* added comment for unknown juniper vendorid.
* permissions: open up /var/run/pluto, close down /etc/ipsec.d

The rundir (default /var/run/pluto) is changed from 700 to 755, to
allow non-root processes to read pluto.pid (eg monitor scripts)

The ipsecddir (default /etc/ipsec.d) and its subdirectories is changed
from 755 to 700. This was already the case for some distributions
(Fedora, RHEL). This provides a little more privacy about which IPsec
tunnels are configured, which certificates are known, etc.
* packaging: changed remaining $RPM_BUILD_ROOT to %{buildroot}
* packaging: updates to libreswan.spec for fedora 18

- Enable _hardened_build
- Added -Wformat-nonliteral -Wformat-security to USERCOMPILE
- Added -Wl,-z,relro  to USERLINK
- Support macros for 'prever' to get proper versions for dr/rc releases
- Removed obsolets defkv/kversion/krelver/srcpkgver variables
- Add Obsoletes/Requires/Conflicts for openswan
- Force init system detection with INITSYSTEM=systemd
* packaging: we need the INITSYSTEM= override in make install as well
* packaging: use full relro (-z,relro,-z,now) for fedora spec
* packaging: updated ipsec.conf.d with the commeted *.conf include
* .gitignore  added Makefile.inc.local and removed UMLPOOL
* testing : swan-build rm OBJ.linux.x86_64 no *
* testing : ikev2-05-basic-psk results
            ikev2-04-basic-x509 results
* showhostkey: --ipseckey option mistakenly printed "0s" prefix

also moved an nss configdir diagnostic into --verbose like the rest
* testing : remove 'cat /tmp/pluto.log' from final.sh
* testing : cleanup commit reults with initial_contact:no;
Merge branch 'master' of ssh://vault.foobar.fi/srv/src/libreswan
remove CHANGES entry which is not relevant yet
* Temporarily disable option to enable opportunistic encryption

This will be re-implemented with an external helper that is more aware
of the forward DNS query and IP address answer, so it will not require
the reverse DNS.
NETKEY: remove work-around for NATD port leaking to traffic selectors
NETKEY: restore traffic selectors for fixing them to work with transport
mode nat-traversal.

Revert "Revert "* Pass traffic selectors to the kernel in Transport Mode""

This reverts commit a4e6195811c6685c1c440ff965890a2d3c9f56e3.
NETKEY: remove irrelevant logging - this is not needed when traffic selectors
support has been restored.

Revert "Revert "netkey: remove logged warning which is not true after commit 9ed4d3e9""

This reverts commit 340329cdf966f8467eced54327189eb52cbfd736.
Merge branch 'master' of vault.libreswan.fi:/srv/src/libreswan