- convert netstat from kvm_getfiles() to kvm_getfile2() using that
- delete kvm_getfiles() and KERN_FILE as no longer used (bump libkvm's major)
- rename kvm_getfile2() to kvm_getfiles(), kinfo_file2 to kinfo_file
and KERN_FILE2 to KERN_FILE.
ok deraadt@, millert@
ports scan sthen@

pthreads and chroot, and safe initialization without /dev/random and such
junk.  If you are in control of an arc4random in another library, please look
at these pages and get caught up.
ok various

be using directly.  Well, a few rare people cloned it upstream and it
will take a bit of time for them to learn.
ok various

OK claudio@ henning@

load from spamd-setup. Brought up by phessler@ who also pointed out
that the percent sign must be escaped in the command.
ok ajacoutot@ joerg@ phessler@ and sort of @blambert

ok miod

NB: this utility has only one option, and it's not optional! i haven;t
marked -s as being mandatory, since hopefully someone will make
ntpctl run without arguments do something useful;

ok guenther@

DIST_LIB/DIST_OBJ/*.do changes

the fragments separately.  "No substantive objection" djm@

* For time_t values, use the printf("%lld", (long long)t) idiom.
* Don't print "Invalid program name" in usage() when main() just runs ntpd.
* Make "Show/Shows" consistent in the manual, sort .Xr and correct .Ox.
OK phessler@

diff from Mike Miller <mmiller mgm51 com> (many thanks!)
OK phessler@, henning@, todd@

feedback and ok djm@

MAXNAMLEN or MAXLOGNAME where possible.  OK deraadt@

Previously, when there is an even number of offsets, we did the average
of the two middle offets but would set the REFID from one of them.
Instead, we simply select the middle offset with the lowest delay.
diff from Mike Miller <mmiller mgm51 com> (many thanks!)
OK phessler@, henning@

is undefined.  Add a warning to that effect.  OK deraadt@ jmc@

modern standards, with people having usb cameras, music players,
smartcard readers, UPSs, wifi scanners, rocket launchers and so
on...
OK sthen@, djm@

ok dcoppa ajacoutot

per SoC.  It's heavily based on the SGI port.
ok florian@

ok rapha@

ok dcoppa@ sthen@

ok matthieu@

Our stack is able to tell if the address is local or not.
ok todd@, krw@

spotted by Nathanael Rensen, thanks!