mdoc(7) police:

Avoid using parenthesis enclosure macros (.Pq and .Po/.Pc) with plain text.
Not only this slows down the mdoc(7) processing significantly, but it also
has an undesired (in this case) effect of disabling hyphenation within the
entire enclosed block.

11 files changed, 66 insertions, 80 deletions

diff --git a/sbin/camcontrol/camcontrol.8 b/sbin/camcontrol/camcontrol.8
index 4b537a3..691429c 100644
--- a/sbin/camcontrol/camcontrol.8
+++ b/sbin/camcontrol/camcontrol.8
@@ -738,7 +738,7 @@ call in
 .Nm
 bails out when it sees the second argument to
 .Fl c
-.Pq 0x00 ,
+(0x00),
 above.  Fixing this behavior would take some gross code, or changes to the
 .Xr getopt 3
 interface.  The best way to circumvent this problem is to always make sure
diff --git a/sbin/init/init.8 b/sbin/init/init.8
index ce4e10a..63d4097 100644
--- a/sbin/init/init.8
+++ b/sbin/init/init.8
@@ -317,7 +317,7 @@ behavior, i.e. super-user can specify the desired
 on a command line, and
 .Nm
 will signal the original
-.Pq PID 1
+(PID 1)
 .Nm
 as follows:
 .Bl -column Run-level SIGTERM
diff --git a/sbin/ipfw/ipfw.8 b/sbin/ipfw/ipfw.8
index 29f61e4..16f2873 100644
--- a/sbin/ipfw/ipfw.8
+++ b/sbin/ipfw/ipfw.8
@@ -173,17 +173,13 @@ While
 or
 .Cm flush Ns ing ,
 be quiet about actions
-.Po
-implies
-.Fl f
-.Pc .
+(implies
+.Fl f ) .
 This is useful for adjusting rules by executing multiple
 .Nm
 commands in a script
-.Po
-e.g.,
-.Ql sh\ /etc/rc.firewall
-.Pc ,
+(e.g.,
+.Ql sh\ /etc/rc.firewall ) ,
 or by processing a file of many
 .Nm
 rules,
@@ -312,10 +308,8 @@ A match is only declared with the specified probability
 (floating point number between 0 and 1).
 This can be useful for a number of applications such as
 random packet drop or
-.Po
-in conjunction with
-.Xr dummynet 4
-.Pc
+(in conjunction with
+.Xr dummynet 4 )
 to simulate the effect of multiple paths leading to out-of-order
 packet delivery.
 .It Ar action :
@@ -335,7 +329,7 @@ The search terminates.
 is an alias for
 .Cm deny .
 .It Cm reject
-.Pq Deprecated .
+(Deprecated).
 Discard packets that match this rule, and try to send an ICMP
 host unreachable notice.
 The search terminates.
@@ -382,11 +376,9 @@ Send a copy of packets matching this rule to the
 socket bound to port
 .Ar port .
 The search terminates and the original packet is accepted
-.Po
-but see section
+(but see section
 .Sx BUGS
-below
-.Pc .
+below).
 .It Cm fwd Ar ipaddr Ns Xo
 .Op , Ns Ar port
 .Xc
@@ -1110,11 +1102,9 @@ The
 .Nm
 filter list may not be modified if the system security level
 is set to 3 or higher
-.Po
-see
+(see
 .Xr init 8
-for information on system security levels
-.Pc .
+for information on system security levels).
 .El
 .Sh PACKET DIVERSION
 A
@@ -1159,7 +1149,7 @@ resize it on the fly you will probably have to
 and reload the ruleset.
 .It Em net.inet.ip.fw.dyn_count : No 3
 Current number of dynamic rules
-.Pq read-only .
+(read-only).
 .It Em net.inet.ip.fw.dyn_max : No 1000
 Maximum number of dynamic rules.
