Add Cygnus's "Sanitize" system to the krb5 tree, to make it easier to do

releases....

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@5359 dc483132-0cff-0310-8789-dd5450dbe970

28 files changed, 1443 insertions, 0 deletions

diff --git a/src/lib/.Sanitize b/src/lib/.Sanitize
new file mode 100644
index 000000000..7c52b6566
--- /dev/null
+++ b/src/lib/.Sanitize
@@ -0,0 +1,54 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+configure
+configure.in
+crypto
+des425
+exports.crypto
+exports.des425
+exports.kdb5
+exports.krb5
+glue4.c
+gssapi
+gssapi.def
+kdb
+krb425
+krb5
+krb5.saber.source
+krb5.saber.warnings
+libkrb5.def
+win_glue.c
+winsock.def
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/.Sanitize b/src/lib/crypto/.Sanitize
new file mode 100644
index 000000000..f1f08c042
--- /dev/null
+++ b/src/lib/crypto/.Sanitize
@@ -0,0 +1,45 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+crc32
+cryptoconf.c
+des
+des_crc.c
+des_md5.c
+md4
+md5
+os
+raw_des.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/crc32/.Sanitize b/src/lib/crypto/crc32/.Sanitize
new file mode 100644
index 000000000..056f83445
--- /dev/null
+++ b/src/lib/crypto/crc32/.Sanitize
@@ -0,0 +1,40 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+crc-32.h
+crc-test
+crc.c
+crctest.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/des/.Sanitize b/src/lib/crypto/des/.Sanitize
new file mode 100644
index 000000000..9767f9127
--- /dev/null
+++ b/src/lib/crypto/des/.Sanitize
@@ -0,0 +1,64 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+FUNCTIONS
+Makefile.in
+cbc_cksum.c
+configure
+configure.in
+cs_entry.c
+des.h
+des_int.h
+destest.c
+doc
+f_README
+f_cbc.c
+f_cksum.c
+f_ecb.c
+f_parity.c
+f_pcbc.c
+f_sched.c
+f_tables.c
+f_tables.h
+fin_rndkey.c
+finish_key.c
+init_rkey.c
+key_sched.c
+keytest.data
+new_rn_key.c
+process_ky.c
+random_key.c
+string2key.c
+verify.c
+weak_key.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/des/doc/.Sanitize b/src/lib/crypto/des/doc/.Sanitize
new file mode 100644
index 000000000..ea2692428
--- /dev/null
+++ b/src/lib/crypto/des/doc/.Sanitize
@@ -0,0 +1,32 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+libdes.doc
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/md4/.Sanitize b/src/lib/crypto/md4/.Sanitize
new file mode 100644
index 000000000..d2e49c102
--- /dev/null
+++ b/src/lib/crypto/md4/.Sanitize
@@ -0,0 +1,42 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+configure
+configure.in
+md4.c
+md4crypto.c
+md4driver.c
+md4glue.c
+rsa-md4.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/md5/.Sanitize b/src/lib/crypto/md5/.Sanitize
new file mode 100644
index 000000000..d8cfea6f0
--- /dev/null
+++ b/src/lib/crypto/md5/.Sanitize
@@ -0,0 +1,40 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+md5.c
+md5crypto.c
+md5glue.c
+t_mddriver.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/crypto/os/.Sanitize b/src/lib/crypto/os/.Sanitize
new file mode 100644
index 000000000..243bd15a8
--- /dev/null
+++ b/src/lib/crypto/os/.Sanitize
@@ -0,0 +1,37 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+rnd_confoun.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/des425/.Sanitize b/src/lib/des425/.Sanitize
new file mode 100644
index 000000000..391c1a743
--- /dev/null
+++ b/src/lib/des425/.Sanitize
@@ -0,0 +1,52 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+cksum.c
+configure
+configure.in
+des.c
+des.h
+enc_dec.c
+key_parity.c
+key_sched.c
+new_rnd_key.c
+pcbc_encrypt.c
+quad_cksum.c
+random_key.c
+read_passwd.c
+str_to_key.c
+string2key.c
+unix_time.c
+verify.c
