- Copy stable/10 (r259064) to releng/10.0 as part of the
10.0-RELEASE cycle.
- Update __FreeBSD_version [1]
- Set branch name to -RC1

[1] 10.0-CURRENT __FreeBSD_version value ended at '55', so
start releng/10.0 at '100' so the branch is started with
a value ending in zero.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

mdoc: order prologue macros consistently by Dd/Dt/Os

Although groff_mdoc(7) gives another impression, this is the ordering
most widely used and also required by mdocml/mandoc.

Reviewed by: ru
Approved by: philip, ed (mentors)

The last big commit: let usr.sbin/ use WARNS=6 by default.

An average consumer of fts(3) that avoids keeping pointers to old
FTSENTs and uses only what fts_read() has just returned can rely
on fts_path being NUL-terminated. Under these conditions, a plain
vanilla "%s" format can be safely used to printf an fts_path.

OK'ed by: rwatson

fts_pathlen is now a size_t rather than an int so a cast is needed.
I'm not sure why warn() and err() string formatted variables need
to be right-justified.

Eliminate duplicate header files.

Remove unnecessary SRCS= where could be guessed directly by our
bsd.*.mk infrasture.

Obtained from: ru

WARNS?=6 cleanup for [gs]et[fp]mac:
- Constify structure members that should not be changed
during process.
- Apply static where needed
- signed/unsigned madness
- Bump WARNS?= levels from 2 to 6

(this is a diff reduction for a subsequent commit against these
Makefile's)

Sort sections.

Mechanically kill hard sentence breaks.

Add "-q" argument to setfmac and setfsmac to allow the patient but
exhausted reader not to see non-fatal warnings.

Mostly fixed the SYNOPSIS.

style.Makefile(5)

Add a sample specfile listing to FILES.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

Break setfmac.8 into two actual man pages, and reword bits of the
setfsmac(8) documentation.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

Cross-reference mac(4).

Sponsored by: DARPA, Network Associates Laboratories

Account for fts(3)'s FTS_SLNONE case for symbolic links which have
a nonexistant target, in addition to the FTS_SL previously, so e.g.
setfmac -h sebsd/system_u:object_r:malloc_conf_t /etc/malloc.conf
succeeds.

Approved by: re

Uniformly refer to a file system as "file system".

Approved by: re

mdoc(7) police: Added the missing .Os call; it's not strictly
necessary nowadays, but is documented as "required", and may
become so again in the future.

Approved by: re

mdoc(7) police: nit.

Approved by: re

Mdoc markup and language fixes.

Submitted by: ru
Approved by: re (jhb)
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

Cast argument to (long), missed in prior pass.

Approved by: re
Submitted by: marcel

Fix 32-bit/64-bit bug in format string.

Approved by: re
Submitted by: marcel
Pointy hat to: green

Add support for -R for file relabel operations.

Add 'setfsmac' link, which permits labels to be provided in a label
specification file, making it easier to provide initial file system
labeling specifications. This is used by the new mac_lomac to
provide initial system labeling and policy, and by sebsd, the port
of SELinux FLASK/TE to FreeBSD.

Approved by: re (jhb)
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

In general, prefer WARNS to CFLAGS+=-Wall. Tend towards a more
BSD-esque Makefile style.

Submitted by: obrien
Approved by: re

mdoc(7) police: sweep.

Introduce simple command line tools to manage MAC labels on processes and
files. Basically wrappers for mac_{get,set}_{file,link,pid,proc}(3).
Man pages to be updated shortly.

Approved by: re
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories