Copy stable/10@r272459 to releng/10.1 as part of
the 10.1-RELEASE process.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

MFH (r270392, r270676, r270679, r270698): add support for subdirectories in rc.conf.d

Approved by: re (glebius)

MFC r270096:

Bring in the new automounter, similar to what's provided in most other
UNIX systems, eg. MacOS X and Solaris. It uses Sun-compatible map format,
has proper kernel support, and LDAP integration.

There are still a few outstanding problems; they will be fixed shortly.

Reviewed by: allanjude@, emaste@, kib@, wblock@ (earlier versions)
Phabric: D523
Relnotes: yes
Sponsored by: The FreeBSD Foundation

Merge r267482,r267483,r267486,r267577,r267671,r267672 from head:

Remove send-pr and fix up all references to it. Replace it with a
stub send-pr directing people towards the web site.

MFC r266463:

- Include /etc/newsyslog.conf.d/* and /usr/local/etc/newsyslog.conf.d/* by
default for newsyslog(8).

MFC r257344,r257403:

Move /etc/keys to /usr/share/keys where users are less likely to modify them.

Approved by: bapt
Approved by: re (gjb)

MFC: r256770,r257142,r257145,r257146,r257147,r257148,
r257149,r257150,r257158,r257159,r257164,r257168,
r257193

- Support checking signature for pkg bootstrap from remote
and for 'pkg add ./pkg.txz'

- Be verbose on where pkg is being bootstrapped from.

- Add support for reading configuration files from /etc/pkg.
For now only /etc/pkg/FreeBSD.conf is supported.

- Add test package signing key fingerprint into /etc/keys/pkg/trusted.

- Disable fingerprint checking by default for now as the official
packages are not yet signed.

Approved by: bapt
Approved by: re (glebius)

MFC 256365
Remove most of the ATF tools and the _atf user.

Approved by: re

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Replace the unused /etc/unbound directory with a symlink to /var/unbound.

Approved by: re (blanket)

Build and install the Unbound caching DNS resolver daemon.

Approved by: re (blanket)

Add ATF to the build. This is may be a bit rought around the egdes,
but committing it helps to get everyone on the same page and makes
sure we make progress.

Tinderbox breakages that are the result of this commit are entirely
the committer's fault -- in other words: buildworld testing on amd64
only.

Credits follow:

Submitted by: Garrett Cooper <yanegomi@gmail.com>
Sponsored by: Isilon Systems
Based on work by: keramida@
Thanks to: gnn@, mdf@, mlaier@, sjg@
Special thanks to: keramida@

Add resolvconf(8) which manages resolv.conf.

Add /etc/devd/ and move hardware specific configuration there. This makes it
easier to maintain custom rules for non-system things like ACPI hotkeys.

/etc/devd.conf is already set up to check this directory, no change needed there.

Remove ISDN4BSD (I4B) from HEAD as it is not MPSAFE and
parts relied on the now removed NET_NEEDS_GIANT.
Most of I4B has been disconnected from the build
since July 2007 in HEAD/RELENG_7.

This is what was removed:
- configuration in /etc/isdn
- examples
- man pages
- kernel configuration
- sys/i4b (drivers, layers, include files)
- user space tools
- i4b support from ppp
- further documentation

Discussed with: rwatson, re

Move zpool.cache from /etc/zfs/ to /boot/zfs/, so we can keep it on
dedicated /boot/ file system and use ZFS for the root file system.

Connect ZFS to the build.

Add a /media to FreeBSD. /media is a directory designed to contain
subdirectories that will be used for removable media mount points (i.e.
mount points for CDs, floppy disks, USB drives, etc.). While the primary
purpose of /media is to provide a location for HAL
(http://www.freedesktop.org/wiki/Software_2fhal) to mount volumes, it could
be used by any application that needs to manage removable media volumes.

Discussed on: arch@
Approved by: mux
MFC after: 1 week

Add a new extensible GSS-API layer which can support GSS-API plugins,
similar the the Solaris implementation. Repackage the krb5 GSS mechanism
as a plugin library for the new implementation. This also includes a
comprehensive set of manpages for the GSS-API functions with text mostly
taken from the RFC.

Reviewed by: Love Hörnquist Åstrand <lha@it.su.se>, ru (build system), des (openssh parts)

Add /boot/firmware as iwi(4) now reads its firmware there.

