ok guenther millert kettenis

requested by krw@
ok halex@

text.  OK deraadt@

grantpt() and unlockpt() using /dev/ptm.  Man pages from FreeBSD.
OK kettenis@ deraadt@ beck@ ajacoutot@ naddy@

from install.sub
with feedback from and ok halex

tries a bit harder to identify invalid interface names and in
this case emit an error message.
- use [[ $1 == autoboot ]] to avoid a shell error message due to
possible spaces in first argument
- no change in functionality
discussed with krw and halex
ok ("I like this") krw

not going to fix in order to stay compatible with legacy password data.
Nobody should use DES crypt anyway these days.
See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc
for details about this bug.
Discussed with deraadt and beck about half a year ago (I'm pruning Ms
from my tree).

int (*)(struct dirent *)
to
int (*)(const struct dirent *)
to match POSIX.
ok millert@, ports check by naddy@

'stop' then 'start'; so to prevent this daemon from restarting itself,
rc_stop=NO is enough.
ok robert@

so we don't care if the file is present or not; also this function
should never return a failure.
ok halex@

from /etc/rc(8). This prevents the warning to be displayed at shutdown
time when the script has rc_stop=NO.
req. and input from fgsch@
"go ahead" schwarze@
input from an ok halex@, ok robert@

ok halex@

or the special value of 0.
ok deraadt@ otto@

See faq/current.html for more information.
The local_rcconf variable is not used anywhere anymore so drop it.
suggested by deraadt@
ok sthen@

an invalid multiplier, like the man page says it should
"looks sensible" deraadt@, ok ian@

it unconditionally.
The only place local_rcconf could have been defined is from /etc/rc
sourcing rc.conf but then the variable is not exported so it will never
be seen by rc.subr.
ok robert@

Should make coredumps from abort() easier to debug too.
ok kurt@

actually something to chown/chgrp.
ok todd@

ok dcoppa@, deraadt@

unmapping of freed allocations without disabling chunk randomisation
like the "Freeguard" ('F') option does. Make security 'S' option
use 'U' and not 'F'.
Rationale: guarding with no chunk randomisation is great for debugging
use-after-free, but chunk randomisation offers better defence against
"heap feng shui" style attacks that depend on carefully constructing a
particular heap layout so we should leave this enabled when requesting
security options.

this file, even years after the rc.conf / rc.conf.local split happened.
One way to improve upon this is to put a big fat comment at the top of
the file.  (Other ways to improve this is by renaming files, but that
will just create more confusion).
ok aja robert

the pexp.

ok chl@ gilles@

Pointed out by ajacoutot@

OK claudio@

- add examples for how to accept mail from external source and for a
specific domain

making files stand-alone, some __restrict additions.
tweaks kettenis@; ports testing and fixes landry@ and jasper@
ok millert@

references into a STANDARDS section;

references into a STANDARDS section;

__returns_twice and __dead instead of depending on GCC's special
handling of these function names.
With input from kettenis@ and guenther@
Fixes a warning from clang
ok matthew@

an empty name, NULL pointer, or a name containing an '=' character.
OK millert@, guenther@

u_int32_t is historical BSD stuff.
fix to match the manpage, namely #include <stdint.h> as a prerequisite.
okay millert@

install sample configs to /etc/.
ok claudio deraadt henning mcbride