discussed with rpe and halex

user mode now that init no longer raises securelevel during reboot.
OK deraadt@

right __dso_handle and have dlopen'ed shared objects run their atexit handlers
when they get unloaded.  This is what Linux does, and several ports depend on
this behaviour (and will crash upon exit without this chang).
Based on an earlier diff from matthew@
Tested by ajacoutot@
ok deraadt@

of size at least PATH_MAX.  pread(2), pwrite(2) and readlinkat(2)
also take the buffer and the bound.  OK theo.

- use its return code for single/multiuser detection
ok deraadt

ok deraadt

idea from rpe

unconditionally, and then do the optional powerdown
discussed at length with rpe

ok miod

material

being obtuse and use /dev/random

okay rpe@, kirby@

ok deraadt@

Requested by deraadt@

ok sthen@

into consideration.
Diff from Maurice Janssen, thanks!
ok rpe@ giovanni@

okay guenther@

a few developers thought this was a reasonable/good idea.

in /var/run/rc.d/identd has to be manually removed.
Reported by Adam Jeanguenat (avj at voyager dot 6v6 dot org).
ok dcoppa@ lteo@

magic numbers into sgttyb.  The "modern" replacement for f# is the
set of i#, o#, c#, l# to poke magic numbers into termios.
ok miod@

interfaces; ok deraadt@

as advised by deraadt

them ftime(), gtty(), stty(), re_comp(), cuserid() and others.
Discussion and ongoing work to fix the ports tree from many, especially
naddy.
ok naddy
[There is a bit more cleanup possible after that, but this is considered
the current safe step]

by Bjorn Ketelaars.  Check that the /var/nsd/etc directory is protected
instead, it may contain zone-transfer keys etc.

ok miller@

ok deraadt@

aoyama@

ok krw

use nsd-control to signal NSD.

found by millert@, ok deraadt@

moved them to unistd.h to match POSIX in 1995 but we never did.
The exception to this is getsubopt() which POSIX says should be in
stdlib.h.  The non-standard suboptarg extern remains in the BSD-only
section of stdlib.h.  Neither getsubopt() nor suboptarg belong in
unistd.h or getopt.h.  They were only there to allow us to protect
all the getopt() bits from being multiply defined.  OK guenther@

ok deraadt@, naddy@, ajacoutot@

to run OpenGL applications. ok kettenis@ naddy@

"Good catch" miod@

from and with deraadt@