summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
Diffstat (limited to 'src')
-rw-r--r--src/.Sanitize63
-rw-r--r--src/admin/.Sanitize42
-rw-r--r--src/admin/aname/.Sanitize38
-rw-r--r--src/admin/convert/.Sanitize38
-rw-r--r--src/admin/create/.Sanitize38
-rw-r--r--src/admin/destroy/.Sanitize38
-rw-r--r--src/admin/edit/.Sanitize46
-rw-r--r--src/admin/stash/.Sanitize38
-rw-r--r--src/appl/.Sanitize47
-rw-r--r--src/appl/bsd/.Sanitize56
-rw-r--r--src/appl/gss-sample/.Sanitize40
-rw-r--r--src/appl/mailquery/.Sanitize40
-rw-r--r--src/appl/movemail/.Sanitize37
-rw-r--r--src/appl/popper/.Sanitize70
-rw-r--r--src/appl/popper/orig-makefiles/.Sanitize33
-rw-r--r--src/appl/sample/.Sanitize39
-rw-r--r--src/appl/sample/sclient/.Sanitize38
-rw-r--r--src/appl/sample/sserver/.Sanitize38
-rw-r--r--src/appl/simple/.Sanitize38
-rw-r--r--src/appl/simple/client/.Sanitize37
-rw-r--r--src/appl/simple/server/.Sanitize37
-rw-r--r--src/appl/telnet/.Sanitize47
-rw-r--r--src/appl/telnet/arpa/.Sanitize32
-rw-r--r--src/appl/telnet/libtelnet/.Sanitize73
-rw-r--r--src/appl/telnet/telnet/.Sanitize59
-rw-r--r--src/appl/telnet/telnetd/.Sanitize55
-rw-r--r--src/appl/user_user/.Sanitize38
-rw-r--r--src/appl/zmailnotify/.Sanitize31
-rw-r--r--src/autotools/.Sanitize31
-rw-r--r--src/clients/.Sanitize40
-rw-r--r--src/clients/kdestroy/.Sanitize38
-rw-r--r--src/clients/kinit/.Sanitize38
-rw-r--r--src/clients/klist/.Sanitize38
-rw-r--r--src/clients/ksu/.Sanitize44
-rw-r--r--src/config-files/.Sanitize36
-rw-r--r--src/config/.Sanitize43
-rw-r--r--src/config/doc/.Sanitize31
-rw-r--r--src/include/.Sanitize46
-rw-r--r--src/include/kerberosIV/.Sanitize68
-rw-r--r--src/include/krb5/.Sanitize76
-rw-r--r--src/include/krb5/asn.1/.Sanitize32
-rw-r--r--src/include/krb5/stock/.Sanitize33
-rw-r--r--src/include/sys/.Sanitize33
-rw-r--r--src/isode/.Sanitize37
-rw-r--r--src/isode/compat/.Sanitize31
-rw-r--r--src/isode/h/.Sanitize31
-rw-r--r--src/isode/pepsy/.Sanitize32
-rw-r--r--src/isode/pepsy/doc/.Sanitize31
-rw-r--r--src/isode/psap/.Sanitize32
-rw-r--r--src/isode/psap/test/.Sanitize31
-rw-r--r--src/isode/support/.Sanitize31
-rw-r--r--src/isode/util/.Sanitize31
-rw-r--r--src/kadmin.new/.Sanitize32
-rw-r--r--src/kadmin.new/client/.Sanitize43
-rw-r--r--src/kadmin/.Sanitize39
-rw-r--r--src/kadmin/client/.Sanitize47
-rw-r--r--src/kadmin/kpasswd/.Sanitize39
-rw-r--r--src/kadmin/server/.Sanitize54
-rw-r--r--src/kadmin/v4server/.Sanitize46
-rw-r--r--src/kdc/.Sanitize57
-rw-r--r--src/krb524/.Sanitize50
-rw-r--r--src/lib/.Sanitize54
-rw-r--r--src/lib/crypto/.Sanitize45
-rw-r--r--src/lib/crypto/crc32/.Sanitize40
-rw-r--r--src/lib/crypto/des/.Sanitize64
-rw-r--r--src/lib/crypto/des/doc/.Sanitize32
-rw-r--r--src/lib/crypto/md4/.Sanitize42
-rw-r--r--src/lib/crypto/md5/.Sanitize40
-rw-r--r--src/lib/crypto/os/.Sanitize37
-rw-r--r--src/lib/des425/.Sanitize52
-rw-r--r--src/lib/gssapi/.Sanitize41
-rw-r--r--src/lib/gssapi/generic/.Sanitize53
-rw-r--r--src/lib/gssapi/krb5/.Sanitize68
-rw-r--r--src/lib/gssapi/sample/.Sanitize31
-rw-r--r--src/lib/kdb/.Sanitize45
-rw-r--r--src/lib/krb425/.Sanitize60
-rw-r--r--src/lib/krb5/.Sanitize45
-rw-r--r--src/lib/krb5/asn.1/.Sanitize60
-rw-r--r--src/lib/krb5/ccache/.Sanitize41
-rw-r--r--src/lib/krb5/ccache/file/.Sanitize62
-rw-r--r--src/lib/krb5/ccache/stdio/.Sanitize62
-rw-r--r--src/lib/krb5/error_tables/.Sanitize43
-rw-r--r--src/lib/krb5/free/.Sanitize67
-rw-r--r--src/lib/krb5/keytab/.Sanitize43
-rw-r--r--src/lib/krb5/keytab/file/.Sanitize51
-rw-r--r--src/lib/krb5/krb/.Sanitize103
-rw-r--r--src/lib/krb5/os/.Sanitize70
-rw-r--r--src/lib/krb5/posix/.Sanitize45
-rw-r--r--src/lib/krb5/rcache/.Sanitize47
-rw-r--r--src/mac/.Sanitize31
-rw-r--r--src/prototype/.Sanitize34
-rw-r--r--src/slave/.Sanitize42
-rw-r--r--src/tests/.Sanitize44
-rw-r--r--src/tests/asn.1/.Sanitize49
-rw-r--r--src/tests/create/.Sanitize39
-rw-r--r--src/tests/hammer/.Sanitize39
-rw-r--r--src/tests/resolve/.Sanitize36
-rw-r--r--src/tests/verify/.Sanitize39
-rw-r--r--src/util/.Sanitize47
-rw-r--r--src/util/Sanitize418
-rw-r--r--src/util/autoconf/.Sanitize89
-rw-r--r--src/util/autoconf/testsuite/.Sanitize38
-rw-r--r--src/util/autoconf/testsuite/autoconf.g/.Sanitize33
-rw-r--r--src/util/autoconf/testsuite/autoconf.s/.Sanitize33
-rw-r--r--src/util/autoconf/testsuite/config/.Sanitize32
-rw-r--r--src/util/autoconf/testsuite/lib/.Sanitize32
-rw-r--r--src/util/et/.Sanitize60
-rw-r--r--src/util/kfrags/.Sanitize40
-rw-r--r--src/util/makedepend/.Sanitize42
-rw-r--r--src/util/ss/.Sanitize64
-rw-r--r--src/util/unifdef/.Sanitize37
-rw-r--r--src/windows/.Sanitize36
-rw-r--r--src/windows/cns/.Sanitize56
-rw-r--r--src/windows/wintel/.Sanitize56
114 files changed, 5456 insertions, 0 deletions
diff --git a/src/.Sanitize b/src/.Sanitize
new file mode 100644
index 0000000000..988d0aba04
--- /dev/null
+++ b/src/.Sanitize
@@ -0,0 +1,63 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+CHANGES
+ChangeLog
+Makefile
+Makefile.in
+TODO
+acconfig.h
+aclocal.m4
+admin
+appl
+autotools
+clients
+config
+config-files
+configure
+configure.in
+include
+isode
+kadmin
+kadmin.new
+kdc
+krb524
+lib
+mac
+patchlevel.h
+prototype
+slave
+tests
+util
+wconfig.c
+windows
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/admin/.Sanitize b/src/admin/.Sanitize
new file mode 100644
index 0000000000..efcd690a18
--- /dev/null
+++ b/src/admin/.Sanitize
@@ -0,0 +1,42 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+aname
+configure
+configure.in
+convert
+create
+destroy
+edit
+stash
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/admin/aname/.Sanitize b/src/admin/aname/.Sanitize
new file mode 100644
index 0000000000..bcb7a8536c
--- /dev/null
+++ b/src/admin/aname/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kdb5_anadd.M
+kdb5_anadd.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/admin/convert/.Sanitize b/src/admin/convert/.Sanitize
new file mode 100644
index 0000000000..e6c7914b25
--- /dev/null
+++ b/src/admin/convert/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kdb5_convert.M
+kdb5_convert.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/admin/create/.Sanitize b/src/admin/create/.Sanitize
new file mode 100644
index 0000000000..a74d8b55dd
--- /dev/null
+++ b/src/admin/create/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kdb5_create.M
+kdb5_create.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/admin/destroy/.Sanitize b/src/admin/destroy/.Sanitize
new file mode 100644
index 0000000000..bf5af7669f
--- /dev/null
+++ b/src/admin/destroy/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kdb5_destroy.M
+kdb5_destroy.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/admin/edit/.Sanitize b/src/admin/edit/.Sanitize
new file mode 100644
index 0000000000..ca7db3e071
--- /dev/null
+++ b/src/admin/edit/.Sanitize
@@ -0,0 +1,46 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+dump.c
+dumpv4.c
+getdate.y
+kdb5_ed_ct.ct
+kdb5_edit.M
+kdb5_edit.c
+kdb5_edit.h
+ss_wrapper.c
+tcl_wrapper.c
+util.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/admin/stash/.Sanitize b/src/admin/stash/.Sanitize
new file mode 100644
index 0000000000..dc96baff70
--- /dev/null
+++ b/src/admin/stash/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kdb5_stash.M
+kdb5_stash.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/.Sanitize b/src/appl/.Sanitize
new file mode 100644
index 0000000000..4555e6bf0f
--- /dev/null
