PF ruleset. This is not a complete block on _pbuild being able to communicate
(e.g. non-TCP/UDP protocols don't have a PCB with userid, so PF can't restrict
in those cases) but avoids some cases, and in particular makes it more obvious
when a port does things like download extra distfiles or dependencies
as part of the build process. Slight tweak from a diff by espie@.

discussed at length with benno, beck, deraadt, and florian

"nice" deraadt@
OK benno

OK benno, sthen

/dev/arandom any longer.  ok deraadt@

currently serves no purpose.
ok rpe, agreement from deraadt and halex

etc) from underlying switch interface instead of handling this on its
own.
Diff from carlos cardenas, Thanks!
ok reyk@

OK tb@

prodded by Raf Czlonka
OK tb@

one location under /usr/share/relink.
Be more specific in src/etc/rc reorder_libs() what filesystems
need r/w remount and ensure that their mount state is restored.
Idea and positive feedback from deraadt@
OK aja@ tb@

ttyB* minor numbers change; be sure to rerun MAKEDEV if you do not
upgrade with bsd.rd
Adapted from NetBSD by miod@

From Raf Czlonka.
ok halex

sysctl_conf() spawns a subshell.  This prevents that the new process
limits affect the daemons started during boot.
OK rpe@ halex@

Create only /dev/urandom as device.
Create /dev/random and /dev/arandom as symlinks.
Drop /dev/srandom, which has been unused for a long time.
/dev/arandom will go away at a later point.
Discussed with guenther@, ok deraadt@

Move tmpdir for reordering library from /tmp to /usr/lib.
This allows to have /tmp mounted noexec.
prompted by reports on misc@
OK deraadt@ tj@ tb@

OK deraadt@

fixes parsing of the example configuration
OK benno@

noticed by Alex Holst
OK henning@

USB isn't supported.  The installer turns out to have been broken on
BeagleBoard for over a year and no one noticed.  The existing support
for OMAP3 in the kernel remains though it isn't clear if anyone has
tried it after the fdt changes went in.
ok patrick@ tom@ kettenis@ matthieu@

reorder_libs() resulting in a unique ld.so on every system start.
Idea from and OK deraadt@
OK tb@

machines, running sysmerge(8) can take a little while so don't let people
wonder about why the output seems stuck.
ok sthen@ tb@ rpe@

(again...)

/usr/libexec/reorder_kernel. Requested by ajacoutot@ to be able to
relink the kernel from within syspatch(8).
OK deraadt@ tb@

requested by ajacoutot@
OK tb@

reverse order on shutdown.
OK aja@ tb@

OK phessler@

in hostname.if(5)
OK mpi@ deraadt@ florian@
OK jmc@ from doc perspective

- in netstart, rename _file to _hn referencing hostname.if files
- in install.sub switch ifstart() to be used with _if instead of
_hn as parameter
ok krw@ tb@

reachable through different pvbus device nodes.
Suggestion and OK deraadt, OK reyk

being reordered.
okay tb@ deraadt@

OK tb@

Diff from Klemens Nanni
OK tb@ zhuk@

it after remounting the filesystem containing /usr/lib as rw:
the former is pointless if the latter should happen to fail.
From Klemens Nanni
ok rpe

reorder_libs().
From Klemens Nanni with input from rpe.
ok rpe, zhuk