First pass at implementing support for package system flavors other

than pkgsrc's current one.  This is an important lead-up to any project
that redesigns the pkg_* tools in that it doesn't tie us to past design
(mis)choices.  This commit mostly deals with rearranging code, although
there was a considerable amount of rewriting done in cases where I
thought the code was somewhat messy and was difficult to understand.

The design I chose for supporting multiple package system flavors is
that the various depends, install, package, etc.  modules would define
default targets and variables that may be overridden in files from
pkgsrc/mk/flavor/${PKG_FLAVOR}.  The default targets would do the
sensible thing of doing nothing, and pkgsrc infrastructure would rely
on the appropriate things to be defined in pkgsrc/mk/flavor to do the
real work.  The pkgsrc/mk/flavor directory contains subdirectories
corresponding to each package system flavor that we support.  Currently,
I only have "pkg" which represents the current pkgsrc-native package
flavor.  I've separated out most of the code where we make assumptions
about the package system flavor, mostly either because we directly
use the pkg_* tools, or we make assumptions about the package meta-data
directory, or we directly manipulate the package meta-data files, and
placed it into pkgsrc/mk/flavor/pkg.

There are several new modules that have been refactored out of bsd.pkg.mk
as part of these changes: check, depends, install, package, and update.
Each of these modules has been slimmed down by rewriting them to avoid
some recursive make calls.  I've also religiously documented which
targets are "public" and which are "private" so that users won't rely
on reaching into pkgsrc innards to call a private target.

The "depends" module is a complete overhaul of the way that we handle
dependencies.  There is now a separate "depends" phase that occurs
before the "extract" phase where dependencies are installed.  This
differs from the old way where dependencies were installed just before
extraction occurred.  The reduce-depends.mk file is now replaced by
a script that is invoked only once during the depends phase and is
used to generate a cookie file that holds the full set of reduced
dependencies.  It is now possible to type "make depends" in a package
directory and all missing dependencies will be installed.

Future work on this project include:

    * Resolve the workflow design in anticipation of future work on
      staged installations where "package" conceptually happens before
      "install".

    * Rewrite the buildlink3 framework to not assume the use of the
      pkgsrc pkg_* tools.

    * Rewrite the pkginstall framework to provide a standard pkg_*
      tool to perform the actions, and allowing a purely declarative
      file per package to describe what actions need to be taken at
      install or deinstall time.

    * Implement support for the SVR4 package flavor.  This will be
      proof that the appropriate abstractions are in place to allow
      using a completely different set of package management tools.

7 files changed, 510 insertions, 0 deletions

diff --git a/mk/check/bsd.check-vars.mk b/mk/check/bsd.check-vars.mk
new file mode 100644
index 00000000000..2d804076f3a
--- /dev/null
+++ b/mk/check/bsd.check-vars.mk
@@ -0,0 +1,10 @@
+# $NetBSD: bsd.check-vars.mk,v 1.1 2006/06/03 23:11:42 jlam Exp $
+#
+# This Makefile fragment is included by bsd.prefs.mk and defines some
+# variables which must be defined earlier than where bsd.check.mk
+# is included.
+#
+
+CHECK_SHLIBS_SUPPORTED?=	yes
+
+USE_TOOLS+=	awk cat cmp diff echo find grep rm sed test touch true
diff --git a/mk/check/bsd.check.mk b/mk/check/bsd.check.mk
new file mode 100644
index 00000000000..37bca2bed74
--- /dev/null
+++ b/mk/check/bsd.check.mk
@@ -0,0 +1,16 @@
+# $NetBSD: bsd.check.mk,v 1.1 2006/06/03 23:11:42 jlam Exp $
+#
+# This Makefile fragment is included by bsd.pkg.mk and provides all
+# variables and targets related to build and install checks.
