Update `file-system UDF' description. Since it now has fsck_udf(4) and it has
matured enough to remove the EXPERIMENTAL flag.

branches: 1.530.2;
s/withe/with/

s/boostrap/bootstrap/ in comment, warning message and documentation.

PR/57889: Ricardo Branco: ext2fs does not have user immutable and append
file flags, only system ones. Restrict those to the superuser. Before
the behavior was controlled by EXT2FS_SYSTEM_FLAGS. Make that behavior the
default.

config(5): enable NTP option implicitly when PPS_SYNC option is enabled.

PPS_SYNC requires NTP, but some code blocks are ifdef'ed without it,
thus allowing an attempt to build kernel with PPS_SYNC, and without NTP
(and it almost builds with one line change).

Update options(4) man page to reflect the change.

Solution suggested by riastradh.

options(4), sysctl(7): Document options HEARTBEAT.

options(4): Nix trailing whitespace.

Add a SELFRELOC kernel option for the sake of documentation clarity.

Instead of telling that x86/boot(8) reloc command needs a kernel able
to self relocate, we can tell it needs a kernel built with the
SELFRELOC option. This keeps the reader from wondering what could
make a kernel able to self relocate.

branches: 1.523.2;
options(4): Clarify MSGBUFSIZE units: bytes.

Document MODULAR_DEFAULT_VERBOSE. Bump date.

Remove mb_map.

Update the description of the NMBCLUSTERS. Add NMBCLUSTERS_MAX.

uvm(9): Enable swap encryption by default.

For machines where the performance impact of swapping before the
system has an opportunity to process `vm.swap_encrypt=0' in
/etc/sysctl.conf, you can disable it again by adding

options VMSWAP_DEFAULT_PLAINTEXT

to the kernel config.

branches: 1.518.4;
Document NFS_BOOT_UDP instead of NFS_BOOT_TCP; We've switched to
NFS over TCP by default.

Bump date.

options.4: add a basic entry for the CNMAGIC option

Fix a bunch of typos in various device drivers and kernel man pages.

Add COMPAT_90

And bump date.

G/C USE_TOPDOWN_VM. __USE_TOPDOWN_VM is used (and hidden)

Remove references to BRIDGE_IPF, it is now compiled in by default.

bump date

actually MBUFTRACE does splvm(), kpreempt_disable()/enable() and percpu,
this has non-slight overhead - amend documentation to stop claiming
the overhead is slight

adresses PR port-xen/50290

remove mount_smbfs(8)/nsmb(4) references

correct documentation for options TFTPROOT

TFTPROOT does *not* require MEMORY_DISK_IS_ROOT. In fact, it doesn't
work at all when MEMORY_DISK_IS_ROOT is set, because then setroot()
tries to perform dhcp on md0 instead of the network card.

Retire KLEAK.

KLEAK was a nice feature and served its purpose; it allowed us to detect
dozens of info leaks on the kernel->userland boundary, and thanks to it we
tackled a good part of the infoleak problem 1.5 years ago.

Nowadays however, we have kMSan, which can detect uninitialized memory in
the kernel. kMSan supersedes KLEAK: it can detect what KLEAK was able to
detect, but in addition, (1) it operates in all of the kernel and not just
the kernel->userland boundary, (2) it requires no user interaction, and (3)
it is deterministic and not statistical.

That makes kMSan the feature of choice to detect info leaks nowadays;
people interested in detecting info leaks should boot a kMSan kernel and
just wait for the magic to happen.

KLEAK was a good ride, and a fun project, but now is time for it to go.

Discussed with several people, including Thomas Barabosch.

Don't say that makeoptions DEBUG="-g" also turns on options DEBUG,
because it does not. Fixes PR kern/54438.

branches: 1.506.2;
filesystem -> file system

Not yet. Back out EFS description which was committed by mistake.

Sort Keywords section

Sort UFS section

Document APPLE_UFS

PTYFS is no longer considered experimental.
Reviewed by <kamil>

Bump date for previous.

Remove mention of SPLASHSCREEN_PROGRESS option.

It was (mostly) removed from the codebase in 2011.

Remove compat_osf1, discussed on tech-kern@.

Retire compat_ibcs2, as discussed on tech-kern@. FreeBSD did the same
recently.

Enable 'options NO_PCI_MSI_MSIX' to DTRT in x86 builds.

Document 'options NO_PCI_MSI_MSIX' in options(4).

Close .Bl directive properly

Document 'options NO_PREEMPTION'

With prompting from Christoph Badura.

Remove compat_svr4 and compat_svr4_32, as discussed on tech-kern@ recently,
but also as discussed several times in the past.

Add KASAN and KLEAK.

Can't see a thing (which see)
Remove CLNP reference which is long gone.

Remove the X86PMC code I had written, replaced by tprof. Many defines
become unused in specialreg.h, so remove them. We don't want to add
defines all the time, there are countless PMCs on many generations, and
it's better to just inline the event/unit values.

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.488.2;
Retire fast_ipsec.4

We switched to Fast IPsec at NetBSD 6.0 and that's the IPsec implementation of
us now. So we don't need to have a separate manual. Merge fast_ipsec.4 into
ipsec.4 and remove fast_ipsec.4.

Retire ICMPPRINTFS, it's annoying and it doesn't build.

