Don't hardcode passwd/shadow/group additions in doinst.sh - get them from
the .new files.
rc.S: don't start rc.haveged in this script - move it to rc.M.
rc.M: start rc.haveged after seeding /dev/urandom in rc.S, and after
starting syslogd, klogd, and udev in rc.M.
rc.M: start rc.rndg (we don't ship it or rng-tools) after udev.
H. Peter Anvin says that it's fine to run both haveged and rndg,
and I trust his opinion on that.
Thanks to GazL.
Fixed wrong variable in rc.atd. Thanks to upnort.
Use blinding for ECDSA signing to mitigate a novel side-channel attack.
For more information, see:
(* Security fix *)