Remove svn:mergeinfo carried over from stable/9.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy stable/9 to releng/9.3 as part of the 9.3-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

MFC r267090:

Correct the document date for last change.

Approved by: re (gjb)

MFC r266416:
------------------------------------------------------------------------
r266416 | bjk | 2014-05-18 17:05:54 -0400 (Sun, 18 May 2014) | 14 lines

Document some user-settable make variables in ports.7

This is not a comprehensive list, as the variables themselves are spread
out over multiple files, but it is a start.

Add a section to make.conf noting that variables may be set there that
affect ports builds, but refer to ports.7 and elsewhere for the actual
listing; any listing in make.conf.5 would likely become out of date
fairly quickly.

PR: docs/189199
Reviewed by: bdrewery (previous version)
Approved by: hrs (mentor)

------------------------------------------------------------------------

PR: 189199
Approved by: re (gjb), hrs (mentor)

MFC r266828:

Correct the description of characters allowed. Based on pw_checkname in
usr.sbin/pw/pw_user.c. Modified version of patch submitted by
venture37.

Approved by: re (gjb)

MFC: r255977 (partial)

Sweep man pages replacing ad -> ada.

MRC r265230:
Clarify that MAKEOBJDIRPREFIX and MAKEOBJDIR are not
honored as make(1) arguments.

Sponsored by: The FreeBSD Foundation

Regen after r263053

Sponsored by: The FreeBSD Foundation

MFH (r251810): fix installation from read-only .OBJDIR
MFH (r255384): add PRIVATELIB for internal-use shred libraries
MFH (r255385, r255413): add a stock libmap32.conf
MFH (r255765): always support directory mapping; rewrite libmap man page

MFC r261832-261834:

r261832:
Add cross references between rc.conf(5) and jail.conf(5).

r261833:
Add commas (,) to the list in the SEE ALSO section, to match most
other manuals.

r261834:
Bump .Dd forgotten in r261832.

MFC r256775,r256776:
Add support for "first boot" rc.d scripts.

Document this new functionality in rc.conf(5) and rc(8).

Bump __FreeBSD_version so that ports can make use of this.

MFC r255505:
Do not install freebsd-update.conf.5 manual if WITHOUT_FREEBSD_UPDATE
is set.

Sponsored by: The FreeBSD Foundation

MFC r253290:
Document that a literal jail name of 0 (zero) is not allowed.

PR: 174436
Approved by: re (glebius)

MFC 251584:

Add :ifname modifier to specify interface-specific routes into
{,ipv6_}static_routes and rc.d/routing. For example:

static_routes="foo bar:em0"
route_foo="-net 10.0.0.0/24 -gateway 192.168.2.1"
route_bar="-net 192.168.1.0/24 -gateway 192.168.0.2"

At boot time, all of the static routes are installed as before.
The differences are:

- "/etc/rc.d/netif start/stop <if>" now configures static routes
with :<if> if any.
- "/etc/rc.d/routing start/stop <af> <if>" works as well. <af> cannot be
omitted when <if> is specified, but a keyword "any" or "all" can be used
for <af> and <if>.

MFC 242184:

Add setfib(1) support for services as <name>_fib in rc.conf.

MFC 230453, 230726, 252015, 252426:

- ipv6_enable + ipv6_gateway_enable should unset ACCEPT_RTADV by default for
backward compatibility.

- Configurations in ipv6_prefix_IF should be recognized even if there is no
ifconfig_IF_ipv6.

- DAD wait should be performed at once, not on a per-interface basis, if
possible. This fixes an issue that a system with a lot of IPv6-capable
interfaces takes too long for booting.

- Add CIDR notation support like 192.168.1-2.10-16/24 to $ifconfig_IF_aliasN.
This is an extended version of ipv4_addr_IF which supports both IPv4 and
IPv6, and multiple range specifications. To avoid to generate too many
addresses, the maximum number of the generated addresses is currently
limited to 31.

- Add $ifconfig_IF_aliases, which accepts multiple IP aliases in a variable.

- ipv6_prefix_IF now supports !/64 prefix length. In addition to the old
64-bit format (2001:db8:1:1), a full 128-bit format like 2001:db8:1:1::/64
is supported.

- Replace ifconfig command with $IFCONFIG_CMD variable to support
a dry-run mode in the future.

- Remove IP aliases before removing all of IPv4 addresses when doing
"rc.d/netif down".

- Add a DAD wait to network6_getladdr() because it is possible to fail to
configure an EUI64 address when ipv6_prefix_IF is specified.

MFH (r246552): mention newgrp(1) and how to change the group password.

PR: docs/167741

Regenerate after r252827

MFC r230786, r246283, r251084, r251085, r251086:

r230786 (imp):
- Allow specification of build shell for the buildenv target.

r246283 (hrs) (partial):
- Add {WORLD,KERNEL}_FLAGS to [BTWK]MAKE.

r251084:
- r245757 introduced warning output if update method is set to
CVS_UPDATE or SUP_UPDATE.
- CVS exporter for stable/9/ is turned off for nearly one month
now.
- It is finally time to swing the ax at these update methods.

r251085:
- Fix typo introduced in r251084.

r251086:
- Remove references to CVS_UPDATE and SUP_UPDATE to catch up
with r251084.

Approved by: kib (mentor)

MFH (r248617): retire the mislabeled ENABLE_SUID_SSH knob.

MFC r249591:
Document jail_<jname>_parameters option.

The description explains why we should not configure "path",
"host.hostname", "command", "ip4.addr" and ip6.addr" parameters with
this, but rather use the historical rc.conf(5) options.

MFC r249952:

Fix examples for overriding INSTALL to not suggest hardcoding
'install' since it breaks buildworld after the introduction and
use of 'install -l' in r245752. Overriding INSTALL causes
/usr/bin/install to be used instead of the proper
/usr/src/tools/install.sh which handles the new flag.

Regenerate

Regenerate src.conf.5 after r246637.

Regenerate

MFC r240252, r241541, r241543, r245756:

r240252: (eadler)
- Remove documentation and www cvsup files as they are no longer
useful with the switch to subversion.

r241541: (joel)
- Minor mdoc improvements. Also remove unnecessary csup reference.

r241543: (eadler)
- Bump .Dd

r245756:
- Mark SUP_UPDATE as deprecated in make.conf(5), providing
instructions to use SVN_UPDATE or freebsd-update(8).
- While here, remove bogus NO_WWWUPDATE.

Remove bogus mergeinfo introduced with r240545.

MFC r244562,245241,245435

Add NetBSD's mtree to the tree and install it as nmtree.

Always install our mtree as /usr/sbin/fmtree and link it as
/usr/sbin/mtree by default.

Add a src.conf option WITH_NMTREE that causes NetBSD's mtree to be linked
as /usr/sbin/mtree as well as /usr/sbin/nmtree.

Sponsored by: DARPA, AFRL

MFC rr243398-243399:
- core(5) references sysctl debug.num_cores, but it is really debug.ncores.
- [mdoc] remove hard sentence breaks.

PR: docs/173831

MFC r241542:
Don't document the PORTSSUPFILE variable. Even though this still works,
try to discourage users from depending on it.

Approved by: cperciva (implicit)

MFC r240252,r240253:
Remove documentation and www cvsup files as they are no longer useful
with the switch to subversion.
Specifically document that an incomplete ports tree is not supported.
Remove useless comment about sendmail.

Approved by: cperciva (implicit)

MFC r238631:

Import an updated version of moduli(5) manual page from OpenBSD.

MFC r238707:
Document the following in rc.conf.5:
- rtsold_enable
- rtsold_flags
- rtsol_flags

Approved by: re (kib)

MFC r237581:
Explicitly mention that setting the change and expiry times to zero is
equivalent to leaving the time unset. [1]

Wordsmith in the compat support section.

Use a full path to nologin(8) in the context of setting it as a user's shell,
keeping a separate cross-reference.

PR: docs/169354 [1]
Approved by: re (hrs), hrs (mentor)

MFC 236352:
Bump date for content missed in r236290

Approved by: cperciva (implicit)

MFC r233648:
Remove trailing whitespace per mdoc lint warning

Approved by: cperciva (implicit)

MFC r236290:
Document daily_status_security_chkportsum_enable

PR: docs/167980
Approved by: cperciva (implicit)

MFC: 234851, 235059

Add two special directives to libmap.conf:
include <file>:
Parse the contents of file before continuing with the current file.
includedir <dir>:
Parse the contents of every file in dir that ends in .conf before continuing
with the current file.
Any file or directory encountered while processing include or includedir
directives will be parsed exactly once, even if it is encountered multiple
times.

Approved by: des (mentor)

MFC r236274, r236278, r236279:

r236274:
- Fix an mdoc(7) formatting nit.

r236278:
- Fix mdoc(7) style nits.

r236279:
- Add '-width Pa' to src.conf.5 for mdoc(7) style consistency.

MFC r235342:

General mdoc(7) and typo fixes.

PR: 167804

MFC r235337:

General mdoc(7) and typo fixes.

PR: 167804

Regenerate

MFC r234935:
Prefer the use of csup to cvsup when talking about the binary.

PR: docs/167459
Approved by: cperciva (implicit)

MFC 234611:
Update the bugs section. We don't consider tmpfs as experimental,
though we do not claim to support all mount options equally well.

MFC r232157, r232158:

r232157:
Fix various typos in manual pages.

Submitted by: amdmi3
PR: 165431

r232158:
Whitespace cleanup:
o Wrap sentences on to new lines
o Cleanup trailing whitespace

MFC 232322:
Add a WITH_CLANG_IS_CC option for src.conf(5), disabled by default, that
installs clang as /usr/bin/cc, /usr/bin/c++ and /usr/bin/cpp.

Note this does *not* disable building and installing gcc, which will
still be available as /usr/bin/gcc, /usr/bin/g++ and /usr/bin/gcpp. If
you want to disable gcc completely, you must use WITHOUT_GCC.

MFC 232323:
Regenerate src.conf(5) after r232322.

MFC 232477:
In r232322, I forgot one case where a check for MK_CLANG_IS_CC was
needed, in sys/conf/kern.pre.mk. Add it now.

MFC 232522:
Fix a thinko in r232322, where gcc (and its tools) are not built during
the cross-tools stage, if CC=clang and WITH_CLANG_IS_CC is not set.

This causes no 'cc' to be installed in the temporary cross-tools tree,
making lint fall over later in the build, because it ignores ${CC} and
attempts to run 'cc' anyway.

To fix this, only skip building gcc during cross-tools, if WITHOUT_GCC
is set, or if WITH_CLANG_IS_CC is set.

Pointy hat to: dim

Merge 231025 from head:
Add new socket options: TCP_KEEPINIT, TCP_KEEPIDLE, TCP_KEEPINTVL and
TCP_KEEPCNT, that allow to control initial timeout, idle time, idle
re-send interval and idle send count on a per-socket basis.

Reviewed by: andre, bz, lstewart

Jail-mount MFC: r231265,r231267,r231269,r232059,r232186,r232247,
r232278,r232307,r232342

MFC r231265:
Introduce the "ruleset=number" option for devfs(5) mounts.
Add support for updating the devfs mount (currently only changing the
ruleset number is supported).
Check mnt_optnew with vfs_filteropt(9).

