New release note:

	64-bit time_t on FreeBSD/sparc64,
	em(4) hiccup during ifconfig em0 alias fixed,
	ng_vlan(4) netgraph node type,
	umass(4) ATAPI MMC commands support,
	rc.d/gbde_swap and gbde_swap_enable in rc.conf,
	mountd(8) -p <port> option,
	nologin(8) syslog support,
	OpenBSD's pf and the related userland utils imported,
	SIZE attribute in distinfo enabled by default.

(when you find errors or inappropriate descriptions, please let me know.)

2 files changed, 146 insertions, 6 deletions

diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
index eed15ba..a1ece78 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
@@ -195,6 +195,21 @@
     <para>The kernel's file descriptor allocation code has been
       updated, and is now derived from similar code in OpenBSD.</para>
 
+    <para arch="sparc64">On &os;/sparc64 <varname>time_t</varname>
+      has been changed from a 32-bit value to a 64-bit value.
+
+      <note>
+	<para>Since this change is not backward-compatible,
+	  any programs which are built on the older system using
+	  the 32-bit <varname>time_t</varname> as well as
+	  call system-routines for handling
+	  <varname>time_t</varname> values, will have to be recompiled.
+	  More detail information and notice on upgrading from
+	  the source can be found in
+	  <filename>/usr/src/UPDATING.64BTT</filename>.</para>
+      </note>
+    </para>
+
     <!-- Above this line, sort kernel changes by manpage/keyword-->
 
     <sect3 id="proc">
@@ -232,6 +247,9 @@
 	driver has been removed due to breakage.  Its functionality
 	has been subsumed into the &man.en.4; driver.</para>
 
+      <para>A short hiccup in the &man.em.4; during parameter
+	reconfiguration, has been fixed.  &merged;</para>
+
       <para arch="i386">The lmc (LAN Media Corp. PCI WAN adapter) driver has been
 	removed due to breakage and lack of maintainership.</para>
 
@@ -246,6 +264,9 @@
 	For more information, see the &man.ndis.4; and
 	&man.ndiscvt.8; manual pages.</para>
 
+      <para>The &man.ng.vlan.4; NetGraph node type, which supports
+        IEEE 802.1Q VLAN tagging has been added.  &merged;</para>
+
       <para>Several bugs related to multicast and promiscuous mode
 	handling in the &man.sk.4; driver have been fixed.</para>
 
@@ -295,7 +316,6 @@
 	for authenticating TCP sessions.  &man.setkey.8; now includes
 	support for the TCP-MD5 class of security associations.
 	&merged;</para>
-
     </sect3>
 
     <sect3 id="disks">
@@ -306,6 +326,8 @@
 	work better, and some problems with timeouts should be
 	resolved.</para>
 
+      <para>The &man.umass.4; driver now supports the missing
+	ATAPI MMC commands and handles the timeout properly.</para>
     </sect3>
 
     <sect3 id="fs">
@@ -339,6 +361,16 @@
 	if the server requires it; this may eventually become an
 	option to &man.mount.smbfs.8;.</para>
 
+      <para>A support for gbde-enabled swap devices has been added.
+	When <varname>gbde_swap_enable</varname> is specified
+	in &man.rc.conf.5;, a swap device named
+	<filename>/dev/foo.bde</filename> in &man.fstab.5;
+	is automatically attached at boot time with the device
+	<filename>/dev/foo</filename> and a random key, which
+	generated by computing the MD5 checksum of 512 bytes read
+	from <filename>/dev/random</filename>.
+	Note that this prevents recovery of kernel dumps.</para>
+
     </sect3>
 
     <sect3 id="mm">
@@ -412,11 +444,18 @@
       </note>
     <para>
 
+    <para>&man.mountd.8; now supports the <option>-p</option> option,
+       which allows users to specify a known port for use
+       in firewall rulesets.</para>
+
     <para>&man.newfs.8; and &man.mdmfs.8; now support a
       <option>-l</option> flag to enable them to set the MAC
       multilabel flag on new filesystems without requiring the use of
       &man.tunefs.8;.</para>
 
