1. Expiration of SAs. Some missing updates of counters.
   Question: very strange, rfc defines use_time as time of the first use
   of SA. But kame setkey refers to this as lastuse.
2. Bug fixes for tunnel mode and forwarding.
3. Fix bugs in per-socket policy: policy entries do not leak but are destroyed,
   when socket is closed, and are cloned on children of listening sockets.
4. Implemented use policy: i.e. use ipsec if a SA is available,
   ignore if it is not.
5. Added sysctl to disable in/out policy on some devices.
   It is set on loopback by default.
6. Remove resolved reference from template. It is not used,
   but pollutes code.
7. Added all the SASTATEs, now they make sense.

into nuts.ninka.net:/home/davem/src/BK/net-2.5

On PA-RISC, SIGRTMIN is 36, so a 32-bit data type is not enough.  We
conditionalise it so other arches don't pay the cost.

Add prefetching support to asm-generic/xor.h.  This gives a healthy speedup
on both PA-RISC & IA64.

- CREDITS & MAINTAINERS updates
- changes for the new kstat/dkstat struct
- Kconfig updates
- L_TARGET isn't obsolete yet
- fix the sys_truncate/truncate64 issue properly this time
- add MAP_POPULATE & MAP_NONBLOCK definitions

Support initramfs on parisc

C99 initialiser conversion; some from Rusty, some from me.

This adds some missing __exit specifications which lead to a failure to
link the AFS code directly into the kernel.

into home.transmeta.com:/home/torvalds/v2.5/linux

With these changes the boot wrapper successfully builds,
although this may not be the absolute best way to do things.

This didn't compile since sd_find_target is gone, and is to
move into userspace anyway.

This moves the sections which are read-only (e.g. exception table,
kallsyms data) to go before the read/write data section, and the
feature fixup section into the init data area.  It also adds the
initramfs section.

defaults for the advanced kernel config options.

We need __div64_32 exported, and flush_icache_page is now a noop
so it shouldn't be exported.

This simplifies the C code by removing some #ifdefs.

into samba.org:/home/paulus/kernel/for-linus-ppc

into samba.org:/home/paulus/kernel/for-linus-ppc

into home.transmeta.com:/home/torvalds/v2.5/linux

into nuts.ninka.net:/home/davem/src/BK/net-2.5

into nuts.ninka.net:/home/davem/src/BK/sparc-2.5

- Fixed min keysize bug for Blowfish (it is 32, not 64).
- Documentation updates.

Just a new PCI ID (and get twice the MegaHz :-).

This makes VT8653 (VIA Apollo Pro266T) work with AGP.  I had someone
test it and verify it works.

This fixes a minor typo in sl82c105.c which stops it from compiling.

This updates the powermac IDE driver in 2.5 so it uses the 2.5 kernel
interfaces and types rather than the 2.4 ones.  It also makes it use
blk_rq_map_sg rather than its own code to set up scatter/gather lists in
pmac_ide_build_sglist, and makes it use ide_lock instead of
io_request_lock.

This updates the macserial driver in 2.5 so it compiles and works.  The
main changes are to use schedule_work instead of task queues and BHs.
The patch also removes the wait_key method.

I know we need to change macserial to use the new serial
infrastructure.  I'm posting this patch in case it is useful to anyone
trying to compile up a kernel for a powermac at the moment.

 - Some constant adjusted
 - Comments added
 - Better hash initialization
 - Correct timeout setup
 - Added __KERNEL__ bypass to avoid userspace inclusion problems
 - Cleaned up locking
 - Function poll_init_wait() now calls poll_init_wait_ex()
 - Event return fix ( Jay Vosburgh )
 - Use <linux/hash.h> for the hash

If a rpc operation indicates that response should
be dropped (e.g. kmalloc failure) we must still
call pc_release to release anything it may have allocated.

This allows NFSv3 to manage 4096byte symlinks.

Also remove now-unused svcbuf_reserver function.

This was used to reserve space in output buffer
for 'data', but now this is stored in separate page.

rq_res->len was not always updated properly.
It is only needed in the sendto routine, so we calculate
it just before that is called, and don't bother
updating it anywhere else.