This new option sets the specified ruleset number as the active ruleset
of the new devfs mount and applies all its rules at mount time. If the
specified ruleset doesn't exist, a new empty ruleset is created.

MFC r231267 [1]:
Add support for mounting devfs inside jails.

A new jail(8) option "devfs_ruleset" defines the ruleset enforcement for
mounting devfs inside jails. A value of -1 disables mounting devfs in
jails, a value of zero means no restrictions. Nested jails can only
have mounting devfs disabled or inherit parent's enforcement as jails are
not allowed to view or manipulate devfs(8) rules.

Utilizes new functions introduced in r231265.

MFC r231269:
Allow mounting nullfs(5) inside jails.

This is now possible thanks to r230129.

MFC r232059 [1]:
To improve control over the use of mount(8) inside a jail(8), introduce
a new jail parameter node with the following parameters:

allow.mount.devfs:
allow mounting the devfs filesystem inside a jail

allow.mount.nullfs:
allow mounting the nullfs filesystem inside a jail

Both parameters are disabled by default (equals the behavior before
devfs and nullfs in jails). Administrators have to explicitly allow
mounting devfs and nullfs for each jail. The value "-1" of the
devfs_ruleset parameter is removed in favor of the new allow setting.

MFC r232186:
Analogous to r232059, add a parameter for the ZFS file system:

allow.mount.zfs:
allow mounting the zfs filesystem inside a jail

This way the permssions for mounting all current VFCF_JAIL filesystems
inside a jail are controlled wia allow.mount.* jail parameters.

Update sysctl descriptions.
Update jail(8) and zfs(8) manpages.

MFC r232247:
mdoc(7) stype - start new sentences on new line

MFC r232278 [1]:
Add procfs to jail-mountable filesystems.

MFC r232291:
Bump .Dd to reflect latest update

MFC r232307:
Add "export" to devfs_opts[] and return EOPNOTSUPP if called with it.
Fixes mountd warnings.

MFC r232342 (jamie) [2]:
Handle the case where a boolean parameter is also a node.

PR: bin/165515 [2]
Reviewed by: jamie [1]

MFC r231057:

Add a WITH_CLANG_EXTRAS option for src.conf(5), disabled by default,
that builds the following additional llvm/clang tools:

- bugpoint
- llc
- lli
- llvm-ar
- llvm-as
- llvm-bcanalyzer
- llvm-diff
- llvm-dis
- llvm-extract
- llvm-ld
- llvm-link
- llvm-mc
- llvm-nm
- llvm-objdump
- llvm-prof
- llvm-ranlib
- llvm-rtdyld
- llvm-stub
- macho-dump
- opt

These tools are mainly useful for people that want to manipulate llvm
bitcode (.bc) and llvm assembly language (.ll) files, or want to tinker
with llvm and clang themselves.

MFC r231667:

Add new functionality to the force_depend method.

MFC r231171:
- Add an option to 404.status-zfs (enabled by default) to list all
zfs pools on the system.

- While here, document daily_status_zfs_enable in periodic.conf(5).

Approved by: jhb

MFC r231244:
- Fix some Xr references:

- - ada(4): ad(4) - removed, ada(4) would be a self-referencing entry
- - cd(4): ad(4) -> ada(4)
- - da(4): ad(4) -> ada(4)
- - DEVICE_PROBE(9): ugen(5) -> ugen(4)
- - ed(4): dhclinet(8) -> dhclient(8) (typo)
- - lmc(4): Netgraph(4) -> netgraph(4)
- - security(7): rc.conf(8) -> rc.conf(5)
- - sfxge(4): cpuset(8) -> cpuset(1)
- - sbp(4): sysctl(1) -> sysctl(8)
- - portindex(5): build(1) -> build(7)
- - u3g(4): usbconfig(5) -> usbconfig(8)
- - usb_quirk(4): usbconfig(5) -> usbconfig(8)

MFC r231194:

Add a knob to always load the default rulesets. While I'm here document
the other devfs_ knobs in rc.conf.5.

MFC r228355:

- As of r226865, daily_scrub_zfs_default_threshold is 35 days.

PR: 162890

MFC r228418, 228419:

r228418:
- Document the SVN variable needs to be set in make.conf(5) when
SVN_UPDATE is set [1]

r228419:
- Minor whitespace cleanup to make.conf(5)

PR: 163162 [1]

MFC r228457:

The "inet" keyword in the "ifconfig_IF_aliasN" is mandatory for
IPv4 aliases to work since network.subr@197139.

Approved by: re (bz)

MFC r226649, 226651, 226652, 226653:
- Fix an issue that 127/8 is not configured when $ifconfig_DEFAULT is not empty.
- Add description that IPv6 configuration will be ignored if $ifconfig_IF_ipv6
is empty.
- Move a configuration example "inet6 accept_rtadv" to just after the manual
GUA configuration.
- Add an example of $ipv6_prefix_IF.
- Add support for removing addresses added by ipv6_prefix_hostid_addr_up()
upon rc.d/netif stop.

Approved by: re (bz)

MFC: r227006, r227281, r227282

Add a PCI front-end to esp(4) allowing it to support AMD Am53C974 and
replace amd(4) with the former in the amd64, i386 and pc98 GENERIC kernel
configuration files. Besides duplicating functionality, amd(4), which
previously also supported the AMD Am53C974, unlike esp(4) is no longer
maintained and has accumulated enough bit rot over time to always cause
a panic during boot as long as at least one target is attached to it
(see PR 124667).

PR: 124667
Approved by: re (kib)
Obtained from: NetBSD (based on)

MFC r226654, r226657, r226658:

MFC r226654 [1]:
Add etc/rc.d/static_ndp, analogous to etc/rc.d/static_arp.
Make sure that static ARP and NDP bindings are set before NETWORKING.

As static_ndp is based on static_arp, pass copyright to the project with
permission of the original author (delphij@).

MFC r226657 [2]:
Correctly reassign copyright of etc/rc.d/static_ndp back to delphij@
as the project itself is no legal entity

MFC r226658 [3]:
Add information about static_ndp_pairs to rc.conf(5) manual page

Reviewed by: Xin Li <delphij@FreeBSD.org> [1]
Reported by: Joe Dahl <joel@vnode.se> [2]
Submitted by: Sergey Kandaurov <pluknet@FreeBSD.org> [3]
Approved by: re (kib)

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by: re (implicit)

- Document $ipv6_cpe_wanif.
- Emphasize $ipv6_enable and $ipv6_prefer are deprecated.
- Add more detail descriptions about $ipv6_activate_all_interfaces.
- Add some more examples of $ifconfig_IF_ipv6.
- rtsold(8) and rtadvd(8) can be used even when ipv6_gateway_enable=NO now.

Approved by: re (kib)

Correct the RFC number for the description of IPv6 privacy addressing

Reviewed by: bz
Approved by: re (kib)

Fix various broken links in manual pages.

Submitted by: Michiel Overtoom (motoom % xs4all nl)
PR: 159130 159131 159132 159133 159134
159135 159136 159137 158138 159144
Approved by: re (kib)
MFC after: 3 days

Add the netwait rc.d script. It waits for the specified period for the
network to become active.

PR: conf/151063
Submitted by: Jeremy Chadwick <freebsd@jdc.parodius.com>

Add rc.d/kld to load kernel modules after local disks are up.
This method is many times faster than doing it in /boot/loader.conf.

Regenerate src.conf.5.

Update manpage.

It's a bit odd, but "make update" in src/ can also update the ports/,
doc/, and now www/ trees, but only using the "cvsup" transport.

When "make update" is run using a tree's makefile, it can also use
"cvs" (except for www/) and "svn" (only src/).

Clean up documentation and code regarding "make update":

- Increase oddness by adding support for WWWSUPFILE and NO_WWWUPDATE to
Makefile.inc1 (analogous to PORTSSUPFILE/NO_PORTSUPDATE and
DOCSUPFILE/NO_DOCUPDATE; WWWSUPFILE already supported by www/Makefile).

- Document all trees that support CVS_UPDATE.

- Document all trees that support SUP_UPDATE.

- Document SVN_UPDATE.

- Document NO_WWWUPDATE.

- make.conf(5) mistakenly said that *SUPFILE* had defaults.

- Add an example entry for WWWSUPFILE.

Use .Dq instead of hardcoding `` and ''.

Suggested by: gjb

Add a special mount option "failok" to indicate that the administrator wants
the system to proceed to boot without bailing out into single user mode,
even when the file system can not be successfully mounted.

This option is implemented in mount(8) and not passed into kernel.

MFC after: 1 month

regen

Re-encode files from ISO-8859-1 to UTF-8

Regen for WITH_OFED.

Add missing section number for .Xr jail.

MFC after: 3 days

Disconnect sun4v architecture from the three.

Some files keep the SUN4V tags as a code reference, for the future,
if any rewamped sun4v support wants to be added again.

Reviewed by: marius
Tested by: sbruno
Approved by: re

Regen.

* Rewrite ar.5 mannual page to better document ar(1) archive format.
* Use more standard BSD license.

Obtained from: elftoolchain

Introduce two new options MK_INET and MK_INET_SUPPORT analogically
with INET6 equivalents. Patch reather than re-genenerating src.conf
(given the current problem with the script that does the re-gen).

Reviewed by: gnn
Sponsored by: The FreeBSD Foundation
Sponsored by: iXsystems
MFC after: 2 weeks

Update man pages related to the change in default NFS client
applied by r221124. I also deleted references to idmapd, since that
daemon no longer exists.
This is a content change.

Introduce to rc.subr get_pidfile_from_conf(). It does just what it sounds
like, determines the path to a pid file as it is specified in a conf file.

Use the new feature for rc.d/named and rc.d/devd, the 2 services in the
base that list their pid files in their conf files.

Remove the now-obsolete named_pidfile, and warn users if they have it set.

Add manual page for rctl.conf(5).

Remove vestiges of disklabel(5).

Reviewed by: uqs
MFC after: 5 days

Regenerate after r220401. It turns out makeman is clever about implied
flags, so remove that part from WITHOUT_CXX again.

This is only partially regenerated, as the entries for FDT and GPIO seem to
have switched their default state, too.

Regen src.conf(5) after r218941 and r218942.

Add missing section number for .Xr rc.

Pointed out by: keramida
Approved by: keramida (mentor)

Fix '.Xr' ordering in SEE ALSO section.

Approved by: keramida (mentor)
MFC after: 3 days

Bump .Dd date of manpage for r217481

Fix the mount example of xfDmitry Marakasov <amdmi3@FreeBSD.org>s(5) filesystems by including the read-only
option. We only support ro mounts for xfs, so it's nice if the examples
we show in the manpage are easy to copy/paste.

PR: docs/149106
Submitted by: amdmi3
MFC after: 3 days

Document rc.conf.d in rc.conf(5).

PR: 140495
Submitted by: Tom Judge (tom of tomjudge com)
Approved by: keramida (mentor)
MFC after: 2 weeks

Fix date, broken in r216667.

Submitted by: stefanf@

The 'kern.corefile="whatever"' syntax won't work with sysctl.conf; remove
the quotes to not mislead people.

