ok robert@

discussed with schwarze@

ok aja@

OK jasper

ok miod@

egress group only works if you have a default route; this confused
some people.

OK deraadt@ some time ago

no objection from deraadt@

reflect reality.
OK benno@

effectively disabled support for the SSL protocols.  SSL remains a
common term describing SSL/TLS, there is some controvery about this
change, and the name really doesn't matter, but I feel confident about
it now.
(btw., sthen@ pointed out some historical context:
http://tim.dierks.org/2014/05/security-standards-and-name-changes-in.html)
OK benno@, with input from tedu@

we already used it by default for man(1) before.
While here, fix the order of Xenocara and ports.
ok millert@ sthen@

OK deraadt@

Treat rtsol in hostname.if as a keyword like dhcp and call ifconfig
inet6 autoconf.
"reads good" todd@
OK krw@ (who is *not* an IPv6 person), but I recruited him in his
capacity as an installer person.

Requested by deraadt.

ok deraadt

for quite some time.  Mop up the last few, by using /dev/random where we
actually want it, or not even mentioning arandom where it is irrelevant.

often space-constrained /var filesystem was a historical mistake.  There
are big implications for the daemons which assume they won't run out of
space, and this is a first step towards trying to improve the situation.
Move /tmp to the same 7-day expiration rules that /var/tmp had.
vi.recover works just as well as before, except on memory filesystems;
indicating that vi should be repaired to write files into homedirs or
something.
done with rpe
ok many

ok robert@ sthen@

This is easier to understand and fixes a bug where the "-type d -prune"
was misplaced as noticed by pirofti@.  OK deraadt@

relevant example snippet in the relayd.conf(5) man page.
Change the default SSL protocols in the example file/man page to
"no tlsv1.0" (suggested by sthen@), which will enable the TLSv1.1
and TLSv1.2 protocols only.
feedback/ok jsing@ reyk@ sthen@

ok dcoppa@ deraadt@

output because it may end up just calling 'ifconfig $if'. This needs
to be done better and properly tested.

avoiding annoying delays for some switch configurations
ok claudio@ deraadt@
i would add ok phessler@, but it was not valid without an ok krw@

by first changing to $DESTDIR and then simply piping to xargs.
OK deraadt@

ok matthieu@ miod@

ok matthieu@