+weak_key.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/gssapi/.Sanitize b/src/lib/gssapi/.Sanitize
new file mode 100644
index 000000000..9689b70e7
--- /dev/null
+++ b/src/lib/gssapi/.Sanitize
@@ -0,0 +1,41 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+Makefile.original
+README_SAMPLE_APP
+configure
+configure.in
+generic
+krb5
+sample
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/gssapi/generic/.Sanitize b/src/lib/gssapi/generic/.Sanitize
new file mode 100644
index 000000000..dc4d5312f
--- /dev/null
+++ b/src/lib/gssapi/generic/.Sanitize
@@ -0,0 +1,53 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+Makefile.original
+configure
+configure.in
+disp_com_err_status.c
+disp_major_status.c
+gssapi.h
+gssapiP_generic.h
+gssapi_err_generic.et
+gssapi_generic.c
+gssapi_generic.h
+rel_buffer.c
+rel_oid_set.c
+util_buffer.c
+util_canonhost.c
+util_dup.c
+util_oid.c
+util_token.c
+util_validate.c
+utl_nohash_validate.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/gssapi/krb5/.Sanitize b/src/lib/gssapi/krb5/.Sanitize
new file mode 100644
index 000000000..f23990b53
--- /dev/null
+++ b/src/lib/gssapi/krb5/.Sanitize
@@ -0,0 +1,68 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+Makefile.original
+accept_sec_context.c
+acquire_cred.c
+compare_name.c
+configure
+configure.in
+context_time.c
+delete_sec_context.c
+disp_name.c
+disp_status.c
+get_tkt_flags.c
+gssapiP_krb5.h
+gssapi_err_krb5.et
+gssapi_krb5.c
+gssapi_krb5.h
+import_name.c
+indicate_mechs.c
+init_sec_context.c
+inq_context.c
+inq_cred.c
+k5seal.c
+k5unseal.c
+krb5_gss_glue.c
+process_context_token.c
+rel_cred.c
+rel_name.c
+seal.c
+sign.c
+unseal.c
+util_cksum.c
+util_crypt.c
+util_seed.c
+util_seqnum.c
+verify.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/gssapi/sample/.Sanitize b/src/lib/gssapi/sample/.Sanitize
new file mode 100644
index 000000000..778c44ef1
--- /dev/null
+++ b/src/lib/gssapi/sample/.Sanitize
@@ -0,0 +1,31 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/kdb/.Sanitize b/src/lib/kdb/.Sanitize
new file mode 100644
index 000000000..033818fbb
--- /dev/null
+++ b/src/lib/kdb/.Sanitize
@@ -0,0 +1,45 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+decrypt_key.c
+encrypt_key.c
+fetch_mkey.c
+kdb_compat.h
+kdb_dbm.c
+kdbint.h
+setup_mkey.c
+store_mkey.c
+verify_mky.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb425/.Sanitize b/src/lib/krb425/.Sanitize
new file mode 100644
index 000000000..1a2884634
--- /dev/null
+++ b/src/lib/krb425/.Sanitize
@@ -0,0 +1,60 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+425data.c
+425error.c
+ChangeLog
+Makefile.in
+configure
+configure.in
+des_sched.c
+get_cred.c
+get_krbhst.c
+get_lrealm.c
+get_phost.c
+kn_parse.c
+kntoln.c
+krb425.h
+krb_err.et
+kuserok.c
+mk_priv.c
+mk_req.c
+mk_safe.c
+net_read.c
+net_write.c
+rd_priv.c
+rd_req.c
+rd_safe.c
+realmhost.c
+recvauth.c
+sendauth.c
+set_key.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/.Sanitize b/src/lib/krb5/.Sanitize
new file mode 100644
index 000000000..9858cf32a
--- /dev/null
+++ b/src/lib/krb5/.Sanitize
@@ -0,0 +1,45 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+asn.1
+ccache
+configure
+configure.in
+error_tables
+free
+keytab
+krb
+os
+posix
+rcache
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/asn.1/.Sanitize b/src/lib/krb5/asn.1/.Sanitize
new file mode 100644
index 000000000..19c57cc9a
--- /dev/null
+++ b/src/lib/krb5/asn.1/.Sanitize
@@ -0,0 +1,60 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+.saberinit
+ChangeLog
+KRB5-asn.py
+Makefile.in
+asn1_decode.c
+asn1_decode.h
+asn1_encode.c
+asn1_encode.h
+asn1_get.c
+asn1_get.h
+asn1_k_decode.c
+asn1_k_decode.h
+asn1_k_encode.c
