ok sthen@ deraadt@

This doesn't change the directory structure being defined.
ok deraadt@

4.4BSD.dist.  The base set grows by a tiny amount, but we no longer
need to run chroot'd dynamic mtree from the installer.
ok espie halex schwarze

Even though occasional commits did happen to these files, they still
specify directories like /usr/share/man/cat4/tahoe, /usr/include/pascal,
/usr/X11R4 and so on, so calling them "maintained" would seem a bold claim.
ok sthen@ henning@

that is, only leave those after multiple .. and before multiple dir names.
While here, fix two comments that were actually wrong
and garbage collect one /set instruction that had no effect.
Saves 415 lines, which is 35% of the file.
ok sthen@ henning@

"works for me" deraadt@

From inframare at arachnogoat dot com; OK deraadt@ sthen@

ok landry@ ajacoutot@

ok henning@

ok deraadt@ guenther@

ok deraadt@

opens the log before chrooting, but this handles the case where syslogd is
restarted during Unbound's runtime.

and use it as the default location for the DNSSEC root key. Update default
config for this location.
With this, the only step required to enable DNSSEC validation is to
uncomment these default config entries and restart:
#module-config: "validator iterator"
#auto-trust-anchor-file: "/var/unbound/db/root.key"
There is no longer a requirement to run unbound-anchor manually to
update the root key. The rc.d script will take care of updates at boot,
and Unbound will manage the file itself at runtime.
Test with "dig test.dnssec-or-not.net txt @127.0.0.1" or similar.

this hardware alive is becoming increasingly difficult, and I should heed the
message sent by the three disks which have died on me over the last few days.
Noone sane will mourn these ports anyway. So long, and thanks for the fish.

OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@
"The time is right." and much help getting the show on
the road deraadt@

ok miod

by Bjorn Ketelaars.  Check that the /var/nsd/etc directory is protected
instead, it may contain zone-transfer keys etc.

ok deraadt@

ok matthieu@

Make sure the directory, DB and master keys have secure permissions.
ok dcoppa@ robert@ beck@

OK jsg@

input reyk@, guenther@
"move fast" deraadt@
OK naddy@

The proper directories are created by /usr/src/share/locale/ctype/Makefile.

ok schwarze@ giovanni@ sthen@

install sample configs to /etc/.
ok claudio deraadt henning mcbride

ok ajacoutot@, krw@, deraadt@

to fix and there are several alternatives that don't tell quite so many
dangerous lies.
enthusiastic agreement from a bunch of people