in particular a single write will result in a single re-key event,
rather than 64 writes causing 64 re-keys -- wasting the kernel's time.
ok guenther

easily use it in rc scripts instead of copying/pasting the same huge
command lines everywhere.
ok robert@ sthen@

let's use it. If not, then fall back to using daemon.
While here, do some reordering.
"I like this" sthen@, ok robert@

ok jmc@ jsing@

with POSIX 2008
ok millert@

As schwarze@ also stated, this will prevent anyone from calling it
(which would be an error) and makes it clearer that rc.subr is not just
a functions container.
No functionnal change, unless you were calling rc_conf from an rc script
which would have been wrong anyway.
ok schwarze@ robert@

script; instead, rc.subr can call rc_conf itself right after reading in
rc.conf.
from schwarze@ (committing on his behalf)
ok robert@

local_rcconf would get overwritten by flags from the rc script itself.
Based on an original idea and diff from robert@, create an rc_conf
function that we add in the rc_script after the defaults daemon*
variables.
This way we can use defaults variables names in other part of the script
(when defining a specific pexp for instance).
While here, simplify setting up the default daemon variables so that we
don't need to do any substitution in rc_start.
rc scripts must include daemon variables before calling rc_conf. All
other locally modified variables (pexp, rc_reload, local additions...)
must come after.
feedback from and works for sthen@
ok robert@

ok kjell otto miod

OK jsing@

ok deraadt@ djm@

path and realpath are the same.  This matches the manual and avoids
a bogus cast to non-const.  OK jsing@, previous version OK kettenis@

ok deraadt

tested for a while by me.
ok otto@

ok sthen@ deraadt@

constant expressions with the help of gcc post-3.3.
ok millert@, mikeb@.  been in snaps for weeks.

Also noticed and agreed by eric@
ok robert@

the last su(1) commit

corresponding variable to NO.
e.g.
rc_reload=NO
This will save us the trouble of copying the same rc_reload() function
(or others) all over the tree.
ok robert@

requested by okan@, ok robert@

method to handle  _class, _user and _shell as we do for _flags.
discussed with and ok ajacoutot@

and use su to start the daemons.
By default if there is no class defined, daemon will be used. For a shell
it defaults to /bin/sh.

While there extend the current IPv4 filterset.
OK sthen@, henning@

ok mcbride@ claudio@ henning@

ok robert@

ok robert@

Tweaks from jmc@
ok jmc@ krw@

ok krw@

ok krw@

call to rc.firstime doesn't output anything to mail(1).
ok deraadt@ halex@

is available for the stream. As we're at it, remove macros and
functions that are neither used nor documented.

"makes sense" schwarze@, ok robert@

files to not include -. This way we can easily overwrite
daemon flags from rc.conf.local.

so it works correctly with large offsets (and matches other systems).
This requires adding a new getdirentries syscall, with the old one
renamed to ogetdirentries.  All in-tree consumers of getdirentries()
have been updated.  Bump libc and libpthread major numbers.
OK and with deraadt@