MFC after: 1 month

Fix a typo.

Submitted by: Garrett Cooper

Add gptboot_enable rc variable, which allows to turn gptboot reporting off in
case user wants to implement his own actions and doesn't want the attributes to
vanish.

Obtained from: Wheel Systems Sp. z o.o. http://www.wheelsystems.com
MFC after: 3 days

Regenerate src.conf manpage after adding WITHOUT_GPIO build knob

Remove references to the long-gone ramdisk

Submitted by: Garrett Cooper <yanegomi@gmail.com>

Add an (off by default) check for negative permissions (where the
group on a object has less permissions that everyone). These
permissions will not work reliably over NFS if you have more than
14 supplemental groups and are usually not what you mean.

MFC after: 1 week

Add some missing documentation to the man page:

- FILES section ref: ~/nsmb.conf
- use of password in examples section
- use of simple encryption for password in examples section

PR: docs/132311
Submitted by: David Horn (dhorn2000 at gmail dot com)
Patch corrected by: trhodes
Approved by: trhodes
MFC after: 5 days

mdoc: make pages render with mandoc

It's a bit more pedantic regarding .Bl list elements. This has an added
benefit of unbreaking the ipfw(8) manpage, where groff was silently
skipping one list element.

o Put missed w/space back.

Submitted by: Garrett Cooper
MFC after: 3 days

mdoc: drop even more redundant .Pp calls

No change in rendered output, less mandoc lint warnings.

Tool provided by: Nobuyuki Koganemaru n-kogane at syd.odn.ne.jp

Extend the "example" section a bit, for other mailers.

mdoc: drop redundant .Pp and .LP calls

They have no effect when coming in pairs, or before .Bl/.Bd

Note that devfs(5) and fdescfs(5) both create /dev/fd file descriptors.

PR: 144534
Submitted by: Matthew Seaman <m.seaman at infracaninophile co uk>
Patch by: Matthew Seaman, keramida
Approved by: keramida (mentor)
MFC after: 1 week

Split $ipv6_prefer into $ip6addrctl_policy and $ipv6_activate_all_interfaces.

The $ip6addrctl_policy is a variable to choose a pre-defined address
selection policy set by ip6addrctl(8).
The keyword "ipv4_prefer" sets IPv4-preferred one described in Section 10.3,
the keyword "ipv6_prefer" sets IPv6-preferred one in Section 2.1 in RFC 3484,
respectively. When "AUTO" is specified, it attempts to read
/etc/ip6addrctl.conf first. If it is found, it reads and installs it as
a policy table. If not, either of the two pre-defined policy tables is
chosen automatically according to $ipv6_activate_all_interfaces.

When $ipv6_activate_all_interfaces=NO, interfaces which have no corresponding
$ifconfig_IF_ipv6 is marked as IFDISABLED for security reason.

The default values are ip6addrctl_policy=AUTO and
ipv6_activate_all_interfaces=NO.

Discussed with: ume and bz

Add $ipv6_privacy to support net.inet6.ip6.use_tempaddr. Note that this
will be replaced with a per-IF version later.

Based on: changes in r206408 by dougb

Revert changes in r206408.

Discussed with: dougb, core.5, and core.6

Note in rc.conf(5) that jail_list should contain only alphanumeric
characters.

PR: 150098
Submitted by: cc (cpt_complain at yahoo dot com)
Approved by: keramida (mentor)
MFC after: 1 week

- Regen after adding WITH_BSD_GREP and removing WITH_GNU_GREP

MFtbemd:

Prefer MACHNE_CPUARCH to MACHINE_ARCH in most contexts where you want
to test of all the CPUs of a given family conform.

Fix typos, spelling, formatting and mdoc mistakes found by Nobuyuki while
translating these manual pages. Minor corrections by me.

Submitted by: Nobuyuki Koganemaru <n-kogane@syd.odn.ne.jp>

Correctly sort usbconfig(8) within the SEE ALSO section.

Noticed by: dougb
MFC after: 3 days

Update references from nonexistent usbconfig(1) to usbconfig(8).

PR: docs/149221
Submitted by: Lars Hartmann (lars at chaotika dot org)
MFC after: 3 days

mdoc: remove unused/empty macros

Fix a bunch of typos and spelling mistakes.

- Regenerate after adding WITH_GNU_GREP

Bump document for content change in r210002.

In the example for how to create a VLAN, also include an example of
setting the IP address. While it is documented earlier in rc.conf(5)
that the '.' in the VLAN name becomes a '_' in rc.conf, this may not be
easy to find when just using rc.conf(5) as reference documentation.

MFC after: 1 week

Add a periodic zfs scrub script.

Features:
- configurable amount of days between scrubs (default value or per pool)
- do not scrub directly after pool creation (respects the configured
number of days between scrubs)
- do not scrub if a scrub is in progress
- tells how to see the status of the scrub
- tells how many days since the last scrub if it skips the scrubbing
- warns if a non-existent pool is specified explicitely
(default: no pools specified -> all currently imported pools are
handled)
- runs late in the periodic run to not slow down the other periodic daily
scripts

Discussed on: fs@

Make the char *n_name member of struct nlist 'const'.
This avoids errors or __DECONST() from places with higher WARNS levels.

Adjust a local cache variable in ipcs to const as well
to compile in the new world order.

Suggested by: jhb
Reviewed by: jhb, kib, brueffer (man)

Regenerate.

Regenerate.

Regen src.conf.5

Approved by: ed (mentor)

devfs(5): Also mention when device nodes on ufs stopped working (6.0),
as requested by some people.

MFC after: 2 weeks

Clarify devfs manpages slightly.

mount(8): add xref to devfs(5)
devfs(5): change example to something more likely to be useful (it is not
necessary to mount a devfs on /dev manually, but for chroots/jails it is
often needed), mention since when devfs is preferred to device nodes on ufs

PR: 146600
MFC after: 2 weeks

Regen for r208321.

mdoc: move remaining sections into consistent order

This pertains mostly to FILES, HISTORY, EXIT STATUS and AUTHORS sections.

Found by: mdocml lint run
Reviewed by: ru

mdoc: move CAVEATS, BUGS and SECURITY CONSIDERATIONS sections to the
bottom of the manpages and order them consistently.

GNU groff doesn't care about the ordering, and doesn't even mention
CAVEATS and SECURITY CONSIDERATIONS as common sections and where to put
them.

Found by: mdocml lint run
Reviewed by: ru

Better handling of ipv6_default_interface using
net.inet6.ip6.use_defaultzone=1. Now, it works IPv6 link-local
unicast addresses as well as IPv6 link-local multicast addresses.

MFC after: 1 week

In case a user wants to configure only an IPv6 link-local address
add an example that shows how to do it.

mdoc: order prologue macros consistently by Dd/Dt/Os

Although groff_mdoc(7) gives another impression, this is the ordering
most widely used and also required by mdocml/mandoc.

Reviewed by: ru
Approved by: philip, ed (mentors)

Nuke the descriptions about ipv6_firewall_* as they were unified
into firewall_*.

MFC after: 3 days

Add rc.d/ubthidhci. This small script calls usbconfig(1) to change a USB
Bluetooth controller from HID mode to HCI mode.

MFC after: 1 week

Improve the handling of IPv6 configuration in rc.d. The ipv6_enable
and ipv6_ifconfig_<interface> options have already been deprecated,
these changes do not alter that.

With these changes any value set for ipv6_enable will emit a
warning. In order to avoid a POLA violation for the deprecation
of the option ipv6_enable=NO will still disable configuration
for all interfaces other than lo0. ipv6_enable=YES will not have
any effect, but will emit an additional warning. Support and
warnings for this option will be removed in FreeBSD 10.x.

Consistent with the current code, in order for IPv6 to be configured
on an interface (other than lo0) an ifconfig_<interface>_ipv6
option will have to be added to /etc/rc.conf[.local].

1. Clean up and minor optimizations for the following functions:
ifconfig_up (the ipv6 elements)
ipv6if
ipv6_autoconfif
get_if_var
_ifconfig_getargs
The cleanups generally were to move the "easy" tests earlier in the
functions, and consolidate duplicate code.

2. Stop overloading ipv6_prefer with the ability to disable IPv6
configuration.

3. Remove noafif() which was only ever called from ipv6_autoconfif.
Instead, simplify and integrate the tests into that function, and
convert the test to use is_wired_interface() instead of listing
wireless interfaces explicitly.

4. Integrate backwards compatibility for ipv6_ifconfig_<interface>
into _ifconfig_getargs. This dramatically simplifies the code in
all of the callers, and avoids a lot of other code duplication.

5. In rc.d/netoptions, add code for an ipv6_privacy option to use
RFC 4193 style pseudo-random addresses (this is what windows does
by default, FYI).

6. Add support for the [NO]RTADV options in ifconfig_getargs() and
ipv6_autoconfif(). In the latter, include support for the explicit
addition of [-]accept_rtadv in ifconfig_<interface>_ipv6 as is done
in the current code.

7. In rc.d/netif add a warning if $ipv6_enable is set, and remove
the set_rcvar_obsolete for it. Also remove the latter from
rc.d/ip6addrctl.

8. In /etc/defaults/rc.conf:

Add an example for RTADV configuration.

Set ipv6_network_interfaces to AUTO.

Switch ipv6_prefer to YES. If ipv6_enable is not set this will have
no effect.

Add a default for ipv6_privacy (NO).

9. Document all of this in rc.conf.5.

Add capability to use a db version of services. It is enabled by
specifying `db' as source of service in /etc/nsswitch.conf.

MFC after: 2 weeks

Remove GNU cpio after fix of CVE-2010-0624.

Note that this is actually a no-op for most users, as this GNU
cpio was broken on -HEAD and 8-STABLE since last March until
the recent fix.

FreeBSD 8.0+ uses BSD cpio by default and the code is being
actively maintained.

Blessed by: kientzle
With hat: secteam
MFC after: 3 days

Redirect stdin from /dev/null when starting a jail:
At least in RELENG_7 this fixes some start problems for some programs
from the ports. It is also more correct, as a jail shall not expect
input (interactivity) from the jail-host.

Revert the current behavior of starting jails in the background and
make it optional only for the start of jails (jail_parallell_start=YES
in rc.conf):
- The stop can not be done in the background, the system needs to wait
until everything is stopped correctly before it can reboot or power
down.
- The start should not be done in parallel by default, this not only
breaks POLA for people comming from RELENG_x, it may also break a
dependency chain with other scripts in the jail-host, which need to
do some stuff after the jails are up and running (e.g. hardlinking
a mysql socket from one jail into another one).

Discussed on: freebsd-jails@

Document COMPRESS_USER_CORES, and the new %I and %H core formatters.

Document the interaction between /etc/devfs.conf and
/etc/defaults/devfs.conf

PR: docs/117308
Submitted by: Mel <mel.xyzzy rachie.is-a-geek.net> (partially)
MFC after: 1 week

Please welcome HAST - Highly Avalable Storage.

HAST allows to transparently store data on two physically separated machines
connected over the TCP/IP network. HAST works in Primary-Secondary
(Master-Backup, Master-Slave) configuration, which means that only one of the
cluster nodes can be active at any given time. Only Primary node is able to
handle I/O requests to HAST-managed devices. Currently HAST is limited to two
cluster nodes in total.

