Feedback from millert@ guenther@
OK guenther@ man page bits OK jmc@

small for production servers now that pf is on by default.
OK phessler@

if there is need to send a SIGTERM to mountd(8), it should be done
manually as there is too much involved with RPC daemons to make it
automagic.
ok beck@

corner cases.  OK millert@.

paths which are rarely tried.  Problem reported by a few on the list.

Ok sthen@

They are not interesting, but they are annoying during system upgrades.
ok sthen@ ajacoutot@ henning@ dtucker@

expanded, but not enough due to precedence error. Spotted by Thorsten Glaser.

polluting ramdisks with devices that aren't needed there.

would be able to receive multiple SCM_RIGHTS messages.
ok claudio@ gilles@

SMART enabled.
Committing now so that it gets broader testing.
Man page bits will be added once we are confident there is no side
effect and this can stay.
inputs from sthen@ halex@ weerd@
ok deraadt@

ok guenther millert kettenis

requested by krw@
ok halex@

text.  OK deraadt@

grantpt() and unlockpt() using /dev/ptm.  Man pages from FreeBSD.
OK kettenis@ deraadt@ beck@ ajacoutot@ naddy@

from install.sub
with feedback from and ok halex

tries a bit harder to identify invalid interface names and in
this case emit an error message.
- use [[ $1 == autoboot ]] to avoid a shell error message due to
possible spaces in first argument
- no change in functionality
discussed with krw and halex
ok ("I like this") krw

not going to fix in order to stay compatible with legacy password data.
Nobody should use DES crypt anyway these days.
See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc
for details about this bug.
Discussed with deraadt and beck about half a year ago (I'm pruning Ms
from my tree).

int (*)(struct dirent *)
to
int (*)(const struct dirent *)
to match POSIX.
ok millert@, ports check by naddy@

'stop' then 'start'; so to prevent this daemon from restarting itself,
rc_stop=NO is enough.
ok robert@

so we don't care if the file is present or not; also this function
should never return a failure.
ok halex@

from /etc/rc(8). This prevents the warning to be displayed at shutdown
time when the script has rc_stop=NO.
req. and input from fgsch@
"go ahead" schwarze@
input from an ok halex@, ok robert@

ok halex@

or the special value of 0.
ok deraadt@ otto@

See faq/current.html for more information.
The local_rcconf variable is not used anywhere anymore so drop it.
suggested by deraadt@
ok sthen@

an invalid multiplier, like the man page says it should
"looks sensible" deraadt@, ok ian@

it unconditionally.
The only place local_rcconf could have been defined is from /etc/rc
sourcing rc.conf but then the variable is not exported so it will never
be seen by rc.subr.
ok robert@

Should make coredumps from abort() easier to debug too.
ok kurt@

actually something to chown/chgrp.
ok todd@

ok dcoppa@, deraadt@

unmapping of freed allocations without disabling chunk randomisation
like the "Freeguard" ('F') option does. Make security 'S' option
use 'U' and not 'F'.
Rationale: guarding with no chunk randomisation is great for debugging
use-after-free, but chunk randomisation offers better defence against
"heap feng shui" style attacks that depend on carefully constructing a
particular heap layout so we should leave this enabled when requesting
security options.