+    <para>&man.nologin.8; now support reporting login attempts via
+       &man.syslogd.8;.</para>
+
     <para>A bugfix has been applied to NSS support, which fixes
       problems when using third-party NSS modules (such as <filename
       role="package">net/nss_ldap</filename>) and groups with large
@@ -507,6 +546,31 @@
 
       </para>
 
+    <para><application>pf</application>, OpenBSD's packet filter as of
+      OpenBSD 3.4 has been imported into &os; source tree and installed
+      by default.  A new user <username>proxy</username>, and two new
+      groups <username>authpf</username> and <username>proxy</username>,
+      which <application>pf</application> needs are added as well.
+
+      <note>
+	<para>On upgrading from the source, these user accounts must be
+	  added in advance.  And, the <varname>NO_PF</varname> variable
+	  in <filename>make.conf</filename> can be used to prevent
+	  <application>pf</application> from building.</para>
+      </note>
+
+    <para>Several userland utilities of OpenBSD's
+      <application>pf</application> have been imported.
+      <filename>libexec/ftp-proxy</filename> is an ftp proxy for
+      <application>pf</application>,
+      <filename>sbin/pfctl</filename> is an equivalent to
+      <filename>sbin/ipf</filename>,
+      <filename>sbin/pflogd</filename>
+      is a daemon logging packets via <literal>if_pflog</literal>
+      in pcap format, and
+      <filename>usr.sbin/authpf</filename> is an authentication shell
+      to modify pf rulesets.</para>
+
     <para><application>routed</application> has been updated from
       release 2.22 to release 2.27 from rhyolite.com.  Note that for
       users relying on RIP's MD5 authentication feature,
@@ -522,8 +586,14 @@
   <sect2 id="ports">
     <title>Ports/Packages Collection Infrastructure</title>
 
-    <para></para>
-
+    <para>The <literal>SIZE</literal> attribute for distfiles
+      which can be used for checking file size before fetching,
+      has been added and enabled by default.
+      <varname>DISABLE_SIZE</varname> is a user control knob
+      to disable the distfile size checking.  This is especially
+      useful on old &os; versions which didn't have &man.fetch.1;
+      support for this, and for some FTP proxies which always
+      report incorrect or bogus size.</para>
   </sect2>
 
   <sect2 id="releng">
diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
index eed15ba..a1ece78 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
@@ -195,6 +195,21 @@
     <para>The kernel's file descriptor allocation code has been
       updated, and is now derived from similar code in OpenBSD.</para>
 
+    <para arch="sparc64">On &os;/sparc64 <varname>time_t</varname>
+      has been changed from a 32-bit value to a 64-bit value.
+
+      <note>
+	<para>Since this change is not backward-compatible,
+	  any programs which are built on the older system using
+	  the 32-bit <varname>time_t</varname> as well as
+	  call system-routines for handling
+	  <varname>time_t</varname> values, will have to be recompiled.
+	  More detail information and notice on upgrading from
+	  the source can be found in
+	  <filename>/usr/src/UPDATING.64BTT</filename>.</para>
+      </note>
+    </para>
+
     <!-- Above this line, sort kernel changes by manpage/keyword-->
 
     <sect3 id="proc">
@@ -232,6 +247,9 @@
 	driver has been removed due to breakage.  Its functionality
 	has been subsumed into the &man.en.4; driver.</para>
 
+      <para>A short hiccup in the &man.em.4; during parameter
+	reconfiguration, has been fixed.  &merged;</para>
+
       <para arch="i386">The lmc (LAN Media Corp. PCI WAN adapter) driver has been
 	removed due to breakage and lack of maintainership.</para>
 
@@ -246,6 +264,9 @@
 	For more information, see the &man.ndis.4; and
 	&man.ndiscvt.8; manual pages.</para>
 
+      <para>The &man.ng.vlan.4; NetGraph node type, which supports
+        IEEE 802.1Q VLAN tagging has been added.  &merged;</para>
+
       <para>Several bugs related to multicast and promiscuous mode
 	handling in the &man.sk.4; driver have been fixed.</para>
 
