bsd.own.mk: rename GCC_NO_* to CC_WNO_*

Rename compiler-warning-disable variables from
GCC_NO_warning
to
CC_WNO_warning
where warning is the full warning name as used by the compiler.

GCC_NO_IMPLICIT_FALLTHRU is CC_WNO_IMPLICIT_FALLTHROUGH

Using the convention CC_compilerflag, where compilerflag
is based on the full compiler flag name.

introduce some common variables for use in GCC warning disables:

GCC_NO_FORMAT_TRUNCATION -Wno-format-truncation (GCC 7/8)
GCC_NO_STRINGOP_TRUNCATION -Wno-stringop-truncation (GCC 8)
GCC_NO_STRINGOP_OVERFLOW -Wno-stringop-overflow (GCC 8)
GCC_NO_CAST_FUNCTION_TYPE -Wno-cast-function-type (GCC 8)

use these to turn off warnings for most GCC-8 complaints. many
of these are false positives, most of the real bugs are already
commited, or are yet to come.


we plan to introduce versions of (some?) of these that use the
"-Wno-error=" form, which still displays the warnings but does
not make it an error, and all of the above will be re-considered
as either being "fix me" (warning still displayed) or "warning
is wrong."

branches: 1.39.28;
Let init be built easily with the CHROOT capability enabled.

This allows the ramdisk used in the incoming support for full-disk encryption to contain crunched binaries (much like sysinst) while booting a regular system (unlike sysinst).

branches: 1.38.6; 1.38.12;
Enable WARNS=4 by default except for:
dump dump_lfs fsck_ffs fsck_lfs fsdb mount_smbfs
newfs_ext2fs newfs_lfs resize_lfs setkey

branches: 1.37.12; 1.37.22;
warns=4

Add support for running multi-user in a chroot() environment.

How it works:

- after successful execution of /etc/rc, check the value of "init.root"
sysctl node, if it's different than "/", chroot() into its value and run
/etc/rc inside the chroot(),

- in single-user, return back to the original / file system.

Allows running with / file system on e.g., cgd(4), vnd(4) or ccd(4) volumes.

Idea first discussed with Matt Thomas, implemented by Jachym Holecek <freza
(at) liberouter.org> with some nitpicks by me. Successfully used by me for
almost a year with / on a cgd(4) volume (for more information about the setup
check ftp://ftp.NetBSD.org/pub/NetBSD/misc/salo/init-chroot/ ).

Revert previous revert; we don't need RESCUEDIR handling here now
<bsd.prog.mk> has it.

Revert previous; init(8) still needs special case handling for RESCUEDIR
otherwise the path to mount_mfs(8) and the standard $PATH will be wrong...

Remove RESCUEDIR hack; it will be done centrally.

If RESCUEDIR is defined, use that as an alternate path to sh and mount_mfs,
and prepend RESCUEDIR to the default PATH.
(This replaces my _PATH_ALTSHELL mods from rev 1.52 of init.c)

if RESCUEDIR is defined, use ${RESCUEDIR}/sh as _PATH_ALTSHELL

now that we have working rescue tools, there's no need to force
LDSTATIC=-static for init(8) on people who want LDSTATIC=""

fix typos that prevented us from cleaning utmpx. Noted by wiz

add utmpx/wtmpx processing support.

.ifdef SMALLPROG, compile without ALTSHELL and SECURE support

Rename MSDOSFS_ROOT to MFS_DEV_IF_NO_CONSOLE, and rework:
- Always attempt mfs dev if missing /dev/console
- Save and run both MAKEDEV and MAKEDEV.local
- After creating the mfs dev, mknod() and freopen() /dev/console.
- If MAKEDEV is missing do not fail out early, but still create the mfs,
/dev/console.
- If we hit any errors fail out to single user.
This change _only_ affects systems booting without /dev/console.

* Add user-controlled mk.conf variables
- SHLIBDIR Location to install shared libraries if ${USE_SHLIBDIR}
is "yes". Defaults to "/usr/lib".

- USE_SHLIBDIR If "yes", install shared libraries in ${SHLIBDIR}
instead of ${LIBDIR}. Defaults to "no".
Sets ${_LIBSODIR} to the appropriate value.
This may be set by individual Makefiles as well.