Use \(em instead of --.

add an SPECTRE_V2_GCC_MITIGATION option to x86 kernels, that turns
on the GCC spectre v2 mitigation options.

XXX: pullup-8.
XXX: turn on in all kernels.

Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.483.2;
Remove mention of DDB_ONPANIC=2, ddb.dumpstack which is enabled by default now handles back traces on panic.

Remove references to IPFORWSRCRT (the only one that was actually
documented).

The EON option was removed along with the other OSI options long ago

BUFQ_READPRIO is no longer marked as experimental.

Add KASLR and SVS.

Fix word.

Formatting nit.

document ddb.panicstackframes

Remove reference to removed iso(4).

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

Improve wording.

Remove Tn.

note that COMPAT_XX netbsd options enable all forward support as well.
eg, COMPAT_60 enables COMPAT_70 and higher.
document the changes in compat for 4, 5, 6, and 7.
bump date.

Remove reference to vm86.

Remove references to i386.

Remove TCP_COMPAT_42.

Remove workaround for ancient HTML generation code.

branches: 1.466.2;
Correct the xref: return_address(9) is only available for i386.

Bump date for previous. Use American spelling.

mention KDTRACE_HOOKS.

Add some articles.

PR kern/51208
Add DISKLABEL_EI (``Endian-Independent'' disklabel) kernel option to machines
that support Master Boot Record (MBR)

G/C VM_MAX_KERNEL_BUF

branches: 1.460.2;
mention tcp signature

Give the reader a clue as to what information BIOHIST can provide.

Add a BIOHIST option. As mentioned on tech-kern.

Bump date for previous.

KSTACK_CHECK_DR0 is no longer available

It used to detect stackoverflow on the i386 port.

Sponsored by <The NetBSD Foundation>

document new UVMHIST_MAPHIST_SIZE and UVMHIST_PDHIST_SIZE options.

Mention fileassoc dependencies

document NFS_BOOT_TCP option.

OPEN_MAX is 128 now, unless defined differently in config

branches: 1.451.2;
New sentence, new line.

introduce a new way of handling SYSCALL_DEBUG messages -- send them to
a kernel history, settable via the SCDEBUG_KERNHIST flag.

this requires a fairly significantly different set of messages than the
normal debug as histories are restricted:
- each message can take one literal format string and upto 4
arguments
- the arguments can not be strings if you want vmstat -u to
work (this could be fixed, and i might, as it would be nice
if we could print syscall names as well as numbers.)

introduce SCDEBUG_DEFAULT that is settable in the kernel config.

fix a problem in kernhist_dump_histories() where it would crash when a
history with no allocated entries was found.

extend kernhist_dumpmask() to handle the usbhist and scdebughist.

Bump date for previous.

P1003_1B_SEMAPHORE is no longer optional

Remove KMEMSTATS

Remove the malloc debug options. They no longer exist.

the OSI options are long gone (hi joerg!)

typo in previous

PR/49215: Kamil Rytarowski: Sync NVNODE with reality.

Create an "options MODULAR_DEFAULT_AUTOLOAD" config option and add
it to all kernel configs that contain "options MODULAR". This
option turns on module autoloading by default (which is the current
default). This allows people who don't want module autoloading on
by default to disable it by simply removing/commentting this line.

Document options COMPAT_70.

Document options COMPAT_40, COMPAT_50, and COMPAT_60.

branches: 1.439.2;
Fix typo. Bump date for previous.

Sync DIAGNOSTIC performance comments with historical reality.

Somehow, options(4) ended up with a bizarre claim that DIAGNOSTIC can
reduce performance by 15%. While that might have been true at some
isolated point due to a bug, it's an outlier. Since at least 2BSD,
DIAGNOSTIC has added asserts, resulting in at most
difficult-to-perceived performance degredation, and many people have
been running production systems (meaning systems they intend to use,
rather than debugging targets) with this option. (The decision a
while ago to enable DIAGNOSTIC in -current's GENERIC reflects this; if
it really were a 15% hit such enabling by default would be unreasonable.)

branches: 1.437.2;
Fix the heading for ext2fs options to be consistent with the others.

Revise documentation of QUOTA and QUOTA2 options to make it clear that
these are FFS options. (QUOTA2 also works with mfs. AFAIK, traditional
quotas don't.)

Don't refer to QUOTA2 as "the new quotas format" as "new" is not a
good long-term identifier.

Also, don't xref half the quota utilities; there's no need to.

Remove reference to simplelock

Wording. New sentence, new line. filesystem -> file system.

Add EMUL_NATIVEROOT so that native binaries can be told to search an
"emulation" directory before the real root. This makes easier to test
an amd64 kernel on the top of an i386 root filesystem prior a full
migration.

More markup, whitespace.

Add LFS options, both preexisting and UFS-derived. Leave the ones that
are not yet believed to work commented out. Ride previous date bump.

Reorganize the file-system-related options; put options for each fs
type (or group of fs types) in its own subsection and put the
fs-independent options first.

Bump date.

Bump date for previous.

Remove long dead options NKPTADD, NKPTADDSHIT.

Remove PFIL_HOOKS references, code was unifdefed.
From David H. Gutteridge in PR 48146.

Bump date.

Bump date for previous.