+++ b/src/appl/.Sanitize
@@ -0,0 +1,47 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+bsd
+configure
+configure.in
+gss-sample
+mailquery
+movemail
+popper
+sample
+simple
+telnet
+user_user
+zmailnotify
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/bsd/.Sanitize b/src/appl/bsd/.Sanitize
new file mode 100644
index 0000000000..f24682ef43
--- /dev/null
+++ b/src/appl/bsd/.Sanitize
@@ -0,0 +1,56 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+defines.h
+fieldbits.h
+forward.c
+getdtablesize.c
+kcmd.c
+krcp.c
+krlogin.c
+krlogind.M
+krlogind.c
+krsh.c
+krshd.M
+krshd.c
+login.c
+loginpaths.h
+logutil.c
+rcp.M
+rlogin.M
+rpaths.h
+rsh.M
+setenv.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/gss-sample/.Sanitize b/src/appl/gss-sample/.Sanitize
new file mode 100644
index 0000000000..a95bfeb394
--- /dev/null
+++ b/src/appl/gss-sample/.Sanitize
@@ -0,0 +1,40 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+README
+configure
+configure.in
+gss-client.c
+gss-misc.c
+gss-server.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/mailquery/.Sanitize b/src/appl/mailquery/.Sanitize
new file mode 100644
index 0000000000..d58a60ee53
--- /dev/null
+++ b/src/appl/mailquery/.Sanitize
@@ -0,0 +1,40 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+mailquery.M
+mailquery.c
+pop.h
+poplib.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/movemail/.Sanitize b/src/appl/movemail/.Sanitize
new file mode 100644
index 0000000000..7146ae17da
--- /dev/null
+++ b/src/appl/movemail/.Sanitize
@@ -0,0 +1,37 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+movemail.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/popper/.Sanitize b/src/appl/popper/.Sanitize
new file mode 100644
index 0000000000..112edef27b
--- /dev/null
+++ b/src/appl/popper/.Sanitize
@@ -0,0 +1,70 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+README
+Release.Notes
+configure
+configure.in
+mh-6.8.patch
+orig-makefiles
+pop3.rfc1081
+pop3e.rfc1082
+pop_dele.c
+pop_dropcopy.c
+pop_dropinfo.c
+pop_enter.c
+pop_get_command.c
+pop_get_subcommand.c
+pop_init.c
+pop_last.c
+pop_list.c
+pop_log.c
+pop_lower.c
+pop_msg.c
+pop_parse.c
+pop_pass.c
+pop_quit.c
+pop_rset.c
+pop_send.c
+pop_stat.c
+pop_updt.c
+pop_user.c
+pop_xmit.c
+pop_xtnd.c
+popper.M
+popper.c
+popper.h
+syslog_levels
+version.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/popper/orig-makefiles/.Sanitize b/src/appl/popper/orig-makefiles/.Sanitize
new file mode 100644
index 0000000000..9030cf5e32
--- /dev/null
+++ b/src/appl/popper/orig-makefiles/.Sanitize
@@ -0,0 +1,33 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+Makefile
+Makefile.krb_passwd_hack
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/sample/.Sanitize b/src/appl/sample/.Sanitize
new file mode 100644
index 0000000000..335f5ed3f9
--- /dev/null
+++ b/src/appl/sample/.Sanitize
@@ -0,0 +1,39 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+sample.h
+sclient
+sserver
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/sample/sclient/.Sanitize b/src/appl/sample/sclient/.Sanitize
new file mode 100644
index 0000000000..d34f936e0e
--- /dev/null
+++ b/src/appl/sample/sclient/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+sclient.M
+sclient.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/sample/sserver/.Sanitize b/src/appl/sample/sserver/.Sanitize
new file mode 100644
index 0000000000..da0dcd0500
--- /dev/null
+++ b/src/appl/sample/sserver/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+sserver.M
+sserver.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/simple/.Sanitize b/src/appl/simple/.Sanitize
new file mode 100644
index 0000000000..838f9480fc
--- /dev/null
+++ b/src/appl/simple/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+Makefile.in
+client
+configure
+configure.in
+server
+simple.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/simple/client/.Sanitize b/src/appl/simple/client/.Sanitize
new file mode 100644
index 0000000000..67a3f61304
--- /dev/null
+++ b/src/appl/simple/client/.Sanitize
@@ -0,0 +1,37 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+sim_client.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/simple/server/.Sanitize b/src/appl/simple/server/.Sanitize
new file mode 100644
index 0000000000..fa837442ad
--- /dev/null
+++ b/src/appl/simple/server/.Sanitize
@@ -0,0 +1,37 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+sim_server.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/telnet/.Sanitize b/src/appl/telnet/.Sanitize
new file mode 100644
index 0000000000..72a66203f0
--- /dev/null
+++ b/src/appl/telnet/.Sanitize
@@ -0,0 +1,47 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Config.generic
+Makefile.in
+Makefile.orig
+README
+arpa
+configure
+configure.in
+kern.diff
+libtelnet
+stty.diff
+telnet
+telnet.state
+telnetd
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/telnet/arpa/.Sanitize b/src/appl/telnet/arpa/.Sanitize
new file mode 100644
index 0000000000..e5eeb8f68f
--- /dev/null
+++ b/src/appl/telnet/arpa/.Sanitize
@@ -0,0 +1,32 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+telnet.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/telnet/libtelnet/.Sanitize b/src/appl/telnet/libtelnet/.Sanitize
new file mode 100644
index 0000000000..35ba8d9ecf
--- /dev/null
+++ b/src/appl/telnet/libtelnet/.Sanitize
@@ -0,0 +1,73 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.4.4
+Makefile.generic
+Makefile.in
+Makefile.orig
+auth-proto.h
+auth.c
+auth.h
+configure
+configure.in
+enc-proto.h
+enc_des.c
+encrypt.c
+encrypt.h
+forward.c
+genget.c
+getent.c
+getopt.c
+gettytab.c
+gettytab.h
+herror.c
+kerberos.c
+kerberos5.c
+key-proto.h
+krb4encpwd.c
+mem.c
+misc-proto.h
+misc.c
+misc.h
+parsetos.c
+read_password.c
+rsaencpwd.c
+setenv.c
+setsid.c
+spx.c
+strcasecmp.c
+strchr.c
+strdup.c
+strerror.c
+strftime.c
+strrchr.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/telnet/telnet/.Sanitize b/src/appl/telnet/telnet/.Sanitize
new file mode 100644
index 0000000000..d9ba4ac973
--- /dev/null
+++ b/src/appl/telnet/telnet/.Sanitize
@@ -0,0 +1,59 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.4.4
+Makefile.generic
+Makefile.in
+Makefile.orig
+authenc.c
+commands.c
+configure
+configure.in
+defines.h
+externs.h
+fdset.h
+general.h
+main.c
+network.c
+ring.c
+ring.h
+sys_bsd.c
+telnet.0.ps
+telnet.0.txt
+telnet.1
+telnet.c
+terminal.c
+tmac.doc
+tn3270.c
+types.h
+utilities.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/telnet/telnetd/.Sanitize b/src/appl/telnet/telnetd/.Sanitize
new file mode 100644
index 0000000000..0eb1aca5a5
--- /dev/null
+++ b/src/appl/telnet/telnetd/.Sanitize
@@ -0,0 +1,55 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.4.4
+Makefile.generic
+Makefile.in
+Makefile.orig
+authenc.c
+configure
+configure.in
+defs.h
+ext.h
+global.c
+pathnames.h
+slc.c
+state.c
+sys_term.c
+telnetd-ktd.c
+telnetd.0.ps
+telnetd.0.txt
+telnetd.8
+telnetd.c
+telnetd.h
+termstat.c
+utility.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/user_user/.Sanitize b/src/appl/user_user/.Sanitize
new file mode 100644
index 0000000000..f5bedf4317
--- /dev/null
+++ b/src/appl/user_user/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+client.c
+configure
+configure.in