+#
+# The following are the "public" targets provided this module:
+#
+#    check-files-pre, check-files-post, check-files
+#    check-interpreter, check-shlibs, check-vulnerable, check-wrkref
+#
+
+.include "${PKGSRCDIR}/mk/check/check-files.mk"
+.include "${PKGSRCDIR}/mk/check/check-interpreter.mk"
+.include "${PKGSRCDIR}/mk/check/check-shlibs.mk"
+.include "${PKGSRCDIR}/mk/check/check-vulnerable.mk"
+.include "${PKGSRCDIR}/mk/check/check-wrkref.mk"
diff --git a/mk/check/check-files.mk b/mk/check/check-files.mk
new file mode 100644
index 00000000000..7d11838c4b3
--- /dev/null
+++ b/mk/check/check-files.mk
@@ -0,0 +1,313 @@
+# $NetBSD: check-files.mk,v 1.1 2006/06/03 23:11:42 jlam Exp $
+
+.if defined(PKG_DEVELOPER)
+CHECK_FILES?=		yes
+.endif
+
+CHECK_FILES?=		no
+CHECK_FILES_STRICT?=	no
+
+###########################################################################
+# CHECK_FILES_SKIP is a list of file names that will be skipped when
+# analyzing file lists in the check-files target.  This is useful to
+# avoid getting errors triggered by changes in directories not really
+# handled by pkgsrc.
+
+# Info index files updated when a new info file is added.
+.if defined(INFO_FILES)
+CHECK_FILES_SKIP+=	${PREFIX}/.*/dir$$$$
+.endif
+
+# Perl's perllocal.pod index that is regenerated when a local module
+# is added.
+#
+CHECK_FILES_SKIP+=	${PERL5_INSTALLARCHLIB}/perllocal.pod
+
+# R's index files that are regenerated when a local module
+# is added.
+#
+CHECK_FILES_SKIP+=	${PREFIX}/lib/R/doc/html/packages.html
+CHECK_FILES_SKIP+=	${PREFIX}/lib/R/doc/html/search/index.txt
+
+# We don't care about what's under /proc in Linux emulation, which is
+# just holds run-time generated data.
+#
+CHECK_FILES_SKIP+=	${PREFIX}/emul/linux/proc.*
+
+# The reference-count meta-data directory used by the pkginstall framework.
+CHECK_FILES_SKIP+=	${PKG_DBDIR}.refcount.*
+
+# File that are outside of ${PREFIX} in directories we already know we'll
+# be using for mutable data.
+#
+.for d in ${MAKE_DIRS} ${OWN_DIRS}
+CHECK_FILES_SKIP+=	${d:C/^([^\/])/${PREFIX}\/\1/}.*
+.endfor
+.for d o g m in ${MAKE_DIRS_PERMS} ${OWN_DIRS_PERMS}
+CHECK_FILES_SKIP+=	${d:C/^([^\/])/${PREFIX}\/\1/}.*
+.endfor
+
+# Mutable X11 font database files
+.if (defined(FONTS_DIRS.ttf) && !empty(FONTS_DIRS.ttf:M*)) || \
+    (defined(FONTS_DIRS.type1) && !empty(FONTS_DIRS.type1:M*)) || \
+    (defined(FONTS_DIRS.x11) && !empty(FONTS_DIRS.x11:M*))
+CHECK_FILES_SKIP+=	${PREFIX}/.*/fonts.alias
+CHECK_FILES_SKIP+=	${PREFIX}/.*/fonts.dir
+CHECK_FILES_SKIP+=	${PREFIX}/.*/fonts.scale
+.endif
+
+# Mutable charset.alias file
+CHECK_FILES_SKIP+=	${PREFIX}/lib/charset.alias
+
+_CHECK_FILES_SKIP_FILTER=	${GREP} -vx ${CHECK_FILES_SKIP:@f@-e ${f:Q}@}
+
+###########################################################################
+# These are the files generated and used by the check-files implementation
+# used across several check-files targets.
+#
+#    _CHECK_FILES_COOKIE.* are the cookie files that contain the error
+#	messages discovered during each stage of file-checking.
+#
+#    _CHECK_FILES_PRE.* are the file lists generated before any files
+#	from the package are installed.
+#
+#    _CHECK_FILES_POST.* are the file lists generated after all files
+#	from the package are installed.
+#
+# The "pre" and "post" file lists are compared against each other to
+# determine if the package is installing files where it shouldn't be.