HAST operates on block level - it provides disk-like devices in /dev/hast/
directory for use by file systems and/or applications. Working on block level
makes it transparent for file systems and applications. There in no difference
between using HAST-provided device and raw disk, partition, etc. All of them
are just regular GEOM providers in FreeBSD.

For more information please consult hastd(8), hastctl(8) and hast.conf(5)
manual pages, as well as http://wiki.FreeBSD.org/HAST.

Sponsored by: FreeBSD Foundation
Sponsored by: OMCnet Internet Service GmbH
Sponsored by: TransIP BV

Xref mdmfs(8).

Improve descriptions for tmpfs mount options. The descriptions have
been mostly obtained from NetBSD mount_tmpfs(8) manual page.

Obtained from: NetBSD
Discussed with: delphij

Remove clause 3 from my license.

Introduce new rc.conf variable firewall_coscripts. It can be used to
specify list of executables and/or rc scripts that should be executed
after firewall starts/stops.

Submitted by: Yuri Kurenkov <y dot kurenkov at init dot ru>
Reviewed by: rhodes, rc@
MFC after: 1 week

Bump .Dd for r203164.

Approved by: trasz (mentor)

Add "maxfilesize" mount option for tmpfs to allow specifying the
maximum file size limit. Default is UINT64_MAX when the option is
not specified. It was useless to set the limit to the total amount of
memory and swap in the system.

Use tmpfs_mem_info() rather than get_swpgtotal() in tmpfs_mount() to
check if there is enough memory available.

Remove now unused get_swpgtotal().

Reviewed by: Gleb Kurtsou
Approved by: trasz (mentor)

regen

MFC after: 2 weeks

Remove <utmp.h> and its corresponding manual page.

Change the second usb example for ulpt to one describing libusb which would be
more common.

Add support for configuring vlan(4) interfaces as child devices similar to
wlan(4) interfaces. vlan(4) interfaces are listed via a new 'vlans_<IF>'
variable. If a vlan interface is a number, then that number is treated as
the vlan tag for the interface and the interface will be named '<IF>.<tag>'.
Otherwise, the vlan tag must be provided via a vlan parameter in a
'create_args_<vlan>' variable.

While I'm here, fix a few nits in rc.conf(5) and mention create_args_<IF> in
the description of cloned_interfaces.

Reviewed by: brooks
MFC after: 2 weeks

Forgot to bump .Dd, so do it with this commit. Chose local time over
UTC time for the date...

Docmuent NO_KERNEL{CLEAN,CONFIG,DEPEND,OBJ} as necessary. Update
documentation on KERNFAST meaning.

In r199127/r199152 I forgot to bump .Dd

s/a default/the default/

Submitted by: remko

Add a note about no hostname leading to "Amnesiac" on the console

The text is inspired by the PR, but more in line with the existing text

PR: docs/140434
Submitted by: Jason Helfman <jhelfman@e-e.com>

Use our canonical .Dd format.

Submitted by: Ulrich Spoerlein

Document the WWWSUPFILE variable.

PR: 137723
Submitted by: Sofian Brabez <sbrabez at gmail dot com>
Approved by: imp (mentor, implicit)
MFC after: 3 days
Facilitated by: Snow B.V.

Fix date (1) and SEE ALSO section.

Submitted by: Ulrich Spoerlein (1)
MFC after: 1 week

Fixed a markup bug.

Fix several logic bugs in the previous IPv6 variable change and
re-add $ipv6_enable support for backward compatibility. From
UPDATING:

1. To use IPv6, simply define $ifconfig_IF_ipv6 like $ifconfig_IF
for IPv4. For aliases, $ifconfig_IF_aliasN should be used.
Note that both variables need the "inet6" keyword at the head.

Do not set $ipv6_network_interfaces manually if you do not
understand what you are doing. It is not needed in most cases.

$ipv6_ifconfig_IF and $ipv6_ifconfig_IF_aliasN still work, but
they are obsolete.

2. $ipv6_enable is obsolete. Use $ipv6_prefer and/or
"inet6 accept_rtadv" keyword in ifconfig(8) instead.

If you define $ipv6_enable=YES, it means $ipv6_prefer=YES and
all configured interfaces have "inet6 accept_rtadv" in the
$ifconfig_IF_ipv6. These are for backward compatibility.

3. A new variable $ipv6_prefer has been added. If NO, IPv6
functionality of interfaces with no corresponding
$ifconfig_IF_ipv6 is disabled by using "inet6 ifdisabled" flag,
and the default address selection policy of ip6addrctl(8)
is the IPv4-preferred one (see rc.d/ip6addrctl for more details).
Note that if you want to configure IPv6 functionality on the
disabled interfaces after boot, first you need to clear the flag by
using ifconfig(8) like:

ifconfig em0 inet6 -ifdisabled

If YES, the default address selection policy is set as
IPv6-preferred.

The default value of $ipv6_prefer is NO.

4. If your system need to receive Router Advertisement messages,
define "inet6 accept_rtadv" in $ifconfig_IF_ipv6. The rc(8)
scripts automatically invoke rtsol(8) when the interface becomes
UP. The Router Advertisement messages are used for SLAAC
(State-Less Address AutoConfiguration).

Document osrel node for procfs.

Approved by: des (procfs maintainer)
MFC after: 3 weeks

Add a knob to show 'Starting foo:' messages when faststart is used,
such as at boot time.

The following changes are added because of
network_ipv6->rc.d/netif integration:

- $ipv6_enable is now obsolete. Instead, IPv6 is enabled by
default if the kernel supports it, and $ipv6_network_interfaces
is "none" by default. If you want to use IPv6, define
$ipv6_network_interfaces and $ifconfig_xxx_ipv6.

An interface which is in $network_interfaces and not in
$ipv6_network_interfaces will be marked as "inet6
-auto_linklocal ifdisabled" (see ifconfig(8)).

- $ipv6_ifconfig_xxx is renamed to ifconfig_xxx_ipv6 for
consistency with other address families. The old variables
still work but can be removed in the future. Note that
ipv6_ifconfig_xxx="..." should be replaced with
ifconfig_xxx_ipv6="inet6 ...".

- Receiving ICMPv6 Router Advertisement is not automatically
enabled even if there is no manual configuration of IPv6 in
rc.conf. If you want it, define
ifconfig_xxx_ipv6="inet6 ... accept_rtadv".

- The rc.d/ip6addrctl now chooses address selection policy based
on $ipv6_prefer, not $ipv6_enable. The default is
ipv6_prefer=NO.

- $router* and $ipv6_router* are replaced with $routed_* and
$route6d_* for consistency. The old variables still work but
can be removed in the future.

MFC after: 3 days

Mention that individual device driver can accept other flags through
resource_int_value(9).

MFC after: 1 month

o Document MALLOC_PRODUCTION knob.

PR: docs/136029
Submitted by: anonymous
MFC after: 2 weeks

Add a new rc.d script, static_arp, which enables the administrator to
statically bind IPv4 <-> MAC address at boot time.

In order to use this, the administrator needs to configure the following
rc.conf(5) variable:

- static_arp_pairs: A list of names for static bind pairs, and,
- a series of static_arp_(name): the arguments that is being passed to
``arp -S'' operation.

Example:
static_arp_pairs="gw"
static_arp_gw="192.168.1.1 00:01:02:03:04:05"

See the rc.conf(5) manual page for more details.

Reviewed by: -rc@
MFC after: 2 weeks

Add a missing .El.

Founded by: make manlint

Add support for backing up the old kernel when installing a new kernel
using freebsd-update. This applies to using freebsd-update in "upgrade
mode" and normal freebsd-update on a security branch.

The backup kernel will be written to /boot/kernel.old, if the directory
does not exist, or the directory was created by freebsd-update in a
previous backup. Otherwise freebsd-update will generate a new directory
name for use by the backup. By default symbol files are not backed up
to save diskspace and avoid filling up the root partition.

This feature is fully configurable in the freebsd-update config file,
but defaults to enabled.

MFC after: 1 week (stable/7)
Reviewed by: cperciva
Approved by: re (kib)

Add manual page links to advertise procstat(1) a little better.

Approved by: re (kib)

I don't know why fstab doesn't document that the fifth field specifies
the number of days between backups. All it says is frequency, with no
units given. It likely should say "the interval in days between backups"
instead, but not today.

Commit the updates to this file for the new BIND options

1. New feature; option to have the script loop until a specified hostname
(localhost by default) can be successfully looked up. Off by default.
2. New feature: option to create a forwarder configuration file based on
the contents of /etc/resolv.conf. This allows you to utilize a local
resolver for better performance, less network traffic, custom zones, etc.
while still relying on the benefits of your local network resolver.
Off by default.
3. Add named-checkconf into the startup routine. This will prevent named
from trying to start in a situation where it would not be possible to do
so.

LFS cannot be loaded, compiled, torn, spindled or mutilated in
FreeBSD: it was deleted around FreeBSD 3.x...

Added (pre|post)(start|stop) jail hooks. These can be used to run
arbitrary commands (outside the jail) associated with said events,
e.g. to bring up/down CARP interfaces representing services run in
jails.

Reviewed by: simon

o Correct geli(8) command line.

PR: docs/133961
Submitted by: Aldis Berjoza
MFC after: 1 week

Regenerate src.conf.5.

Remove the uscanner(4) driver, this follows the removal of the kernel scanner
driver in Linux 2.6. uscanner was just a simple wrapper around a fifo and
contained no logic, the default interface is now libusb (supported by sane).

Reviewed by: HPS

Add support for setting the debug flags on wlan interfaces after the are
created using wlandebug_<ifn> variables.

o grammar fix
o remove mention of libkse

Rename the rc.conf(5) knob if_up_delay to defaultroute_delay to better
reflect its purpose.

Backout change 187782. It inhibits ntpd from starting at all
when ntpd_sync_on_start is set.

Noticed by: rafan

- Re-order SEE ALSO entries

Noticed by: brueffer
Approved by: trhodes

- Add initial version of portindex(5) manual page

PR: docs/70652
Submitted by: Paul Armstrong <psa otoh.org>
Reviewed by: pav keramida trhodes
Approved by: keramida
MFC after: 3 days

Bump .Dd for r187782.

When synchronizing the clock at system startup time, use both
the -g and -q options. They do a slightly different thing and
both are necessary when the time difference is large.

Noticed by: danger, in the forums
Approved by: roberto
MFC after: 1 week

Update jail startup script for multi-IPv4/v6/no-IP jails.

Note: this is only really necessary because of the ifconfig
logic to add/remove the jail IPs upon start/stop.
Consensus among simon and I is that the logic should
really be factored out from the startup script and put
into a proper management solution.

- We now support starting of no-IP jails.
- Remove the global jail_<jname>_netmask option as it is only
helpful to set netmasks/prefixes for the right address
family and per address.
- Implement jail_<jname>_ip options to support both
address familes with regard to ifconfig logic.
- Implement _multi<n> support suffix to the jail_<jname>_ip
option to configure additional addresses to avoid overlong,
unreadbale jail_<jname>_ip lines with lots of addresses.