+server.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/appl/zmailnotify/.Sanitize b/src/appl/zmailnotify/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/appl/zmailnotify/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/autotools/.Sanitize b/src/autotools/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/autotools/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/clients/.Sanitize b/src/clients/.Sanitize
new file mode 100644
index 0000000000..5caddf1af0
--- /dev/null
+++ b/src/clients/.Sanitize
@@ -0,0 +1,40 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kdestroy
+kinit
+klist
+ksu
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/clients/kdestroy/.Sanitize b/src/clients/kdestroy/.Sanitize
new file mode 100644
index 0000000000..951b5e67d8
--- /dev/null
+++ b/src/clients/kdestroy/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kdestroy.M
+kdestroy.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/clients/kinit/.Sanitize b/src/clients/kinit/.Sanitize
new file mode 100644
index 0000000000..9b66652c60
--- /dev/null
+++ b/src/clients/kinit/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kinit.M
+kinit.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/clients/klist/.Sanitize b/src/clients/klist/.Sanitize
new file mode 100644
index 0000000000..585d1da170
--- /dev/null
+++ b/src/clients/klist/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+klist.M
+klist.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/clients/ksu/.Sanitize b/src/clients/ksu/.Sanitize
new file mode 100644
index 0000000000..2d3c58a9b6
--- /dev/null
+++ b/src/clients/ksu/.Sanitize
@@ -0,0 +1,44 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+authorization.c
+ccache.c
+configure
+configure.in
+heuristic.c
+krb_auth_su.c
+ksu.1
+ksu.M
+ksu.h
+main.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/config-files/.Sanitize b/src/config-files/.Sanitize
new file mode 100644
index 0000000000..891a34fce3
--- /dev/null
+++ b/src/config-files/.Sanitize
@@ -0,0 +1,36 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+krb.conf
+krb.conf.M
+krb.realms
+krb.realms.M
+services.append
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/config/.Sanitize b/src/config/.Sanitize
new file mode 100644
index 0000000000..4bffe6dd56
--- /dev/null
+++ b/src/config/.Sanitize
@@ -0,0 +1,43 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+ChangeLog
+doc
+install-sh
+mac-config.README
+mac-config.cache
+mac-mf.sed
+mac-post.in
+mac-pre.in
+post.in
+pre.in
+rm.bat
+windows.in
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/config/doc/.Sanitize b/src/config/doc/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/config/doc/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/include/.Sanitize b/src/include/.Sanitize
new file mode 100644
index 0000000000..fa2c7b4002
--- /dev/null
+++ b/src/include/.Sanitize
@@ -0,0 +1,46 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+bsdlib.h
+bstring.h
+configure
+configure.in
+fake-stdlib.h
+k5-int.h
+kerberosIV
+krb5
+krb5.h
+sys
+syslog.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/include/kerberosIV/.Sanitize b/src/include/kerberosIV/.Sanitize
new file mode 100644
index 0000000000..c952b85e53
--- /dev/null
+++ b/src/include/kerberosIV/.Sanitize
@@ -0,0 +1,68 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+addr_comp.h
+admin_server.h
+conf-bsd386i.h
+conf-bsdapollo.h
+conf-bsdibm032.h
+conf-bsdm68k.h
+conf-bsdsparc.h
+conf-bsdtahoe.h
+conf-bsdvax.h
+conf-ibm370.h
+conf-pc.h
+conf-pyr.h
+conf-ultmips2.h
+conf.h
+configure
+configure.in
+des.h
+des_conf.h
+highc.h
+kadm.h
+kdc.h
+klog.h
+kparse.h
+krb.h
+krb4-proto.h
+krb_conf.h
+krb_db.h
+krb_err.h
+lsb_addr_comp.h
+mit-copyright.h
+osconf.h
+passwd_server.h
+principal.h
+prot.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/include/krb5/.Sanitize b/src/include/krb5/.Sanitize
new file mode 100644
index 0000000000..933d77a558
--- /dev/null
+++ b/src/include/krb5/.Sanitize
@@ -0,0 +1,76 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+AddressXlation.h
+ChangeLog
+GetMyIPAddr.h
+MacTCPCommonTypes.h
+Makefile.in
+TCPPB.h
+UDPPB.h
+adm_defs.h
+asn.1
+asn1.h
+autoconf.h.in
+base-defs.h
+ccache.h
+configure
+configure.in
+copyright.h
+dbm.h
+encryption.h
+error_def.h
+ext-proto.h
+fieldbits.h
+func-proto.h
+hostaddr.h
+k5-config.h
+k5-errors.h
+k5-free.h
+kdb.h
+kdb_dbm.h
+keytab.h
+libos.h
+los-proto.h
+macros.h
+macsock.h
+mit-des.h
+preauth.h
+proto.h
+rcache.h
+rsa-md5.h
+safepriv.h
+stock
+sysincl.h
+winsock.h
+wordsize.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/include/krb5/asn.1/.Sanitize b/src/include/krb5/asn.1/.Sanitize
new file mode 100644
index 0000000000..f46d2557d8
--- /dev/null
+++ b/src/include/krb5/asn.1/.Sanitize
@@ -0,0 +1,32 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.rconf
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/include/krb5/stock/.Sanitize b/src/include/krb5/stock/.Sanitize
new file mode 100644
index 0000000000..9a91ab33a8
--- /dev/null
+++ b/src/include/krb5/stock/.Sanitize
@@ -0,0 +1,33 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+ChangeLog
+osconf.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/include/sys/.Sanitize b/src/include/sys/.Sanitize
new file mode 100644
index 0000000000..5aa9eca0c4
--- /dev/null
+++ b/src/include/sys/.Sanitize
@@ -0,0 +1,33 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+ChangeLog
+syslog.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/isode/.Sanitize b/src/isode/.Sanitize
new file mode 100644
index 0000000000..3db6b04c24
--- /dev/null
+++ b/src/isode/.Sanitize
@@ -0,0 +1,37 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+compat
+h
+pepsy
+psap
+support
+util
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/isode/compat/.Sanitize b/src/isode/compat/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/isode/compat/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/isode/h/.Sanitize b/src/isode/h/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/isode/h/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/isode/pepsy/.Sanitize b/src/isode/pepsy/.Sanitize
new file mode 100644
index 0000000000..871294b9f3
--- /dev/null
+++ b/src/isode/pepsy/.Sanitize
@@ -0,0 +1,32 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+doc
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/isode/pepsy/doc/.Sanitize b/src/isode/pepsy/doc/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/isode/pepsy/doc/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/isode/psap/.Sanitize b/src/isode/psap/.Sanitize
new file mode 100644
index 0000000000..ac4eb8f3ea
--- /dev/null
+++ b/src/isode/psap/.Sanitize
@@ -0,0 +1,32 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+test
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/isode/psap/test/.Sanitize b/src/isode/psap/test/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/isode/psap/test/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/isode/support/.Sanitize b/src/isode/support/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/isode/support/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/isode/util/.Sanitize b/src/isode/util/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/isode/util/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/kadmin.new/.Sanitize b/src/kadmin.new/.Sanitize
new file mode 100644
index 0000000000..77a451f938
--- /dev/null
+++ b/src/kadmin.new/.Sanitize
@@ -0,0 +1,32 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+client
