Ticket 728.
Forgot to commit for ticket 707.
Apply patch (requested by elad in ticket #709):
Implements the rename policy. Implications per strict level:
0, 1: Log renames of monitored files.
2:    Prevent renames of monitored files.
3:    Prevent renames.
Pull up following revision(s) (requested by peter in ticket #717):
	etc/rc.d/pf: revision 1.5
Changes suggested by lukem:
1. Order pf to start before the network is configured.
2. If the pf_rules cannot be found at boot time, abort the boot (from the
   ipfilter script).
Pull up following revision(s) (requested by peter in ticket #717):
	usr.sbin/pf/man/man5/pf.boot.conf.5: revision 1.1
	usr.sbin/postinstall/postinstall: revision 1.4
	etc/rc.d/pf: revision 1.6
	etc/rc.d/pf_boot: revision 1.1
	usr.sbin/pf/etc/defaults/pf.boot.conf: revision 1.1
	usr.sbin/pf/Makefile: revision 1.7
	etc/rc.d/Makefile: revision 1.52
	etc/mtree/special: revision 1.89
	usr.sbin/pf/man/man5/Makefile: revision 1.5
	usr.sbin/pf/etc/defaults/Makefile: revision 1.1
pf needs to be started after the network is up, because some pf rules
derive IP address(es) from the interface (e.g "... from any to fxp0").
This however, creates window for possible attacks from the network.
Implement the solution proposed by YAMAMOTO Takashi:
Add /etc/defaults/pf.boot.conf and load it with the /etc/rc.d/pf_boot
script before starting the network. People who don't like the default
rules can override it with their own /etc/pf.boot.conf.
The default rules have been obtained from OpenBSD.
No objections on: tech-security
Pull up following revision(s) (requested by peter in ticket #717):
	distrib/sets/lists/man/mi: revision 1.818
	distrib/sets/lists/etc/mi: revision 1.158
Add new files for pf.boot.conf.
Pull up following revision(s) (requested by uwe in ticket #718):
	sys/arch/hpcsh/conf/GENERIC: revision 1.56
Add WSDISPLAY_CUSTOM_OUTPUT &co.
Pull up following revision(s) (requested by christos in ticket #719):
	usr.bin/ssh/ssh/Makefile: revision 1.22
	usr.bin/ssh/sshd/Makefile: revision 1.27
	usr.bin/ssh/Makefile.inc: revision 1.12
PR/30750: Mark Davies: ssh gives bogus complaint when gssapi authentication
fails. The problem was that different ssh programs were compiled with different
cpp flags. In particular, ssh-keysign was affected. Move all the CPPFLAGS
to Makefile.inc. Note that I am not moving the library portion of the defines
because we don't want to link everything with all the libraries.
Tickets 709 and 717 to 719.
Pull up following revision(s) (requested by tron in ticket #739):
	x11/lib/Makefile: revision 1.7
PR/30413: Martin Husemann: make target ordering issue in non-compat mode.
This was caused by a problem in the Makefile.
Pull up following revision(s) (requested by tron in ticket #739):
	x11/lib/Makefile: revision 1.8
Add back <bsd.lib.mk>, which Christos accidentally removed in the previous.
We need it for the LIBDPLIBS optimization to work.
Pull up following revision(s) (requested by tron in ticket #739):
	x11/lib/Makefile: revision 1.9
fontconfig depends on expat - so insert a .WAIT for parallel builds.
Ticket 739.
Pull up following revision(s) (requested by hamajima in ticket #720):
	sys/arch/hpcmips/dev/optpoint.c: revision 1.2
Fix buttons arg of wsmouse_input().
Add hard power hook. disable at suspend, enable at resume.
Pull up following revision(s) (requested by xtraeme in ticket #722):
	sys/fs/msdosfs/msdosfs_vnops.c: revision 1.17
	sys/fs/msdosfs/denode.h: revision 1.6
The maximum file size on MS-DOS filesystems is 4 GB - 1 byte, so
don't bother trying to write files bigger than this.  Just return
EFBIG to caller, rather than panic()ing later.
From OpenBSD.
This closes my PR kern/30864: "panic when copying files of >4GB on
msdosfs"
Tickets 720 & 722.
Pull up following revision(s) (requested by riz in ticket #729):
	distrib/notes/common/contents: revision 1.115
Reference siop(4) not ncr(4)
Pull up following revision(s) (requested by riz in ticket #730):
	share/man/man4/options.4: revision 1.283
remove reference to ncr(4)
Pull up following revision(s) (requested by riz in ticket #731):
	distrib/notes/common/postinstall: revision 1.59
Packages.txt has been obsoleted, point to doc/pkgsrc.txt.
Whitespace and casing nit fixes.
Pull up following revision(s) (requested by riz in ticket #732):
	distrib/notes/amd64/install: revision 1.1
	distrib/notes/amd64/prep: revision 1.1
	distrib/notes/Makefile: revision 1.35
	distrib/notes/amd64/Makefile: revision 1.1
	distrib/notes/amd64/legal: revision 1.1
	distrib/notes/amd64/whatis: revision 1.1
	distrib/notes/amd64/xfer: revision 1.1
	distrib/notes/amd64/upgrade: revision 1.1
	distrib/notes/amd64/hardware: revision 1.1
Create the release notes framework for the amd64 port.  These are,
for the most part, skeleton files that allow the amd64 INSTALL document
to have all the platform-independent bits, with very little MD stuff.
The MD pieces will have to wait for someone familiar with the platform
to add them.