 When you hit this limit, no more dynamic rules can be
diff --git a/sbin/md5/md5.1 b/sbin/md5/md5.1
index 50bd126..963571a 100644
--- a/sbin/md5/md5.1
+++ b/sbin/md5/md5.1
@@ -24,7 +24,7 @@ The MD5 algorithm is intended for digital signature applications, where a
 large file must be
 .Dq compressed
 in a secure manner before being encrypted with a private
-.Pq secret
+(secret)
 key under a public-key cryptosystem such as
 .Em RSA .
 .Pp
diff --git a/sbin/natd/natd.8 b/sbin/natd/natd.8
index 905dd43..4017e86 100644
--- a/sbin/natd/natd.8
+++ b/sbin/natd/natd.8
@@ -81,10 +81,8 @@ below, and the entry will be made in the internal translation table.
 .It Fl log_denied
 Log denied incoming packets via
 .Xr syslog 3
-.Po
-see also
-.Fl log_facility
-.Pc .
+(see also
+.Fl log_facility ) .
 .It Fl log_facility Ar facility_name
 Use specified log facility when logging information via
 .Xr syslog 3 .
@@ -177,8 +175,8 @@ The mapping is 1:1 meaning port 3300 maps to 2300, 3301 maps to 2301, etc.
 .Oc
 Redirect incoming IP packets of protocol
 .Ar proto
-.Po see Xr protocols 5
-.Pc
+(see
+.Xr protocols 5 )
 destined for
 .Ar publicIP
 address to a
diff --git a/sbin/ping/ping.8 b/sbin/ping/ping.8
index c95f231..2d8110d 100644
--- a/sbin/ping/ping.8
+++ b/sbin/ping/ping.8
@@ -82,19 +82,21 @@ bytes used to fill out the packet.  The options are as follows:
 .It Fl A
 Audible.
 Include a bell
-.Pq ASCII 0x07
+.Tn ( ASCII
+0x07)
 character in the output when no packet is received before the next packet
 is transmitted.
 .It Fl a
 Audible.
 Include a bell
-.Pq ASCII 0x07
+.Tn ( ASCII
+0x07)
 character in the output when any packet is received.
 This option is ignored
 if other format options are present.
 .It Fl c Ar count
 Stop after sending
-.Pq and receiving
+(and receiving)
 .Ar count
 .Tn ECHO_RESPONSE
 packets.
@@ -214,10 +216,8 @@ network.
 If the host is not on a directly-attached network, an error is returned.
 This option can be used to ping a local host through an interface
 that has no route through it
-.Po
-e.g., after the interface was dropped by
-.Xr routed 8
-.Pc .
+(e.g., after the interface was dropped by
+.Xr routed 8 ) .
 .It Fl s Ar packetsize
 Specify the number of data bytes to be sent.
 The default is 56, which translates into 64
@@ -259,7 +259,7 @@ If duplicate packets are received, they are not included in the packet
 loss calculation, although the round trip time of these packets is used
 in calculating the round-trip time statistics.
 When the specified number of packets have been sent
-.Pq and received
+(and received)
 or if the program is terminated with a
 .Dv SIGINT ,
 a brief summary is displayed, showing the number of packets sent and
@@ -282,12 +282,14 @@ header followed by an arbitrary amount of data.
 When a
 .Ar packetsize
 is given, this indicated the size of this extra piece of data
-.Pq the default is 56 .
+(the default is 56).
 Thus the amount of data received inside of an IP packet of type
 .Tn ICMP
 .Tn ECHO_REPLY
 will always be 8 bytes more than the requested data space
-.Pq the Tn ICMP header .
+(the
+.Tn ICMP
+header).
 .Pp
 If the data space is at least eight bytes large,
 .Nm
@@ -302,7 +304,7 @@ Duplicate packets should never occur when pinging a unicast address,
 and seem to be caused by
 inappropriate link-level retransmissions.
 Duplicates may occur in many situations and are rarely
-.Pq if ever
+(if ever)
 a good sign, although the presence of low levels of duplicates may not
 always be cause for alarm.
 Duplicates are expected when pinging a broadcast or multicast address,
@@ -359,12 +361,10 @@ specification states that the
 field for
 .Tn TCP
 packets should be set to 60, but many systems use smaller values
-.Po
-.Bx 4.3
+.No ( Bx 4.3
 uses 30,
 .Bx 4.2
-used 15
-.Pc .
