ok deraadt

tested for a while by me.
ok otto@

ok sthen@ deraadt@

constant expressions with the help of gcc post-3.3.
ok millert@, mikeb@.  been in snaps for weeks.

Also noticed and agreed by eric@
ok robert@

the last su(1) commit

corresponding variable to NO.
e.g.
rc_reload=NO
This will save us the trouble of copying the same rc_reload() function
(or others) all over the tree.
ok robert@

requested by okan@, ok robert@

method to handle  _class, _user and _shell as we do for _flags.
discussed with and ok ajacoutot@

and use su to start the daemons.
By default if there is no class defined, daemon will be used. For a shell
it defaults to /bin/sh.

While there extend the current IPv4 filterset.
OK sthen@, henning@

ok mcbride@ claudio@ henning@

ok robert@

ok robert@

Tweaks from jmc@
ok jmc@ krw@

ok krw@

ok krw@

call to rc.firstime doesn't output anything to mail(1).
ok deraadt@ halex@

is available for the stream. As we're at it, remove macros and
functions that are neither used nor documented.

"makes sense" schwarze@, ok robert@

files to not include -. This way we can easily overwrite
daemon flags from rc.conf.local.

so it works correctly with large offsets (and matches other systems).
This requires adding a new getdirentries syscall, with the old one
renamed to ogetdirentries.  All in-tree consumers of getdirentries()
have been updated.  Bump libc and libpthread major numbers.
OK and with deraadt@

ok robert@

need two functions doing the same thing, and also allow check to run as
non-root.

services installed by the ports system (for now).
It only uses pgrep/pkill to handle these processes. A manual page will
come later.
'put it in' deraadt@

deraadt@ nicm@ (on an earlier version)

manuals on demand by man(1), even though a few manuals may still have
formatting issues with mandoc, and a tiny fraction may still make
mandoc error out.
Also remove the .me and .ms _build rules: we don't support these
formats any longer, and don't have any such manuals in base.
OK deraadt@ sthen@

out what to do with vgrind.

sometimes needs groff, but there it is pulled in as a build-dependency, and
it is the newer groff.  We are able to do this now due to the hard work if ingo.

who decided to just do it on their own.  henning, mcbride, jsing -- shame
on you -- if you had shown this diff to just 1 other network developer,
the astounding mistake in it would have been noticed.  Start practicing
inclusionary development instead of going alone.
ok claudio