relevant when the dummy ruleset can't be loaded, we still want to enable
pf, otherwise the real ruleset (even if that does load correctly) won't
be active. might happen on a non-GENERIC kernel or after an update (before
/etc is manually updated). reported by Jim Rees. ok frantzen@

unsigned but there is no ABI change.  OK deraadt@

should be generally usable, split this out into option 'P'. ok deraadt

ok beck@

from original author (David Mazieres)

- add a `method' capability to the whitelist example
ok beck@

stir after eating 400000 words.  ok + input deraadt

ACPI tables into kernel memory and attach ACPI and HPET timers currently.
In order to test this code, enabling the devices in GENERIC as well as
the ACPI_ENABLE option is needed.  This code does not do any thermal
control yet, so this should be done with care depending on the platform.
In the tree so more people can contribute to making this more fully
featured.
Ok niklas@ grange@ tedu@

explicit about mktemp(3) in the man page.

necessary for regular carp setups. There are situations where you need this,
but if you're going to use it, think hard about redesigning your network so
you don't have to.
ok deraadt@ mpf@ henning@

ok jaredy@ miod@

<kurt@roeckx.be> / bugs.debian.org/310586

they get a whole page and go right at the end of it. ok deraadt tdeval

lines on facility.  End sentences with a dot.  And some whitespace nits.
Matrix (debug mode) is equivalent.
ok otto millert

of interfaces.
This reduces the netstart script by 174 chars, 13 words, and 19 lines, but
more importantly, makes it more simple and less cluttered should more special
case/orderings be needed.
ok brad@ and pr 4197 submitter, inspired by and closes pr 4197

o move test for foo.conf into the foo_conf function proper

OK deraadt@

so do not redefine it.
Found out by the quite picky fixinc in recent gcc.
okay millert@, kettenis@

o update resource limits if kern.maxproc or kern.maxfiles is changed

ok deraadt@

environment stuff originates from AT&T or BSD. ok ok deraadt@
millert@ ian@

* introduce the mbstate_t typedef.
impacts gnu libiconv, which has already been taken care of.
* Prepare for mb stuff to really exist, replace macro MB_CUR_MAX with
an external variable __mb_cur_max (impacts libX11 and various ports).
* use mbstate in all the mb <-> wchar functions with state.
* add a stub iswctype function allowing some ports to compile.
bash and gdiff are missing wcscoll, and need to be told there's no i18n
until this is fixed.
Discussed and matthieu, otto, millert, kettenis, deraadt.
Major libc bump

is feasible.
Okay millert@
There's a major libc bump coming that is going to cover this as well...

but more correct.
from  Michael Knudsen <e@molioner.dk>

appropriate error number. ok miod@, millert@ on an earlier version;
ok jaredey@

make sure we can't underrun this buffer.  Also force NUL-termination
of this buffer, and ensure that large unsigned integers are printed
correctly.
Started by a diff from Dave Hines, openbsd (at) dph (dot) fluff (dot)
org; thanks.
with and ok otto@