unmapping of freed allocations without disabling chunk randomisation
like the "Freeguard" ('F') option does. Make security 'S' option
use 'U' and not 'F'.
Rationale: guarding with no chunk randomisation is great for debugging
use-after-free, but chunk randomisation offers better defence against
"heap feng shui" style attacks that depend on carefully constructing a
particular heap layout so we should leave this enabled when requesting
security options.

this file, even years after the rc.conf / rc.conf.local split happened.
One way to improve upon this is to put a big fat comment at the top of
the file.  (Other ways to improve this is by renaming files, but that
will just create more confusion).
ok aja robert

the pexp.

ok chl@ gilles@

Pointed out by ajacoutot@

OK claudio@

- add examples for how to accept mail from external source and for a
specific domain

making files stand-alone, some __restrict additions.
tweaks kettenis@; ports testing and fixes landry@ and jasper@
ok millert@

references into a STANDARDS section;

references into a STANDARDS section;

__returns_twice and __dead instead of depending on GCC's special
handling of these function names.
With input from kettenis@ and guenther@
Fixes a warning from clang
ok matthew@

an empty name, NULL pointer, or a name containing an '=' character.
OK millert@, guenther@

u_int32_t is historical BSD stuff.
fix to match the manpage, namely #include <stdint.h> as a prerequisite.
okay millert@

install sample configs to /etc/.
ok claudio deraadt henning mcbride

OK markus@ henning@ phessler@ jmc@

pointed out by Frank Brodbeck <fab at guug.de>, actual change with & ok jmc

in working condition anymore (assuming there would be interest in running on
it).

Much ports testing of various versions by naddy@ and jasper@
ok matthew@, miller@

equal, but it is more correct)
from Michal Mazurek

Okay otto@.
Found by Michal Mazurek <akfaew at jasminek dot net>, thanks!

ok sthen@

be included in source files that specify POSIX source.  libutil isn't
a standard POSIX library, but no need to be gratuitously incompatible.
Fixes x11/st.
ok tedu, guenther, kettenis

ok kettenis@

regress test.

ok deraadt jsing matthew

There is no reason we couldn't reload|stop a daemon even when _flags is
set to NO.
As a bonus side effect, we can now see usage() on disabled scripts.
discussed with sthen@ and espie@
ok sthen@

stays;
ok henning

can trivially regen the <=4k bit ones.  ok djm@

ok deraadt@ robert@