Add a mailbox interface.

Mailboxes are an IPC mechanism found on several ARM architectures, namely
OMAP4, BCM2385, Sitara, etc.

Reviewed by:	gonzo
Document tip on how to build all kernels quickly.
Correct typo specifying jflags.
Sandbox tcpdump(8) using Capsicum's capability mode and capabilities.
For now, sandboxing is done only if -n option was specified and neither -z nor
-V options were given. Because it is very common to run tcpdump(8) with the -n
option for speed, I decided to commit sandboxing now. To also support
sandboxing when -n option wasn't specified, we need Casper daemon and its
services that are not available in FreeBSD yet.

- Limit file descriptors of a file specified by -r option or files specified
  via -V option to CAP_READ only.

- If neither -r nor -V options were specified, we operate on /dev/bpf.
  Limit its descriptor to CAP_READ and CAP_IOCTL plus limit allowed ioctls to
  BIOCGSTATS only.

- Limit file descriptor of a file specified by -w option to CAP_SEEK and
  CAP_WRITE.

- If either -C or -G options were specified, we open directory containing
  destination file and we limit directory descriptor to CAP_CREATE, CAP_FCNTL,
  CAP_FTRUNCATE, CAP_LOOKUP, CAP_SEEK and CAP_WRITE. Newly opened/created
  files are limited to CAP_SEEK and CAP_WRITE only.

- Enter capability mode if -n option was specified and neither -z nor -V
  options were specified.

Approved by:	delphij, wxs
Sponsored by:	The FreeBSD Foundation
Another warning.
Convert bcm2835_mbox to the new mbox interface.

Reviewed by:	gonzo
Make kassert_printf use __printflike.

Fix associated errors/warnings while I'm here.

Requested by: avg
MFV of tzdata2013d, 253008

- Morocco:
  announced that the year's Ramadan daylight-savings transitions
  would be 2013-07-07 and 2013-08-10.

- Israel:
  As of 2013, DST starts at 02:00 on the Friday before the last
  Sunday in March.  DST ends at 02:00 on the first Sunday after
  October 1, unless it occurs on the second day of the Jewish Rosh
  Hashana holiday, in which case DST ends a day later (i.e. at 02:00
  the first Monday after October 2).  [Rosh Hashana holidays are
  factored in until 2100.]
Add a new "-h" option to the gssd daemon that enables support for
host based (kerberos service principal) initiator credentials in
the default keytab file. This option won't actually be useful until
the corresponding kernel changes are committed.

Reviewed by:	jhb
Document the new "-h" option for the gssd daemon.
This is a content change.

Reviewed by:	jhb
Make sure the krb5 status variables are correctly initialized.
Oops, initialize the krb5 ret values correctly (to anything non-zero).
Fix some Kerberos related terminology.
This is a content change.

Requested by:	bjk
Fix compilation.

Sponsored by:	EMC / Isilon storage division
Also define SDT_PROBE_DEFINE0 for the !KDTRACE_HOOKS case.
- AM335x requires updated soft-reset logic too
- MMC1 (internal eMMC) pins should be configured as input-pullup, except
    for reset pin
Add IDs for TPS65217C and TPS65217D
mdoc: remove superfluous paragraph macros.
Add AR9341, AR9342, AR9344 SoC types.