- SHLINKDIR Location of shared linker. Defaults to "/usr/libexec".
If != "/usr/libexec", change the dynamic-linker
encoded in shared programs

* Set USE_SHLIBDIR for libraries used by /bin and /sbin:
libc libcrypt libcrypto libedit libipsec libkvm libm libmi387
libtermcap libutil libz

* If ${_LIBSODIR} != ${LIBDIR}, add symlinks from ${LIBDIR}/${LIB}.so*
to ${_LIBSODIR}/${LIB}.so* for compatibility.

* Always install /sbin/init statically (for now)


The net effect of these changes depends on how the variables are set:

1.) If nothing is set or changed, there is no change from the
current behaviour:
- Static /bin, /sbin, and bits of /usr/*
- Dynamic rest
- Shared linker is /usr/libexec/ld*so

2.) If the following make variables are set:
LDSTATIC=
SHLINKDIR=/lib
SHLIBDIR=/lib
Then the behaviour becomes:
- Dynamic tools
- .so libraries used by /bin and /sbin are installed to /lib,
with symlinks from /usr/lib/lib*so to -> /lib/lib*so
where appropriate
- Shared linker is /lib/ld*so

3.) As per 2.), but add the following variable:
USE_SHLIBDIR=yes
This forces all .so's to be instaleld in /lib (with compat
symlinks), not just those tagged by their Makefiles to be.
Again, compat symlinks are installed

Remove INSTALLFLAGS=-fschg, as per change to usr.bin/ssh/ssh/Makefile.

branches: 1.23.4;
The mode 0544 workaround has not been necessary since the first BSDi import.

Make these executables world-readable.

CFLAGS->CPPFLAGS

define WARNS?=1 for all of sbin/*

Support root on msdos filesystems by creating an mfs on /dev and running
MAKEDEV all to create the devices. Idea by Chris Demetriou.

add WARN=1

rename DEBUGSHELL to ALTSHELL

convert to new RCS Id conventions; reduce my headache

specify man pages the new way.

Fix up RCS ids.

Update to 4.4-lite (basically some copyright changes) + local changes.

always use libcrypt

merge in changes from netbsd-0-9-ALPHA2

Add RCS identifiers.

branches: 1.9.2;
get rid of the bogus changes i made to init. note that /etc/ttys
*must* have an entry for "console", though it should be "off",
prolly.

a couple of local mods; always ask for shell in single user, use -lcrypt,
use root's shell rather that /bin/sh when going to single-user, etc.

incorporate bsdi's version of init; this is their version, w/no local changes
other than adding Id strings as appropriate

add preliminary support for devfs (e.g. MOUNT_DEVFS #define, etc.)

changed to use new libcrypt scheme.

added secure init patch

changed "Id" to "Header" for rcsids

added rcs ids to all files

branches: 1.1.1;
Initial revision

Add support for running multi-user in a chroot() environment.

How it works:

- after successful execution of /etc/rc, check the value of "init.root"
sysctl node, if it's different than "/", chroot() into its value and run
/etc/rc inside the chroot(),

- in single-user, return back to the original / file system.

Allows running with / file system on e.g., cgd(4), vnd(4) or ccd(4) volumes.

Idea first discussed with Matt Thomas, implemented by Jachym Holecek <freza
(at) liberouter.org> with some nitpicks by me. Successfully used by me for
almost a year with / on a cgd(4) volume (for more information about the setup
check ftp://ftp.NetBSD.org/pub/NetBSD/misc/salo/init-chroot/ ).

convert to new RCS Id conventions; reduce my headache

branches: 1.1.1;
Update to 4.4-lite (basically some copyright changes) + local changes.

Clean up deleted files.

incorporate bsdi's version of init; this is their version, w/no local changes
other than adding Id strings as appropriate

Remove superfluous Pp.

grammar

branches: 1.60.14; 1.60.16;
init first appeared in V1 UNIX
http://minnie.tuhs.org/cgi-bin/utree.pl?file=V1/init.s
Replace contraction.
Bump date.

The "-s" flag is passed to init by the kernel, not by the boot loader.

Document that the kernel may try several paths for init.

XXX: This should be in the kernel documentation, not in the init(8) man page.

branches: 1.57.6; 1.57.12;
Sort SEE ALSO.

Remove physical markup.

branches: 1.55.2;
Add backslash (minus is "\-").

Add some details about init's role with securelevel.
Add references to other manual pages for more details.

branches: 1.53.2;
xref rescue(8)

branches: 1.52.4;
Mention utmpx/wtmpx as well as utmp/wtmp. Suggested by the patches in
PR bin/36551 by Greg A. Woods. Also, while I'm here, fix a miscapitalized
word.