Submitted by: initial work from Ruben van Staveren
Discussed on: freebsd-jail in Nov 2008.
Reviewed by: simon, ru (partial, older version)
MFC after: 1 week

Change IP addresses/prefixes to be from "Test-Net" (IPv4 documentation
prefix 192.0.2.0/24) rather than from private-use networks.

MFC after: 1 week

The description of the various securelevels has moved to the
security.7 manpage a while ago.

MFC after: 1 week
Noticed by: simon

Netgroup database can be centralized via NIS, list it.
Add a missing comma and bump doc date.

PR: 127602
Submitted by: Dmitry Sivachenko <mitya@yandex-team.ru>

Enhance the explanation of using filesystem-specific mount options
in /etc/fstab. We do support passing special options on a per
filesystem type basis, like `-u UID -g GID' for mount_msdosfs, but
the syntax of these options in fstab is non-obvious and a lot of
users have asked about it.

PR: docs/128816
Submitted by: Roland Smith, rsmith at xs4all dot nl
MFC after: 2 days

Add initial version of the nullfs(5) man page

MFC after: 3 days

Undocument dead option.

MFC after: 3 days

Allow a jail's IP alias to be created with an arbitrary netmask.

MFC after: 3 days

regen

Change the wording to prefer 'forwarding' but still retain the word routing for
clarity.

Suggested by: dougb

Allow a jail to be started with a specific route fib.

Reviewed by: secteam (simon)
Reviewed by: brooks, bz

Rename the RCng 'kernel' script to 'kernel_symlink'.

Requested by: many

Only symlink booted kernel directory to /boot/kernel if user has explicitly
requested it. This is too dangerous to just do behind the admin's back.

Document new IDSIgnorePaths directive.

Regen properly.

Regen.

To catch up with rev 179872: rename enable_quotas to quota_enable.

Regenerate to add the definitions of WITHOUT_BSD_CPIO WITH_GNU_CPIO
and WITHOUT_GNU_GREP

Regenerate using svn $FreeBSD$ tags. There is no change in the actual
man page text other than the date.

Document more tmpfs mount options that are already
available.

PR: 124488
Submitted by: gahr

Bluetooth SIG is being difficult and keep moving specification
documents away from being public accessible. Replace link to
the Bluetooth specification document with the document name.

Pointed out by: SoftLover < slserg at uic dot tula dot ru >
MFC after: 3 days

Remove ISDN4BSD (I4B) from HEAD as it is not MPSAFE and
parts relied on the now removed NET_NEEDS_GIANT.
Most of I4B has been disconnected from the build
since July 2007 in HEAD/RELENG_7.

This is what was removed:
- configuration in /etc/isdn
- examples
- man pages
- kernel configuration
- sys/i4b (drivers, layers, include files)
- user space tools
- i4b support from ppp
- further documentation

Discussed with: rwatson, re

Add support for specifying which INDEX files to build via portsnap.conf.

Requested by: brooks
Reminded by: brooks, about halfway through his BSDCan talk

Change the default value of synchronous_dhclient to NO.

To preserve the existing behavior of etc/rc.d/netif, add code to wait
up to if_up_delay seconds (30 seconds by default) for a default route to
be configured if there are any dhcp interfaces. This should be extended
to test that the interface is actually up.

X-MFC after:

Replace the prototype vaps_<ifn> and vap_create_<ifn> variables with
more wlans_<ifn> and create_args_<ifn>

Add documentation for these variants and generally update the wireless
device example.

There is are very short lived shim from vaps_<ifn> which produces
a warning and vap_create_<ifn> which does not. Misuse the MFC
notification service to remind me to remove them.

MFC after: 3 weeks

Multi-bss (aka vap) support for 802.11 devices.

Note this includes changes to all drivers and moves some device firmware
loading to use firmware(9) and a separate module (e.g. ral). Also there
no longer are separate wlan_scan* modules; this functionality is now
bundled into the wlan module.

Supported by: Hobnob and Marvell
Reviewed by: many
Obtained from: Atheros (some bits)

Update .Dd

Pointed out by: Niclas Zeising <niclas-dot-zeising-at-gmail.com>
MFC after: 1 week

Add rfcomm_pppd_server rc script to allow start rfcomm_pppd(8) in server
mode at boot time. Multiple profiles can be started at the same time.
The whole idea is very similar to the ppp rc script.

Document Bluetooth knobs in rc.conf(5)

MFC after: 1 week

Regen.

Add support for hardwiring ppp sessions to particular devices with new
per-profile variables of the form ppp_<profile>_unit. No ppp_unit
variable is supported since tying the same unit to more than one profile
won't work.

PR: conf/122127
MFC after: 1 week

Allow the characters .-+/ to appear in ppp profile names by folding them
to _ when evaluating ppp_<profile>_nat and ppp_<profile>_mode. Document
the per-profile variables.

PR: conf/121452, conf/122127 (partial)
MFC after: 1 week

Use the new command file feature of ddb(8) to support setting ddb(4)
scripts at boot. This is currently disabled by default. /etc/ddb.conf
contains some potentially reasonable default scripts.

PR: conf/119995
Submitted by: Scot Hetzel <swhetzel at gmail dot com> (Earlier version)
X-MFC after: textdumps

We no longer have both block and character devices, so remove the
misleading information stated here.

Explain in more detail how the pass number field works. Bump .Dd.

Add a dummynet_enable knob to go with firewall_enable. If this knob
is enabled dummynet(4) is added to the list of required modules.

Discussed on: #freebsd-bugbusters (rwatson, trhodes)
PR: conf/79196
MFC after: 1 week

Explain how the passno field in /etc/fstab works with fsck
and quotacheck in some more detail.

- Document firewall_nat_enable related settings.

Tested by: AB
MFC after: 1 month

WITHOUT_FORTRAN was removed some time ago. Regen src.conf.5.

PR: 119562
Submitted by: Daniel Rucci <dan@rucci.org>
MFC after: 3 days

o From the Problem Report: the TCP_DROP_SYNFIN kernel option is now
included in the kernel by default. Remove reference to this option
from defaults/rc.conf and rc.conf(5).

PR: conf/119098
Submitted by: Beat Gaetzi
MFC after: 1 week

- This driver will has already appeared in 6.2

MFC after: 0 days

- loader(8) is not a part of boot(8) and is not its second stage.

Reported by: Yoshihiko Sarumaru <mistral at imasy.or.jp>
Reviewed by: trhodes
MFC-after: 3 days

Regen.

Regenerated page that includes the WITH_GSSAPI knob.

Commit the regenerated page that includes the WITHOUT_INSTALLLIB knob.

Improve readability for the hosts.equiv file regarding the notation
of hostnames.

PR: docs/35953
Submitted by: "Gary W. Swearingen" <swear at blarg dot net>
With minor modifications by me.

Add support for "freebsd-update -r newrelease upgrade" -- binary
upgrading to new releases. Important parts of this code include
* automatically determining which optional components (e.g., src,
info, proflibs) are installed.
* merging changes in files which are modified locally and have
changed between the currently running and new release.
* prompting the user to rebuild all 3rd party software before
deleting old shared libraries.

Yes, this is compatible with "freebsd-update rollback" -- you can
test a new -BETA and roll back to the old release if you don't
like it.

Subject to re@ approval, this will be MFCed before 7.0-BETA3 and
6.3-RC1.

MFC after: 2 days

Add a small note about how "mkfs.xfs -p" can be used to create
an XFS file system populated with files.

Insert zero-width break points to fix warnigns in nroff output,
and reduce whitespace stretching in groff PS output.

groff-foo by: ru

mdoc warning fixes: Use the correct syntax for .Bl -offset indent

MFC after: 3 days

Actually the keyword tells network.subr to launch wpa_supplicant on the
selected interface. wpa_supplicant does not only handle WPA
authentication but also EAP/LEAP as well as WEP encryption or no
encryption at all. The patch clarifies this.

PR: 117046
Submitted by: lme
Reviewed by: bruffer
Approved by: jkois (mentor)

Regen (nscd -> cached, WITHOUT_LIBPTHREAD disabling BIND).

Small fix in man pages after cached -> nscd renaming.

Approved by: brooks (mentor)

Backout sensors framework.

Requested by: phk
Discussed on: cvs-all

Remove trailing whitespace.

Import OpenBSD's sysctl hardware sensors framework.

This commit includes the following core components:

* sample configuration file for sensorsd
* rc(8) script and glue code for sensorsd(8)
* sysctl(3) doc fixes for CTL_HW tree
* sysctl(3) documentation for hardware sensors
* sysctl(8) documentation for hardware sensors
* support for the sensor structure for sysctl(8)
* rc.conf(5) documentation for starting sensorsd(8)
* sensor_attach(9) et al documentation
* /sys/kern/kern_sensors.c
o sensor_attach(9) API for drivers to register ksensors
o sensor_task_register(9) API for the update task
o sysctl(3) glue code
o hw.sensors shadow tree for sysctl(8) internal magic
* <sys/sensors.h>
* HW_SENSORS definition for <sys/sysctl.h>
* sensors display for systat(1), including documentation
* sensorsd(8) and all applicable documentation

The userland part of the framework is entirely source-code
compatible with OpenBSD 4.1, 4.2 and -current as of today.

All sensor readings can be viewed with `sysctl hw.sensors`,
monitored in semi-realtime with `systat -sensors` and also
logged with `sensorsd`.

Submitted by: Constantine A. Murenin <cnst@FreeBSD.org>
Sponsored by: Google Summer of Code 2007 (GSoC2007/cnst-sensors)
Mentored by: syrinx
Tested by: many
OKed by: kensmith
Obtained from: OpenBSD (parts)

Document quotachecks use of the passno field.

Properly regen src.conf(5).

Approved by: re (kensmith)

Tweak the handling of "WITHOUT_LIBPTHREAD". Also remove the accidental
treatment of 'LIBKSE' as an "old style" knob.

Submitted by: ru
Approved by: re(kensmith)

Repo copy libpthreads to libkse.
This introduces the WITHOUT_LIBKSE nob,
and changes WITHOUT_LIBPTHREADS to mean with neither threading libs.
Approved by: re(kensmith)

Cross reference ar(5) from elf(5).

Approved by: re (bmah)

Add a manual page documenting the format of `ar' archives.

Reviewed by: Kai Wang <kaiw27 at gmail dot com>
Approved by: re (bmah)

Add a startup script for ftp-proxy(8) now that it is no longer started as
part of inetd(8).

Approved by: re (bmah)
Reviewed by: freebsd-rc (a while back)
Reminded by: kevlo

Regenerate src.conf.5 -after- the addition of WITHOUT_ZONEINFO, the way
I did this in the previous commit, leaves out the parsing of $FreeBSD$
which is actually required to be parsed.

Kindly reminded by: bmah
Approved by: re (bmah)
Approved by: imp (mentor, implicit)

Add WITHOUT_ZONEINFO to the build options and regenerate src.conf.5

Reminded by: ceri
Approved by: re (bmah)
Approved by: imp (mentor)

- Use mount -t msdosfs instead of mount_msdosfs

PR: docs/115571
Submitted by: rodrigc
Approved by: re (bmah),
keramida (mentor)
MFC after: 1 week

The /boot.config file is available only on i386 and amd64, so install
boot.config.5 only those architectures.