Reminded by: flz

Add /etc/security, into which the BSM audit configuration files will be
installed. This is the same directory as found on Solaris.

NB: In FreeBSD 4.x and earlier, a script (file) named /etc/security
exists. Does mergemaster need to be taught how to replace a file with
a directory?

Submitted by: wsalamon
Obtained from: TrustedBSD Project

Create a named chroot directory structure in /var/named, and use it
by default when named is enabled. Also, improve our default directory
layout by creating /var/named/etc/namedb/{master|slave} directories,
and use the former for the generated localhost* files.

Rather than using pax to copy device entries, mount devfs in the
chroot directory.

There may be some corner cases where things need to be adjusted,
but overall this structure has been well tested on a production
network, and should serve the needs of the vast majority of users.

UPDATING has instructions on how to do the conversion for those
with existing configurations.

Forced commit to note that the previous commit added /etc/namedb/s
(where bind stores slave zones), not /etc/namedb/bind.

Create /etc/namedb/bind with owner / group bind and mode 0750.

Re-add namedb. I misunderstood what Doug said about using ISC's
layout: he meant for binaries, not configuration files.

Switch from BIND 8 to BIND 9.

Submitted by: (in part) dougb@, trhodes@
Reviewed by: dougb@, trhodes@, re@
MFC after: 5 days

Fixed style of previous commit.

Add /etc/ntp to hold keys for ntpd.

- Install includes used by STRIPE and NOP GEOM classes.
- Create needed directories.

Supported by: Wheel - Open Technologies - http://www.wheel.pl

Connect /etc/bluetooth and /usr/share/examples/netgraph/bluetooth to the build.

Reviewed by: imp, simon
Approved by: imp (mentor)

Add /lib and /libexec directories. These are part of the dynamic root
support.

Add /rescue bits. This basically encompasses all of bin and sbin along
with a couple of bits from usr.bin in a crunchgen'd binary.

Submitted by: Tim Kientzle <kientzle@acm.org>

No tabs here.

Initiate KerberosIV de-orbit burn. Disconnect the /etc configs.

Set the expected permissions of /dev to 0555 since this is what devfs
is using anyway. Otherwise, "make installworld" insists on resetting
them to 0755.

NODEVFS cleanup.

Change our default XF86Config location from /etc/ to /etc/X11/,
following the lead of The XFree86 Project's default.

Approved by: Murray

Long ago, there was just /etc/daily. Then /etc/security was split out
of /etc/daily. Some time later, /etc/daily became a set of periodic(8)
scripts. Now, this evolution continues, and /etc/security has been
broken into periodic(8) scripts to make local customization easier and
more maintainable.

Reviewed by: ru
Approved by: ru

Oops! Previous commit used tabs instead of spaces.

Add /etc/pam.d.

Sponsored by: DARPA, NAI Labs

UUCP removal phase II. These directories are now created by the
freebsd-uucp port.

Mention the path to the README file in the header comment.

Submitted by: Rich Morin <rdm@cfcl.com>

Got my r's and t's mixed up. Fix sorting.

Add etc/rc.d (looking to the future)

Apparently, people do not listen for a plea to look into the
README file before making changes here. Fix them once again.

Move the process of storing entropy from /dev/random and reseeding with
it at boot time closer to the way we want it to be in the final version.

* Move the default directory to /var/db/entropy
* Run the entropy saving cron job every 11 minutes. This seems
to be a better default, although still bikeshed material.
* Feed /dev/random some cheesy "entropy" from various commands
and files before the disks are mounted. This gives /dev/random
a better chance of running without blocking early.
* Move the reseeding with previously stored entropy to the point
immediately after the disks are mounted.
* Make the harvesting script a little safer in regards to the
possibility of accidentally overwriting something other
than a regular file.

Add a system to save entropy from /dev/random periodically so that
it can be used to reseed at boot time. This will greatly increase
the chances that there will be sufficient entropy available at
boot time to prevent long delays.

For /etc/rc, remove the vmstat and iostat runs from the attempt
to provide some cheesy randomness if the files fail, since
those programs are dynamically linked, and ldd seems to want
some randomness to do its magic.