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/kadmin.new/client/.Sanitize b/src/kadmin.new/client/.Sanitize
new file mode 100644
index 0000000000..ae2ce5e5e2
--- /dev/null
+++ b/src/kadmin.new/client/.Sanitize
@@ -0,0 +1,43 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+getdate.y
+kadmin.c
+kadmin_ct.ct
+memmove.c
+setenv.c
+ss_wrapper.c
+strftime.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/kadmin/.Sanitize b/src/kadmin/.Sanitize
new file mode 100644
index 0000000000..a27eed5fa2
--- /dev/null
+++ b/src/kadmin/.Sanitize
@@ -0,0 +1,39 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+Makefile.in
+client
+configure
+configure.in
+kpasswd
+server
+v4server
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/kadmin/client/.Sanitize b/src/kadmin/client/.Sanitize
new file mode 100644
index 0000000000..6aad222d52
--- /dev/null
+++ b/src/kadmin/client/.Sanitize
@@ -0,0 +1,47 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kadmin.M
+kadmin.c
+kadmin_add.c
+kadmin_adr.c
+kadmin_cpr.c
+kadmin_cpw.c
+kadmin_del.c
+kadmin_done.c
+kadmin_inq.c
+kadmin_mod.c
+kadmin_msnd.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/kadmin/kpasswd/.Sanitize b/src/kadmin/kpasswd/.Sanitize
new file mode 100644
index 0000000000..5975c4d0ab
--- /dev/null
+++ b/src/kadmin/kpasswd/.Sanitize
@@ -0,0 +1,39 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kpasswd.M
+kpasswd.c
+networked.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/kadmin/server/.Sanitize b/src/kadmin/server/.Sanitize
new file mode 100644
index 0000000000..6377185063
--- /dev/null
+++ b/src/kadmin/server/.Sanitize
@@ -0,0 +1,54 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+adm_adm_func.c
+adm_check.c
+adm_extern.c
+adm_extern.h
+adm_fmt_inq.c
+adm_funcs.c
+adm_kadmin.c
+adm_kpasswd.c
+adm_listen.c
+adm_msgs.c
+adm_nego.c
+adm_network.c
+adm_parse.c
+adm_process.c
+adm_server.c
+adm_v4_pwd.c
+admin_acl_file
+configure
+configure.in
+kadmind.M
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/kadmin/v4server/.Sanitize b/src/kadmin/v4server/.Sanitize
new file mode 100644
index 0000000000..7568d4d0f6
--- /dev/null
+++ b/src/kadmin/v4server/.Sanitize
@@ -0,0 +1,46 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+acl_files.c
+acl_files.doc
+admin_server.c
+configure
+configure.in
+kadm_err.et
+kadm_funcs.c
+kadm_ser_wrap.c
+kadm_server.c
+kadm_server.h
+kadm_stream.c
+kadm_supp.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/kdc/.Sanitize b/src/kdc/.Sanitize
new file mode 100644
index 0000000000..d031afd629
--- /dev/null
+++ b/src/kdc/.Sanitize
@@ -0,0 +1,57 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+.saberinit
+ChangeLog
+Makefile.in
+configure
+configure.in
+dispatch.c
+do_as_req.c
+do_tgs_req.c
+extern.c
+extern.h
+kdc5_err.et
+kdc_util.c
+kdc_util.h
+kerberos_v4.c
+krb5kdc.M
+main.c
+migration.doc
+network.c
+policy.c
+policy.h
+replay.c
+rtest.c
+rtest.good
+rtscript
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/krb524/.Sanitize b/src/krb524/.Sanitize
new file mode 100644
index 0000000000..4ca5a6378b
--- /dev/null
+++ b/src/krb524/.Sanitize
@@ -0,0 +1,50 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+ChangeLog
+Makefile
+README
+RELEASE_NOTES
+cnv_tkt_skey.c
+conv_creds.c
+conv_princ.c
+conv_tkt.c
+encode.c
+getcred.c
+globals.c
+k524init.c
+krb524.h
+krb524_err.et
+krb524_prot
+krb524d.c
+misc.c
+sendmsg.c
+test.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/.Sanitize b/src/lib/.Sanitize
new file mode 100644
index 0000000000..7c52b65665
--- /dev/null
+++ b/src/lib/.Sanitize
@@ -0,0 +1,54 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+configure
+configure.in
+crypto
+des425
+exports.crypto
+exports.des425
+exports.kdb5
+exports.krb5
+glue4.c
+gssapi
+gssapi.def
+kdb
+krb425
+krb5
+krb5.saber.source
+krb5.saber.warnings
+libkrb5.def
+win_glue.c
+winsock.def
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/.Sanitize b/src/lib/crypto/.Sanitize
new file mode 100644
index 0000000000..f1f08c0420
--- /dev/null
+++ b/src/lib/crypto/.Sanitize
@@ -0,0 +1,45 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+crc32
+cryptoconf.c
+des
+des_crc.c
+des_md5.c
+md4
+md5
+os
+raw_des.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/crc32/.Sanitize b/src/lib/crypto/crc32/.Sanitize
new file mode 100644
index 0000000000..056f83445c
--- /dev/null
+++ b/src/lib/crypto/crc32/.Sanitize
@@ -0,0 +1,40 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+crc-32.h
+crc-test
+crc.c
+crctest.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/des/.Sanitize b/src/lib/crypto/des/.Sanitize
new file mode 100644
index 0000000000..9767f91275
--- /dev/null
+++ b/src/lib/crypto/des/.Sanitize
@@ -0,0 +1,64 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+FUNCTIONS
+Makefile.in
+cbc_cksum.c
+configure
+configure.in
+cs_entry.c
+des.h
+des_int.h
+destest.c
+doc
+f_README
+f_cbc.c
+f_cksum.c
+f_ecb.c
+f_parity.c
+f_pcbc.c
+f_sched.c
+f_tables.c
+f_tables.h
+fin_rndkey.c
+finish_key.c
+init_rkey.c
+key_sched.c
+keytest.data
+new_rn_key.c
+process_ky.c
+random_key.c
+string2key.c
+verify.c
+weak_key.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/des/doc/.Sanitize b/src/lib/crypto/des/doc/.Sanitize
new file mode 100644
index 0000000000..ea26924283
--- /dev/null
+++ b/src/lib/crypto/des/doc/.Sanitize
@@ -0,0 +1,32 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+libdes.doc
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/md4/.Sanitize b/src/lib/crypto/md4/.Sanitize
new file mode 100644
index 0000000000..d2e49c1028
--- /dev/null
+++ b/src/lib/crypto/md4/.Sanitize
@@ -0,0 +1,42 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+configure
+configure.in
+md4.c
+md4crypto.c
+md4driver.c
+md4glue.c
+rsa-md4.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/md5/.Sanitize b/src/lib/crypto/md5/.Sanitize
new file mode 100644
index 0000000000..d8cfea6f09
--- /dev/null
+++ b/src/lib/crypto/md5/.Sanitize
@@ -0,0 +1,40 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+md5.c
+md5crypto.c
+md5glue.c
+t_mddriver.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/os/.Sanitize b/src/lib/crypto/os/.Sanitize
new file mode 100644
index 0000000000..243bd15a80
--- /dev/null
+++ b/src/lib/crypto/os/.Sanitize
@@ -0,0 +1,37 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+rnd_confoun.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/des425/.Sanitize b/src/lib/des425/.Sanitize
new file mode 100644
index 0000000000..391c1a7434
--- /dev/null
+++ b/src/lib/des425/.Sanitize
@@ -0,0 +1,52 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+cksum.c
+configure
+configure.in
+des.c
+des.h
+enc_dec.c
+key_parity.c
+key_sched.c
+new_rnd_key.c
+pcbc_encrypt.c
+quad_cksum.c
+random_key.c
+read_passwd.c
+str_to_key.c
+string2key.c
+unix_time.c
+verify.c
+weak_key.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/gssapi/.Sanitize b/src/lib/gssapi/.Sanitize
new file mode 100644
index 0000000000..9689b70e75
--- /dev/null
+++ b/src/lib/gssapi/.Sanitize
@@ -0,0 +1,41 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+Makefile.original
+README_SAMPLE_APP
+configure
+configure.in
+generic
+krb5
+sample
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/gssapi/generic/.Sanitize b/src/lib/gssapi/generic/.Sanitize
new file mode 100644
index 0000000000..dc4d5312f7
--- /dev/null
+++ b/src/lib/gssapi/generic/.Sanitize
