in case something wants to create massive amounts of environment, like
a bit more than 1/4 of a 32-bit address space.  unrealistic -- but why
audit one code path, and not treat others the same?  then you have to
re-engage everytime you see the code.  read the news, that isn't what
developers do.  At least if the code paths look the same, there is hope,
because they are easier to verify for correctness.  developers need
to give other developers a chance to want to care.

for free, FREE, FREEEEE
ok doug

output because it may end up just calling 'ifconfig $if'. This needs
to be done better and properly tested.

fixed.

cases and breaks TLS 1.2; crank libcrypto.so minor version out of safety and
to be able to tell broken versions apart easily.

This explanation is based off of Ted's site.  Also, fix a comment from
the SHA-1 version.
ok tedu@

avoiding annoying delays for some switch configurations
ok claudio@ deraadt@
i would add ok phessler@, but it was not valid without an ok krw@

by first changing to $DESTDIR and then simply piping to xargs.
OK deraadt@

ok matthieu@ miod@

ok matthieu@

version with zero args, so it should only be visible if __BSD_VISIBLE
(and not also for __XPG_VISIBLE).  Contrawise, readlink() has been
part of base POSIX since 1995, so move to proper #if area for that.
Move crypt_checkpass() to the pure-BSD section of the file.
setpgrp() issue noted by Matti Karnaattu (mkarnaattu (at) gmail.com)
ok millert@

There is one table in the default configuration which is 'aliases' and
the db can be created using newaliases(8).
"go for it" guenther@
ok sthen@ matthieu@ gilles@

ok matthieu@

Noted by and OK ajacoutot@
Positive feedback halex@

Mention that invalid bases do set EINVAL (as required by POSIX);
this part of the change uses part of an earlier patch by millert@.
Minor mdoc(7) cleanup and sync between the two pages while here.
Feedback and ok jmc@ and millert@.

required by the C standard when called with an invalid base:
strtoll(), strtoimax(), strtoul(), strtoull(), and strtoumax().
Same behaviour for strtoq() and strtouq() even though not standardized.
No functional change in strtol(), it was the only one already correct.
While here, simplify the conditional expression for checking the base
and sync whitespace and comments among the six files.
ok millert@

found with the new mandoc(1) MANDOCERR_AN_MISSING warning;
no text changes

Make the installer create the /etc/hosts template. While here, re-add a
missing 'echo' from install.sh.
ok miod@ krw@ halex@

discussion, help and ok guenther@

Markus Mueller.

indirectly prodded by krw@

when creating them: mkostemp(), mkostemps(), the 'e' mode letter for
fopen(), freopen(), fdopen(), and popen().  The close-on-exec flag will
be cleared by the action created by posix_spawn_file_actions_adddup2().
Also, add support for the C11 'x' mode letter for fopen() and freopen(),
setting O_EXCL when possibly creating files.
Note: this requires kernel support for pipe2() and dup3()!
ok millert@

when creating them: pipe2(), dup3(), accept4(), MSG_CMSG_CLOEXEC,
SOCK_CLOEXEC.  Includes SOCK_NONBLOCK support.
ok matthew@

ok robert@ schwarze@

no objections from todd@ millert@ rpe@

If getrandom returns a temporary failure, make sure errno is not polluted when
it succeeds. Thanks to deraadt@ for pointing it out.

with autoconf enabled.
If one is doing SLAAC one does already trust link local icmp6 so the
policy for icmp6 redirects should be the same.
pointed out by & OK bluhm@; OK henning@

ok reyk@  (who suggested these lines a while ago)

it available during a regular install or upgrade so that it doesn't
need to be independently fetched.
Idea, directions and OK deraadt@
Feedback and Ok halex@ and aja@

included in httpd.conf.  httpd(8) now supports both mime.types
flavours with or without semicolon at the end of the line (nginx- or
apache-style).
Discussed with many, with input from halex@
OK halex@

ok reyk@

concept ok deraadt@
diff looks ok tedu@

ok schwarze@

ok schwarze@