Guidance and parameters for this project were provided by
Mark Murray, based on the requirements of the Yarrow
algorithm. Some helpful suggestions for implementation
(including the tip about iostat and vmstat) were provided
by Sheldon Hearn. All blame for problems or mistakes is
mine of course.

Add /boot/kernel/

The default is for 3rd party kernel modules to live in /boot/modules
rather than /modules.

Add /etc/ssh

Add directories: preparation for OpenSSL import.

$Id$ -> $FreeBSD$

This cleans up all the white space errors so that the next
commit is easier to understand.

Fix script in README to actually work, empty lines produce as
much a diff as lines with the wrong stuff on it.

Add references in mtree data files to the README.

drop /lkm

Gentlemen, I present you /boot/defaults. Just for the sake of symmetry.

Reviewed by: jkh (eyebrown raised a little, I concede)

Add /etc/defaults.

corrected disorder, override of user and group defaults and group
permissions for /etc/isdn (suggested by Bruce Evans).

add directory /etc/isdn and populate it

Old stuff laying around: Don't override /tmp to the same uid/gid as the
previous /set defaults

Remove mtree creation of /etc/namedb/s until we find a good way
to handle new user id's in buildworld/installworld.

Reviewed by: freebsd-current, freebsd-security

Adjust rc.conf to run named in sandbox, adjust mtree to add /etc/namedb/s
subdirectory (user bind, group bind) to hold secondaries, adjust
comments in named.conf to reflect new secondary scheme. (Note that
core read-only zone files are left owned by root, increasing security even
more).

Some directories would like to install things into /modules

Add /boot, while I happen to be thinking about it.

Simplify these now that default owner is root.wheel.

Partially reviewed by: bde

Change file ownership from bin.bin to root.wheel.

add /etc/mail--the anti-spam files
branches affected: -current, RELENG_2_2, and RELENG_2_1_0

/etc/opielocks -> /var/spool/opielocks

Add /etc/opielocks for opie locks, standard place

cron.d -> periodic

Add entries for cron.d and friends

Create directory /etc/skel.

Revert $FreeBSD$ to $Id$

Make the long-awaited change from $Id$ to $FreeBSD$

This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.

Regenerate these using mtree -cdinx -kuname,gname,mode on a very recently
built release after fixing all the wrong directory permissions in that release.

Then use diff -c -b to verify them against the old versions, nothing but
new directories added :-). And a lot of alphabetizing done!

Make /etc/ppp. Someone still needs to make the install touch
/etc/ppp/options so that pppd will run.

These are mtree generated versions of these files using the
new mtree options.

I will be updating these shortly to remove some old stuff and add some
new stuff. These currently produce the exact same trees as they did.

Per discussion on the mailing-lists, move LKMs from /sbin to /lkm, and
arrange for that directory to get created by mtree. Also, process secure
directory after all the others, because the programs there may overlay
ones installed from the main part of the tree.

Don't build /etc/confgig; we decided not to take that route.

Add the missing . entries to BSD.*.dist files.

New file BSD.release.dist is used for creating release area top level
directories.

Added /etc/gnats directory to BSD.root.dist mtree template.
Submitted by: Paul Richards

Change default for directory permissions to be 0755.

Make /etc/uucp uucp.uucp 0770

Added /etc/kerberosIV directory. NB: the sample files should NOT be
installed by default, because then everybody would suddenly start
trying to authenticate themselves in the CS.BERKELEY.EDU realm, which
is really not a very good idea. Maybe the README could get installed.

Add /proc, we need one of them now. Clean up some mode settings.

General cleanup for 1.1 release, mostly add zoneinfo stuff to BSD.usr.dist

Added /etc/config as a directory to be maintained. Also added RCS Id.

Add /etc/uucp for uucp configuration files

Changeing the /sys link target from usr/src/sys.386bsd to usr/src/sys also
changes its length from 18 to 12.

The updated mtree changed a couple things which required changes in
the mtree files.

Changed sys.386bsd to sys

Fixed /dev/fd to be owner bin group bin mode 555 per the /dev/MAKEDEV script

Updated BSD.*.dist files to reflect FreeBSD as it is now.

This commit was generated by cvs2svn to compensate for changes in r37,
which included commits to RCS files with non-trunk default branches.

Initial import of 386BSD 0.1 othersrc/etc