align everyone who is using SUDO builds towards the new strategy.
ok natano

case the dup2() would fail silently and the descriptor would remain with
the CLOEXEC flag causing the exec*()d child process to have unexpected
behavior.
ok guenther@

/var/db/acpi directory. Later sendbug(1) will use this data in
bug reports. That directory is created by mtree.
idea from and OK deraadt
OK kettenis

like vether(4).
nits from and ok benno@, phessler@

Input deraadt@
OK benno@, sthen@

with this change we get the pledge() ability back to the parent process.
some tweaks from and ok reyk@

it, remove some verbose shutdown messages that we had before with pipe
close.
ok reyk@

OK natano on a previous diff which used a different uid/gid.
naddy@ pointed out that uid/gid was already taken on "important" systems.
Turns out we cannot easily recycle freed up uids/gids so settle on 51.

ok deraadt@ sthen@ florian@

or prototypes.  Ditto for some of the char* and void* casts too.
verified no change to instructions on ILP32 (i386) and LP64 (amd64)
ok natano@ abluhm@ deraadt@ millert@

OK guenther@

ok guenther@

it can be worked on in the tree).
ok florian@ deraadt@

ok tedu@

reported by brynet

ok florian

OK halex

ok reyk@, bcook@

obvious why it is implemented this way.  The whole idea of constraints
is to isolate them as much as possible, in a semi-paranoid way.
OK rzalamena@

OK from the original author Alexander Guy

ok deraadt@ millert@

to a local equivalent to eliminate a dependency on <sys/time.h> being
included
ok deraadt@ millert@

matter much -- and "uucp" is just stupid in 2016.
ok rpe

from rpe

should be owned by root.
ok deraadt

Found by landry
OK deraadt

While here, convert `` to $().
OK halex

OK halex

OK halex, krw

through and try whatever it can do with the invoking user's perms
feedback/ok aja@ rpe@

update the NULL definition for C++11.  OK deraadt@ guenther@ kettenis@

Based on a diff from Anthony Coulter.
OK krw, halex

OK tb

to /dev/audio*. No port is using them (thanks to sthen@ for checking).
ok sthen@

while here, remove the comment for man6, according to ingo's system...

we don't end up with cryptic error messages.
Regex help from rpe@
Issue reported by Anthony Coulter in rcctl(8), but better fix the root cause.
Also clarify the mage page that rc.d script name must follow ksh(1) variable
naming.
ok robert@ sthen@

before descending, after ascending, but not around single-subdir dirs