Allow console on com_puc without a compile-time option so that PC servers
can become headless after the first reboot (sadly, e.g. Intel AMT presents
as a com_puc, but doesn't appear in the BIOS serial port table, so you need
a keyboard and monitor to install and set the installboot parameters first).

Fix com_puc console on devices with offset BAR's.

branches: 1.424.2;
fix typo.

reflect current reality.

depcrecate IPSEC_NAT_T

- Add KERNHIST and KERNHIST_PRINT.
- Update UVMHIST and UVMHIST_PRINT.

s/can be displayed be calling/can be displayed by calling/

XXX pullup-5

Fix typo.

Better document what options INSECURE means.

options FFS_NO_SNAPSHOT disables only the creation of file system
internal snapshot. Per comment from hannken@.

branches: 1.416.2;
Add dumb description about options NFS_BOOT_BOOTSTATIC. Noticed by ryo@.

remove KAME IPSEC, replaced by FAST_IPSEC

Remove remaining references to pccons options for i386 and shark.
pccons has not existed on either port since late 2007.

Use Lk macro instead of Pa when dealing with URLs, to produce links
with HTML output. And while here update or removed some dead URL
links. Another part of PR/29238.

Fix comment in config.4 about UDF support. It was still stating UDF as a
read-only fs wich it hasn't been for quite some time! It must have slipped
trough.

branches: 1.411.2;
Support CPU microcode loading via cpuctl(8).
Implemented and enabled via CPU_UCODE kernel config option
for x86 and Xen Dom0.
Tested on different AMD machines with different
CPU families.

ok wiz@ for the manpages
ok releng@
ok core@ via releng@

Make FAST_IPSEC the default IPSEC implementation which is built
into the kernel if the "IPSEC" kernel option is given.
The old implementation is still available as KAME_IPSEC.
Do some minimal manpage adjustment -- kame_ipsec(4) is a copy
of the old ipsec(4) and the latter is now a copy of fast_ipsec(4).

branches: 1.409.2;
Install dev/i2c/i2c_io.h and implement the API in the iic(4) driver.
Obsolete the I2C_SCAN option as this can now be done from userland.

Remove trailing whitespace. Bump date for previous.

Add mount -o extattr option to enable extended attributs (corrently only
for UFS1).
Remove kernel option for EA backing store autocreation and do it by
default. Add a sysctl so that autocreated attriutr size can be modified.

Fix typo.

Document PPS_SYNC for com(4) and zstty(4) (the only serial drivers
in which NetBSD currently supports the option), with cross reference
to ntpd(8) and options(4).

branches: 1.404.2;
Remove references to just removed Darwin and Irix emulation. Bump date.

Fix xref; security(8) -> security(7).

Remove ENHANCED_SPEEDSTEP, EST_FREQ_USERWRITE, INTEL_ONDEMAND_CLOCKMOD,
POWERNOW_K7, POWERNOW_K8, and VIA_PADLOCK.

Fix typo.

Docucment QUOTA2

Remark acpicpu(4).

Xref module(7) and iic(4).

Punctuation improvement, bump date for FAST_IPSEC description.

Mentions the FAST_IPSEC options

Bump date for PAE. New sentence, new line.

Document PAE.

Bump date for XNS removal.

Remove description about options XSERVER. No port uses Xserver on pccons.

Remove description about obsolete XNS. PR misc/43635

document IPFILTER_LOOKUP and IPFILTER_COMPAT.
use "IP-Filter" instead of "ip-filter".
bump date.

Remove "EXPERIMENTAL" from puffs + some rewording.

branches: 1.388.2;
Punctuation nit.

- note about support for the large_file option of ext2fs rev 1
- 32 bit UID and GID support on ext2fs has been added since 5.0
so remove description about the limitations from BUGS section.

Describe SPLASHSCREEN and SPLASHSCREEN_PROGRESS.

Bump date for vm.user_va0_disable.

Call the file system "ext2" consistently. Suggested by tsutsui.

rename the va0_disabled option and cpp conditional to "disable" as well,
for consistency, and document option and sysctl flag

Remove the portalfs kernel file system driver. Replace mount_portal(8)
with a version based on puffs. User functionality remains the same.

Describe 'options SPLDEBUG'.

catch spelling error.

Uppercase CPU.

LOCKDEBUG docs. Written by joerg.

softdep is gone

Quote + using \&+, not \+.

Don't workaround ancient macro argument limit with .Xo/.Xc.
Improve markup when using .Em in ().

Fix preamble to match order set out by mdoc(7). Discussed with wiz.

branches: 1.373.2;
Bump date for previous. New sentence, new line.

Changes to MEMORY_RBFLAGS option:
- renamed to MEMORY_DISK_RBFLAGS to better fit the rest of the
MEMORY_DISK options(4)
- change default value to RB_AUTOBOOT instead of RB_SINGLE, and adapt
the config(5) files accordingly
- document this option inside options(4)

See also http://mail-index.netbsd.org/tech-kern/2008/12/25/msg003924.html

Reviewed by abs@ in private mail.

Remove LKMs and switch to the module framework, pass 1.

Proposed on tech-kern@.

Reference secmodel_securelevel manual page.

branches: 1.369.2;
New sentence, new line.

Make the I2C_SCAN warning a bit more (ok, a LOT more) dire!

Forgot to bump the date

Add warning on possible side effects of using 'options I2C_SCAN'

Document new I2C_SCAN option.