@@ -0,0 +1,53 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+Makefile.original
+configure
+configure.in
+disp_com_err_status.c
+disp_major_status.c
+gssapi.h
+gssapiP_generic.h
+gssapi_err_generic.et
+gssapi_generic.c
+gssapi_generic.h
+rel_buffer.c
+rel_oid_set.c
+util_buffer.c
+util_canonhost.c
+util_dup.c
+util_oid.c
+util_token.c
+util_validate.c
+utl_nohash_validate.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/gssapi/krb5/.Sanitize b/src/lib/gssapi/krb5/.Sanitize
new file mode 100644
index 0000000000..f23990b53b
--- /dev/null
+++ b/src/lib/gssapi/krb5/.Sanitize
@@ -0,0 +1,68 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+Makefile.original
+accept_sec_context.c
+acquire_cred.c
+compare_name.c
+configure
+configure.in
+context_time.c
+delete_sec_context.c
+disp_name.c
+disp_status.c
+get_tkt_flags.c
+gssapiP_krb5.h
+gssapi_err_krb5.et
+gssapi_krb5.c
+gssapi_krb5.h
+import_name.c
+indicate_mechs.c
+init_sec_context.c
+inq_context.c
+inq_cred.c
+k5seal.c
+k5unseal.c
+krb5_gss_glue.c
+process_context_token.c
+rel_cred.c
+rel_name.c
+seal.c
+sign.c
+unseal.c
+util_cksum.c
+util_crypt.c
+util_seed.c
+util_seqnum.c
+verify.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/gssapi/sample/.Sanitize b/src/lib/gssapi/sample/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/lib/gssapi/sample/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/kdb/.Sanitize b/src/lib/kdb/.Sanitize
new file mode 100644
index 0000000000..033818fbb3
--- /dev/null
+++ b/src/lib/kdb/.Sanitize
@@ -0,0 +1,45 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+decrypt_key.c
+encrypt_key.c
+fetch_mkey.c
+kdb_compat.h
+kdb_dbm.c
+kdbint.h
+setup_mkey.c
+store_mkey.c
+verify_mky.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb425/.Sanitize b/src/lib/krb425/.Sanitize
new file mode 100644
index 0000000000..1a2884634e
--- /dev/null
+++ b/src/lib/krb425/.Sanitize
@@ -0,0 +1,60 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+425data.c
+425error.c
+ChangeLog
+Makefile.in
+configure
+configure.in
+des_sched.c
+get_cred.c
+get_krbhst.c
+get_lrealm.c
+get_phost.c
+kn_parse.c
+kntoln.c
+krb425.h
+krb_err.et
+kuserok.c
+mk_priv.c
+mk_req.c
+mk_safe.c
+net_read.c
+net_write.c
+rd_priv.c
+rd_req.c
+rd_safe.c
+realmhost.c
+recvauth.c
+sendauth.c
+set_key.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/.Sanitize b/src/lib/krb5/.Sanitize
new file mode 100644
index 0000000000..9858cf32a8
--- /dev/null
+++ b/src/lib/krb5/.Sanitize
@@ -0,0 +1,45 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+asn.1
+ccache
+configure
+configure.in
+error_tables
+free
+keytab
+krb
+os
+posix
+rcache
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/asn.1/.Sanitize b/src/lib/krb5/asn.1/.Sanitize
new file mode 100644
index 0000000000..19c57cc9a0
--- /dev/null
+++ b/src/lib/krb5/asn.1/.Sanitize
@@ -0,0 +1,60 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+.saberinit
+ChangeLog
+KRB5-asn.py
+Makefile.in
+asn1_decode.c
+asn1_decode.h
+asn1_encode.c
+asn1_encode.h
+asn1_get.c
+asn1_get.h
+asn1_k_decode.c
+asn1_k_decode.h
+asn1_k_encode.c
+asn1_k_encode.h
+asn1_make.c
+asn1_make.h
+asn1_misc.c
+asn1_misc.h
+asn1buf.c
+asn1buf.h
+asn1glue.h
+configure
+configure.in
+glue2.c
+krb5_decode.c
+krb5_encode.c
+krbasn1.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/ccache/.Sanitize b/src/lib/krb5/ccache/.Sanitize
new file mode 100644
index 0000000000..a1481d1e72
--- /dev/null
+++ b/src/lib/krb5/ccache/.Sanitize
@@ -0,0 +1,41 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+ccbase.c
+ccdefault.c
+ccdefops.c
+configure
+configure.in
+file
+stdio
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/ccache/file/.Sanitize b/src/lib/krb5/ccache/file/.Sanitize
new file mode 100644
index 0000000000..60ca4f2d2e
--- /dev/null
+++ b/src/lib/krb5/ccache/file/.Sanitize
@@ -0,0 +1,62 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+README
+configure
+configure.in
+fcc-proto.h
+fcc.h
+fcc_close.c
+fcc_defops.c
+fcc_destry.c
+fcc_errs.c
+fcc_eseq.c
+fcc_gennew.c
+fcc_getnam.c
+fcc_gprin.c
+fcc_init.c
+fcc_maybe.c
+fcc_nseq.c
+fcc_ops.c
+fcc_read.c
+fcc_reslv.c
+fcc_retrv.c
+fcc_sflags.c
+fcc_skip.c
+fcc_sseq.c
+fcc_store.c
+fcc_test.c
+fcc_write.c
+todo
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/ccache/stdio/.Sanitize b/src/lib/krb5/ccache/stdio/.Sanitize
new file mode 100644
index 0000000000..6788c91d28
--- /dev/null
+++ b/src/lib/krb5/ccache/stdio/.Sanitize
@@ -0,0 +1,62 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+README
+configure
+configure.in
+scc-proto.h
+scc.h
+scc_close.c
+scc_defops.c
+scc_destry.c
+scc_errs.c
+scc_eseq.c
+scc_gennew.c
+scc_getnam.c
+scc_gprin.c
+scc_init.c
+scc_maybe.c
+scc_nseq.c
+scc_ops.c
+scc_read.c
+scc_reslv.c
+scc_retrv.c
+scc_sflags.c
+scc_skip.c
+scc_sseq.c
+scc_store.c
+scc_test.c
+scc_write.c
+todo
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/error_tables/.Sanitize b/src/lib/krb5/error_tables/.Sanitize
new file mode 100644
index 0000000000..b9521624e1
--- /dev/null
+++ b/src/lib/krb5/error_tables/.Sanitize
@@ -0,0 +1,43 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+adm_err.et
+asn1_err.et
+configure
+configure.in
+init_ets.c
+kdb5_err.et
+krb5_err.et
+kv5m_err.et
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/free/.Sanitize b/src/lib/krb5/free/.Sanitize
new file mode 100644
index 0000000000..0f23017a13
--- /dev/null
+++ b/src/lib/krb5/free/.Sanitize
@@ -0,0 +1,67 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+f_addr.c
+f_address.c
+f_ap_rep.c
+f_ap_req.c
+f_arep_enc.c
+f_auth_cnt.c
+f_authdata.c
+f_authent.c
+f_chksum.c
+f_cred.c
+f_cred_cnt.c
+f_cred_enc.c
+f_creds.c
+f_enc_kdc.c
+f_enc_tkt.c
+f_error.c
+f_kdc_rp.c
+f_kdc_rq.c
+f_keyblock.c
+f_last_req.c
+f_padata.c
+f_princ.c
+f_priv.c
+f_priv_enc.c
+f_pwd_data.c
+f_pwd_seq.c
+f_safe.c
+f_tckt.c
+f_tckts.c
+f_tgt_cred.c
+f_tkt_auth.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/keytab/.Sanitize b/src/lib/krb5/keytab/.Sanitize
new file mode 100644
index 0000000000..b9e0b55aa1
--- /dev/null
+++ b/src/lib/krb5/keytab/.Sanitize
@@ -0,0 +1,43 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+file
+ktadd.c
+ktbase.c
+ktdefault.c
+ktfr_entry.c
+ktremove.c
+read_servi.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/keytab/file/.Sanitize b/src/lib/krb5/keytab/file/.Sanitize
new file mode 100644
index 0000000000..4851eb8ccf
--- /dev/null
+++ b/src/lib/krb5/keytab/file/.Sanitize
@@ -0,0 +1,51 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+ktf_add.c
+ktf_close.c
+ktf_defops.c
+ktf_endget.c
+ktf_g_ent.c
+ktf_g_name.c
+ktf_next.c
+ktf_ops.c
+ktf_remove.c
+ktf_resolv.c
+ktf_ssget.c
+ktf_util.c
+ktf_wops.c
+ktf_wreslv.c
+ktfile.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/krb/.Sanitize b/src/lib/krb5/krb/.Sanitize
new file mode 100644
index 0000000000..3359db33e3
--- /dev/null
+++ b/src/lib/krb5/krb/.Sanitize
@@ -0,0 +1,103 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+addr_comp.c
+addr_order.c
+addr_srch.c
+auth_con.c
+auth_con.h
+bld_pr_ext.c
+bld_princ.c
+chk_trans.c
+compat_recv.c
+configure
+configure.in
+conv_princ.c
+copy_addrs.c
+copy_athctr.c
+copy_auth.c
+copy_cksum.c
+copy_creds.c
+copy_data.c
+copy_key.c
+copy_princ.c
+copy_tick.c
+cp_key_cnt.c
+decode_kdc.c
+decrypt_tk.c
+encode_kdc.c
+encrypt_tk.c
+faddr_ordr.c
+free_rtree.c
+gc_2tgt.c
+gc_frm_kdc.c
+gc_via_tgt.c
+gen_seqnum.c
+gen_subkey.c
+get_creds.c
+get_fcreds.c
