ok deraadt@ beck@ reyk@ phessler@

It has also been moved to /usr/share/doc/html/httpd/.  This will
ease sysmerge upgrades and help keep htdocs clean.
Help from okan and phessler, doc tweaks by jmc
ok deraadt@ millert@ beck@

(2^30,2^31). Nothing in the tree yet requests random numbers bounded
by this range.
report jakob!deraadt; ok deraadt@

ok deraadt@ dlg@

ok jsing@

costs; ok jmc@ for the man page bits; ok millert@ deraadt@

offset. The 180s limit doesn't help very much these days.
ok otto@ mbalmer@

ok pyr@

with the same configuration to be run on the same net and they will
keep their lease files/state in synch, and therefore allowing you to
run redundant dhcpd's. Synchronization code stolen from spamd, uses
an hmac key in /var/db/dhcpd.key if it exists.
ok krw@ deraadt@

including some "cleverly" positioned in the dynamic range :(
- add a couple of services relating to some ports/packages which
otherwise need a manual change to this file
looks good to ajacoutot, steven. suggestions/ok deraadt

is the correct place for them and nothing gets them from here in
base/xenocara/ports. no objection millert@ okay kettenis@

Needed to tell pedantic C++ compilers these symbols have 'C' linkage.
ok kurt@

ok jmc@, no objections espie@

brk(2) returns an int value not a void *. brk(2) returns 0 upon success not
a pointer to the new end of memory. okay millert@, kettenis@, deraadt@

MPLS support partly based on the (abandoned?) AYAME project.
Basic LSR (Label Switch Router) functionality is present, but not fully
functional yet.
It is currently possible to insert entries in the LIB (Label Information Base)
with route(8), but setting the operation type is not supported yet.
Imported to allow more people to work on this in the coming weeks.
ok claudio@ laurent@ dlg@

An increasing number of types of these files (e.g. ppp, carp and
wlan adapters) may contain secrets.
ok deraadt oga johan

first version from todd, ok millert

inputs from jmc@
"looks ok" beck@ (similar older diff), "fine by me" jmc@

Use arc4random_uniform() when the desired random number upper bound
is not a power of two
ok deraadt@ millert@

calls vfork(2). "untested, but looks OK" marc@
- document vfork(2), popen(3) and system(3) don't call atfork handlers
in multithreaded programs. okay jmc@

ok deraadt@

Instead, just return 1 if there is a difference.
Found by lint.
OK millert.

- simplify a macro call (Do/Dc -> Dq)

introduce two new APIs for requesting strong random numbers:
arc4random_buf() - fill an arbitrary memory range with random numbers
arc4random_uniform() - return a uniformly distributed random number
below
a specified upper bound, avoiding the bias that comes from a naive
"arc4random() % upper_bound" construction.
these mirror similarly-named functions in the kernel;
lots of discussion deraadt@ mcbride@

should be good, plus it prevents weird things from happening if
len > INT_MAX.
- Since n is now size_t, compare it against 0 instead of >= 0.
- temp is used to store individual bytes, so use char instead
(matches fp and tp).
- millert noted that the comma operator may not guarantee order of
execution, so replace with semicolons.
Found by lint, OK millert.

cast to make it explicit.
Found by lint, OK millert.

bsd.rd does not overlap the boot code... this problem is starting to
feel familiar.. tested by myself and claudio

bootblocks have been moved, but we want 4.2 to be upgradeable.  So
reduce the footprint of the bsd.rd by shrinking the ramdisk filesystem
because it is way too large.  tested by sthen and kettenis

also adjust the documentation a little bit to decrease confusion about
the check timeout.
From pyr@
ok deraadt@

reference is "HARD" (or "GPS", "UMBG", "UDCF" ... in theory) rather than
"^@^@^@^@"
"why not" henning@

- rdr-anchor "relayd/*": the anchor used by relayd to load
redirections into pf.
- pass in on $ext_if proto icmp to ($ext_if): it is a bad habit to
block icmp, this example proposes to allow it by default.
ok henning@

randomisations (among other things) benefit from it. We still try again
after /var has been definitely mounted in case it is on NFS;
ok deraadt@

but only do the final popfile call after yyparse() is done.
This also fixes config reload on SIGHUP for some daemons.
Spotted by otto@. OK deraadt@