Approved by: re@ (bmah)
Reported by: simon

Add the boot.config.5 manual page.

Reviewed by: keramida
Approved by: re@ (bmah)
PR: docs/112307

Regenerate after changing src/tools/build/options/WITHOUT_TOOLCHAIN
stating that WITHOUT_TOOLCHAIN cannot be applied to build targets.

Reminded by: Niclas Zeising niclas.zeising gmail.com
Approved by: re (hrs)

Remove some stuff I accidently left in the previous commit.

Complete SYNOPSIS and some cleanup.

Add xfs(5) man page.

Add a manual page for tmpfs(5).

You can never have enough documentation.

Document the SENDMAIL_ALIASES, SENDMAIL_MAP_SRC, SENDMAIL_MAP_TYPE, and
SENDMAIL_START_SCRIPT
.Xr make.conf 5
variables.
These are used in
.Pa /etc/mail/Makefile .

PR: conf/40548
MFC after: 3 days

Regen.

Fix what seems to be a copy-paste buglet (`moused_type' is used
in the description of `moused_flags', instead of the later), and
add a description of `moused_XXX_flags' where `XXX' is the port
name of a non-default moused invocation -- including an example
of using "-3" with the default moused(8) instance, but no special
flags for moused(8) invocations handling 3-button USB mice (which
seems a very common scenario these days).

MFC after: 3 days

Changes to my local build lead to my confusion - revert the last change, but
reword the original text a bit. Sorry for the churn.

Quick jump: thompsa

There is no pf module yet.

Add LOADER_FIREWIRE_SUPPORT knob.

Requested by: ru

Increase precision of time values in the process accounting
structure, while maintaining backward compatibility with legacy
file and record formats.

Regen

o Add a script to check ntpd(8) state. Default is off.

PR: conf/112604
Submitted by: Oliver Fromme
MFC after: 1 month

Add .Li mark-up to Hesiod, NIS, and nsswitch keywords so that they stand out
when the manpage is read via an advanced output device.

Add nsswitch.conf(5) xref to SEE ALSO as it's mentioned in the text.

Mark up text consistently.

Document the current practice of locking and disabling accounts
through passwd(5).

Add a pfsync_syncpeer option to /etc/defaults/rc.conf and rc.conf(5),
which can be used to turn off multicast pfsync support, and enable
the transmission of directed PFSYNC (IP protocol: 240) packets to
a specific "sync peer" host.

PR: conf/111225
Submitted by: Bas van Beek <bas@tobin.nl>
Approved by: mtm, mlaier
MFC after: 2 weeks

Regen.

- Add ZFS startup script.

Submitted by: des

- When starting mountd(8) and ZFS is enabled, add /etc/zfs/exports file.
- Update rc.conf(5).

Add rpc_statd_flags and rpc_lockd_flags options to allow options to be
passed to rpc.statd and rpc.lockd

MFC after: 1 week

Spell .Xr without a '/'.

Pointy hat: brooks

Fix a couple markup problems in the previous commit and bump the
document date.

Reported by: ru

Allow background_fsck_delay to be set to a negative value which delays
the background fsck indefinitely. This allows the administrator to run
it at a convenient time. To support running it from cron, the
forcestart argument now causes the fsck to start with no delay and all
output to be suppressed.

As suggested more than once in the lists, drop -M from flags to mfs
for /tmp and /var. This makes the memory discs swap-backed instead
of malloc-backed. A swap-backed memory disc should not be worse
than a malloc-backed one in any scenario because it will start
touching swap only when needed. OTOH, a malloc-backed disc can
starve limited kernel resources and evenually crash the system.

Reflect the change in the rc.conf(5) manpage. Also stop telling
lies there about softupdates: it does not waste disc space, it
just can delay its freeing.

Suggested by: many
PR: kern/87255
MFC after: 1 week

Move macros describing extended attributes in UFS from
<sys/extattr.h> to <ufs/ufs/extattr.h>. Move description
of extended attributes in UFS from man9/extattr.9 to
man5/fs.5.

Note that restore will not compile until <sys/extattr.h>
and <ufs/ufs/extattr.h> have been updated.

Suggested by: Robert Watson

Nuke pcnfsd(8) reference.

PR: 108980
Submitted by: Yonatan

Add support for EtherChannel configuration to rc startup scripts.

Note: This also deprecates "NO" as a way to specify an empty list of
interfaces for gif_interfaces.

PR: conf/104884
Submitted by: nork
Harassed by: brd
Discussed with: brooks, dougb

s/Feb/February/

Reminded by: ru

Expand this man page to provide some details on the structure
of the quota data files and how they are maintained.

Based on input from ru & rodrigc document the mount operation in the new
world order:
mount -t linsysfs linsys /compat/linux/sys
instead of mount_linsysfs. Now that 6.X requires mount_linsysfs to
work. This is why there is a mount_linsysfs in 6.X and not in -current.

Prompted by: ru
Reviewed by: ru, rodrigc

Regen.

Bump .Dd for r1.313.

Document new quota knobs.

Docuemnt exactly which functions access which NSS databases.

Point out that FreeBSD libc has compat stubs for GNU glibc NSS
modules which access NSDB_PASSWD/NSDB_GROUP, but not NSDB_HOSTS;
based on painful experience porting nss_mdns.

Reviewed by: ru

Document extended program header numbering.

Spelling fixes.

Remove reference to mount_fdescfs.

Suggested by: ru

o Sort Xrs.

Change reference from mount(2) to nmount(2), since mount(8) uses
nmount to mount an mqueufs filesystem.

Change reference from mount_devfs(8) to mount(8), and add an example.
Remove reference to mount_fdescfs(8), since mount(8) calls nmount()
directly to mount an fdescfs filesystem, instead of forking an
external mount_fdescfs program.

Document Elf{32,64}_Lword. Keep the list of ELF types sorted.

Describe the contents of the 'e_shnum' and 'e_shstrndx' fields when
using extended section numbering.

Add recently added fs_unrefs field.

Sponsored by: home.pl

Small fixes.

Add idmapd_flags to defaults/rc.conf.
Document it and idmapd_enable.

Reflect the following changes to lib/libc/gen/disklabel.c in a manpage:

: revision 1.13
: date: 2002/04/03 15:44:53; author: phk; state: Exp; lines: +0 -5
: Initial deorbit burn for the undocumented and unused d_boot[01]
: fields of struct disklabel.
:
: Sponsored by: DARPA and NAI Labs.
: ----------------------------
: revision 1.15
: date: 2002/05/12 20:49:33; author: phk; state: Exp; lines: +1 -3
: Retire the bogus uses of the disklabel field d_sbsize and begin to
: initialize it to zero so we don't have to have everbody and their
: aunt including FFS specific header files.
:
: Sponsored by: DARPA & NAI Labs.

Add netgroup(5) to SEE ALSO.

PR: docs/84764
Submitted by: garys

Add a missing whitespace.

Reported by: simon
Approved by: cperciva (mentor, implicit)

Introduce mixer_enable (default: YES).

PR: conf/101268
Submitted by: Eugene Grosbein <eugen@grosbein.pp.ru>
Approved by: cperciva (mentor)
X-MFC after: 6.2-RELEASE
Sponsored by: FreeBSD Test-Bugathon

Sort MAN and MLINKS lists.

Revise markup.

Regen (removal of WITHOUT_LIBC_R).

Push removal of mrouted down to the rest of the tree.

Markup fixes.

Regen.

- Move descriptions of BOOT_COMCONSOLE_PORT, BOOT_COMCONSOLE_SPEED,
and LOADER_TFTP_SUPPORT options into the world section since boot
blocks are built as part of the world.

- Document BOOT_PXELDR_ALWAYS_SERIAL and BOOT_PXELDR_PROBE_KEYBOARD
options of pxeboot(8).

MFC after: 3 days

Reword previous commit, now supporting better English.

Discussed with: ceri

Belated update for login.conf checks.
Bump doc date.

Add FreeBSD Update 2.0 client code. The build code is in the projects
repository.

Sponsored by: FreeBSD security development fundraiser

The kvm_mkdb(8) is long dead.

Markup polishing.

Bump the document date.

Suggested by: ru

Add a -p switch to dhclient. The switch tells dhclient to persist
despite the interface link status.

Add dhclient_flags_iface and background_dhclient_iface rc.conf options.
(where iface is a specific interface). These can be used to give
interface specific flags to dhclient.

Reviewed by: brooks@

Regen.

Regen from src/tools/build/options.

The month name in .Dd should be spelled in full.

Pointed out by: ru

Touch document date (Dd).

Since Alpha support isn't in HEAD anymore, remove Alpha-specific
rc.conf(5) knobs, too: osf1_enable, unaligned_print.

- Remove hardcoded /etc/ntp.conf configuration file from ntpdate rc.d script
and replace it with a new ntpdate_config variable.
- Document it in defaults/rc.conf and rc.conf.5.
- Document ntpdate_hosts in defaults/rc.conf.

Requested by: Chris Timmons <cwt@networks.cwu.edu>
Approved by: cperciva (mentor, implicit)
MFC after: 1 week

Cleanups for mailwrapper(8):
- K&R -> ANSI prototype [O]
- Do not bother to do free right before exit() or execve() [O]
- Remove some dead code in addarg()
- Make additional parameters specified in mailer.conf(5)
actually work and document the fact. [N]
- Avoid using __progname but instead use getprogname()
and setprogname() to provide more sensible messages. [O, N]
- Update $OpenBSD$ and $NetBSD$ to reflect the fact that we
have sync'ed with their code.
- WARNS=6

Obtained from/Inspired by: OpenBSD [O], NetBSD [N] (partially)

Add rc.d/bridge which is invoked when a new interface arrives and can
automaticly add it to an Ethernet bridge. This is intended for applications
such as qemu, vmware, openvpn, ... which open tap interfaces and need them
bridged with the hosts network adapter, the user can set up a glob for
interfaces to be automatically added (eg tap*).

Add jail_<jname>_exec_afterstart<N> rc.conf variable, where <N> is
1,2 and so on.
It specifies the command to be run as Nth after jail startup.

sh(1)-fu by: Dario Freni
PR: conf/97697
MFC after: 2 weeks
Reviewed by: ru@ (man page)

o Sort .Xrs, touch .Dd.

Add description how to use caching.

Submitted by: Michael Bushkov <bushman__at__rsu.ru>

Remove reference to mount_procfs, which is no longer used by mount(8).
Add an example using "mount -t procfs".

Remove reference to mount_linprocfs, which is no longer used by mount(8).
Add an example using "mount -t linprocfs".

Add two new scripts (mdconfig/mdconfig2) to replace old ramdisk{,-own}
scripts. These scripts handle vnode backed md(4) devices.

Old ramdisk{,-own} scripts will stay a bit in CVS to allow some time for
migration since variable names have changed (ramdisk_* -> mdconfig_*).

Two new variables have been introduced to be able to populate the md(4)
device once it has been mounted (mdconfig_*_files and mdconfig_*_cmd).

