In D47538#1084342, @emaste wrote:

@sjg should we make some note in make(1) also?

I would generally leave contrib alone

Looks ok to me

Why not simply use ALLPERMS as the default for im_[df]mask? the above would then be unnecessary, the behavior would be backwards compatible, and anyone who wants to disable setuid can just use 'mask=0777'

Doh! thanks!

Thanks

_debugShell ensure _TTY is set

Test for $local rather than $isPOSIX_SHELL

FWIW this is why we are stuck on using 4th ;-). LOADER_VERIEXEC is more important to us than LUA

Add missing comma

Update history to avoid ambiguity

Rename knob to NO_STRICT_REGEX

*might* be worth a comment to the effect of in the non-DIRDEPS_BUILD HOST_CC is just CC

FWIW we have sym and abi checkers in junos build, they are each in a separate makefile included by bsd.lib.mk if the appropriate knob is enabled
The sym checker does BSS and TLS symbol checks, not directly useful here, but just a thought