ok deraadt

for quite some time.  Mop up the last few, by using /dev/random where we
actually want it, or not even mentioning arandom where it is irrelevant.

often space-constrained /var filesystem was a historical mistake.  There
are big implications for the daemons which assume they won't run out of
space, and this is a first step towards trying to improve the situation.
Move /tmp to the same 7-day expiration rules that /var/tmp had.
vi.recover works just as well as before, except on memory filesystems;
indicating that vi should be repaired to write files into homedirs or
something.
done with rpe
ok many

ok robert@ sthen@

This is easier to understand and fixes a bug where the "-type d -prune"
was misplaced as noticed by pirofti@.  OK deraadt@

relevant example snippet in the relayd.conf(5) man page.
Change the default SSL protocols in the example file/man page to
"no tlsv1.0" (suggested by sthen@), which will enable the TLSv1.1
and TLSv1.2 protocols only.
feedback/ok jsing@ reyk@ sthen@

ok dcoppa@ deraadt@

output because it may end up just calling 'ifconfig $if'. This needs
to be done better and properly tested.

avoiding annoying delays for some switch configurations
ok claudio@ deraadt@
i would add ok phessler@, but it was not valid without an ok krw@

by first changing to $DESTDIR and then simply piping to xargs.
OK deraadt@

ok matthieu@ miod@

ok matthieu@

There is one table in the default configuration which is 'aliases' and
the db can be created using newaliases(8).
"go for it" guenther@
ok sthen@ matthieu@ gilles@

ok matthieu@

Noted by and OK ajacoutot@
Positive feedback halex@

Make the installer create the /etc/hosts template. While here, re-add a
missing 'echo' from install.sh.
ok miod@ krw@ halex@

ok robert@ schwarze@

no objections from todd@ millert@ rpe@

with autoconf enabled.
If one is doing SLAAC one does already trust link local icmp6 so the
policy for icmp6 redirects should be the same.
pointed out by & OK bluhm@; OK henning@

ok reyk@  (who suggested these lines a while ago)

it available during a regular install or upgrade so that it doesn't
need to be independently fetched.
Idea, directions and OK deraadt@
Feedback and Ok halex@ and aja@

included in httpd.conf.  httpd(8) now supports both mime.types
flavours with or without semicolon at the end of the line (nginx- or
apache-style).
Discussed with many, with input from halex@
OK halex@

ok reyk@

ok schwarze@

ok schwarze@

none are set.
initial patch from me but reworked by schwarze@
ok schwarze@

calling instead of all flags which makes it very difficult to see the
information we actually need.
ok schwarze@ robert@

(someone should really sit down and flesh out the examples)

a proper & complete bind port will show up.
discussed with many for years

in rc.conf and the behaviour of the backwards compatibility
code in rc.subr for nfs_server=YES.
ok ajacoutot@

ok schwarze@

Committing early to make sure we have time to fix any side-effect.
ok deraadt@

(ok or failed) like we do with all other actions.
ok jung@ rpe@