Sort xrefs.

Update for the fact that MAKEDEV uses either tmpfs or mfs.

* init calls "MAKEDEV -MM init", not "MAKEDEV -M init"
* s/filesystem/file system/
* one typo and one markup fix
* bump date

branches: 1.48.4; 1.48.6;
backout previous.

Call the pivot root by it's name.

Update info about running MAKEDEV to note that MAKEDEV itself now creates
the mfs filesystem.

Remove all reference to MAKEDEV.subr. Add a reference to MAKEDEV.local.

Bump date for previous.

When creating /dev in a memory file system, include all three of
MAKEDEV, MAKEDEV.subr and MAKEDEV.local in the set of files that are
copied if they exist.

Now booting an INSTALL kernel with an embedded ramdisk correctly creates
/dev again, fixing a problem introduced when MAKEDEV.subr was created a
few days ago.

Remove securelevel-related text from init(8) man-page as they're now in
secmodel_bsd44(9).

I'm not sure I agree with the BUGS section, but for now move it to
secmodel_bsd44(9) as well.

Bump date for previous.

Remove sentence no longer true.

New sentence, new line.

Add support for running multi-user in a chroot() environment.

How it works:

- after successful execution of /etc/rc, check the value of "init.root"
sysctl node, if it's different than "/", chroot() into its value and run
/etc/rc inside the chroot(),

- in single-user, return back to the original / file system.

Allows running with / file system on e.g., cgd(4), vnd(4) or ccd(4) volumes.

Idea first discussed with Matt Thomas, implemented by Jachym Holecek <freza
(at) liberouter.org> with some nitpicks by me. Successfully used by me for
almost a year with / on a cgd(4) volume (for more information about the setup
check ftp://ftp.NetBSD.org/pub/NetBSD/misc/salo/init-chroot/ ).

The securelevel does not affect whether Veriexec's tables can be modified;
this is now controlled by Veriexec's strict level.

Mark up more paths with .Pa, and
break a line (<=80 chars per line).

Use more macros and sort xrefs.

Patch from Jeremy Reed to describe how MFS /dev works. Thanks!

Change all .Xr config 8 to .Xr config 1, following the recent move of
config from usr.sbin -> usr.bin.

Reviewed by wiz.

Fix typo 'and the go' -> 'and then go'

veriexec can't be changed at securelevel 1

Bump date for previous; new sentence, new line; use more macros; fix a typo.

Add an explanation of the fundamental purpose of the "security level"
mechanism and attempt to explain how to use it effectively.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22308, verified by myself.

setup -> set up.

.Nm does not need a dummy argument ("") before punctuation or
for correct formatting of the SYNOPSIS any longer.

New sentence, new line. By Robert Elz with minimal fixes.

Sort sections and SEE ALSO.

Drop arguments of .Os.

document the conditions for /etc/rc to be called with "autoboot"

Using the `NOTES' file and source code as a reference, attempt to more
accurately explain the operation of init(8)'s state machine.

Remove reference to crash(8).

Note that proc.<pid>.corename susctl node is read-only at securelevel >= 2.

branches: 1.18.4;
document ipf change at securelevel >= 2

reflect new securelevel 2 changes

fix a typo, pointed out in pr-5785 from Mason Loring Bliss

fix a bug.

fix a bad .Xr

fix bad .Xr references

Sort items of section 8 in SEE ALSO list alphabetical order.

cleanup use of .Nm

in NetBSD, setting the clock back is inhibited in securelevel 2, not s-lev 1

(mostly) merge lite-2 changes (except for some silly ones.)

Better specify which flags can't be change at level 1. (PR 3299)
Make all "multiuser" be "multi-user" to conform with other "multi-user"
usage.

close pr-2717 from Manuel Bouyer <bouyer@lix.polytechnique.fr>
Replaces reference to hand patching securelevel kernel variable
with reference to options INSECURE.

convert to new RCS Id conventions; reduce my headache

Changes to match POSIXication of kill(1).

Fix up RCS ids.

Update to 4.4-lite (basically some copyright changes) + local changes.