End sentence with dot. Use more markup.

Document WAPBL kernel option.

Remove references to non-existant kernel option NO_TSC_TIME.
This fixes PR port-i386/39460 by Juan RP.

branches: 1.361.2; 1.361.6;
Beleatedly document the MODULAR kernel option and mk.conf's MKMODULAR.
Per hubertf@'s request.

Remove options MATH_EMULATE.

Remove systrace. Ok core@.

- Remove reference to COMPAT_HPUX.
- i386 cpu options are gone.

add PAX_ASLR

New sentence, new line. Use correct verb form.

Use Fn; fix duplicate word and time problem. Use Cd for options.

Spelling.

Document options DDB_VERBOSE_HELP.

branches: 1.352.4; 1.352.6;
Fix some grammatical errors in man pages.
Patch supplied by Joerg Niendorf in PR misc/36707, thanks.

Mention Enhanced Speedstep related options for amd64.

Add the TFTPROOT kernel option for TFTP'ing root RAMdisk at root mount time.
This allows working around situations where a kernel with embedded RAMdisk
cannot be booted by the bootloader because the RAMdisk is too big.

Add info on the SYSCALL_STATS and SYSCALL_TIMES options

Mention machdep.clockmod for INTEL_ONDEMAND_CLOCKMOD.

New sentence, new line. Sort SEE ALSO. Fix Xrefs.

Mention INTEL_ONDEMAND_CLOCKMOD option, bump date. wiz please review.

GATEWAY also builds IPv6 Fast Forwarding

Mention options IPSELSRC.

Document file-system PUFFS.. and while here, nuke EXPERIMENTAL for tmpfs

Add an opencrypto provider for the AES xcrypt instructions found on VIA
C5P and later cores (also known as 'ACE', which is part of the VIA PadLock
security engine). Ported from OpenBSD.

Reviewed on tech-crypto and port-i386, no objections to commiting this.

Reword slightly.

branches: 1.340.2;
Initial implementation of PaX Segvguard (this is still work-in-progress,
it's just to get it out of my local tree).

MULTIBOOT_SYMTAB_SPACE is gone because the kernel is now clever enough to
not need this hack.

Bump date for last.

Merge the peter-altq branch.

(sync with KAME & add support for using ALTQ with pf(4)).

- Document COMPAT_15 as doing nothing
- Add COMPAT_15 to all the kernel that had COMPAT_14, for the sake of coherency
- Remove the only occurences of #ifdef COMPAT_15 in the tree: for the ARM
ports, COMPAT_15 was always used in conjunction with EXEC_AOUT. Only EXEC_AOUT
matters here.

This address kern/18407

Change the PaX mprotect(2) restrictions' "global_protection" knob to
just "global" -- it's shorter and more readable. Update documentation.

Casing fix.

BUFQ_PRIOCSCAN: s/experimental//
i forgot why i marked it experimental.

- options PDPOLICY_CLOCKPRO.
- bump date.

Bump date for previous.

remove more vestiges of CCITT, LLC, HDLC, NS, and NSIP.

reference compat_30(8) in the description of COMPAT_30 and delete
duplicated information. Pointed out by Izumi Tsutsui.

Bump date.

AMD PowerNow!/Cool`n'Quiet driver for NetBSD/amd64,
adapted from OpenBSD.

Tested on a few machines:

http://bigbird.dohd.org:3021/NetBSD/dmesg
http://www.bsd.org.il/netbsd/acpi/dmesg

Thanks to cube, elad and others for testing and fixes.

Enabled by default on GENERIC.

more for 4.0: VERIFIED_EXEC no longer needed.

Drop trailing whitespace.

okay, since there was no way to divide this to two commits, here it goes..

introduce fileassoc(9), a kernel interface for associating meta-data with
files using in-kernel memory. this is very similar to what we had in
veriexec till now, only abstracted so it can be used more easily by more
consumers.

this also prompted the redesign of the interface, making it work on vnodes
and mounts and not directly on devices and inodes. internally, we still
use file-id but that's gonna change soon... the interface will remain
consistent.

as a result, veriexec went under some heavy changes to conform to the new
interface. since we no longer use device numbers to identify file-systems,
the veriexec sysctl stuff changed too: kern.veriexec.count.dev_N is now
kern.veriexec.tableN.* where 'N' is NOT the device number but rather a
way to distinguish several mounts.

also worth noting is the plugging of unmount/delete operations
wrt/fileassoc and veriexec.

tons of input from yamt@, wrstuden@, martin@, and christos@.

revert previous: as pointed out by tsutsui@, we're talking about
MACHINE_ARCH, not MACHINE, so x86_64 should be noted, not amd64.

use 'amd64' instead of 'x86_64' to avoid confusing new users of amd64
who are not aware that it used to be called x86_64.

Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@,
NetBSD Foundation Membership still pending.) This stack was written by
Iain under sponsorship from Itronix Inc.

The stack includes support for rfcomm networking (networking via your
bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets.

Drivers for both PCMCIA and USB bluetooth controllers are included.

.Xr config 5
Might need a bit more, but this looked okay for now.

branches: 1.320.2;
Mention COMPAT_30.

Mention options COMPAT_20 is also required for obsolete getfsstat(2)
and fhstatfs(2) system calls.

Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen
W^X mappings.

Disabled by default.

First proposed in:

http://mail-index.netbsd.org/tech-security/2005/12/18/0000.html

More information in:

http://pax.grsecurity.net/docs/mprotect.txt

Read relevant parts of options(4) and sysctl(3) before using!

Lots of thanks to the PaX author and Matt Thomas.

Fix some typos.

convert "magiclinks" from a per-fs mount option to a system-wide sysctl.
as discussed on tech-kern quite some time ago.

Move "OEA Only" to the powerpc subsection header.

New sentence, new line; bump date for previous.

document for powerpc option PTEGCOUNT=value

New sentence, new line. Bump date for previous.

update options(4) to talk about COMPAT_LINUX32

Remove bogus line (pasto?).

New sentence, new line. Fix typo.

Implement support for 'The Multiboot Specification' so that i386 kernels
can be booted directly from Multiboot-compliant boot loaders (e.g. GRUB).
See the added multiboot(8) manual page for more information.

No objections in tech-kern@; only positive comments.

bump date for previous

Add the `file-system UDF' option to the options(4) man page. Also cross
reference it to the mount_udf(8) manpage.

if db_onpanic is -1, do not invoke any ddb functions at all when handling
a panic. This allows ddb's behaviour on a panic to be controlled via
sysctl rather than just compiling it in/out.

Note DDB_COMMANDONENTER option.

document newly introduced behaviour for ddb.onpanic=2

Clarify that option values are C constants.

\-1, not -1 (correct PS output).

AMD PowerNow K7 driver written by Martin Vegiard via PR port-i386/26239.

Enabled by default on GENERIC and GENERIC_LAPTOP.

Imported 1 year later... but it's here finally.

- Add a new section, "Security Options"
- Move INSECURE to be under it, and fix wording - we hardwire to -1, not 0.
- Add Veriexec options.

Mention COMPAT_LINUX is available for x86_64. Bump date.

options VNODE_OP_NOINLINE is gone.

Mention options FFS_NO_SNAPSHOT. Maybe incomplete, but better than nothing...

bump date for previous (PIM)

Add a bit more data on where to go with option PIM

Mention "file-system tmpfs". Pointed out by Rui Paulo.

New sentence, new line.

Note that MEMORY_DISK_DYNAMIC is incompatible with mdsetimage(8).

note that VMSWAP is on by default.

revive VMSWAP.

mention ICMPPRINTFS; from Liam Foy

revert 1.286 for now. (VMSWAP)

document VMSWAP.

Sort SEE ALSO.

Add support for reading cloop2 compressed filesystem image,
enable by putting VND_COMPRESSION into kernel config file.
Written by Cliff Wright, polished up slightly by me.

remove reference to ncr(4)

Mention PTYFS under the file-systems section and bump date.

Ok'ed by Christos Zoulas and reviewed by Thomas Klausner.

Avoid marking up brackets.

Implement expansion of special "magic" strings in symlinks into
system-specific values. Submitted by Chris Demetriou in Nov 1995 (!)
in PR kern/1781, modified only slighly by me.

This is enabled on a per-mount basis with the MNT_MAGICLINKS mount
flag. It can be enabled at mountroot() time by building the kernel
with the ROOTFS_MAGICLINKS option.

The following magic strings are supported by the implementation:

@machine value of MACHINE for the system
@machine_arch value of MACHINE_ARCH for the system
@hostname the system host name, as set with sethostname()
@domainname the system domain name, as set with setdomainname()
@kernel_ident the kernel config file name
@osrelease the releaes number of the OS
@ostype the name of the OS (always "NetBSD" for NetBSD)

Example usage:

mkdir /arch/i386/bin
mkdir /arch/sparc/bin
ln -s /arch/@machine_arch/bin /bin

siginfo(5) -> siginfo(2).

Change all .Xr config 8 to .Xr config 1, following the recent move of
config from usr.sbin -> usr.bin.

Reviewed by wiz.

Document MAXFILES, bump date. From PR/29136.

Spell out month in Dd; move a line that is not in an
item before list begin; case fix.

document BUFQ_READPRIO and BUFQ_PRIOCSCAN.

Explain PCKBD_CNATTACH_MAY_FAIL.

Fix a tyo, and add an article.

Explain why we need PCKBC_CNATTACH_SELFTEST.

Mention PCKBC_CNATTACH_SELFTEST and PCKBD_LAYOUT.

Bump date for previous.

Document file-system SMBFS.

branches: 1.268.2;
Bump date for IPSEC_NAT_T.

Drop trailing whitespace.

Add support for IPsec Network Address Translator traversal (NAT-T), as
described by RFC 3947 and 3948.

Bump date for previous two, and restore part of sentence
that got lost in v1.261. Drop trailing whitespace.

INET is not required.

Document SOFTDEP and UFS_DIRHASH options.

Bump date for last and kill an unnecessary Pa.

Document option P1003_1B_SEMAPHORE

Use Fl for flags.

reference config(8) -x as another way to recover the result of using
INCLUDE_CONFIG_FILE; bump date

Add an article. Bump date.

Mention COMPAT_20.

Fix some small English errors.

Correct some uses of macros:
- use .Cm for command modifiers.
- use .Fl / .Ar for flags / arguments.
- use .Cd for pseudo-device in SYNOPSIS.
- use .Pa for paths.