+get_in_tkt.c
+in_tkt_ktb.c
+in_tkt_pwd.c
+in_tkt_sky.c
+init_ctx.c
+int-proto.h
+kdc_rep_dc.c
+krbconfig.c
+mk_cred.c
+mk_error.c
+mk_priv.c
+mk_rep.c
+mk_req.c
+mk_req_ext.c
+mk_safe.c
+parse.c
+pr_to_salt.c
+preauth.c
+princ_comp.c
+rd_cred.c
+rd_error.c
+rd_priv.c
+rd_rep.c
+rd_req.c
+rd_req_dec.c
+rd_safe.c
+recvauth.c
+send_tgs.c
+sendauth.c
+srv_rcache.c
+t_walk_rtree.c
+tgtname.c
+unparse.c
+walk_rtree.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/os/.Sanitize b/src/lib/krb5/os/.Sanitize
new file mode 100644
index 0000000000..913354c2a0
--- /dev/null
+++ b/src/lib/krb5/os/.Sanitize
@@ -0,0 +1,70 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+DNR.c
+Makefile.in
+an_to_ln.c
+ccdefname.c
+configure
+configure.in
+def_realm.c
+free_hstrl.c
+free_krbhs.c
+full_ipadr.c
+gen_port.c
+gen_rname.c
+get_krbhst.c
+gmt_mktime.c
+hst_realm.c
+init_os_ctx.c
+krbfileio.c
+ktdefname.c
+kuserok.c
+localaddr.c
+locate_kdc.c
+lock_file.c
+macsock.c
+net_read.c
+net_write.c
+os-proto.h
+osconfig.c
+port2ip.c
+read_msg.c
+read_pwd.c
+realm_dom.c
+sendto_kdc.c
+sn2princ.c
+timeofday.c
+unlck_file.c
+ustime.c
+write_msg.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/posix/.Sanitize b/src/lib/krb5/posix/.Sanitize
new file mode 100644
index 0000000000..3026bc53f5
--- /dev/null
+++ b/src/lib/krb5/posix/.Sanitize
@@ -0,0 +1,45 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+daemon.c
+getuid.c
+memmove.c
+strcasecmp.c
+strdup.c
+strerror.c
+syslog.c
+vfprintf.c
+vsprintf.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/rcache/.Sanitize b/src/lib/krb5/rcache/.Sanitize
new file mode 100644
index 0000000000..8015627ee3
--- /dev/null
+++ b/src/lib/krb5/rcache/.Sanitize
@@ -0,0 +1,47 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+README
+RELEASE
+configure
+configure.in
+rc_base.c
+rc_base.h
+rc_conv.c
+rc_dfl.c
+rc_dfl.h
+rc_io.c
+rc_io.h
+rcdef.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/mac/.Sanitize b/src/mac/.Sanitize
new file mode 100644
index 0000000000..778c44ef1e
--- /dev/null
+++ b/src/mac/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/prototype/.Sanitize b/src/prototype/.Sanitize
new file mode 100644
index 0000000000..318b37e786
--- /dev/null
+++ b/src/prototype/.Sanitize
@@ -0,0 +1,34 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+getopt.c
+prototype.c
+prototype.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/slave/.Sanitize b/src/slave/.Sanitize
new file mode 100644
index 0000000000..cc66e2e2fc
--- /dev/null
+++ b/src/slave/.Sanitize
@@ -0,0 +1,42 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+kprop.M
+kprop.c
+kprop.h
+kpropd.M
+kpropd.c
+kslave_update
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/tests/.Sanitize b/src/tests/.Sanitize
new file mode 100644
index 0000000000..2e92cc4e63
--- /dev/null
+++ b/src/tests/.Sanitize
@@ -0,0 +1,44 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Imakefile
+Makefile.in
+asn.1
+configure
+configure.in
+create
+dump.c
+hammer
+resolve
+test1.c
+verify
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/tests/asn.1/.Sanitize b/src/tests/asn.1/.Sanitize
new file mode 100644
index 0000000000..1710e358c1
--- /dev/null
+++ b/src/tests/asn.1/.Sanitize
@@ -0,0 +1,49 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+README
+configure
+configure.in
+debug.h
+krb5_decode_test.c
+krb5_encode_test.c
+ktest.c
+ktest.h
+ktest_equal.c
+ktest_equal.h
+reference_encode.out
+trval.c
+trval_reference.out
+utility.c
+utility.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/tests/create/.Sanitize b/src/tests/create/.Sanitize
new file mode 100644
index 0000000000..1e4298a4a6
--- /dev/null
+++ b/src/tests/create/.Sanitize
@@ -0,0 +1,39 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Imakefile
+Makefile.in
+configure
+configure.in
+kdb5_mkdums.M
+kdb5_mkdums.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/tests/hammer/.Sanitize b/src/tests/hammer/.Sanitize
new file mode 100644
index 0000000000..020552d4d7
--- /dev/null
+++ b/src/tests/hammer/.Sanitize
@@ -0,0 +1,39 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Imakefile
+Makefile.in
+configure
+configure.in
+kdc5_hammer.c
+pp.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/tests/resolve/.Sanitize b/src/tests/resolve/.Sanitize
new file mode 100644
index 0000000000..7063a2b677
--- /dev/null
+++ b/src/tests/resolve/.Sanitize
@@ -0,0 +1,36 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+Makefile.in
+configure
+configure.in
+resolve.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/tests/verify/.Sanitize b/src/tests/verify/.Sanitize
new file mode 100644
index 0000000000..de15c615e0
--- /dev/null
+++ b/src/tests/verify/.Sanitize
@@ -0,0 +1,39 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Imakefile
+Makefile.in
+configure
+configure.in
+kdb5_verify.c
+pkey.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/.Sanitize b/src/util/.Sanitize
new file mode 100644
index 0000000000..114171be2f
--- /dev/null
+++ b/src/util/.Sanitize
@@ -0,0 +1,47 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+Sanitize
+autoconf
+configure
+configure.in
+et
+kbuild
+kfrags
+libupdate.sh
+lndir
+makedepend
+reconf
+ss
+unifdef
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/Sanitize b/src/util/Sanitize
new file mode 100644
index 0000000000..ffe6e487fe
--- /dev/null
+++ b/src/util/Sanitize
@@ -0,0 +1,418 @@
+#! /bin/sh
+### Sanitize -- remove the unclean bits from a distribution or a file
+### (perhaps this should be called an Exorcist?)
+###
+### See the file Sanitize.texi for whatever sort of documentation this
+### program has.
+###
+### Usage: Sanitize [keep-cvs] [keep-sanitize] [test] [recover] [verbose] [-n] ...
+### Note that the highest level Sanitize command-line may have arbitrary
+### other options, which have meaning only within some `Do-first' or
+### `Do-last' script fragment.
+###
+### The -n option, like make's -n option, simply shows you what the
+### script *would have* done, given the other parameters you've passed
+### to it. No actions are taken except traversal of the directory tree.
+###
+### written by K. Richard Pixley, hacked by david d `zoo' zuhn
+### -n option, lots of comments added by Bill Cox
+###
+
+SHELL=/bin/sh ; export SHELL
+
+## We have three cases:
+## The path given was absolute
+## action: just keep it
+## The name had a relative path
+## action: make it absolute.
+## The name had no directory components and was path searched
+## action: just keep it, since the path search will *still* work
+
+case $0 in
+/*) sanprog=$0 ;;
+*/*)
+ sanprog=$0
+ sandir=`dirname $sanprog`
+ sandir=`(cd $sandir; pwd)`
+ sanprog=$sandir/`basename $sanprog`
+ ;;
+*) sanprog=$0 ;;
+esac
+
+### "debugger"
+#set -x
+
+### Some variables and temp files; remove on any exit.
+
+workdir=/tmp
+cleaned=${workdir}/$$San.clean
+keepers=${workdir}/$$San.keep
+losers=${workdir}/$$San.lose
+sandd=${workdir}/$$San.temp
+
+sanStatus=1
+trap 'rm -f ${cleaned} ${keepers} ${sandd} ${losers} ; exit $sanStatus' 0
+
+### Make sure there is a .Sanitize
+
+if [ ! -f .Sanitize ] ; then
+ echo '***' No .Sanitize file in `pwd`! 1>&2
+ exit 1
+else
+ true
+fi
+
+### check for optional things-to-lose section first
+if ( egrep '^Things-to-lose:$' < .Sanitize > /dev/null ) ; then
+ losingthings=true
+else
+ losingthings=
+fi
+
+### Check that all trigger lines exist and are in order.