Use should be as easy as:

mdconfig_md0="-t malloc -s 10m"
mdconfig_md1="-t vnode -f /var/foo.img"

See rc.conf(5) for more information and description of the additional
variables.

Approved by: cperciva

Remove reference to mount_devfs(8), since mount(8) no longer
invokes this mount_devfs when mounting devfs file systems.

Add a man page for ext2fs.

Send the pcvt(4) driver off to retirement.

Add reiserfs.5 man page to build.

Add man page for ReiserFS.

Reviewed by: dumbbell

Remove reference to Alpha

Refer to csup in the make.conf(5) manpage.

Insta-MFC to follow.

Reminded by: ru (some time ago)

Move etc/rc.firewall6 to ipfw2+v6, update related rc.d and periodic scripts.
Since ipfw2 now does dual-stack, statistics for IPv6 come from the ipfw
scripts as well.

Remove the dependency on procfs since it isn't used.

Noticed by: des

- Change the "jail_" prefix for internal script variables. This fixes an
issue where some global jail_* variables were overriden in the script. [1]
- Change "jid" to "jname" in rc.conf(5), since it's more a jail name than a
jail id. [1]
- Update examples and comments in defaults/rc.conf to advertise new
variables and the fact that some of the jail-specific variables may be made
jail-global. [2]

Reported by: pjd [1], clsung [2]
Approved by: cperciva
X-MFC after: i got sufficient testing from people using rc.d/jail

Add in linsysfs. A linux 2.6 like sys filesystem to pacify the Linux
LSI MegaRAID SAS utility.

Sponsored by: IronPort Systems
Man page help from: brueffer

- Add new ntpd_config variable so that people can override it in rc.conf.
- Add default value in /etc/defaults/rc.conf.
- Add documentation bits to rc.conf(5).

Approved by: cperciva (mentor)
MFC after: 1 week

Spell synchronous with required silent 'h'.

Reported by: ru, ceri
Pointy hat: brooks

Regen.

Commit the various network interface configutation updates I've been
working on.
1) Make it possible to configure interfaces with certain characters in
their names that aren't valid in shell variables. Currently supported
characters are ".-/+". They are converted into '_' characters.
2) Replace nearly all eval statements in network.subr with a new
function get_if_var which substitues an interface name (after the
translations above) for "IF" in a variable name.
3) Fix list_net_interfaces() in the nodhcp case.
4) Allow the administrator to specify if dhclient should be started
when /etc/rc.d/netif configures the interface or only by devd.
This can be set on both a per interface and system wide basis.

PR: conf/88974 [1,2], conf/92433 [1,2]

- Add following global jail options, used if no jail-specific options are
set:
* jail_mount_enable
* jail_devfs_ruleset
* jail_devfs_enable
* jail_fdescfs_enable
* jail_procfs_enable
* jail_fstab
* jail_flags
- Add a jail_interface / jail_<jid>_interface option. An ip alias will be
created (jail_<jid>_ip) on jail_interface or jail_<jid>_interface if set.
This is not a mandatory option.
- Document all missing jail_* options in rc.conf(5).

Approved by: cperciva (mentor)
MFC after: 2 weeks

Have WITHOUT_BIND_MTREE imply WITHOUT_BIND_ETC

- Be explicit about libmap32.conf only working on amd64

Requested by: ru

- Document libmap32.conf

MFC after: 1 week

Remove mentions of old compat options from here; equivalents are
now provided in src.conf(5).

Install the autogenerated src.conf(5) manpage.

Reimplementation of world/kernel build options. For details, see:

http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html

The src.conf(5) manpage is to follow in a few days.

Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)

Add link:

rc.conf.local.5->rc.conf.5.

PR: docs/87698
Reported by: Marian Cerny <jojo@matfyz.cz>
Submitted by: Daniel Gerzo <danger@rulez.sk>
Approved by: trhodes (mentor)
MFC after: 3 days

Fix spelling error

MFC after: 1 day

Actually bump the date to the commit-date for the last commit.

Document the graid3(8), gstripe(8) and gconcat(8) periodic scripts.

Mention NO_NLS_CATALOGS.

Suggested by: Niclas Zeising <lothrandil__at__n00b.apagnu.se>

NO_WPA_SUPPLICANT_EAPOL is a bool, not a str

Xref chkgrp(8).

PR: 93529
Submitted by: Daniel Gerzo <danger@rulez.sk>
MFC after: 3 days

Change default build of wpa_supplicant to include EAPOL support;
ENABLE_WPA_SUPPLICANT_EAPOL is no more, now use NO_WPA_SUPPLICANT_EAPOL
to build with only WPA-PSK support.

Reviewed by: ru, bsdimp (basic approach)
MFC after: 1 week

Fix leakage of uncommitted build changes

Add a default ldconfig32_paths entry in default/rc.conf for 32-bit compatability shared libraries.
It is used by the ldconfig rc.d scripts.
Document this variable in the man page

PR: amd64/91571
Approved by: philip (mentor)
MFC after: 3

Remove pccard variables which are no longer supported after the move
to NEWCARD.

Overhaul the named boot script:

1. Remove a now-spurious NetBSD CVS Id, as we are no longer synching work
2. Remove a now-spurious BEFORE, since ntpdate now REQUIRE's named
3. Replace the call to set rcvar with what that function would output,
and generally reduce indirection ($name -> named) since it's highly
unlikely the name of the named process or service will change any time soon.
4. Resort the order the variables at the top of the file to a more
traditional format, and remove a spurious required_dirs from the top, as it
works better after load_rc_config.
5. We do not want the default reload method with named, so define a simple
but appropriate substitute using rndc. If I were writing this script for
the first time I would not include this at all, since it's preferable to
control a running daemon with rndc to start with, but given that this is
already here, let's do it right. I hope that future generations will
however resist the tempation to add reconfig to extra_commands.
6. By the same token, we want to use rndc to shut down named, but given
that by defining a stop function we lose the "find the process by its
pid file in an emergency" goodness of rc.subr, try to do something useful
in the event that rndc is not available, and keep the user informed.
7. Replace some "test -f" with "test -r" to handle the unlikely event
that the relevant file exists, but is unreadable.
8. Twiddle whitespace in a few areas, remove a spurious blank line,
a bogus double space, and try to do better indenting.
9. Improve generation of the rndc.key file significantly
a. If for some reason a user has an rndc.conf file, assume that they
did that on purpose, and hence know what they are doing, so leave them alone.
b. Introduce a named_uid configuration variable so that the user which owns
the rndc.key file and the user named runs as always match, and is more
easily configurable. This should dramatically reduce problems with rndc.
c. Also test that the rndc.key file size is greater than zero, rather than
simply that the file exists. I have seen at least one user report this exact
problem, and although neither of us is sure where the empty file came from,
the fix is simple, so include it.
d. Rather than try to create an rndc.key file in both /etc/namedb and the
chroot'ed /etc/namedb, assume that they are be the same (which they should
be), and only create the file in the chroot'ed version of the directory.
This partially addresses the problem described in conf/73929, but I have
not yet finished thinking about the PREFIX issue that PR also raises.

As a result of introducing the named_uid knob, the default named_flags
are now empty.

Update defaults/rc.conf and rc.conf(5) to reflect these changes.

Document NO_AUDIT make variable.

Obtained from: TrustedBSD Project

Correct references to ipnat(8).

MFC after: 3 days

Correct the meaning of the NO_SHARED knob.

MFC after: 3 days

- Add a startup script for hostapd.
- Document associated variable in rc.conf(5).

Approved by: dougb
MFC after: 1 week

Expand contractions.

Document the daily_status_ata_raid_enable and daily_status_gmirror_enable
variables.

Add more details about enabling a custom ruleset for /dev in `rc.conf',
and add ruleset labels/numbering to the custom ruleset example.

PR: docs/90362
Submitted by: Roland Smith <rsmith@xs4all.nl>
MFC after: 3 days

Add a couple of obviously missing xrefs to SEE ALSO:
ftpd(8), geli(8).

Note that options are set using sh(1) syntax.

MFC after: 3 days

Add an rc.d script for stand-alone ftpd.

Document the script's controls on the rc.conf(5)
manpage and touch its Dd.

PR: conf/90893
MFC after: 5 days

It's perfectly valid to run rpc_statd and rpc_lockd as an NFS client, so
update the documentation to reflect that.

PR: docs/86090
Submitted by: Lowell Gilbert <freebsd-bugs-local at be-well dot ilk point org>
MFC after: 3 days
MFC to: RELENG_5, RELENG_6

Mention that NETWORKING is probably the right value for
early_late_divider in a jail.

Add an explcit Xr for jail(8)

Bump .Dd date after latest changes.

Approved by: simon

Add a mechanism to include files added by ports which contain
the names of directories to include in the base ldconfig script.
This will eliminate the need for each port to install its own
boot script which does nothing but ldocnfig a given directory.

This code was developed by flz (ports committer), discussed on
freebsd-rc@, and modified slightly by me.

Submitted by: flz
Reviewed by: brooks

Fix semantics in the documentation of the "jail_socket_unixiproute_only"
variable ("YES" vs. "NO") and be more precise and intuitive on what is
actually allowed/restricted by this variable ("UNIX/IP/route sockets"
vs. "TCP/IP protocols").

MFC after: 3 days

Brooks pointed out a potential problem with disabling the X cleaning
by default, so add a new knob that is on by default, and check that
knob in start_precmd so that it can run even if cleaning /tmp is
not enabled. This has the advantage of not violating POLA, while
still allowing the user to disable this behavior if they wish (for
example on a server that will never run X).

Clear up problems with /etc/rc.d/{abi|cleanvar|cleartmp} brought
to light by the PR. Specifically, convert these three scripts
into good rc.d citizens, making sure that their functionality
is preserved, but the rc.d framework rules are not broken.

Add support for cleanvar as a regular rc.d script in the
default rc.conf, and document this in the man page.

Add a descriptive comment to rc.conf that regarding the
three emulation/compatibility services provided by abi
so users will not be confused by these services not having
their own startup scripts.

PR: conf/84574
Submitted by: Alexander Botero-Lowry

Update the date. Forgotten in previous commit.

Make our ELF64 type definitions match standards. In particular this
means:
o Remove Elf64_Quarter,
o Redefine Elf64_Half to be 16-bit,
o Redefine Elf64_Word to be 32-bit,
o Add Elf64_Xword and Elf64_Sxword for 64-bit entities,
o Use Elf_Size in MI code to abstract the difference between
Elf32_Word and Elf64_Word.
o Add Elf_Ssize as the signed counterpart of Elf_Size.

MFC after: 2 weeks

Remove usbd(8) and all references to it. It is no longer necessary
since devd(8) now provides the same functionality.

Submitted by: Anish Mistry

Remove rcconf.sh from /etc/rc.d, and instead load the configuration
as part of rc. Doing this, and the sourcing of rc.subr after we have
determined if we are booting diskless (and correspondingly run
rc.initdiskless if necessary) are safe, and actually allow fewer files
to be needed on the diskless box. This also allows variables from
the configuration to be available to rc itself, such as ...

Add a variable to rc.conf, early_late_divider, which designates the
script which separates the early and late stages of the boot process.
Default this to mountcritlocal, and add text to etc/defaults/rc.conf,
rc.conf(5) and diskless(8) which describes how and why one might want
to change this.