Approved by wiz.

Bump date for COMPAT_BSDPTY.

Mention COMPAT_BSDPTY.

remove obsolete note about NEW_BUFQ_STRATEGY being unproven, as noted
in previous.

Elaborate on the performance implications and suitability of
NEW_BUFQ_STRATEGY to various hardware and system configurations.
Bump date.

XXX is the comment about this option being "not yet proven stable"
still relevant/true?

Removed accidental repetitious words.

Bump date for COMPAT_AOUT removal.

g/c COMPAT_AOUT

Fix typo.

New sentence, new line, drop trailing whitespace, bump date for last.

Documentation on the PIM kernel options and on multicast, from Pavlin
Radoslavov, imported from FreeBSD.

Mention COMPAT_NETBSD32 applies to amd64 too.
Noted by Nicolas Joly in PR 26393.

Mark up EST, and bump date for previous.

Document EST_FREQ_USERWRITE.

Add documentation for XSERVER and XSERVER_DDB to resolve PR 20173.

Various fixes from Sergey Svishchev svs at ropnet ru in private mail.
Some additional "new sentence, new line" changes while I was there.

document ENHANCED_SPEEDSTEP

Change the date, too

Document the sysctl related options.

Add a useful description for COMPAT_AOUT.

Flesh out description of COMPAT_AOUT as requested by mrg.

The plural of hertz is hertz.

Document BEEP_ONHALT{,COUNT,PITCH,PERIOD}.

branches: 1.232.2;
Bump date for last. Fix a spelling error.

Document COMPAT_AOUT option.
This closes PR misc/13819

Bump date for previous.

document new powerpc-specific option PMAP_MEMLIMIT

Uppercase CPU.

Bump date for previous. Remove trailing whitespace.

Add a reference to options(4) in md(4).
Document missing options which change md(4) behaviour.

Describe NO_TSC_TIME. Bump date.

Bump date for previous.

document COMPAT_16 (requested by Izumi Tsutsui)

Punctuation fix.

Consistently use 'RFC 1234' instead of 'RFC1234' or 'RFC-1234'.
From jmc@openbsd.

there's no VNODEPAGER option anymore.

John Heasley thinks there is a comma missing, and I agree. Add it.

Grammar fixes.

New sentence, new line; punctuation nit; remove superfluous comment.

Drop trailing whitespace.

Add descriptions of the new options SOMAXKVA, TCP_INIT_WIN and IFQ_MAXLEN.
While here, also write descriptions of TCP_SENDSPACE, TCP_RECVSPACE and SB_MAX.

filesystem -> file system
id/uid/gid -> caps
Add a keywords section including description of the kernel configuration
keywords (options, file-system, etc) and add info about the 'no' form
for those it works with.

pseudo-device instead of pseudodevice. From Leandro Costa via jmc@openbsd.

Typo and punctuation fix, one each, from Patrick Welche.

New sentence, new line. Bump date for last. Fix Xrefs.

Add description for NBUF. From Greg A. Woods in PR#17397.

Document MTRR. Addresses PR#14735.

Bump date for last.

Remove the reference to the gdb "-k" option,
which is deprecated, per PR 19106

Bump date for last.

bye bye UCONSOLE

... and bump date.

Move description of IPSEC* related options from options(4) to ipsec(4) and
add them to the SYNOPSIS section. Closes my own PR misc/17634.

IPsec, not IPSEC.

Uppercase ULTRIX. Igor Sobrado in PR 19678.

Uppercase prom and eeprom.

Bump date for BRIDGE_IPF description.

Document BRIDGE_IPF in options(4).

Describe option MBUFTRACE. Improved by comments from matt, dan, mrg, and perhaps others ;).

Introduce "top down" memory management for mmap()ed allocations. This
means that the dynamic linker gets mapped in at the top of available
user virtual memory (typically just below the stack), shared libraries
get mapped downwards from that point, and calls to mmap() that don't
specify a preferred address will get mapped in below those.

This means that the heap and the mmap()ed allocations will grow
towards each other, allowing one or the other to grow larger than
before. Previously, the heap was limited to MAXDSIZ by the placement
of the dynamic linker (and the process's rlimits) and the space
available to mmap was hobbled by this reservation.

This is currently only enabled via an *option* for the i386 platform
(though other platforms are expected to follow). Add "options
USE_TOPDOWN_VM" to your kernel config file, rerun config, and rebuild
your kernel to take advantage of this.

Note that the pmap_prefer() interface has not yet been modified to
play nicely with this, so those platforms require a bit more work
(most notably the sparc) before they can use this new memory
arrangement.

This change also introduces a VM_DEFAULT_ADDRESS() macro that picks
the appropriate default address based on the size of the allocation or
the size of the process's text segment accordingly. Several drivers
and the SYSV SHM address assignment were changed to use this instead
of each one picking their own "default".

Bump date for kern.dump_on_panic addition.

Add a kern.dump_on_panic sysctl variable (and documentation, and a
kernel config option) that controls whether the kernel dumps to the
dump device on panic. Dumps can still be forced via the ``sync''
command from ddb. Defaults to ``on''.

Remove references to the pccons(4) manpage (which does not exist), using
the pccons word by itself.
Rename *_KEYBOARD options to be *_KBD, as the former are not recognized in
the kernel.
Add missing wscons(4) reference in SEE ALSO, as suggested by kleink.

