want to be using DES) and some of the notes about the export controls
are no longer so relevant. ok deraadt jmc

ok millert

the function is going to return.

silence some warnings.

ok guenther, deraadt, jmc

later revision of FIPS-180.  OK miod@ jmc@ guenther@ djm@

ok millert@

Tweak standards exposure of memchr (never) and strdup (POSIX-2008)
Remove unnecessary tests of __BSD_VISIBLE
ok millert@

okay guenther@

Also, prettify representation of actions list a bit.
a lot of input and ok halex@ aja@
also ok schwarze@
small nit spotted by marc@
"makes a lot of sense to me" todd@

ok deraadt@

okay deraadt@
some other people like that too.

where appropriate.  Among other things makes the symbols consistent
across all architectures (notably where ldbl mantissa is 53 bits).
While at it, kill unused LINTLIBRARY/PROTOLIB1 cruft which was there
to trick lint into recording the right prototypes for aliased
functions.  Most of the work done at the awesome n2k13 hackathon.
Agreed by kettenis@, guenther@, matthew@.

commiting on behalf of mpi@

ok deraadt@

(ie. non-kernel) .h file

ok deraadt@

ok guenther

from Ryan Kavanagh <rak@debian.org>

pointed out by Ryan Kavannagh rak at debian dot org

ok kettenis

reported by ajacoutot and (much earlier, sorry) by Alexey Suslikov

mostly from armani.
ok miod, mpi, jsg and help from sthen

ok millert

default.
ok guenther millert

ok mikeb@

to <unistd.h> and confstr(3) per POSIX 1003.1-2008
Change confstr(_CS_PATH) to operate directly instead of calling sysctl(3)
ports build tested by espie@

ports build tested by espie@

defines.
ok deraadt@ millert@

ok sthen@ deraadt@

way, TCP packets of e.g. timed out states are blocked rather than
passed by the implicit default pass rule.
sthen@ benno@ phessler@ mikeb@ agrees