Reviewed by: brooks

config.5 was repocopied from share/man/man5/ to usr.sbin/config/.

Repocopied by: peter

Fix markup.

Add document about mqueuefs.

Document "makeoption", "nocpu", and "nomakeoptions" directives.
(Indeed this should be repo-copied to src/usr.sbin/config/.)

Add bluetooth.device.conf(5) man page

MFC after: 3 days

Remove references to rdist(1) and friends.

Submitted by: Björn König

Reorder the variable lists on this page alphabetically by make variable
name.

Discussed with: ru

- Move the documentation for the ENABLE_WPA_SUPPLICANT_EAPOL knob to into
the list for 'world' builds.
- Increase the width of a bullet list.
- Use .Ss to name sub-sections of this file.

-mdoc sweep.

Add a new configuration variable, ipv4_addrs_<ifn>, which adds one or
more IPv4 address from a ranged list in CIRD notation:

ipv4_addrs_ed0="192.168.0.1/24 192.168.1.1-5/28"

In the process move alias processing into new ipv4_up/down functions to
more toward a less IPv4 centric world.

Submitted by: Philipp Wuensche <cryx dash freebsd at h3q dot com>

Correct a grammo and capitalize a few abbreviations.

Update example libmap.conf file:
- Remove pointless examples that map libpthread to itself.
- Update shared libraries for 6.0 bumps.

Reported by: rwatson
MFC after: 1 day

A better, more correct explination of NO_SHARED. This could probably
use a quick touch up, but at least it's correct.

Requested by: ru

Document that changes to nsswitch.conf might be needed when
compiling with NO_NIS.

PR: bin/87221
Reviewed by: simon
MFC after: 4 weeks

Replace "/etc/make.conf" with references to make.conf(5)
where applicable. The main reason for this change is that
the location of make.conf is not constant and can be
modified via __MAKE_CONF. This change also improves
hyper-text linkage in our manpages.

MFC after: 2 weeks

Clarify the usage and effects of sys.mk, make.conf(5), and __MAKE_CONF.

MFC after: 2 weeks

Add an rc.d script to start pfsync at the right moment of the
system boot, and hook it up in the system.

The separate script is needed because in the presence of various
interface lists in rc.conf ($network_interfaces, $cloned_interfaces,
$sppp_interfaces, $gif_interfaces, more to come) it is hard to start
them orderly, so that pfsync is brought up after its syncdev, which
is required for the proper startup of pfsync.

Discussed with: mlaier on -pf
MFC after: 5 days

Add firewall-related xrefs to SEE ALSO.

Minor clarifications and fixes to wording, grammar, and markup
around ${network_interfaces}.

Sort MAN.

Add a new rc.conf entry, kerberos5_server_flags, which allows the
administrator to specify additional start-up flags to the Kerberos
5 Authentication Server.

MFC after: 3 days

A single `*' character doesn't disable *ANY* form of authentication.
Make sure that this is clearly stated.

Prodded by: simon, Gavin Atkinson <gavin.atkinson@ury.york.ac.uk>

Explain the use of `*' in master.passwd and that it's slightly
different from the use of `*' in /etc/passwd.

PR: docs/86234
Submitted by: Paul Hoffman <phoffman@above.proper.com>
MFC after: 1 week

Fix system shutdown timeout handling by again supporting longer running
shutdown procedures (which have a duration of more than 120 seconds).

We have two user-space affecting shutdown timeouts: a "soft" one in
/etc/rc.shutdown and a "hard" one in init(8). The first one can be
configured via /etc/rc.conf variable "rcshutdown_timeout" and defaults
to 30 seconds. The second one was originally (in 1998) intended to be
configured via sysctl(8) variable "kern.shutdown_timeout" and defaults
to 120 seconds.

Unfortunately, the "kern.shutdown_timeout" was declared "unused" in 1999
(as it obviously is actually not used within the kernel itself) and
hence was intentionally but misleadingly removed in revision 1.107 from
init_main.c. Kernel sysctl(8) variables are certainly a wrong way to
control user-space processes in general, but in this particular case the
sysctl(8) variable should have remained as it supports init(8), which
isn't passed command line flags (which in turn could have been set via
/etc/rc.conf), etc.

As there is already a similar "kern.init_path" sysctl(8) variable which
directly affects init(8), resurrect the init(8) shutdown timeout under
sysctl(8) variable "kern.init_shutdown_timeout". But this time document
it as being intentionally unused within the kernel and used by init(8).
Also document it in the manpages init(8) and rc.conf(5).

Reviewed by: phk
MFC after: 2 weeks

Remove superfluous reference to the FreeBSD handbook.

Approved by: brueffer (mentor)

Reflect a recent change in /etc/rc.subr that made ``-M''
appear in tmpmfs and varmfs default flags explicitly.
Explain why -M is good for these file systems (it maximizes
performance and makes the system more stable at low memory
conditions by reducing the chance of thrashing.)

Bump .Dd accordingly.

MFC after: 3 days

Teach portsnap how to ignore unwanted parts of the ports tree. A line
of the form "REFUSE foo" in portsnap.conf will result in parts of the
tree matching "^foo" being (a) not extracted by "portsnap extract", (b)
not updated by "portsnap update", and (c) not having any patches or new
ports downloaded by "portsnap fetch" or "portsnap cron". The example
shown in portsnap.conf demonstrates ignoring all the language categories.

As mentioned in portsnap.conf.5, the use of an imcomplete ports tree is
not officially supported; but this is something which many users have
requested, so I'm adding it anyway.

PR: bin/85619 (but not the patch provided therein)
MFC after: 1 month

Remove a stale manpage.

- Remove the removable_interfaces variable. /etc/pccard_ether will
now run on any interface.
- Add a new ifconfig_<ifn> keyword, NOAUTO which prevents configuration
of an interface at boot or via /etc/pccard_ether. This allows
/etc/rc.d/netif to be used to start and stop an interface on a purely
manual basis. The decision to affect pccard_ether may be revisited at
a later date.

Requested by: imp, gallatin (removable_interfaces)
Discussed with: sam, Randy Bush (NOAUTO)

Refer to the OpenBSD dhclient instead of the ISC dhclient.

Reported by: Bob Johnson <bob89 at eng dot ufl dot edu>
PR: 84963

Add scripts for GELI device configuration on boot.

rc.d/geli - configures encryption (ask for passphrases, etc.);
rc.d/geli2 - is called after file systems are mounted and mark devices for
detach on last close.

Sponsored by: Wheel Sp. z o.o.
http://www.wheel.pl
MFC after: 3 days

Correct some grammar.

Document methods people use to load linux shared libraries in FreeBSD
binaries. A very neat trick.

Add portsnap to the base system. This is a secure, easy to use,
fast, lightweight, and generally good way for users to keep their
ports trees up to date.

This is version 0.9.4 from the ports tree (sysutils/portsnap) with
the following changes:
1. The experimental pipelined http code is enabled. No seatbelts
in -CURRENT. (^_^)
2. The working directory has moved from /usr/local/portsnap to
/var/db/portsnap (as discussed on -arch two days ago).
3. Portsnap now fetches a list of mirrors (distributed as DNS SRV
records) and selects one randomly. This should help to avoid the
uneven loading which plagues the cvsup mirror network.
4. The license is now 2-clause BSD instead of 3-clause BSD.
5. Various incidental changes to make portsnap fit into the base
system's build mechanics.

X-MFC-After: 6.0-RELEASE
X-MFC-Before: 5.5-RELEASE
X-MFC-To: RELENG_6, RELENG_5, ports
discussed on: -arch and several other places
"yes please" from: simon, remko, flz, Diane Bruce
thinks this is a great idea: bsdimp
Hopes he didn't forget any files: cperciva

Put hesiod.conf(5) under build option YES_HESIOD

Teach rc.d/encswap script how to use geli(8) for swap encryption.

MFC after: 3 days

rc.conf(5) update - gbde_swap_enable variable has been removed.

Reminded by: dougb

- Document network_interfaces=auto (the default!).
- Remove documentation of pccard_ifconfig as it is now gone.
- Document pccard_ifconfig's replacement ifconfig_DEFAULT.

Fix all the spelling mistakes I could find in the man pages for words
that have at least 3 characters.

MFC after: 1 week
Thanks to: Music band ``Chingon''
for keeping me company while searching for these.

Update SEE ALSO section.

PR: docs/84273
Submitted by: Gary W. Swearingen

document ENABLE_WPA_SUPPLICANT_EAPOL

Approved by: re (scottl)

Use 'manual page' instead of 'man page' for consistency.

Approved by: re (hrs)

(Mostly) markup fixes.

Approved by: re (blanket)

Assorted markup fixes and minor wordsmithing.

Approved by: re

Add missing .Ed call that was fatal for the rest of manpage.
Bump document date.

Approved by: re

Update to the new world of network configuration. The documenation is
slightly ahead of reality as rc support for WPA is only partialy in
place.

Submitted by: Jeremie Le Hen <jeremie at le-hen dot org>

Remove default and documenation for pccard_ether_delay since I removed
it from /etc/pccard_ether.

Submitted by: Jeremie Le Hen <jeremie at le-hen dot org>

Add manpages for devfs.conf and devfs.rules. These have been
initially written by Roland, but hacked for a while by me. Any
good parts are the results of Roland's hard work. Any typos or
style mistakes are mine.

Submitted by: Roland Smith <rsmith@xs4all.nl>
PR: docs/63808, docs/75433, docs/80458, docs/80459
MFC after: 2 weeks

- document powerd_flags too
- add a reference to powerd(8)

Approved by: mentor (joerg)

Typeo.

Submitted by: Emil Mikulic

Add note to remove nis entries when compiling with NO_NIS.

Reviewed by: ru (initial version), simon (updated version)
Approved by: pjd (mentor)

Document bsnmpd related options.

Reminded by: maxim

Add NO_DICT handle. Saves almost 3.5 MB installed.

Add note about powerd(8)

Submitted by: netchild

Belatedly remove the drivers.conf(5) man page. The actual files and
supporting scripts were removed as part of the splitfs floppy rework.

Remove mention of mac_lomac(4) policy from here too.

Document the newsyslog_* and chkprintcap_* variables I added yesterday.

Document NO_RCMDS, bump doc date.

Fix a grammar nit of mine.

-mandoc style tweak rev 1.13.
Submitted by: ru

Catch up with the latest policies on knobs.

Expand contractions.

Expand *n't contractions.

Expand BSS.

Fully document (no)?(device|option)s?.

This page should probably be repocopied to src/usr.sbin/config/.

Fixed the misplaced $FreeBSD$.

Add xrefs to crypt(3) and pw(8) and add a warning about not manually
altering passwd related files.

PR: 74656
Submitted by: Jilles Tjoelker <jilles@stack.nl> (original version)

Note changes to throttling sysctls and new power_profile(8) cpufrq support.

Document NO_GPIB

Document NO_NETCAT.

Backout last commit, lomac_enable is still valid. Just Xref mac_lomac.4
instead of lomac.4.

Remove last traces of lomac(4)

MFC after: 3 days

spell "file system" correctly

Approved by: ru

Fixed xref.