build

sendmail and smtpd.
ok gilles@, "Go go go!" todd@

127.0.0.1 or ::1
lots of discussion with many, but ok krw

discussed with pyr@ and deraadt@

Don't log kiss code for now.

on each host and end up conflicting, so they never sync anyways.
ok dlg henning

(and MVME327 SCSI and MVME376 Ethernet, to provide a complete system).

last month.

uncomment them.  this is no longer a sample.  everything in here now
must be completely legit.
discussed at length with henning, claudio, and sthen
ok sthen

this change has been suggested by form@ as a part of a larger issue
we are looking at right now.
grammatical review by jmc@
ok millert@

ok henning@, 'I think I agree' otto@

ok henning@

all-in-one usb card readers and memory sticks you run out of sd
device files very quickly with default install.
This doesn't affect install media.
ok krw@ miod@

ok miod@

ok henning@ jmc@

corrupt contents. ok henning@

which may not be null terminated; ok henning@

found on this laptops harddisk, probably from stockholm

it is more consistent and easier to read.

ok miod@

ok miod@

PAGE_(SIZE|SHIFT|MASK) defines that evaluate to variables on the
sparc architecture;
ok otto@ tested on my reanimated ss20

on sparc, it expands to something that just plain does not work,
because the page size can be variable.  Sorry we didn't spot this
before.  Backing it all out to allow sparc to build; please find a
different way to fix it.

(MALLOC_OPTIONS=L). It was too slow to turn on by default, and we
don't do optional security.
requested by deraadt@ grumbling ok otto@

Move all runtime options into a structure that is made read-only
(via mprotect) after initialisation to protect against attacks that
overwrite options to turn off malloc protections (e.g. use-after-free)
Allocate the main bookkeeping data (struct dir_info) using mmap(),
thereby giving it an unpredictable address. Place a PROT_NONE guard
page on either side to further frustrate attacks on it.
Add a new 'L' option that maps struct dir_info PROT_NONE except when
in the allocator code itself. Makes attacks on it basically impossible.
feedback tedu deraadt otto canacar
ok otto