material

being obtuse and use /dev/random

okay rpe@, kirby@

ok deraadt@

Requested by deraadt@

ok sthen@

into consideration.
Diff from Maurice Janssen, thanks!
ok rpe@ giovanni@

okay guenther@

a few developers thought this was a reasonable/good idea.

in /var/run/rc.d/identd has to be manually removed.
Reported by Adam Jeanguenat (avj at voyager dot 6v6 dot org).
ok dcoppa@ lteo@

magic numbers into sgttyb.  The "modern" replacement for f# is the
set of i#, o#, c#, l# to poke magic numbers into termios.
ok miod@

interfaces; ok deraadt@

as advised by deraadt

them ftime(), gtty(), stty(), re_comp(), cuserid() and others.
Discussion and ongoing work to fix the ports tree from many, especially
naddy.
ok naddy
[There is a bit more cleanup possible after that, but this is considered
the current safe step]

by Bjorn Ketelaars.  Check that the /var/nsd/etc directory is protected
instead, it may contain zone-transfer keys etc.

ok miller@

ok deraadt@

aoyama@

ok krw

use nsd-control to signal NSD.

found by millert@, ok deraadt@

moved them to unistd.h to match POSIX in 1995 but we never did.
The exception to this is getsubopt() which POSIX says should be in
stdlib.h.  The non-standard suboptarg extern remains in the BSD-only
section of stdlib.h.  Neither getsubopt() nor suboptarg belong in
unistd.h or getopt.h.  They were only there to allow us to protect
all the getopt() bits from being multiply defined.  OK guenther@

ok deraadt@, naddy@, ajacoutot@

to run OpenGL applications. ok kettenis@ naddy@

"Good catch" miod@

from and with deraadt@

ok krw

EAGAIN causes spinning.
fix from claudio:
"Let msgbuf_write return -1 with errno EAGAIN. The users then must
check if this was the case and readd the event or poll again.  The
current handling in the imsg code is wrong for sure."
ok gilles

ok guenther otto

Committing now to unbreak ports builds (gvfs fails without, which knocks
out building much of the tree.)

note that on boards without ahci you will need to install to usb and still
boot of sd, at least until there's support for the sd slot.
ok patrick@

ok deraadt@

Instead of running mkuboot during install, we call it on during
the release build, so that we can also ship bootable images
of the generic and the ramdisk kernel.
We can now build miniroots for imx, too.  The installer also
can recognize the SoC and makes decision based on it.
Use ext2fs for i.MX6 based devices.
Tar the bootloader files to save some space.
ok syl@