+used 15).
 .Pp
 The maximum possible value of this field is 255, and most
 .Ux
@@ -430,7 +430,8 @@ heard from the specified
 .Ar host ;
 a status of two if the transmission was successful but no responses
 were received; or another value
-.Pq from Aq Pa sysexits.h
+(from
+.Aq Pa sysexits.h )
 if an error occurred.
 .Sh SEE ALSO
 .Xr netstat 1 ,
diff --git a/sbin/ping6/ping6.8 b/sbin/ping6/ping6.8
index ccd6b2b..9ae4c80 100644
--- a/sbin/ping6/ping6.8
+++ b/sbin/ping6/ping6.8
@@ -102,7 +102,7 @@ The options are as follows:
 .\" old ipsec
 .\" .It Fl A
 .\" Enables transport-mode IPsec authentication header
-.\" .Pq experimental .
+.\" (experimental).
 .It Fl a Ar addrtype
 Generate ICMPv6 Node Information Node Addresses query, rather than echo-request.
 .Ar addrtype
@@ -133,7 +133,7 @@ This is an experimental option.
 Set socket buffer size.
 .It Fl c Ar count
 Stop after sending
-.Pq and receiving
+(and receiving)
 .Ar count
 .Tn ECHO_RESPONSE
 packets.
@@ -143,7 +143,7 @@ Set the
 option on the socket being used.
 .\" .It Fl E
 .\" Enables transport-mode IPsec encapsulated security payload
-.\" .Pq experimental .
+.\" (experimental).
 .It Fl f
 Flood ping.
 Outputs packets as fast as they come back or one hundred times per second,
@@ -196,7 +196,7 @@ Probe node information multicast group
 .Pq Li ff02::2:xxxx:xxxx .
 .Ar host
 must be string hostname of the target
-.Pq must not be a numeric IPv6 address .
+(must not be a numeric IPv6 address).
 Node information multicast group will be computed based on given
 .Ar host ,
 and will be used as the final destination.
@@ -224,16 +224,14 @@ when finished.
 .It Fl R
 Make the kernel believe that the target
 .Ar host
-.Po
-or the first
+(or the first
 .Ar hop
 if you specify
-.Ar hops
-.Pc
+.Ar hops )
 is reachable, by injecting upper-layer reachability confirmation hint.
 The option is meaningful only if the target
 .Ar host
-.Pq or the first hop
+(or the first hop)
 is a neighbor.
 .It Fl S Ar sourceaddr
 Specifies the source address of request packets.
@@ -300,7 +298,7 @@ If duplicate packets are received, they are not included in the packet
 loss calculation, although the round trip time of these packets is used
 in calculating the round-trip time statistics.
 When the specified number of packets have been sent
-.Pq and received
+(and received)
 or if the program is terminated with a
 .Dv SIGINT ,
 a brief summary is displayed, showing the number of packets sent and
@@ -323,12 +321,14 @@ during normal operations or from automated scripts.
 .\" When a
 .\" .Ar packetsize
 .\" is given, this indicated the size of this extra piece of data
-.\" .Pq the default is 56 .
+.\" (the default is 56).
 .\" Thus the amount of data received inside of an IP packet of type
 .\" .Tn ICMP
 .\" .Tn ECHO_REPLY
 .\" will always be 8 bytes more than the requested data space
-.\" .Pq the Tn ICMP header .
+.\" (the
+.\" .Tn ICMP
+.\" header).
 .\" .Pp
 .\" If the data space is at least eight bytes large,
 .\" .Nm
@@ -343,7 +343,7 @@ Duplicate packets should never occur when pinging a unicast address,
 and seem to be caused by
 inappropriate link-level retransmissions.
 Duplicates may occur in many situations and are rarely
-.Pq if ever
+(if ever)
 a good sign, although the presence of low levels of duplicates may not
 always be cause for alarm.
 Duplicates are expected when pinging a broadcast or multicast address,
@@ -354,7 +354,7 @@ Damaged packets are obviously serious cause for alarm and often
 indicate broken hardware somewhere in the
 .Nm
 packet's path
-.Pq in the network or in the hosts .