+asn1_k_encode.h
+asn1_make.c
+asn1_make.h
+asn1_misc.c
+asn1_misc.h
+asn1buf.c
+asn1buf.h
+asn1glue.h
+configure
+configure.in
+glue2.c
+krb5_decode.c
+krb5_encode.c
+krbasn1.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/ccache/.Sanitize b/src/lib/krb5/ccache/.Sanitize
new file mode 100644
index 000000000..a1481d1e7
--- /dev/null
+++ b/src/lib/krb5/ccache/.Sanitize
@@ -0,0 +1,41 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+ccbase.c
+ccdefault.c
+ccdefops.c
+configure
+configure.in
+file
+stdio
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/ccache/file/.Sanitize b/src/lib/krb5/ccache/file/.Sanitize
new file mode 100644
index 000000000..60ca4f2d2
--- /dev/null
+++ b/src/lib/krb5/ccache/file/.Sanitize
@@ -0,0 +1,62 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+README
+configure
+configure.in
+fcc-proto.h
+fcc.h
+fcc_close.c
+fcc_defops.c
+fcc_destry.c
+fcc_errs.c
+fcc_eseq.c
+fcc_gennew.c
+fcc_getnam.c
+fcc_gprin.c
+fcc_init.c
+fcc_maybe.c
+fcc_nseq.c
+fcc_ops.c
+fcc_read.c
+fcc_reslv.c
+fcc_retrv.c
+fcc_sflags.c
+fcc_skip.c
+fcc_sseq.c
+fcc_store.c
+fcc_test.c
+fcc_write.c
+todo
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/ccache/stdio/.Sanitize b/src/lib/krb5/ccache/stdio/.Sanitize
new file mode 100644
index 000000000..6788c91d2
--- /dev/null
+++ b/src/lib/krb5/ccache/stdio/.Sanitize
@@ -0,0 +1,62 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+README
+configure
+configure.in
+scc-proto.h
+scc.h
+scc_close.c
+scc_defops.c
+scc_destry.c
+scc_errs.c
+scc_eseq.c
+scc_gennew.c
+scc_getnam.c
+scc_gprin.c
+scc_init.c
+scc_maybe.c
+scc_nseq.c
+scc_ops.c
+scc_read.c
+scc_reslv.c
+scc_retrv.c
+scc_sflags.c
+scc_skip.c
+scc_sseq.c
+scc_store.c
+scc_test.c
+scc_write.c
+todo
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/error_tables/.Sanitize b/src/lib/krb5/error_tables/.Sanitize
new file mode 100644
index 000000000..b9521624e
--- /dev/null
+++ b/src/lib/krb5/error_tables/.Sanitize
@@ -0,0 +1,43 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+adm_err.et
+asn1_err.et
+configure
+configure.in
+init_ets.c
+kdb5_err.et
+krb5_err.et
+kv5m_err.et
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/free/.Sanitize b/src/lib/krb5/free/.Sanitize
new file mode 100644
index 000000000..0f23017a1
--- /dev/null
+++ b/src/lib/krb5/free/.Sanitize
@@ -0,0 +1,67 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+f_addr.c
+f_address.c
+f_ap_rep.c
+f_ap_req.c
+f_arep_enc.c
+f_auth_cnt.c
+f_authdata.c
+f_authent.c
+f_chksum.c
+f_cred.c
+f_cred_cnt.c
+f_cred_enc.c
+f_creds.c
+f_enc_kdc.c
+f_enc_tkt.c
+f_error.c
+f_kdc_rp.c
+f_kdc_rq.c
+f_keyblock.c
+f_last_req.c
+f_padata.c
+f_princ.c
+f_priv.c
+f_priv_enc.c
+f_pwd_data.c
+f_pwd_seq.c
+f_safe.c
+f_tckt.c
+f_tckts.c
+f_tgt_cred.c
+f_tkt_auth.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/keytab/.Sanitize b/src/lib/krb5/keytab/.Sanitize
new file mode 100644
index 000000000..b9e0b55aa
--- /dev/null
+++ b/src/lib/krb5/keytab/.Sanitize
@@ -0,0 +1,43 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+file
+ktadd.c
+ktbase.c
+ktdefault.c
+ktfr_entry.c
+ktremove.c
+read_servi.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/keytab/file/.Sanitize b/src/lib/krb5/keytab/file/.Sanitize
new file mode 100644
index 000000000..4851eb8cc
--- /dev/null
+++ b/src/lib/krb5/keytab/file/.Sanitize
@@ -0,0 +1,51 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+ktf_add.c
+ktf_close.c
+ktf_defops.c
+ktf_endget.c
+ktf_g_ent.c
+ktf_g_name.c
+ktf_next.c
+ktf_ops.c
+ktf_remove.c
+ktf_resolv.c
+ktf_ssget.c
+ktf_util.c
+ktf_wops.c
+ktf_wreslv.c
+ktfile.h