+if [ -n "${losingthings}" ] ; then
+ egrep '^Do-first:$|^Things-to-keep:$|^Things-to-lose:|^Do-last:$' < .Sanitize > ${sandd}
+
+ diff ${sandd} - <<EOF
+Do-first:
+Things-to-keep:
+Things-to-lose:
+Do-last:
+EOF
+
+else
+ egrep '^Do-first:$|^Things-to-keep:$|^Do-last:$' < .Sanitize > ${sandd}
+
+ diff ${sandd} - <<EOF
+Do-first:
+Things-to-keep:
+Do-last:
+EOF
+
+fi
+
+if [ "$?" != "0" ] ; then
+ echo '***' ${sanprog}: Some required trigger lines are missing 1>&2
+ echo '***' or out-of-order in `pwd`/.Sanitize 1>&2
+ exit 1
+else
+ true
+fi
+
+### die on errors
+set -e
+
+### set verbose
+if ( echo $* | egrep verbose > /dev/null ) ; then
+ verbose=true
+else
+ verbose=
+fi
+
+### set no_action flag if '-n' set
+### The echo ... egrep sequence didn't work
+### with the leading hyphen.
+no_action=
+for opt in $*
+do
+ case $opt in
+ -n)
+ no_action=true
+ ;;
+ *)
+ ;;
+ esac
+done
+
+### cache current directory name.
+THISDIR=`pwd`
+
+### Remove comments & blank lines.
+egrep -v "^#" < .Sanitize | sed -e '/^$/d' > ${cleaned}
+
+### Do-first stuff.
+### Note that the parameters to Sanitize are also passed
+### to the fragment. The fragment may optionally set the
+### variables `keep_these_too' and `lose_these_too'.
+
+sed -e '/^Things\-to\-keep:$/,$d' -e '1d' ${cleaned} > ${sandd}
+
+if [ -s ${sandd} ] ; then
+ if [ -n "${no_action}" ] ; then
+ echo ". ${sandd} $*"
+ else
+ . ${sandd} $*
+ fi
+else
+ if [ -n "${verbose}" ] ; then
+ echo "No \`Do-first' fragment to execute."
+ else
+ true
+ fi
+fi
+
+### Things-to-keep:
+### Just build the list of keepers for now.
+sed -e '1,/^Things\-to\-keep:$/d' ${cleaned} > ${sandd}
+
+if [ -n "${losingthings}" ] ; then
+ sed -e '/^Things\-to\-lose:$/,$d' ${sandd} > ${keepers}
+else
+ sed -e '/^Do-last:$/,$d' ${sandd} > ${keepers}
+fi
+
+if [ -n "${keep_these_too}" ] ; then
+ for i in ${keep_these_too} ; do
+ if [ -n "${verbose}" ] ; then
+ echo Keeping $i
+ else
+ true
+ fi
+ echo $i >> ${keepers}
+ done
+else
+ true
+fi
+
+### Things-to-lose:
+### Just build the list of losers for now.
+if [ -n "${losingthings}" ] ; then
+ sed -e '1,/^Things\-to\-lose:$/d' \
+ -e '/^Do\-last:$/,$d' ${cleaned} \
+ > ${losers}
+else
+ cat /dev/null > ${losers}
+fi
+
+if [ -n "${lose_these_too}" ] ; then
+ for i in ${lose_these_too} ; do
+ if [ -n "${verbose}" ] ; then
+ echo Losing $i
+ else
+ true
+ fi
+ echo $i >> ${losers}
+ done
+else
+ true
+fi
+
+### catch and handle "recover"
+if ( echo $* | egrep recover > /dev/null ) ; then
+ if [ -d .Recover ] ; then
+ cd .Recover
+ replace=`ls -a | egrep -v '^\.$|^\.\.$'`
+ if [ -n "${no_action}" ] ; then
+ echo "cd .Recover"
+ echo "mv ${replace} .."
+ echo "cd .."
+ cd .. # Must also do this for real..
+ echo "rmdir .Recover"
+ else
+ if [ -n "${verbose}" ] ; then
+ echo Replacing ${replace}
+ fi
+ mv ${replace} ..
+ cd ..
+ rmdir .Recover
+ fi
+ else
+ true
+ fi
+
+ for i in `egrep -v CVS ${keepers} | egrep -v \\.Recover` ; do
+ if [ -d "$i" ] ; then
+ if [ -n "${no_action}" ] ; then
+ echo "cd $i"
+ else
+ if [ -n "${verbose}" ] ; then
+ echo Running ${sanprog} on ${THISDIR}/$i
+ else
+ true
+ fi
+ fi
+ (cd $i ; ${sanprog} $*) | sed 's/^/ /'
+ else
+ true
+ fi
+ done
+
+ sanStatus=0
+ exit 0
+else
+### catch and handle "test"
+ if ( echo $* | egrep test > /dev/null ) ; then
+ echo CVS >> ${keepers}
+ echo .Sanitize >> ${keepers}
+ echo .Recover >> ${keepers}
+# echo .cvsignore >> ${keepers}
+ if [ -n "${no_action}" ] ; then
+ echo "mkdir .Recover"
+ else
+ if [ -n "${verbose}" ] ; then
+ echo Keeping CVS, .Sanitize, .cvsignore, and .Recover
+ echo Creating ${THISDIR}/.Recover to hold unclean files...
+ else
+ true
+ fi
+ mkdir .Recover
+ fi
+ safe=safe
+ else
+### if not testing, then lose .Sanitize.
+ if [ -n "${verbose}" ] ; then
+ echo Losing .Sanitize
+ else
+ true
+ fi
+ echo .Sanitize >> ${losers}
+
+### catch and handle "keep-cvs"
+ if ( echo $* | egrep keep-cvs > /dev/null ) ; then
+ if [ -n "${verbose}" ] ; then
+ echo Keeping CVS #, .cvsignore
+ else
+ true
+ fi
+ echo CVS >> ${keepers}
+# echo .cvsignore >> ${keepers}
+ else
+ if [ -n "${verbose}" ] ; then
+ echo Losing CVS #, .cvsignore
+ else
+ true
+ fi
+ echo CVS >> ${losers}
+# echo .cvsignore >> ${losers}
+ fi
+ fi
+fi
+
+### otherwise move files away
+
+### Issue errors for explicit losers which don't exist.
+tolose=`sed -e 's/[ ]*$//' ${losers}`
+if [ -n "${tolose}" ] ; then
+ for i in ${tolose} ; do
+ if [ -f $i -o -d $i ]; then
+ if [ -n "${safe}" ] ; then
+ if [ -n "${no_action}" ] ; then
+ echo "mv $i .Recover"
+ else
+ if [ -n "${verbose}" ] ; then
+ echo Caching $i in .Recover...
+ else
+ true
+ fi
+ mv $i .Recover
+ fi
+ else
+ if [ -n "${no_action}" ] ; then
+ echo "rm -rf $i"
+ else
+ if [ -n "${verbose}" ] ; then
+ echo Removing ${THISDIR}/$i
+ else
+ true
+ fi
+ rm -rf $i
+ fi
+ fi
+ else
+ echo '***' "Can't" remove expected file/directory ${THISDIR}/$i - not found. 1>&2
+ fi
+ done
+else
+ true
+fi
+
+### lose everything else in the directory,
+### except the explicit keepers.
+
+tolose=`(ls -a | egrep -v '^\.$|^\.\.$' ; \
+ sed -e 's/[ ]*$//' ${keepers}) | sort | uniq -u`
+# $tolose is a list of files from ${keepers} or in directory but not both
+if [ -n "${tolose}" ] ; then
+ for i in ${tolose} ; do
+ if [ -f $i -o -d $i ]; then
+ # is in directory and not in ${keepers}
+ if [ -n "${safe}" ] ; then
+ if [ -n "${no_action}" ] ; then
+ echo "mv $i .Recover"
+ else
+ echo '***' Caching unexpected file ${THISDIR}/$i in .Recover... 1>&2
+ mv $i .Recover
+ fi
+ else
+ if [ -n "${no_action}" ] ; then
+ echo "rm -rf $i"
+ else
+ echo '***' Removing unexpected file ${THISDIR}/$i 1>&2
+ rm -rf $i
+ fi
+ fi
+ else
+ # is in ${keepers} but not in directory
+ echo '***' "Can't" keep expected file ${THISDIR}/$i - not found. 1>&2
+ fi
+ done
+else
+ true
+fi
+
+### Recurse into any subdirectories flagged as keepers.
+### Do the same good deeds down there.