Add RCS indentifiers.

branches: 1.1.1;
incorporate bsdi's version of init; this is their version, w/no local changes
other than adding Id strings as appropriate

Allow getty to exit quickly a few times before deciding that it is exiting
too quickly. Based on a FreeBSD change from 1994.

s/successfuly/successfully/ in comment. No functional change.

these are syslog-like

fix error messages containing \n

Add missing free() in error path.

include the needed headers

branches: 1.103.2;
Convert to C89 function definitions

branches: 1.102.2; 1.102.4;
make it compile with SMALLPROG

Be more static

Keep an internal variable indicating whether securelevel is present, and
don't blindly try to get/set it. Prevents error messages that don't make
sense if securelevel isn't supported by the kernel.

s/the the/the/

If MAKEDEV exits non-zero, but was nevertheless able to create
/dev/console, then have init(8) just print a warning instead of
exiting.

branches: 1.97.2;
fix -Wsign-compare issues

Remove the \n and tabs from the __COPYRIGHT() strings.
(Tweak some to use a consistent format.)

branches: 1.95.4;
un-bitrot #if 0 testing code.

branches: 1.94.4; 1.94.6;
No need to pass "-ppax" to MAKEDEV now that MAKEDEV internally defaults
to using pax.

branches: 1.93.4; 1.93.6;
KNF.

Adapt to the new MAKEDEV interpretation of -M by passing -MM.

Also pass "-ppax" in an attempt to get improved performance,
but this doesn't really work in the typical case, because the
install ramdisk image contains a version of pax(1) that doesn't
support the -M flag. (MAKEDEV detects the failure and falls back
to using mknod(8) as usual.)

Instead of creating the mfs /dev here, get MAKEDEV to do it.
Removes a load of code that is easier done as a script.
Whenever init exits, use a different error number. Since it is difficult
for init to output messages when /dev/console is absent, having the exit
code reported by the kernel panic gives a chance of identifying the fault.
Also exit if MAKEDEV fails to create /dev/console.

When calculating the size of the MFS /dev file system, round file sizes
up to a multiple of 512. (Not doing this before was wrong but probably
asymptomatic, because there was enough slack space to cope with the
error).

When creating /dev in a memory file system, include all three of
MAKEDEV, MAKEDEV.subr and MAKEDEV.local in the set of files that are
copied if they exist.

Now booting an INSTALL kernel with an embedded ramdisk correctly creates
/dev again, fixing a problem introduced when MAKEDEV.subr was created a
few days ago.

Increase the numbers of inodes available on the "/dev" MFS to 1280.
This should fix the "sysinst" problems caused by adding more devices
node to resolve PR port-amd64/35532.

Revert previous commit.

* 0/1 -> EXIT_{SUCCESS,FAILURE}
* make_utmpx(): Added comment and slightly simpler construct.
* alrm_handler(): Suppress "unused parameter" warning.
* mapfile():
* Handle st.st_size correctly.
* Avoid unnecessary return statements.
* Removed unnecessary MAP_FILE flag.
* Use S_ISLNK() and check S_ISREG() too.
* Add the terminating NUL rather after readlink() than
before, just in case.
* writefile():
* Avoid unnecessary return statements.
* read_ttys():
* Check S_ISREG() as well.
* Check for st.st_size > 0 rather than != 0.

Fix compilation on 64bit platforms.
ok by elad.

- close the utmpx file.
- sprinkle void
- use size_t consistently.

Make it compile without SUPPORT_UTMP nor SUPPORT_UTMPX.

Remove more duplicate #includes,
from Slava Semushin <slava.semushin@gmail.com>

branches: 1.81.2;
Don't record runlvl transitions before we have a read-write /var. Noticed
by lrou at x dot ua.

Error message consistency:
1. don't print the program name in the message [syslog does it]
2. no extraneous \n [syslog takes care of it]
3. quote strings as `%s' [we are using syslog]
4. use %m instead of error = %d

Um, correct previous, so that current_state def/use is consistent.

Since current_state is conditionally defined, make sure its uses are as well.

Try entertain who(1) because it has been sad since it was swallowed by the
Death Star: add utmpx entries for boot time, down time, run level, login
process.

update comment, thanks freza@.

CTLFLAG_READONLY1 was deprecated in earlier commit, remove it here too

remove CTLFLAG_READONLY1 usage. pointed out by cube@, thanks..

Add support for running multi-user in a chroot() environment.

How it works:

- after successful execution of /etc/rc, check the value of "init.root"
sysctl node, if it's different than "/", chroot() into its value and run
/etc/rc inside the chroot(),

- in single-user, return back to the original / file system.