Document NOFILE

Document NEW_BUFQ_STRATEGY. Hopefully it should become the default before
the next major release is available.

Idea of documenting it suggested (and Ok'ed) by Hubert Feyrer.

Fix a grammatical nit.

Sort some arch lists, grammar and whitespace fixes.
Bump date for COMPAT_DARWIN/COMPAT_MACHO additions.

minor mdoc and whitespace cleanup.

Added COMPAT_MACH, COMPAT_DARWIN, and EXEC_MACHO. Updated LINUX supported
archs.

remove spurious blank line.

Mention ALTQ options (from openbsd), fixes part of kern/18836.

From Jason Lingohr <jason at lucid dot net dot au> in private mail.

Remove SUN_MS_BPS. It is already present in ms(4).
Pointed out by mrg.

New sentence, new line.

Add the sun-specific SUN_MS_BPS option.

options FD_SCRIPTS, not option FD_SCRIPTS.
From Ben Collver in PR 18467.

Remove ppp(4) options here (moved to ppp(4)); add Xr to ppp(4); bump date.

Match mbuf changes.
Fixes PR kern/16039 from Tomas Svensson.

Use .Fn to mark up functions (.Xr might be a good alternative, too).

Document MALLOC_NOINLINE

fix typo

an example that uses DR0.

document KSTACK_CHECK_DR0.

document KSTACK_CHECK_MAGIC.

Document SYSTRACE.

mention that GATEWAY will compile in sys/netinet/ip_flow.c.

Sort SEE ALSO.

Document USERCONF and PERFCTRS

branches: 1.168.2;
fix comma

Rename MEMORY_DISK_SIZE (formerly MINIROOTSIZE) to MEMORY_DISK_ROOT_SIZE,
which was suggested by Izumi Tsutsui <tsutsui@ceres.dti.ne.jp> as
being more consistent with what it's controlling...

rename EXEC_ELF_CATCHALL to EXEC_ELF_NOTELESS
document COMPAT_11 or COMPAT_12 imply EXEC_ELF_NOTELESS

document MEMORY_DISK_SIZE

Given that a lot of IRIX binaries now work, COMPAT_IRIX is no more
'highly experimental'. Now it's just 'experimental'...

Generate <>& symbolically. I'm avoiding .../dist/... directories for now.

Document PIPE_SOCKETPAIR

Mention the typical command to use to extract the embedded config data
from the kernel.

Improve grammar and use .Nx instead of 'NetBSD'.

Describe the new "kernel config embedding" options.

Document EXEC_ELF_CATCHALL. Addresses kern/14409 by Matthew Green.

Drop a trailing space.

add some sparc64 specific options.

Fix typo, and use .Nx for NetBSD.

Updated COMPAT_LINUX (for the mips, it's not extremely experimental anymore,
it's just experimental), and added COMPAT_IRIXi (highly experimental).

attempt to describe KGDB_DEV* options

Make "[EXPERIMENTAL]" in NTFS consistent with other experimental filesystems

Added Mips to COMPAT_LINUX

Remove some trailing space, and some punctuation nits.

add some tunables from vmparam.h. from Greg Woods in PR 9068.

describe UVMHIST* options.

Sort SEE ALSO, sort sections, some markup improvements, some more common
section headers.

Bump date for last change.

Mention HZ option.

Refer the HTML documentation for ntpd(8) installed in
/usr/share/doc/html/ntp, and fix two whitespace nits while I'm here.

COMPAT_LINUX on the PowerPC is no more experimental.

Document TCP_DEBUG and TCP_NDEBUG.

Note that io.4 isn't available everywhere

Note that COMPAT_10 also affects /dev/io

Added entries for system values related to System V semaphores. Note that
the entries refer to the GENERIC config file for each port for defaults
but I still have to do that. It was suggested to me that the man page
should be updated first and I didn't want to be changing it twice. I
will work on the GENERIC files over the next few days. If anyone wants
to jump in with an update for their favorite port please feel free. I
will do the i386 port immediately if you want to use it as a template.

Typos/whitespace fixes.

FreeBSD -> Fx, NetBSD -> Nx.

Note that the DIAGNOSTIC option will decrease performance.

Document COMPAT_AOUT_M68K.

newfs_lfs, not newlfs. Whitespace and punctuation fixes.

note bumped CHILD_MAX.

Document NAMECACHE_ENTER_REVERSE.

- The ioblix zbus board comes in 24 MHz and 22.1184 MHz clock variants.
We default to the (newer, more sane) 22.1184 MHz value, but set it from
the iobzclock variable (in Hz), which is initialized from the IOBZCLOCK
configuration option and patchable.
XXX we should time the clock at system startup.
- add ioblix_zbus to the GENERIC configuration.

note compat_sunos for sparc64, compat_netbsd32, and new compat_svr4_32

typo

document ND6_DEBUG

Updated COMPAT_LINUX: we now have an experimental powerpc port.

documentation for NFS_BOOT_BOOTP_REQFILE

mark some items that assume INET.

Markup buglet.

do not recomment IFA_STATS, as the code seemingly not tested
(panics frequently due to NULL pointer chasing in kernel)

s/spase_super/sparse_super/

Document that VM86 is also used by some X servers to call VESA routines.

s/usign/using/g

Mention NFS_V2_ONLY.

nfsiod(8) is long dead.