+for i in `egrep -v CVS ${keepers} | egrep -v \\.Recover` ; do
+ if [ -d $i ] ; then
+ if [ -n "${no_action}" ] ; then
+ echo "cd $i"
+ else
+ if [ -n "${verbose}" ] ; then
+ echo Running ${sanprog} on ${THISDIR}/$i
+ else
+ true
+ fi
+ fi
+ (cd $i ; ${sanprog} $*) | sed 's/^/ /'
+ else
+ true
+ fi
+done
+
+### Do-last:
+
+sed -e '1,/^Do\-last:$/d' ${cleaned} > ${sandd}
+if [ -s ${sandd} ] ; then
+ if [ -n "${no_action}" ] ; then
+ echo ". ${sandd} $*"
+ else
+ . ${sandd} $*
+ fi
+else
+ if [ -n "${verbose}" ] ; then
+ echo "No \`Do-last' fragment to execute."
+ else
+ true
+ fi
+fi
+
+### cleanup
+
+if ( echo $* | egrep test > /dev/null ) ; then
+ if [ -n "${safe}" -a "`cd .Recover ; (echo empty ; ls -a) | \
+ egrep -v '^\.$|^\.\.$'`" = "empty" ] ; then
+ if [ -n "${no_action}" ] ; then
+ echo "rmdir .Recover"
+ else
+ if [ -n "${verbose}" ] ; then
+ echo Removing .Recover. It was not needed.
+ else
+ true
+ fi
+ rmdir .Recover
+ fi
+ fi
+fi
+
+sanStatus=0
+### eof.
diff --git a/src/util/autoconf/.Sanitize b/src/util/autoconf/.Sanitize
new file mode 100644
index 0000000000..2dcb543a0d
--- /dev/null
+++ b/src/util/autoconf/.Sanitize
@@ -0,0 +1,89 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+COPYING
+ChangeLog
+ChangeLog.1
+INSTALL
+Makefile
+Makefile.in
+NEWS
+README
+TODO
+acconfig.h
+acfunctions
+acgeneral.m4
+acheaders
+acidentifiers
+acmakevars
+acoldnames.m4
+acprograms
+acspecific.m4
+autoconf
+autoconf.info
+autoconf.info-1
+autoconf.info-2
+autoconf.info-3
+autoconf.info-4
+autoconf.info-5
+autoconf.m4
+autoconf.sh
+autoconf.texi
+autoheader
+autoheader.m4
+autoheader.sh
+autoreconf
+autoreconf.sh
+autoscan
+autoscan.pl
+autoupdate
+autoupdate.sh
+config.cache
+config.guess
+config.log
+config.status
+config.sub
+configure
+configure.in
+ifnames
+ifnames.sh
+install-sh
+install.texi
+make-stds.texi
+mkinstalldirs
+standards.info
+standards.info-1
+standards.info-2
+standards.texi
+testsuite
+texinfo.tex
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/autoconf/testsuite/.Sanitize b/src/util/autoconf/testsuite/.Sanitize
new file mode 100644
index 0000000000..3fbc44e9f5
--- /dev/null
+++ b/src/util/autoconf/testsuite/.Sanitize
@@ -0,0 +1,38 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+Makefile
+Makefile.in
+autoconf.g
+autoconf.s
+config
+lib
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/autoconf/testsuite/autoconf.g/.Sanitize b/src/util/autoconf/testsuite/autoconf.g/.Sanitize
new file mode 100644
index 0000000000..39f4be4e2e
--- /dev/null
+++ b/src/util/autoconf/testsuite/autoconf.g/.Sanitize
@@ -0,0 +1,33 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+init.exp
+sizeof_type.exp
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/autoconf/testsuite/autoconf.s/.Sanitize b/src/util/autoconf/testsuite/autoconf.s/.Sanitize
new file mode 100644
index 0000000000..47ef8f8fa0
--- /dev/null
+++ b/src/util/autoconf/testsuite/autoconf.s/.Sanitize
@@ -0,0 +1,33 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+defines.exp
+syntax.exp
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/autoconf/testsuite/config/.Sanitize b/src/util/autoconf/testsuite/config/.Sanitize
new file mode 100644
index 0000000000..fd6a12b4c2
--- /dev/null
+++ b/src/util/autoconf/testsuite/config/.Sanitize
@@ -0,0 +1,32 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+unix.exp
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/autoconf/testsuite/lib/.Sanitize b/src/util/autoconf/testsuite/lib/.Sanitize
new file mode 100644
index 0000000000..4d0cec1e04
--- /dev/null
+++ b/src/util/autoconf/testsuite/lib/.Sanitize
@@ -0,0 +1,32 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+common.exp
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/et/.Sanitize b/src/util/et/.Sanitize
new file mode 100644
index 0000000000..f2f266bfbb
--- /dev/null
+++ b/src/util/et/.Sanitize
@@ -0,0 +1,60 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+com_err.3
+com_err.c
+com_err.h
+com_err.texinfo
+compile_et.1
+compile_et.c
+compile_et.sh
+compiler.h
+config_script
+configure
+configure.in
+error_message.c
+error_table.h
+error_table.y
+et_c.awk
+et_h.awk
+et_lex.lex.l
+et_name.c
+init_et.c
+internal.h
+mit-sipb-copyright.h
+test1.et
+test2.et
+test_et.c
+texinfo.tex
+vfprintf.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/kfrags/.Sanitize b/src/util/kfrags/.Sanitize
new file mode 100644
index 0000000000..82814fe280
--- /dev/null
+++ b/src/util/kfrags/.Sanitize
@@ -0,0 +1,40 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+ChangeLog
+athena.conf
+base.conf
+cns.conf
+gcc.conf
+ranlib.conf
+sunpro.conf
+svr4.conf
+ucb.conf
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/makedepend/.Sanitize b/src/util/makedepend/.Sanitize
new file mode 100644
index 0000000000..45eae8dc2c
--- /dev/null
+++ b/src/util/makedepend/.Sanitize
@@ -0,0 +1,42 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+ChangeLog
+cpp.ed
+cppsetup.c
+def.h
+ifparser.c
+ifparser.h
+include.c
+main.c
+mkdepend.man
+parse.c
+pr.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/ss/.Sanitize b/src/util/ss/.Sanitize
new file mode 100644
index 0000000000..73f30f4279
--- /dev/null
+++ b/src/util/ss/.Sanitize
@@ -0,0 +1,64 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+cmd_tbl.lex.l
+config_script
+configure
+configure.in
+copyright.h
+ct.y
+ct_c.awk
+ct_c.sed
+data.c
+error.c
+execute_cmd.c
+help.c
+invocation.c
+list_rqs.c
+listen.c
+mit-sipb-copyright.h
+mk_cmds.c
+mk_cmds.sh
+options.c
+pager.c
+parse.c
+prompt.c
+request_tbl.c
+requests.c
+ss.h
+ss_err.et
+ss_internal.h
+std_rqs.ct
+test_ss.c
+utils.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/util/unifdef/.Sanitize b/src/util/unifdef/.Sanitize
new file mode 100644
index 0000000000..f46ccdf166
--- /dev/null
+++ b/src/util/unifdef/.Sanitize
@@ -0,0 +1,37 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+Makefile.in
+configure
+configure.in
+unifdef.1
+unifdef.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/windows/.Sanitize b/src/windows/.Sanitize
new file mode 100644
index 0000000000..9ed7a2b1af
--- /dev/null
+++ b/src/windows/.Sanitize
@@ -0,0 +1,36 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+changelo
+cns
+makefile
+readme
+wintel
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/windows/cns/.Sanitize b/src/windows/cns/.Sanitize
new file mode 100644
index 0000000000..0dd688f185
--- /dev/null
+++ b/src/windows/cns/.Sanitize
@@ -0,0 +1,56 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+changelo
+clock00.ico
+clock05.ico
+clock10.ico
+clock15.ico
+clock20.ico
+clock25.ico
+clock30.ico
+clock35.ico
+clock40.ico
+clock45.ico
+clock50.ico
+clock55.ico
+clock60.ico
+clockexp.ico
+clocktkt.ico
+cns.c
+cns.def
+cns.h
+cns.ico
+cns.rc
+krbini.h
+makefile
+tktlist.c
+tktlist.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/windows/wintel/.Sanitize b/src/windows/wintel/.Sanitize
new file mode 100644
index 0000000000..ffe992b4f1
--- /dev/null
+++ b/src/windows/wintel/.Sanitize
@@ -0,0 +1,56 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize". All keyword lines must exist,
+# and must exist in the order specified by this file. Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done. Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept. All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called. Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+auth.c
+auth.h
+changelo
+dialog.h
+edit.c
+emul.c
+font.c
+ini.h
+intern.c
+k5stream.c
+k5stream.h
+makefile
+ncsa.ico
+negotiat.c
+screen.c
+screen.h
+struct.h
+telnet.c
+telnet.def
+telnet.dlg
+telnet.h
+telnet.rc
+telopts.h
+terminal.ico
+wt-proto.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.