Allows running with / file system on e.g., cgd(4), vnd(4) or ccd(4) volumes.

Idea first discussed with Matt Thomas, implemented by Jachym Holecek <freza
(at) liberouter.org> with some nitpicks by me. Successfully used by me for
almost a year with / on a cgd(4) volume (for more information about the setup
check ftp://ftp.NetBSD.org/pub/NetBSD/misc/salo/init-chroot/ ).

Check for allocation failures in malloc, calloc, realloc, asprintf, and
vasprintf and try to handle them.

Fix case where argv wasn't returned or freed.

This fixes Coverity CID 2023.

While here also return NULL if the malloc fails.

Move WARNS=3 to the Makefile.inc, and add a little const to the remaining
programs that did not compile before.

Bump the number of inodes to 1024 in the MFS case, needed to
create more devices in the ramdisk images, ok'ed by thorpej@.

be explicit about the perms of mfs /dev

Put back one of the sleep()s -- it doesn't affect us in the usual case.

Replace the sleep(2) in setctty() with a nanosleep(), with a default value of
250ms.

Remove a completely gratuitous 30 delay if you enter the wrong shell path.

clear_session_logs is not needed when we are small.

branches: 1.63.2;
If /dev/constty exists, use it instead of /dev/console for single user shell.
I'm not 100% certain it should call login_tty() for anything else.

If /dev/MAKEDEV is a symlink then preserve the symlink in the mfs /dev.
If /dev/MAKEDEV doesn't exist then try to run /etc/MAKEDEV instead.
Use the (new) '-n inodes' option to mount_mfs and base the size on the number
of inodes and the size of the MAKEDEV script.

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22308, verified by myself.

Exit child process if we fail to 'cd /dev' or 'execl sh MAKEDEV'.
Don't really want two processes in the rest of init!

use asprintf, which is easier

Avoid code duplication by factoring out the open/map open/write/unmap functions.

Always compile in support for attempting to obtain the major device
number of the console from sysctl("machdep.console_device"), rather
than making in optional on the (unused) #ifdef DEBUG.
Certain platforms do not have the console at makedev(0,0) (including
many arm32 and some sh3 platforms), so the "mfs MAKEDEV" hack would
have failed on those.

Noted in private discussion with Quentin Barnes.

If RESCUEDIR is defined, use that as an alternate path to sh and mount_mfs,
and prepend RESCUEDIR to the default PATH.
(This replaces my _PATH_ALTSHELL mods from rev 1.52 of init.c)

PR/5544: Anders Magnusson: Init segfaults when hupped in single user.
- fix so that session_db is not de-referenced when null, and other
possible null pointer dereferences.
- ignore hup and tstp in single user mode.

Call MAKEDEV with "init"

White space nit.

- use _PATH_ALTSHELL (which defaults to _PATH_BSHELL) as the default ALTSHELL
(as opposed to _PATH_BSHELL), to allow the ALTSHELL to be changed.
- print the full path to the default shell in the ALTSHELL prompt.

fix typos that prevented us from cleaning utmpx. Noted by wiz

add utmpx/wtmpx processing support.

In single-user, after taking a signal and having the `shell' die with
SIGKILL, go into an infinite loop (like in the runcom SIGTERM case), on the
assumption that reboot(8) is in the middle of taking the system down.
This fixes `panic: init died' from sysinst.

crank size of mfs from 512 sectors to 768 sectors (large i386 MAKEDEV)

KNF: - use %m always instead of sometimes using strerror()
- space problems in casts
- don't cast 0, use NULL
- don't have long lines
- don't cast malloc
- use warn/warnx instead of fprintf
- fix bug where a failed mount_mfs would cause the program to continue.
- pass lint

fix compilation problems on my alpha

Rename MSDOSFS_ROOT to MFS_DEV_IF_NO_CONSOLE, and rework:
- Always attempt mfs dev if missing /dev/console
- Save and run both MAKEDEV and MAKEDEV.local
- After creating the mfs dev, mknod() and freopen() /dev/console.
- If MAKEDEV is missing do not fail out early, but still create the mfs,
/dev/console.
- If we hit any errors fail out to single user.
This change _only_ affects systems booting without /dev/console.