+#
+_CHECK_FILES_COOKIE.prefix=	${WRKDIR}/.check_files_prefix_cookie
+_CHECK_FILES_PRE.prefix=	${WRKDIR}/.prefix.pre
+_CHECK_FILES_POST.prefix=	${WRKDIR}/.prefix.post
+
+_CHECK_FILES_COOKIE.sysconfdir=	${WRKDIR}/.check_files_sysconfdir_cookie
+_CHECK_FILES_PRE.sysconfdir=	${WRKDIR}/.sysconfdir.pre
+_CHECK_FILES_POST.sysconfdir=	${WRKDIR}/.sysconfdir.post
+
+_CHECK_FILES_COOKIE.varbase=	${WRKDIR}/.check_files_varbase_cookie
+_CHECK_FILES_PRE.varbase=	${WRKDIR}/.varbase.pre
+_CHECK_FILES_POST.varbase=	${WRKDIR}/.varbase.post
+
+_CHECK_FILES_COOKIES=		# empty
+_CHECK_FILES_COOKIES+=		${_CHECK_FILES_COOKIE.prefix}
+.if empty(CHECK_FILES_STRICT:M[nN][oO])
+_CHECK_FILES_COOKIES+=		${_CHECK_FILES_COOKIE.sysconfdir}
+_CHECK_FILES_COOKIES+=		${_CHECK_FILES_COOKIE.varbase}
+.endif
+
+###########################################################################
+# _CHECK_FILES_PRE holds the list of targets that are built as part of
+# building the check-files-pre target.  These targets should cause the
+# "pre" file lists to be generated.
+#
+_CHECK_FILES_PRE=		check-files-pre-message
+_CHECK_FILES_PRE+=		${_CHECK_FILES_PRE.prefix}
+.if empty(CHECK_FILES_STRICT:M[nN][oO])
+_CHECK_FILES_PRE+=		${_CHECK_FILES_PRE.sysconfdir}
+_CHECK_FILES_PRE+=		${_CHECK_FILES_PRE.varbase}
+.endif
+
+###########################################################################
+# _CHECK_FILES_POST holds the list of targets that are built as part of
+# building the check-files-post target.  These targets should cause the
+# "post" file lists to be generated.
+#
+_CHECK_FILES_POST=		check-files-post-message
+_CHECK_FILES_POST+=		${_CHECK_FILES_POST.prefix}
+.if empty(CHECK_FILES_STRICT:M[nN][oO])
+_CHECK_FILES_POST+=		${_CHECK_FILES_POST.sysconfdir}
+_CHECK_FILES_POST+=		${_CHECK_FILES_POST.varbase}
+.endif
+
+###########################################################################
+# check-files-pre and check-files-post targets and subtargets
+#
+.PHONY: check-files-pre check-files-post
+check-files-pre: ${_CHECK_FILES_PRE}
+check-files-post: ${_CHECK_FILES_POST}
+
+.PHONY: check-files-pre-message check-files-post-message
+check-files-pre-message:
+	${_PKG_SILENT}${_PKG_DEBUG}${STEP_MSG}				\
+		"Generating pre-install file lists"
+
+check-files-post-message:
+	${_PKG_SILENT}${_PKG_DEBUG}${STEP_MSG}				\
+		"Generating post-install file lists"
+
+${_CHECK_FILES_PRE.prefix} ${_CHECK_FILES_POST.prefix}:
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	${FIND} ${PREFIX}/. \( -type f -o -type l \) -print 2>/dev/null \
+		| ${SED} -e 's,/\./,/,'					\
+		| ${_CHECK_FILES_SKIP_FILTER} > ${.TARGET}		\
+                || ${TRUE}
+
+${_CHECK_FILES_PRE.sysconfdir} ${_CHECK_FILES_POST.sysconfdir}:
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	${FIND} ${PKG_SYSCONFDIR}/. -print 2>/dev/null			\
+		| ${SED} -e 's,/\./,/,'					\
+		| ${_CHECK_FILES_SKIP_FILTER} > ${.TARGET}		\
+		|| ${TRUE}
+
+${_CHECK_FILES_PRE.varbase} ${_CHECK_FILES_POST.varbase}:
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	${FIND} ${VARBASE}/. -print 2>/dev/null				\
+		| ${SED} -e 's,/\./,/,'					\
+		| ${_CHECK_FILES_SKIP_FILTER} > ${.TARGET}		\
+		|| ${TRUE}
+
+###########################################################################
+# check-files targets and subtargets
+#
+.PHONY: check-files-prefix check-files-sysconfdir check-files-varbase
+check-files-prefix: ${_CHECK_FILES_COOKIE.prefix}
+check-files-sysconfdir: ${_CHECK_FILES_COOKIE.sysconfdir}
+check-files-varbase: ${_CHECK_FILES_COOKIE.varbase}
+
+# The check-files target looks at the cookie files generated by the
+# check-files-* subtargets, and if they are non-empty, then they
+# contain the error messages collected during the build of each
+# subtarget.
