Merge pull request #1659 from tzz/fix-darwin-unit-tests

tests/unit: fix file_writer test on Mac OS X (Darwin) because of clang
10_files/02_maintain/backup_repository.cf: try enabling again
Merge pull request #1660 from tzz/test/fix-backup-repository-test

10_files/02_maintain/backup_repository.cf: try enabling again
Fix /0 CIDR matching, it was triggerring undefined behaviour.
Update verify_users_pam.c

Updated for bug https://cfengine.com/dev/issues/5485 as requested by Volker Hilsheimer. 
This will allow compile on NetBSD.
Tested on NetBSD i386 version 6.1.3.
Merge pull request #1663 from fkruchio/master

Update verify_users_pam.c
Merge pull request #1658 from jimis/minor

Reduce and beautify messages related to TLS protocol and trust on keys.
Merge pull request #1661 from jimis/cidr_fix

CIDR fix for /0 in IPv4.
Redmine #5380: Introduce privilege elevation in Windows testing.

This is needed in order to run tests as a user other than
Administrator, even if that user has admin privileges. The reason is
that Windows by default runs every process with non-admin rights, so
we need to elevate the privileges ourselves.
Merge pull request #1664 from kacfengine/gainroot_for_windows

Redmine #5380: Introduce privilege elevation in Windows testing.
Redmine #4751: Fix crash in 07_packages/907.cf test case.

The package_name_convention can be unset, so we need to check for null
pointer.
Why have two identical ifdefs? This had been fixed in the past, but it regressed!
Scan for policy change right after the select() call returns.

The way we did it before, it was almost certain that at the point of
checking there would always be one active thread (the one serving the
incoming connection) so CheckFileChanges() would not run. Only exception
would have been when select() returned because of timeout, which would
never happen in a slightly loaded hub.
tests/acceptance/dcs.cf.sub: remove requirement of plucked.cf.sub
Moved code around for clarity.

Mostly whitespace changes.
Fixed 100% CPU burning loop if listening socket descriptor is -1

There is a feature in enterprise ("listen" attribute) that disables
listening to any port. In that case the while loop would never
stop. Fixed it so that it goes through the select() call.

Mostly whitespace changes.
Fix SIGBUS on Solaris.
Redmine #5557: Fix promises wrongfully reported with kept status.

We need to swap the priority of the promise SKIPPED and NOOP states.
SKIPPED should have higher priority when calculating promise status
because most promises start out with NOOP status, and SKIPPED is
something they receive later when they discover that their promise
lock cannot be obtained because they have already run. If SKIPPED has
the lowest priority, then the combined result will almost always be
KEPT, so this fix avoids that.
CLOEXEC must be called even when NO_FORK.
Merge pull request #1665 from jimis/server_reload_policy

Server reload policy