usr.sbin/nginx using the distribution target

duid and device entries in fstab. As a bonus make commented out
lines in fstab in-eligable for altroot detection.
ok halex@ deraadt@

Reported by & fix tested by Dave Anderson. Thanks!
ok deraadt@

initially intended for YubiKey, jmc@ noted that list was out of date.
ok deraadt@, jmc@

the last node is deleted.  Instead, resolve the Coverity warning
by returning (node *)1 when you delete the root node.
based an idea from millert@.  ok otto@

ok deraadt

From danh@, ok aja@ giovanni@

Includes friendly linker warning to wake up those dumb enough to use it.
Committing for kettenis@, who ran away to the hills after writing it

ok guenther

ok ajacoutot sthen

okay millert@

Ok sthen@, millert@, dcoppa@

and add an 'rtableid' keyword to ps.
Add rtable id, thread id, and socket splice info to struct kinfo_file2
and make fstat display socket splice information.
Remove old KVM_PROC2 and kinfo_proc2 interfaces; bump libkvm major
Socket splice info and corrections from bluhm@  "Lovely" deraadt@

ok beck@, guenther@, millert@, miod@

instead of <pthread.h>.
ok guenther@, millert@

noticed by zepard at gmail
OK henning@

ok ratchov@

with input from and ok sthen@

ok sthen@

rename key1 to tsig1 to clearly identify this name as a transaction
signature digest; consistently use tsig key name on slave zone.
ok jakob@

configuration without service disruption which is not what -HUP does for
nsd(8).
Anyway, zone operations (...) should be done using nsdc(8) and not with
an rc script.
discussed with and ok sthen@

from ajacoutot@.
ok deraadt ajacoutot

ok jmc@

out by Arne Becker, who also supplied the diff, thanks!
ok schwarze@
agreed by many

regular user, member of the operator group); rm(1) was waiting for
interactive input to remove the runfiles which made no sense, so just
use `-f'.
issue spotted by weerd@
ok weerd@ robert@

Correct the namespace protections for sigreturn(), sigwait(), and psignal()
ok millert@

All facts from http://minnie.tuhs.org/cgi-bin/utree.pl, checked by sobrado@.
Feedback and ok jmc@ jmc@ (sic, Jason checked and ok'ed this twice).

fail with errno set to ERANGE if not enough room is provided. Similar for
getlogin_r() so remove minbytes enforcement attribute.
ok kettenis@ guenther@ deraadt@ on getcwd, deraadt@ on getlogin_r.

Pretty terse for now but will eventually come with some more complex
examples when ratchov@ finishes some ongoing work on aucat(1).
ok ratchov@ jmc@ deraadt@

number of audio* nodes from 3 to 1 on vax, since none of the audio-capable
vax can receive another audio device as expansion (until we get TURBOchannel
support with DMA on VS4k/90).
ok deraadt@ todd@

character support changes based on code from FreeBSD.
ok espie guenther; man page help from schwarze

just leave them untouched
ok ajacoutot@ sthen@ schwarze@

server _must_ be running and accessible before ypldap is started).
Add a proper pexp in the ypldap rc script.
discussed with pyr@ robert@ deraadt@
ok deraadt@

might pick it up from a polluted environment.
Requested by halex@, ok ajacoutot@ halex@

reading it failed, ${pexp} ended up as the empty string and the script
would send SIGTERM to init(1), which was really inconvenient.
Fix that by never allowing pexp to become empty.
My patch considerably simplified by and ok  ajacoutot@.

its _flags in rc.conf(8).
When the rc.d(8) system starts a daemon, it will record its pexp under
/var/run/rc.d/rcscriptname and use that to interact with it (errors in
creating /var/run/rc.d or missing pexp file are non fatal, the framework
will just fallback to what it currently does).
deraadt@ doesn't mind a long as it doesn't come in the way of people
manually managing their daemons.
discussed with and input from sthen@ halex@ robert@ schwarze@
ok sthen@ robert@