Merge remote-tracking branch 'upstream/master' into hardened/current/master
Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/master
Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/master
Properly report 12Gbps connection rate.

Reviewed by:	kadesai, slm
MFC after:	1 week
Add schedgraph traces for callout handlers.  Specifically, a callwheel logs
a running event each time it executes a callout function.  The event
includes the function pointer, argument, and whether or not it was run from
hardware interrupt context.  The callwheel is marked idle when each handler
completes.  This effectively logs the duration of each callout routine in
the graph.
Add an argument to the x86 pmap_invalidate_cache_range() to request
forced invalidation of the cache range regardless of the presence of
self-snoop feature.  Some recent Intel GPUs in some modes are not
coherent, and dirty lines in CPU cache must be flushed before the
pages are transferred to GPU domain.

Reviewed by:	alc (previous version)
Tested by:	pho (amd64)
Sponsored by:	The FreeBSD Foundation
MFC after:	1 week
Correct scale factor for T terabyte suffix

PR:		194250
MFC after:	3 days
Sponsored by:	The FreeBSD Foundation
If we fail to send a signal after rotation, print the pidfile from which
the corresponding PID was obtained.

PR:		194143
Submitted by:	Lyndon Nerenberg <lyndon@orthanc.ca>
MFC after:	1 week
Harden /proc/pid/mem
github-issue: #48

Introduce a new sysctl, hardening.procfs_harden, which, when enabled,
disables writing to /proc/pid/mem. Note that it is still possible to
open /proc/pid/mem with the write bit to keep some sense of
compatibility with third-party applications. Calls to write() will
fail with permission denied.
Merge remote-tracking branch 'origin/hardened/current/hardening' into hardened/current/hardening
Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/master
Merge branch 'hardened/current/hardening' into hardened/current/master
It looks like an entry for the R215 is not required in cdce(4) after all.
Remove one second wait for threads exit from icl_conn_close().

Switch it from polling with pause() to using cv_wait()/cv_signal().
Pass up the error status of minidumpsys() to its callers.

PR:		193761
Submitted by:	Conrad Meyer <conrad.meyer@isilon.com>
Sponsored by:	EMC / Isilon Storage Division
Import byacc 20141006
When tunneling interface is going to insert mbuf into netisr queue after stripping
outer header, consider it as new packet and clear the protocols flags.

This fixes problems when IPSEC traffic goes through various tunnels and router
doesn't send ICMP/ICMPv6 errors.

PR:		174602
Obtained from:	Yandex LLC
MFC after:	2 weeks
Sponsored by:	Yandex LLC
Rewrite timeout(9) to be callout(9)-centric instead.  Move the description
of timeout(9) to the end and mark it prominently as deprecated.  Document
somewhat how times are specified for the 'sbt' variants.  Better explain
how using callout_init_*() to associate a lock with a callout resolves
common races.

Differential Revision:	https://reviews.freebsd.org/D847
Reviewed by:	wblock, bjk
MFC after:	1 week
Forgot to bump Dd.

Pointy hat to:	jhb
Merge remote-tracking branch 'freebsd/master' into hardened/current/master