General huzzahs.
"go for it" deraadt@

disklabel the "HP C3010 / Cranel 2.0GB Fast SCSI2 H10" crammed inside your
palm device, but that's the price of progress.  hopefully i didn't whack
anything important.
ok deraadt

OK sobrado@, todd@

blocking other cleanups
ok miod@

Use 'schema' instead of 'include' to parse schema files.

Also copy the generated RSA key for isakmpd into the iked directory;  this
way we share the same RSA key by default.
ok deraadt@ jsg@

ok todd@ krw@ deraadt@

noticed by rhsv6 at hushmail dot com, ok sthen@

ok jsing@

get it in! jsing@

ok jasper@ (also compile tested)

ok jsg@

ok deraadt@

pointed out by jsg@

ok deraadt@

ok deraadt@

Sure deraadt@

ok claudio@

It needs to be started before the routing daemons.
In this way every new prefix learnt by them already has a label associated.
discussed with and ok'ed by claudio@

the default setting in rc.conf.
ok deraadt

run by root, it binds a shared address to the socket, cranks the
process priority and drops privileges. sio_open(3) will try to
connect to the private socket first (if any), then to the shared
socket. Only one user may have connections to aucat at a given
time.
based on discussions with henning, pyr and others
ok jacek, deraadt

change without touching {master.,}passwd).
ok phessler@ giovanni@ "not sure if that's an ok but it's at least an o" mk@

ok deraadt@

tested by krw

enlarge bsd.rd filesystem; this in turn causes a cd oflow, so enlarge
cd filesystem.
ok jsing@ deraadt@