+#
+.PHONY: check-files
+check-files: ${_CHECK_FILES_COOKIES}
+	${_PKG_SILENT}${_PKG_DEBUG}${STEP_MSG}				\
+		"Checking file-check results for ${PKGNAME}"
+.for _cookie_ in ${_CHECK_FILES_COOKIES}
+	${_PKG_SILENT}${_PKG_DEBUG}${CAT} ${_cookie_}
+.endfor
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	${CAT} ${_CHECK_FILES_COOKIES} | ${AWK} 'END { if (NR > 0) exit 1; }'
+
+# Check ${PREFIX} for files which are not listed in the generated ${PLIST}
+# and vice-versa.
+#
+${_CHECK_FILES_COOKIE.prefix}:
+.if !defined(NO_PKG_REGISTER)
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	if ${TEST} ! -f ${_CHECK_FILES_PRE.prefix} -o			\
+		   ! -f ${_CHECK_FILES_POST.prefix};			\
+	then								\
+		{ exit 0; };						\
+	fi;								\
+	f_added=${WRKDIR}/.files.added;					\
+	f_deleted=${WRKDIR}/.files.deleted;				\
+	f_expected=${WRKDIR}/.files.expected;				\
+	f_missing=${WRKDIR}/.files.missing;				\
+	f_missing_real=${WRKDIR}/.files.missing.real;			\
+	f_missing_skip=${WRKDIR}/.files.missing.skip;			\
+	f_extra=${WRKDIR}/.files.extra;					\
+	${DIFF} -u ${_CHECK_FILES_PRE.prefix} ${_CHECK_FILES_POST.prefix} \
+		> ${WRKDIR}/.files.diff || ${TRUE};			\
+	${GREP} '^+/' ${WRKDIR}/.files.diff | ${SED} "s|^+||" | ${SORT}	\
+		> $$f_added;						\
+	${GREP} '^-/' ${WRKDIR}/.files.diff | ${SED} "s|^-||" | ${SORT}	\
+		> $$f_deleted;						\
+	${GREP} '^[A-Za-z]' ${PLIST} | ${SED} "s|^|${PREFIX}/|" | ${SORT} \
+		> $$f_expected;						\
+	${DIFF} -u ${WRKDIR}/.files.expected ${WRKDIR}/.files.added	\
+		| ${GREP} '^-[^-]' | ${SED} "s|^-||"			\
+		> $$f_missing;						\
+	${DIFF} -u ${WRKDIR}/.files.expected ${WRKDIR}/.files.added	\
+		| ${GREP} '^+[^+]' | ${SED} "s|^+||"			\
+		> $$f_extra;						\
+	if ${AWK} 'END { if (NR == 0) exit 1; }' $$f_deleted; then	\
+		{ ${ECHO} "*** The following files have been deleted"	\
+			  "from ${PREFIX}!";				\
+		  ${SED} "s|^|        |" $$f_deleted;			\
+		} > ${.TARGET};						\
+	fi;								\
+	if ${AWK} 'END { if (NR == 0) exit 1; }' $$f_missing $$f_extra;	\
+	then								\
+		{ ${ECHO} "*** The PLIST does not match installed files!"; \
+		  ${CAT} $$f_missing | ${_CHECK_FILES_SKIP_FILTER}	\
+			> $$f_missing_real;				\
+		  ${DIFF} -u $$f_missing $$f_missing_real		\
+			| ${GREP} '^-[^-]' | ${SED} "s|^-||"		\
+			> $$f_missing_skip;				\
+		  if ${AWK} 'END { if (NR == 0) exit 1; }' $$f_missing_real; \
+		  then \
+		  	${ECHO} "*** The following files are in the"	\
+				"PLIST but not in ${PREFIX}:";		\
+			${SED} "s|^|        |" $$f_missing_real;	\
+		  fi;							\
+		  if ${AWK} 'END { if (NR == 0) exit 1; }' $$f_extra; then \
+		  	${ECHO} "*** The following files are in"	\
+				"${PREFIX} but not in the PLIST:";	\
+			${SED} "s|^|        |" $$f_extra;		\
+		  fi;							\
+		  if ${AWK} 'END { if (NR == 0) exit 1; }' $$f_missing_skip; \
+		  then \
+		  	${ECHO} "*** The following files are in both"	\
+				"the PLIST and CHECK_FILES_SKIP:";	\
+			 ${SED} "s|^|        |" $$f_missing_skip;	\
+		  fi;							\
+		} >> ${.TARGET};					\
+	fi;								\
+	${RM} -f ${WRKDIR}/.files.diff $$f_added $$f_deleted		\
+		 $$f_expected $$f_missing $$f_extra			\
+		 $$f_missing_real $$f_missing_skip
+.endif
+	${_PKG_SILENT}${_PKG_DEBUG}${TOUCH} ${TOUCH_FLAGS} ${.TARGET}
+
+# Check ${SYSCONFDIR} for files which are not in the PLIST and are also
+# not copied into place by the INSTALL scripts.
