ok sthen@ deraadt@

way, TCP packets of e.g. timed out states are blocked rather than
passed by the implicit default pass rule.
sthen@ benno@ phessler@ mikeb@ agrees

virtual disks).
input and ok kettenis@

the net/uccp package and is installed under /usr/local/. Since we don't
want a shell that default to /usr/local/..., use /sbin/nologin.
The uucp package will automatically change to the correct shell on
pkg_add / pkg_delete.
idea from and ok miod@

otherwise just kill it.
ok ajacoutot@ djm@ pirofti@, quite some time ago

ok millert@, mikeb@, lteo@

changed the build order.
Have release-sets depend on the kernels target, which restores the
order.
OK espie@

Feedback from millert@ guenther@
OK guenther@ man page bits OK jmc@

small for production servers now that pf is on by default.
OK phessler@

if there is need to send a SIGTERM to mountd(8), it should be done
manually as there is too much involved with RPC daemons to make it
automagic.
ok beck@

corner cases.  OK millert@.

paths which are rarely tried.  Problem reported by a few on the list.

Ok sthen@

They are not interesting, but they are annoying during system upgrades.
ok sthen@ ajacoutot@ henning@ dtucker@

expanded, but not enough due to precedence error. Spotted by Thorsten Glaser.

polluting ramdisks with devices that aren't needed there.

would be able to receive multiple SCM_RIGHTS messages.
ok claudio@ gilles@

SMART enabled.
Committing now so that it gets broader testing.
Man page bits will be added once we are confident there is no side
effect and this can stay.
inputs from sthen@ halex@ weerd@
ok deraadt@

ok guenther millert kettenis

requested by krw@
ok halex@

text.  OK deraadt@

grantpt() and unlockpt() using /dev/ptm.  Man pages from FreeBSD.
OK kettenis@ deraadt@ beck@ ajacoutot@ naddy@

from install.sub
with feedback from and ok halex

tries a bit harder to identify invalid interface names and in
this case emit an error message.
- use [[ $1 == autoboot ]] to avoid a shell error message due to
possible spaces in first argument
- no change in functionality
discussed with krw and halex
ok ("I like this") krw

not going to fix in order to stay compatible with legacy password data.
Nobody should use DES crypt anyway these days.
See http://www.freebsd.org/security/advisories/FreeBSD-SA-12:02.crypt.asc
for details about this bug.
Discussed with deraadt and beck about half a year ago (I'm pruning Ms
from my tree).

int (*)(struct dirent *)
to
int (*)(const struct dirent *)
to match POSIX.
ok millert@, ports check by naddy@

'stop' then 'start'; so to prevent this daemon from restarting itself,
rc_stop=NO is enough.
ok robert@

so we don't care if the file is present or not; also this function
should never return a failure.
ok halex@

from /etc/rc(8). This prevents the warning to be displayed at shutdown
time when the script has rc_stop=NO.
req. and input from fgsch@
"go ahead" schwarze@
input from an ok halex@, ok robert@

ok halex@

or the special value of 0.
ok deraadt@ otto@

See faq/current.html for more information.
The local_rcconf variable is not used anywhere anymore so drop it.
suggested by deraadt@
ok sthen@