter walk to go test it