+#
+${_CHECK_FILES_COOKIE.sysconfdir}:
+.if !defined(NO_PKG_REGISTER)
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	if ${TEST} ! -f ${_CHECK_FILES_PRE.sysconfdir} -o		\
+		   ! -f ${_CHECK_FILES_POST.sysconfdir};		\
+	then								\
+		{ exit 0; };						\
+	fi;								\
+	if ! ${CMP} -s ${_CHECK_FILES_PRE.sysconfdir}			\
+		       ${_CHECK_FILES_POST.sysconfdir};			\
+	then								\
+		{ ${ECHO} "*** The package has modified ${PKG_SYSCONFDIR}" \
+			  "contents directly!";				\
+		  ${ECHO} "    The offending files/directories are:";	\
+		  ${DIFF} -u ${_CHECK_FILES_PRE.sysconfdir}		\
+			     ${_CHECK_FILES_POST.sysconfdir}		\
+			| ${GREP} '^+[^+]' | ${SED} "s|^+|	|";	\
+		} > ${.TARGET};						\
+	fi
+.endif
+	${_PKG_SILENT}${_PKG_DEBUG}${TOUCH} ${TOUCH_FLAGS} ${.TARGET}
+
+# Check ${VARBASE} for files which are not in the PLIST and are also
+# not created by the INSTALL scripts.
+#
+${_CHECK_FILES_COOKIE.varbase}:
+.if !defined(NO_PKG_REGISTER)
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	if ${TEST} ! -f ${_CHECK_FILES_PRE.varbase} -o			\
+		   ! -f ${_CHECK_FILES_POST.varbase};			\
+	then								\
+		{ exit 0; };						\
+	fi;								\
+	if ! ${CMP} -s ${_CHECK_FILES_PRE.varbase}			\
+		       ${_CHECK_FILES_POST.varbase};			\
+	then								\
+		{ ${ECHO} "*** The package has modified ${VARBASE}"	\
+			  "contents directly!";				\
+		  ${ECHO} "    The offending files/directories are:";	\
+		  ${DIFF} -u ${_CHECK_FILES_PRE.varbase}		\
+			     ${_CHECK_FILES_POST.varbase}		\
+			| ${GREP} '^+[^+]' | ${SED} "s|^+|	|";	\
+		} > ${.TARGET};						\
+	fi
+.endif
+	${_PKG_SILENT}${_PKG_DEBUG}${TOUCH} ${TOUCH_FLAGS} ${.TARGET}
+
+###########################################################################
+# check-files-clean removes the state files related to the "check-files"
+# target so that the check-files-{pre,post} targets may be re-run.
+#
+.PHONY: check-files-clean
+check-clean: check-files-clean
+check-files-clean:
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	${RM} -f ${_CHECK_FILES_COOKIES}				\
+		${_CHECK_FILES_PRE} ${_CHECK_FILES_POST}
diff --git a/mk/check/check-interpreter.mk b/mk/check/check-interpreter.mk
new file mode 100644
index 00000000000..6c8bf28a2fc
--- /dev/null
+++ b/mk/check/check-interpreter.mk
@@ -0,0 +1,47 @@
+# $NetBSD: check-interpreter.mk,v 1.1 2006/06/03 23:11:42 jlam Exp $
+
+CHECK_INTERPRETER?=	no
+
+###########################################################################
+# CHECK_INTERPRETER_SKIP is a list of shell globs.  Installed files that
+# match these globs are skipped when running the check-interpreter target.