@@ -295,7 +316,6 @@
 	for authenticating TCP sessions.  &man.setkey.8; now includes
 	support for the TCP-MD5 class of security associations.
 	&merged;</para>
-
     </sect3>
 
     <sect3 id="disks">
@@ -306,6 +326,8 @@
 	work better, and some problems with timeouts should be
 	resolved.</para>
 
+      <para>The &man.umass.4; driver now supports the missing
+	ATAPI MMC commands and handles the timeout properly.</para>
     </sect3>
 
     <sect3 id="fs">
@@ -339,6 +361,16 @@
 	if the server requires it; this may eventually become an
 	option to &man.mount.smbfs.8;.</para>
 
+      <para>A support for gbde-enabled swap devices has been added.
+	When <varname>gbde_swap_enable</varname> is specified
+	in &man.rc.conf.5;, a swap device named
+	<filename>/dev/foo.bde</filename> in &man.fstab.5;
+	is automatically attached at boot time with the device
+	<filename>/dev/foo</filename> and a random key, which
+	generated by computing the MD5 checksum of 512 bytes read
+	from <filename>/dev/random</filename>.
+	Note that this prevents recovery of kernel dumps.</para>
+
     </sect3>
 
     <sect3 id="mm">
@@ -412,11 +444,18 @@
       </note>
     <para>
 
+    <para>&man.mountd.8; now supports the <option>-p</option> option,
+       which allows users to specify a known port for use
+       in firewall rulesets.</para>
+
     <para>&man.newfs.8; and &man.mdmfs.8; now support a
       <option>-l</option> flag to enable them to set the MAC
       multilabel flag on new filesystems without requiring the use of
       &man.tunefs.8;.</para>
 
+    <para>&man.nologin.8; now support reporting login attempts via
+       &man.syslogd.8;.</para>
+
     <para>A bugfix has been applied to NSS support, which fixes
       problems when using third-party NSS modules (such as <filename
       role="package">net/nss_ldap</filename>) and groups with large
@@ -507,6 +546,31 @@
 
       </para>
 
+    <para><application>pf</application>, OpenBSD's packet filter as of
+      OpenBSD 3.4 has been imported into &os; source tree and installed
+      by default.  A new user <username>proxy</username>, and two new
+      groups <username>authpf</username> and <username>proxy</username>,
+      which <application>pf</application> needs are added as well.
+
+      <note>
+	<para>On upgrading from the source, these user accounts must be
+	  added in advance.  And, the <varname>NO_PF</varname> variable
+	  in <filename>make.conf</filename> can be used to prevent
+	  <application>pf</application> from building.</para>
+      </note>
+
+    <para>Several userland utilities of OpenBSD's
+      <application>pf</application> have been imported.
+      <filename>libexec/ftp-proxy</filename> is an ftp proxy for
+      <application>pf</application>,
+      <filename>sbin/pfctl</filename> is an equivalent to
+      <filename>sbin/ipf</filename>,
+      <filename>sbin/pflogd</filename>
+      is a daemon logging packets via <literal>if_pflog</literal>
+      in pcap format, and
+      <filename>usr.sbin/authpf</filename> is an authentication shell
+      to modify pf rulesets.</para>
+
     <para><application>routed</application> has been updated from
       release 2.22 to release 2.27 from rhyolite.com.  Note that for
       users relying on RIP's MD5 authentication feature,
@@ -522,8 +586,14 @@
   <sect2 id="ports">
     <title>Ports/Packages Collection Infrastructure</title>
 
-    <para></para>
-
+    <para>The <literal>SIZE</literal> attribute for distfiles
+      which can be used for checking file size before fetching,
+      has been added and enabled by default.
+      <varname>DISABLE_SIZE</varname> is a user control knob
+      to disable the distfile size checking.  This is especially
+      useful on old &os; versions which didn't have &man.fetch.1;
+      support for this, and for some FTP proxies which always
+      report incorrect or bogus size.</para>
   </sect2>
 
   <sect2 id="releng">