now build libraries with propolice enabled.  Without this, existing
binaries (such as ports/packages) that link with any system library
other than libc will fail with an undefined symbol of "___guard"
(__guard on ELF).
Pointed out by markus@ and discussed with deraadt@

when I committed atoll(3).

STDERR_FILENO instead of 2.
OK millert@

from sam smith, thx
henning@ ok

ok millert@

shadow -> _shadow, tokenadm -> _token, and also add _radius.

of setuid root.  deraadt@ OK

group.  This changes getpw* to always try the shadow db first and
then fall back to the db w/o password hashes.  In the future,
/usr/libexec/auth/login_passwd (and others) will be setgid shadow
instead of setuid root.  OK deraadt@
If you track -current you should do the following:
o add group shadow to /etc/group
o chgrp shadow /etc/spwd.db
o chmod 640 /etc/spwd.db
o rebuild and install src/usr.sbin/pwd_mkdb
You do not need to rebuild libc yet, but it would't hurt to do so.

can properly boot rulesets with dns addresses in it.

newsyslog.conf to reflect that.  More people seem to prefer that,
and it can be easily changed if you like it another way.
millert, fgs and others verbally agree

The J root server changed IPs.
ok millert@

only one.
X11 is configured here to start on ttyC5, like on i386 again. This requires
alpha-specific changes to the X servers, that went in the tree before 3.2
was released.
On tga-compatible boards, there are no virtual consoles available, and these
changes will have no effect.

next changes easier.

functions.

OK mickey@ and discussed with deraadt@

ok miod@

they do this by sending to stdout. commands like: 'ftp -o - ftp://blah/foo>foo'
do not like having data added to the output stream.
since we only define these two functions in an environment where /dev/tty
exists, send output to /dev/tty to make sure it does not corrupt the output
stream of commands.

millert@ ok