+#
+CHECK_INTERPRETER_SKIP?=	# empty
+
+_CHECK_INTERP_SKIP_FILTER=	case $$file in
+.for _pattern_ in ${CHECK_INTERPRETER_SKIP}
+_CHECK_INTERP_SKIP_FILTER+=	${PREFIX}/${_pattern_}|${_pattern_}) continue ;;
+.endfor
+_CHECK_INTERP_SKIP_FILTER+=	*) ;;
+_CHECK_INTERP_SKIP_FILTER+=	esac
+
+###########################################################################
+# check-interpreter target
+#
+.PHONY: check-interpreter
+check-interpreter:
+	${_PKG_SILENT}${_PKG_DEBUG}${STEP_MSG}				\
+		"Checking for non-existent script interpreters in ${PKGNAME}"
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	${PKG_FILELIST_CMD} | ${SORT} | ${SED} 's,\\,\\\\,g' |		\
+	{ exitcode=0;							\
+	  while read file; do						\
+		${_CHECK_INTERP_SKIP_FILTER};				\
+		${SHCOMMENT} "[$$file]";				\
+		interp=`${SED} -n -e '1s/^#! *\([^ ]*\).*/\1/p' -e '2q' < "$$file"` \
+		|| {	${ECHO} "[check-interpreter.mk] WARNING: sed(1) failed for \"$$file\"." 1>&2; \
+			continue;					\
+		};							\
+		case $$interp in					\
+		"") continue;						\
+		esac;							\
+		if ${TEST} ! -f "$$interp"; then			\
+			if ${TEST} -x "$$file"; then			\
+				${ECHO} "[check-interpreter.mk] ERROR: The interpreter \"$$interp\" of \"$$file\" does not exist." 1>&2; \
+				exitcode=1;				\
+			else						\
+				${ECHO} "[check-interpreter.mk] WARNING: The interpreter \"$$interp\" of \"$$file\" does not exist." 1>&2; \
+			fi;						\
+		fi;							\
+	  done;								\
+	  exit $$exitcode; }
diff --git a/mk/check/check-shlibs.mk b/mk/check/check-shlibs.mk
new file mode 100644
index 00000000000..bbeb6d4119f
--- /dev/null
+++ b/mk/check/check-shlibs.mk
@@ -0,0 +1,43 @@
+# $NetBSD: check-shlibs.mk,v 1.1 2006/06/03 23:11:42 jlam Exp $
+
+# For PKG_DEVELOPERs, cause some checks to be run automatically by default.
+.if defined(PKG_DEVELOPER)
+CHECK_SHLIBS?=		yes
+.endif
+CHECK_SHLIBS?=		no
+
+# All binaries and shared libraries.
+_CHECK_SHLIBS_ERE=	/(bin/|sbin/|libexec/|lib/lib.*\.so|lib/lib.*\.dylib)
+
+###########################################################################
+# check-shlibs target
+#
+.PHONY: check-shlibs
+check-shlibs:
+.if !empty(CHECK_SHLIBS_SUPPORTED:M[yY][eE][sS]) && !defined(NO_PKG_REGISTER)
+	${_PKG_SILENT}${_PKG_DEBUG}${STEP_MSG}				\
+		"Checking for missing run-time search paths in ${PKGNAME}"
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	case ${LDD:Q}"" in						\
+	"")	ldd=`${TYPE} ldd 2>/dev/null | ${AWK} '{ print $$NF }'` ;; \
+	*)	ldd=${LDD:Q} ;;						\
+	esac;								\
+	${TEST} -x "$$ldd" || exit 0;					\
+	${PKG_FILELIST_CMD} |						\
+	{ ${EGREP} -h ${_CHECK_SHLIBS_ERE:Q} || ${TRUE}; } |		\
+	{ while read file; do						\
+		${TEST} -z ${PKG_VERBOSE:Q}"" || ${ECHO} "$$ldd $$file"; \
+		err=`{ $$ldd $$file 2>&1 || ${TRUE}; } | { ${GREP} "not found" || ${TRUE}; }`; \
+		if ${TEST} -n "$$err"; then				\
+			${ECHO} "$$file: $$err";			\
+			error=1;					\
+		fi;							\
+	  done;								\
+	  if ${TEST} "$$error" = 1; then				\
+		${ECHO} "*** The above programs/libs will not find the listed shared libraries"; \
+		${ECHO} "    at runtime.  Please fix the package (add -Wl,-R.../lib in the right"; \
+		${ECHO} "    places)!";					\
+		${SHCOMMENT} Might not error-out for non-pkg-developers; \
+		exit 1;							\
+          fi; }
+.endif
diff --git a/mk/check/check-vulnerable.mk b/mk/check/check-vulnerable.mk
new file mode 100644
index 00000000000..ca4425d5250
--- /dev/null
+++ b/mk/check/check-vulnerable.mk
@@ -0,0 +1,11 @@
+# $NetBSD: check-vulnerable.mk,v 1.1 2006/06/03 23:11:42 jlam Exp $
+
+###########################################################################
+# check-vulnerable checks for vulnerabilities in the package.  This should
+# be overridden per package system flavor.
