no objection from deraadt@

reflect reality.
OK benno@

effectively disabled support for the SSL protocols.  SSL remains a
common term describing SSL/TLS, there is some controvery about this
change, and the name really doesn't matter, but I feel confident about
it now.
(btw., sthen@ pointed out some historical context:
http://tim.dierks.org/2014/05/security-standards-and-name-changes-in.html)
OK benno@, with input from tedu@

we already used it by default for man(1) before.
While here, fix the order of Xenocara and ports.
ok millert@ sthen@

OK deraadt@

Treat rtsol in hostname.if as a keyword like dhcp and call ifconfig
inet6 autoconf.
"reads good" todd@
OK krw@ (who is *not* an IPv6 person), but I recruited him in his
capacity as an installer person.

Requested by deraadt.

ok deraadt

for quite some time.  Mop up the last few, by using /dev/random where we
actually want it, or not even mentioning arandom where it is irrelevant.

often space-constrained /var filesystem was a historical mistake.  There
are big implications for the daemons which assume they won't run out of
space, and this is a first step towards trying to improve the situation.
Move /tmp to the same 7-day expiration rules that /var/tmp had.
vi.recover works just as well as before, except on memory filesystems;
indicating that vi should be repaired to write files into homedirs or
something.
done with rpe
ok many

ok robert@ sthen@

This is easier to understand and fixes a bug where the "-type d -prune"
was misplaced as noticed by pirofti@.  OK deraadt@

relevant example snippet in the relayd.conf(5) man page.
Change the default SSL protocols in the example file/man page to
"no tlsv1.0" (suggested by sthen@), which will enable the TLSv1.1
and TLSv1.2 protocols only.
feedback/ok jsing@ reyk@ sthen@

ok dcoppa@ deraadt@

output because it may end up just calling 'ifconfig $if'. This needs
to be done better and properly tested.

avoiding annoying delays for some switch configurations
ok claudio@ deraadt@
i would add ok phessler@, but it was not valid without an ok krw@

by first changing to $DESTDIR and then simply piping to xargs.
OK deraadt@

ok matthieu@ miod@

ok matthieu@

There is one table in the default configuration which is 'aliases' and
the db can be created using newaliases(8).
"go for it" guenther@
ok sthen@ matthieu@ gilles@

ok matthieu@

Noted by and OK ajacoutot@
Positive feedback halex@

Make the installer create the /etc/hosts template. While here, re-add a
missing 'echo' from install.sh.
ok miod@ krw@ halex@

ok robert@ schwarze@

no objections from todd@ millert@ rpe@

with autoconf enabled.
If one is doing SLAAC one does already trust link local icmp6 so the
policy for icmp6 redirects should be the same.
pointed out by & OK bluhm@; OK henning@

ok reyk@  (who suggested these lines a while ago)

it available during a regular install or upgrade so that it doesn't
need to be independently fetched.
Idea, directions and OK deraadt@
Feedback and Ok halex@ and aja@

included in httpd.conf.  httpd(8) now supports both mime.types
flavours with or without semicolon at the end of the line (nginx- or
apache-style).
Discussed with many, with input from halex@
OK halex@

ok reyk@

ok schwarze@