- getty runs on /dev/console. change owner of /dev/tty[CD]0
- include /dev/ttyc for mouse.
ok deraadt@

to allow access to VGA card's memory by mmapping /dev/xf86.
The macdep.allowaperture does also control /dev/pci access.
Ok miod@, deraadt@

goes multiuser. In consultation with dynamo; cleared by millert.

There are other TLS/SSL services we could add if desired.

really want this.  secure by default, and as i say, bite me.  millert
and markus and miod ok

need for root privileges for processes that create the sockets later.
ok deraadt@

deraadt and millert ok

long-standing annoyance that atrun's granularity is 10 minutes.
Most at jobs run with a 1 minute granularity.  Jobs submitted via
"at now" or "batch" will run immediately.  Includes a rewritten
cron(8) man page.  at(1) will be integrated more closely into
cron at a future date.
Upgrading notes:
the atrun job in root's crontab should be removed.
the /var/at/spool directory is no longer used

ok henning@, deraadt@

access to devices I/O ports from userland. Only BWX machines supported
for now. Added a man page.
Ok deraadt@, miod@.

ok millert@

starts, do a chroot to /var/empty and change to user nobody.
hi mom, i'm in jail!

ok frantzen@

generic as /dev/smartcard or similar.
deraadt@ ok.

add more simple filter rule examples
"commit it" deraadt@