and so peaceful until...

finally committed my nvram driver. i have my tpb port ready but since i made the /dev/nvram device owned by group kmem and mode 440, tpb has to run setgid kmem which might not fly so well. i looked at the code and i don't see any easy way to drop privileges since it has to open /dev/nvram, read it, and close it every time it polls. i'll post it to ports@ and see what people have to say.

tpb makes no mention of how the permissions should be handled and linux's nvram driver is 640, owned by root.root. maybe tpb needs privsep. ugh.