+#
+.PHONY: check-vulnerable
+.if !target(check-vulnerable)
+check-vulnerable:
+	@${ECHO_MSG} "${_PKGSRC_IN} *** Skipping vulnerability checks."
+.endif
diff --git a/mk/check/check-wrkref.mk b/mk/check/check-wrkref.mk
new file mode 100644
index 00000000000..51d93e43148
--- /dev/null
+++ b/mk/check/check-wrkref.mk
@@ -0,0 +1,70 @@
+# $NetBSD: check-wrkref.mk,v 1.1 2006/06/03 23:11:42 jlam Exp $
+
+.if defined(PKG_DEVELOPER)
+CHECK_WRKREF?=		tools
+.endif
+CHECK_WRKREF?=		no
+
+###########################################################################
+# CHECK_WRKREF_SKIP is a list of shell globs.  Installed files that
+# match these globs are skipped when running the check-wrkref target.
+#
+.if make(check-wrkref)
+.  if !defined(_CHECK_WRKREF_SKIP_FILTER)
+_CHECK_WRKREF_SKIP_FILTER=	${TRUE}
+.    if defined(CHECK_WRKREF_SKIP) && !empty(CHECK_WRKREF_SKIP)
+_CHECK_WRKREF_SKIP_FILTER=	case "$$file" in
+.      for _pattern_ in ${CHECK_WRKREF_SKIP}
+_CHECK_WRKREF_SKIP_FILTER+=	${_pattern_}) continue ;;
+.      endfor
+_CHECK_WRKREF_SKIP_FILTER+=	*) ;;
+_CHECK_WRKREF_SKIP_FILTER+=	esac
+.    endif
+.  endif
+MAKEVARS+=	_CHECK_WRKREF_SKIP_FILTER
+.else
+_CHECK_WRKREF_SKIP_FILTER=	${TRUE}
+.endif
+
+_CHECK_WRKREF:=		${CHECK_WRKREF}
+.if !empty(_CHECK_WRKREF:Mwork)
+_CHECK_WRKREF:=		work		# "work" is the "max" option
+.endif
+
+###########################################################################
+# check-wrkref target
+#
+.PHONY: check-wrkref
+check-wrkref:
+.if !defined(NO_PKG_REGISTER)
+	${_PKG_SILENT}${_PKG_DEBUG}${STEP_MSG}				\
+		"Checking for work-directory references in ${PKGNAME}"
+	${_PKG_SILENT}${_PKG_DEBUG}					\
+	${PKG_FILELIST_CMD} | ${SORT} |					\
+	{ while read file; do						\
+		${_CHECK_WRKREF_SKIP_FILTER};				\
+		${SHCOMMENT} [$$file];					\
+		case ${_CHECK_WRKREF:Mwork:Q}"" in			\
+		work)							\
+			if ${GREP} -H ${WRKDIR} "$$file" 2>/dev/null; then \
+				found=1;				\
+			fi;						\
+			;;						\
+		esac;							\
+		case ${_CHECK_WRKREF:Mtools:Q}"" in			\
+		tools)							\
+			if ${GREP} -H ${TOOLS_DIR} "$$file" 2>/dev/null; then \
+				found=1;				\
+			fi;						\
+			;;						\
+		esac;							\
+	  done;								\
+	  if ${TEST} "$$found" = 1; then				\
+		${ECHO} "***";						\
+		${ECHO} "*** The above files still have references to the build directory."; \
+		${ECHO} "*** This is possibly an error that should be fixed by unwrapping"; \
+		${ECHO} "*** the files or adding missing tools to the package makefile!"; \
+		${ECHO} "***";						\
+		exit 1;							\
+	  fi; }
+.endif