Increase the size of the dev mfs to at least enough for 1.5.2 i386.
bin/15235 by Gavan Fantom.

complete conversion to ANSI C

deprecate LOG_ODELAY; it's the default

Fix typo in v1.38.

sprinkle some const's

ANSIfy and de-__P()

Handle NULL return value by fgets after shell prompt better. Also
improve '\n' slightly. Addresses bin/11847.

branches: 1.37.4;
Unbreak compilation with -DLETS_GET_SMALL as in PR bin/9639 by Patrick Welche.

Nuke `extern int errno;' in code we compile with -Wstrict-prototypes. We get
the correct definition from errno.h.

Since our gcc doesn't warn about NULL format strings anymore, we can
fix the incorrect err(1, "%s", "") et al.
Closes PR bin/7592 by cgd.

branches: 1.34.2; 1.34.6;
When downgrading from 'highly secure' mode (securelevel >= 2) to 'insecure' mode (securelevel 0) and the root password is set, always require it before giving a shell on the console. Reasoning: if an attacker has access to the machine console, he doesn't necessarily have access to the hardware itself; on a 'highly secure' machine, we may as well make his life hard.

Use sigset_t for signal masks.

Fill in missing (default) mmap(2) flags.

fix pr4766 from greywolf -- couldn't build without -DALTSHELL

Remove the "wait for mfs to be mounted" hack; this is solved in mount_mfs
now.

PR/4372: Andread Wrede: increase number of inodes in mfs

branches: 1.28.2;
Support root on msdos filesystems by creating an mfs on /dev and running
MAKEDEV all to create the devices. Idea by Chris Demetriou.

get rid of "register" declarations.
turn 0 pointers into NULLs
Fix WARN=1 warnings

1) change rcsid[] and copyright[] to use __RCSID and __COPYRIGHT
macros.
2) Clean up some gratuitous uses of write() instead of fprintf()
3) Clean up some of the alternative shell code in single_user(),
fixing a couple of bugs in the meanwhile. Also, fix pr-2620 from
Chris Demetriou -- when an alternative shell is exec'ed, it is now
not called "-sh" automatically.
4) rename the DEBUGSHELL option ALTSHELL since its almost always used
in NetBSD.

Notes:
1) It isn't clear that the ALTSHELL code is really ever very useful,
but we seem to have decided to always enable it anyway.
2) The code in init really needs an overall cleanup, but I just don't
have time or energy.

merge lite-2 changes

Insert some closelog()s, so we don't leave the syslog socket
on fd 0.

If root has no password, don't lock the operator out of single-user
mode if the console is "insecure".

Updated to use <util.h>.
From Greg Hudson <ghudson@MIT.EDU>.

Kill sessions that were deleted when rereading /etc/ttys.

sys_siglist[] -> strsignal()

convert to new RCS Id conventions; reduce my headache

Eliminate uses of some obsolete functions.

ensure /sbin is in PATH in single user mode

branches: 1.16.2;
Fix up RCS ids.

Update to 4.4-lite (basically some copyright changes) + local changes.

Disabling *all* terminals in /etc/ttys meant disabling them for good:
stuck in `clean tty' => `multi user' => `clean tty' loop.

if we want a LETS_GET_SMALL init, allow only single-user

Establish an initial user so that programs running single user
do not freak out and die (like passwd).

Add RCS identifiers.

get rid of the bogus changes i made to init. note that /etc/ttys
*must* have an entry for "console", though it should be "off",
prolly.

a couple of local mods; always ask for shell in single user, use -lcrypt,
use root's shell rather that /bin/sh when going to single-user, etc.

incorporate bsdi's version of init; this is their version, w/no local changes
other than adding Id strings as appropriate

add preliminary support for devfs (e.g. MOUNT_DEVFS #define, etc.)

changed to use new libcrypt scheme.

added console security, if SECURE_CONSOLE defined in makefile,
and console not secure in ttys

changed "Id" to "Header" for rcsids

added rcs ids to all files

after 0.2.2 "stable" patches applied

branches: 1.1.1;
Initial revision

Move UCB-licensed code from 4-clause to 3-clause licence.

Patches provided by Joel Baker in PR 22308, verified by myself.

convert to new RCS Id conventions; reduce my headache

Fix up RCS ids.

Update to 4.4-lite (basically some copyright changes) + local changes.

Add RCS identifiers.

branches: 1.1.1;
incorporate bsdi's version of init; this is their version, w/no local changes
other than adding Id strings as appropriate