a few developers thought this was a reasonable/good idea.

paths which are rarely tried.  Problem reported by a few on the list.

SMART enabled.
Committing now so that it gets broader testing.
Man page bits will be added once we are confident there is no side
effect and this can stay.
inputs from sthen@ halex@ weerd@
ok deraadt@

duid and device entries in fstab. As a bonus make commented out
lines in fstab in-eligable for altroot detection.
ok halex@ deraadt@

Reported by & fix tested by Dave Anderson. Thanks!
ok deraadt@

out by Arne Becker, who also supplied the diff, thanks!
ok schwarze@
agreed by many

to the old /etc/security script because daily sourced it.
Now we fork and exec, so SUIDSKIP must be promoted to the environment.
Problem reported, fix tested and ok weerd@.

to the new Perl script /usr/libexec/security.
The new script was tested by sthen@ and ajacoutot@.
Committing now due to repeated prodding from deraadt@.
In case problems show up, they will be fixed in tree.

ok phessler@ sthen@

Lots of agreement.

1) replace +%e by +%d, unescaped blanks don't work at all in file names
2) replace +%b by +%m to make log files sort better by month
3) replace the home-grown +%Y.%m.%d by the standard +%F (= +%Y-%m-%d)
from Tim van der Molen <tbvdm at xs4all dot nl>, thanks!
ok okan@

1) advertise *.local and next_part near the top of the three scripts
2) daily: mention smtpd(8) mailq behaviour (like for sendmail, postfix, exim)
3) weekly: drop a comment trivially rehashing the next two lines of code
documenting next_part in the scripts was suggested by jmc@
ok sthen@ okan@ halex@; "i won't object" ajacoutot@

Do not attempt to copy a larger partition onto a smaller one.
Backup of non-ffs root partitions was never supported, so don't even try.
(Both of the above suggested by guenther@).
Also add error messages in case ROOTBACKUP is switched on but severely
misconfigured - those were silently ignored in the past:
/altroot not defined or wrong type or on the same device as root.
otto@ agrees that checking the sizes makes sense

suggested, tweaked and ok by guenther@

i.e. rely on the PATH set up in the root crontab(5)
in case /usr/local/bin is needed, daily.local is a logical place to append it
suggested by ajacoutot@; "i like this" okan@; feedback jmc@ deraadt@;
"i don't strongly object" sthen@

by moving it down to the bottom of the code;
"I definitely like this"  ajacoutot@

When set to 0, daily(8) won't send mail unless there is something to report.
Using feedback from kettenis@ henning@ jmc@
OK sthen@ jmc@

in order not to annoy parser scripts and their owners (like henning@)

add the same infrastructure to daily; silencing daily needs another step
discussed with ajacoutot@ okan@ todd@ sthen@ deraadt@ jmc@
"immediately commit" deraadt@ (without seeing the final diff)

while here, remove the misleading shbang and an unused variable
and add the missing cross reference to ac(8)
ok sthen@ jmc@

(output logs are still umask 077)
"i think this is right" deraadt@

the / -> /altroot copy.  OK deraadt@

ok millert@

- no more /var/spool/lpd (lpd uses /var/spool/output)
- no more /var/preserve (old vi directory)
- update docs to reflect this
help with systrace provos@
help and ok millert@

of the n'th (n>1) file fails, the previous ones get removed before exit(1)
Idea by jason; ok millert deraadt

daily, weekly, and monthly.  Closes PR 3017.

ok millert@

That way we avoid a flurry of transient calendar mail in the mailq.

symbolic links (the -h flag is for compatibility only); millert@ ok

Since /tmp might be a link to /var/tmp, prune at ssh-* or .X11-unix
like the find on /tmp does.