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/krb/.Sanitize b/src/lib/krb5/krb/.Sanitize
new file mode 100644
index 000000000..3359db33e
--- /dev/null
+++ b/src/lib/krb5/krb/.Sanitize
@@ -0,0 +1,103 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+addr_comp.c
+addr_order.c
+addr_srch.c
+auth_con.c
+auth_con.h
+bld_pr_ext.c
+bld_princ.c
+chk_trans.c
+compat_recv.c
+configure
+configure.in
+conv_princ.c
+copy_addrs.c
+copy_athctr.c
+copy_auth.c
+copy_cksum.c
+copy_creds.c
+copy_data.c
+copy_key.c
+copy_princ.c
+copy_tick.c
+cp_key_cnt.c
+decode_kdc.c
+decrypt_tk.c
+encode_kdc.c
+encrypt_tk.c
+faddr_ordr.c
+free_rtree.c
+gc_2tgt.c
+gc_frm_kdc.c
+gc_via_tgt.c
+gen_seqnum.c
+gen_subkey.c
+get_creds.c
+get_fcreds.c
+get_in_tkt.c
+in_tkt_ktb.c
+in_tkt_pwd.c
+in_tkt_sky.c
+init_ctx.c
+int-proto.h
+kdc_rep_dc.c
+krbconfig.c
+mk_cred.c
+mk_error.c
+mk_priv.c
+mk_rep.c
+mk_req.c
+mk_req_ext.c
+mk_safe.c
+parse.c
+pr_to_salt.c
+preauth.c
+princ_comp.c
+rd_cred.c
+rd_error.c
+rd_priv.c
+rd_rep.c
+rd_req.c
+rd_req_dec.c
+rd_safe.c
+recvauth.c
+send_tgs.c
+sendauth.c
+srv_rcache.c
+t_walk_rtree.c
+tgtname.c
+unparse.c
+walk_rtree.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/os/.Sanitize b/src/lib/krb5/os/.Sanitize
new file mode 100644
index 000000000..913354c2a
--- /dev/null
+++ b/src/lib/krb5/os/.Sanitize
@@ -0,0 +1,70 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+DNR.c
+Makefile.in
+an_to_ln.c
+ccdefname.c
+configure
+configure.in
+def_realm.c
+free_hstrl.c
+free_krbhs.c
+full_ipadr.c
+gen_port.c
+gen_rname.c
+get_krbhst.c
+gmt_mktime.c
+hst_realm.c
+init_os_ctx.c
+krbfileio.c
+ktdefname.c
+kuserok.c
+localaddr.c
+locate_kdc.c
+lock_file.c
+macsock.c
+net_read.c
+net_write.c
+os-proto.h
+osconfig.c
+port2ip.c
+read_msg.c
+read_pwd.c
+realm_dom.c
+sendto_kdc.c
+sn2princ.c
+timeofday.c
+unlck_file.c
+ustime.c
+write_msg.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/posix/.Sanitize b/src/lib/krb5/posix/.Sanitize
new file mode 100644
index 000000000..3026bc53f
--- /dev/null
+++ b/src/lib/krb5/posix/.Sanitize
@@ -0,0 +1,45 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+ChangeLog
+Makefile.in
+configure
+configure.in
+daemon.c
+getuid.c
+memmove.c
+strcasecmp.c
+strdup.c
+strerror.c
+syslog.c
+vfprintf.c
+vsprintf.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.
diff --git a/src/lib/krb5/rcache/.Sanitize b/src/lib/krb5/rcache/.Sanitize
new file mode 100644
index 000000000..8015627ee
--- /dev/null
+++ b/src/lib/krb5/rcache/.Sanitize
@@ -0,0 +1,47 @@
+# Sanitize.in for Kerberos V5
+
+# Each directory to survive it's way into a release will need a file
+# like this one called "./.Sanitize".  All keyword lines must exist,
+# and must exist in the order specified by this file.  Each directory
+# in the tree will be processed, top down, in the following order.
+
+# Hash started lines like this one are comments and will be deleted
+# before anything else is done.  Blank lines will also be squashed
+# out.
+
+# The lines between the "Do-first:" line and the "Things-to-keep:"
+# line are executed as a /bin/sh shell script before anything else is
+# done in this 
+
+Do-first:
+
+# All files listed between the "Things-to-keep:" line and the
+# "Files-to-sed:" line will be kept.  All other files will be removed.
+# Directories listed in this section will have their own Sanitize
+# called.  Directories not listed will be removed in their entirety
+# with rm -rf.
+
+Things-to-keep:
+
+.cvsignore
+.rconf
+ChangeLog
+Makefile.in
+README
+RELEASE
+configure
+configure.in
+rc_base.c
+rc_base.h
+rc_conv.c
+rc_dfl.c
+rc_dfl.h
+rc_io.c
+rc_io.h
+rcdef.c
+
+Things-to-lose:
+
+Do-last:
+
+# End of file.