Document VNODE_OP_NOINLINE

Document PCIC_ISA_INTR_ALLOC_MASK; documentation is now up-to-par with
the info in distrib/notes.

Minor fixup on PCIC_ISA_ALLOC_IO*.

Document DDB_BREAK_CHAR that was added in:
sys/conf 1.381
sys/dev/ic/com.c 1.174

Missing .El before atari-specific section.

Add PUCCN option.

Document non-US keyboard support for Shark pccons.

Satisfy pedants

Comment out EON ISO-over-ip tunneling pseudo-driver, and document as
broken/fragile. Unlikely to be of much use, and confuses new users
when their system crashes when they, or their dhclient stumble over
it. See kern/10500, kern/8994 for the gory details.

branches: 1.109.2;
to compile IPSEC_ESP enabled kernel, we no longer need a symbolic link
from src/crypto-intl.

xntpd -> ntpd

branches: 1.107.2;
Note that IBCS2 also mean SVR3 and vax.

Mention and xref pcibios(4).

Death to nfsiod!

It is replaced by kernel threads that do the same thing. The number of
kernel threads used is set with the vfs.nfs.iothreads sysctl.

Re-sort references (by section, then alpha by name) per mdoc.samples(7)

Fix port-i386/9683 ("No doc on pcmcia IO space conflicts").
Note the usage and existance of options PCIC_ISA_ALLOC_IOBASE and
PCIC_ISA_ALLOC_IOSIZE.

Back out last. Didn't mean to commit it yet.

Man page for auvia(4). Also xref fms(4) from audio(4).

Spelling.

make clear twice year DST problems with RTC_OFFSET -- from jhawk.

Add options OVERLAY

Document P5PPC68KBOARD option.

Document NKMEMPAGES.

Updates for ext2fs revision 1.

Replace reference to obsolete "CLBYTES" parameter by "NBPG". Fixes
PR kern/9215 by Erik Bertelsen.

improve IPSEC and IPSEC_ESP. make US-centric sentences more generic.

mark experimental status of NTFS the same way as for other "experimental"
filesystems. Suggested by Antti Kantee <pooka@iki.fi> in private mail.

while here, Xref mount_ntfs(8) also in SEE ALSO section.

see also: apm(4)

Fix typo noted by Damon Brodie in PR misc/8907.

Note RASOPS_SMALL/RASOPS_CLIPPING.

Document CTL_PROC, the core filename format it core(5), and xref sysctl(8),
sysctl(3), core(5) in various place.
Document 'options DEFCORENAME' inj options(4) and $defcorename in rc.conf(5).

update description for IPSEC_ESP.
need a symlink for src/crypto-{us,intl}.
(could someone check the wording?)

branches: 1.86.2;
file-system NTFS: add a note NTFS is very experimental and should be used
with extreme caution

Add NTFS to the list of file systems.

Mention COMPAT_14.

describe how you can compile IPSEC_ESP.
(there should be some cvs-based, or config-based solution for this)

add INET6, IPSEC and IPSEC_{ESP,DEBUG}.

Document SUBNETSARELOCAL, HOSTZEROBROADCAST

Correct comments about which ports support which emulations. Fixes
PR misc/7764 by Antti Kantee.

A bit more of explanation in the cyrix options.

add cyrix cache options

In COMPAT_OSF1, s/, and may not even work//

Mention COMPAT_SVR4 on m68k here, too.

branches: 1.75.2;
Document IFA_STATS option.

Remove obsoleted options.
Add `x68k-specific Options' subsection.

Clarify NKMEMCLUSTERS and NMBCLUSTERS.

More and more of .Os cleanups. .Os is defined in the tmac.doc-common file,
so we shouldn't override it with versions in the manpages. Many more to
come.

Fix .Bl/.El imbalance.

Clarify IPFORWARDING option; it takes a value.

s/CD/Cd/

NODEVMTIME is going away.

fix tyop

Note that BUFCACHE is ignored if BUFPAGES is also specified.

document BUFCACHE

Add options DDB_FROMCONSOLE and sysctl ddb.fromconsole, analagous to
DDB_ONPANIC. Lets user ignore breaks but enter DDB on panic. Intended
for machines where debug on panic is useful, but DDB entry is not,
(public-access console, or terminal-servers which send spurious breaks)

Add new ddb hook, console_debugger(), which decides whether or not to
ignore console ddb requests. Console drivers should be updated to call
console_debugger(), not Debugger(), in response to serial-console
break or ddb keyboard sequence.

document CPURESET_DELAY for i386.

Fix typo: SHMPAXPGS -> SHMMAXPGS, closes pr 6178 by MOCHIDA Shuji.

Perry asked for a line about Coda

fix spelling of acknowledgment

Clarift use of REALBASEMEM / REALEXTMEM.
Fixes PR port-i386/6159 by "Heiko W.Rupp" <hwr@pilhuhn.de>.

Whoops, forgot to document NODEVMTIME.

add swapctl changes to COMPAT_13 section.

add sparc specific options.

Now that the ccd driver uses the pool allocator, the CCDNBUF option is
non-existent.

NORVEGIAN -> NORWEGIAN

Ops, forgot FINNISH_KBD.