Ok tb@ jung@

not backed by blocks until used.
So I'll use /home/vm instead.
Pointed out by deraadt@

not fixed yet.

the paths.
Ok gilles@, jung@

rc-wise OK aja@ jasper@

default one is good enough.
So merge rc.conf(8)'s 'multicast_router' and 'multicast_host' into a
single 'multicast'.  If set to YES the reject route for 224/4 is not
inserted by netstart(8).
Manual bits from jmc@
ok henning@, ajacoutot@

ok mlarkin@
prompted by deraadt@

the doas program itself will refuse to use an insecure config file.
(changelist will continue to watch for changes, as well.)

shlib_dirs using /etc/rc.conf.local.
Fix from Jan Johansson, thanks.
OK krw@, halex@

discussed with jsg

They should not share a uid.  Leave the proxy uid for later mop-up
(sysmerge does not handle uid renamings well enough)
ok dlg, ok aja a while back

ok benno@ requested by tedu@

- Rename function to ifv6autoconf() to make IPv6 relation clearer
- Localize and rename variables
OK krw@

- Change comments to make it clearer that ifmstart() takes two lists
of interface driver names (of which the second is optional) and not
the actual interface instances.
- Use localized variables and use slightly more verbose names.
- Use continue 2 to skip to the next hostname.if file.
- Use shell pattern @() instead of testing _sif individually.
OK krw@

- Align comments with /etc/rc version
- Use localized variables
- Use safer "print -r --" instead of plain echo
Changes to ifstart():
- Tweak comment
- Add usage
OK krw@

general openssl cnf files install the ikeca.cnf file.
ok sthen@ requested by reyk@

creating the directory /usr/share/nls.  Having a non-existing default
path in catopen(3) does not make sense, so remove it.  If the user
does not specify a NLS path, better fail early than fail because
of an empty directory.  Remove path form hier(7).
OK stsp@ schwarze@ jmc@

General changes:
- apply a similar 'style' as used in the installer scripts
- improve comments to be more to the point, remove where code is obvious
- document usage of functions if they have arguments
- rename variables where it improves readability
- replace really old-school shell code with more contemporary idioms
Other changes:
- No need to care about "autoboot" because netstart doesn't inherit the
positional parameters from /etc/rc anymore. /etc/rc executes netstart
instead of sourcing it since r1.439.
- Use simpler for-loop to process list of interfaces with ifstart.
OK halex@

OK krw@

stripcom() output directly with the hostname command.
OK deraadt@ krw@

and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well.
ok millert@

OK dlg@ mpi@

ok renato@

OpenSSH requires a 2048 minimum for DH in the client and server.
input and ok sthen@
ok dtucker@, djm@

Move the one useful bit of information contained in the file ("one
user name per line") to the ftpd(8) manual page where it belongs.
OK deraadt@ sthen@

OK krw@ halex@

ok aja

ok schwarze@

The file format is so simple that no example is needed.
All relevant documentation is already available
from the proper place, which is the lpd(8) manual.
Consequently, delete the empty file.
OK millert@ dcoppa@ beck@ deraadt@

ok gilles@