+(in the network or in the hosts).
 .Sh TRYING DIFFERENT DATA PATTERNS
 The
 (inter)network
diff --git a/sbin/reboot/boot_i386.8 b/sbin/reboot/boot_i386.8
index c9cd26b..2fb68aa 100644
--- a/sbin/reboot/boot_i386.8
+++ b/sbin/reboot/boot_i386.8
@@ -192,7 +192,8 @@ by the
 option becomes the only console.
 .It Fl d
 enter the DDB kernel debugger
-.Pq see Xr ddb 4
+(see
+.Xr ddb 4 )
 as early as possible in kernel initialization.
 .It Fl g
 use the GDB remote debugging protocol.
@@ -223,13 +224,15 @@ options are automatically set.
 .It Fl r
 use the statically configured default for the device containing the
 root file system
-.Pq see Xr config 8 .
+(see
+.Xr config 8 ) .
 Normally, the root file system is on the device
 that the kernel was loaded from.
 .It Fl s
 boot into single-user mode; if the console is marked as
 .Dq insecure
-.Pq see Xr ttys 5 ,
+(see
+.Xr ttys 5 ) ,
 the root password must be entered.
 .It Fl v
 be verbose during device probing (and later).
diff --git a/sbin/route/route.8 b/sbin/route/route.8
index b5332e7..5a56e00 100644
--- a/sbin/route/route.8
+++ b/sbin/route/route.8
@@ -318,7 +318,7 @@ The optional
 modifier specifies that the
 .Dv RTF_LLINFO
 routing table entry is the
-.Dq published Pq proxy-only
+.Dq published (proxy-only)
 .Tn ARP
 entry, as reported by
 .Xr arp 8 .
diff --git a/sbin/setkey/setkey.8 b/sbin/setkey/setkey.8
index 0fedfe7..b7d6c07 100644
--- a/sbin/setkey/setkey.8
+++ b/sbin/setkey/setkey.8
@@ -61,16 +61,12 @@ as well as Security Policy Database (SPD) entries in the kernel.
 .Pp
 .Nm
 takes a series of operations from the standard input
-.Po
-if invoked with
-.Fl c
-.Pc
+(if invoked with
+.Fl c )
 or the file named
 .Ar filename
-.Po
-if invoked with
-.Fl f Ar filename
-.Pc .
+(if invoked with
+.Fl f Ar filename ) .
 .Bl -tag -width Ds
 .It Fl D
 Dump the SAD entries.
@@ -228,11 +224,9 @@ IPCOMP
 Security Parameter Index (SPI) for the SAD and the SPD.
 It must be decimal number or hexadecimal number
 You can not use the set of SPI values in the range 0 through 255.
-.Po
-with
+(with
 .Li 0x
-attached
-.Pc .
+attached).
 .\"
 .Pp
 .It Ar extensions
@@ -302,7 +296,7 @@ If
 is not specified with
 .Li ipcomp
 line, the kernel will use well-known IPComp CPI
-.Pq compression parameter index
+(compression parameter index)
 on IPComp CPI field on packets, and
 .Ar spi
 field will be ignored.
@@ -403,7 +397,7 @@ NOTE:
 .Ar upperspec
 does not work against forwarding case at this moment,
 as it requires extra reassembly at forwarding node
-.Pq not implemented at this moment .
+(not implemented at this moment).
 We have many protocols in
 .Pa /etc/protocols ,
 but protocols except of TCP, UDP and ICMP may not be suitable to use with IPSec.
diff --git a/sbin/shutdown/shutdown.8 b/sbin/shutdown/shutdown.8
index 4838c6d..3bd59c7 100644
--- a/sbin/shutdown/shutdown.8
+++ b/sbin/shutdown/shutdown.8
@@ -65,7 +65,7 @@ The system is halted at the specified
 .Ar time .
 .It Fl p
 The system is halted and the power is turned off
-.Pq hardware support required
+(hardware support required)
 at the specified
 .Ar time .
 .It Fl r