Home | History | Annotate | Line # | Download | only in postinstall
postinstall.in revision 1.54
      1 #!/bin/sh
      2 #
      3 # $NetBSD: postinstall.in,v 1.54 2023/08/28 23:57:08 riastradh Exp $
      4 #
      5 # Copyright (c) 2002-2022 The NetBSD Foundation, Inc.
      6 # All rights reserved.
      7 #
      8 # This code is derived from software contributed to The NetBSD Foundation
      9 # by Luke Mewburn.
     10 #
     11 # Redistribution and use in source and binary forms, with or without
     12 # modification, are permitted provided that the following conditions
     13 # are met:
     14 # 1. Redistributions of source code must retain the above copyright
     15 #    notice, this list of conditions and the following disclaimer.
     16 # 2. Redistributions in binary form must reproduce the above copyright
     17 #    notice, this list of conditions and the following disclaimer in the
     18 #    documentation and/or other materials provided with the distribution.
     19 #
     20 # THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     21 # ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     22 # TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     23 # PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     24 # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     25 # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     26 # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     27 # INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     28 # CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     29 # ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     30 # POSSIBILITY OF SUCH DAMAGE.
     31 #
     32 # postinstall
     33 #	Check for or fix configuration changes that occur
     34 #	over time as NetBSD evolves.
     35 #
     36 
     37 #
     38 # NOTE: Be sure to use ${DEST_DIR} prefix before all real file operations.
     39 #
     40 
     41 #
     42 # checks to add:
     43 #	- sysctl(8) renames (net.inet6.ip6.bindv6only -> net.inet6.ip6.v6only)
     44 #	- de* -> tlp* migration (/etc/ifconfig.de*, $ifconfig_de*, ...) ?
     45 #	- support quiet/verbose mode ?
     46 #	- differentiate between failures caused by missing source
     47 #	  and real failures
     48 #	- install moduli into usr/share/examples/ssh and use from there?
     49 #	- differentiate between "needs fix" versus "can't fix" issues
     50 #
     51 
     52 # This script is executed as part of a cross build.  Allow the build
     53 # environment to override the locations of some tools.
     54 : ${AWK:=awk}
     55 : ${DB:=db}
     56 : ${GREP:=grep}
     57 : ${HOST_SH:=sh}
     58 : ${MAKE:=make}
     59 : ${PWD_MKDB:=/usr/sbin/pwd_mkdb}
     60 : ${SED:=sed}
     61 : ${SORT:=sort}
     62 : ${STAT:=stat}
     63 
     64 #
     65 #	helper functions
     66 #
     67 
     68 err()
     69 {
     70 	exitval=$1
     71 	shift
     72 	echo 1>&2 "${PROGNAME}: $*"
     73 	if [ -n "${SCRATCHDIR}" ]; then
     74 	    /bin/rm -rf "${SCRATCHDIR}"
     75 	fi
     76 	exit ${exitval}
     77 }
     78 
     79 warn()
     80 {
     81 	echo 1>&2 "${PROGNAME}: $*"
     82 }
     83 
     84 msg()
     85 {
     86 	echo "	$*"
     87 }
     88 
     89 mkdtemp()
     90 {
     91 	# Make sure we don't loop forever if mkdir will always fail.
     92 	[ -d /tmp ] || err 2 /tmp is not a directory
     93 	[ -w /tmp ] || err 2 /tmp is not writable
     94 
     95 	_base="/tmp/_postinstall.$$"
     96 	_serial=0
     97 
     98 	while true; do
     99 		_dir="${_base}.${_serial}"
    100 		mkdir -m 0700 "${_dir}" && break
    101 		_serial=$((${_serial} + 1))
    102 	done
    103 	echo "${_dir}"
    104 }
    105 
    106 # Quote args to make them safe in the shell.
    107 # Usage: quotedlist="$(shell_quote args...)"
    108 #
    109 # After building up a quoted list, use it by evaling it inside
    110 # double quotes, like this:
    111 #    eval "set -- $quotedlist"
    112 # or like this:
    113 #    eval "\$command $quotedlist \$filename"
    114 #
    115 shell_quote()
    116 {(
    117 	local result=''
    118 	local arg qarg
    119 	LC_COLLATE=C ; export LC_COLLATE # so [a-zA-Z0-9] works in ASCII
    120 	for arg in "$@" ; do
    121 		case "${arg}" in
    122 		'')
    123 			qarg="''"
    124 			;;
    125 		*[!-./a-zA-Z0-9]*)
    126 			# Convert each embedded ' to '\'',
    127 			# then insert ' at the beginning of the first line,
    128 			# and append ' at the end of the last line.
    129 			# Finally, elide unnecessary '' pairs at the
    130 			# beginning and end of the result and as part of
    131 			# '\'''\'' sequences that result from multiple
    132 			# adjacent quotes in he input.
    133 			qarg="$(printf "%s\n" "$arg" | \
    134 			    ${SED:-sed} -e "s/'/'\\\\''/g" \
    135 				-e "1s/^/'/" -e "\$s/\$/'/" \
    136 				-e "1s/^''//" -e "\$s/''\$//" \
    137 				-e "s/'''/'/g"
    138 				)"
    139 			;;
    140 		*)
    141 			# Arg is not the empty string, and does not contain
    142 			# any unsafe characters.  Leave it unchanged for
    143 			# readability.
    144 			qarg="${arg}"
    145 			;;
    146 		esac
    147 		result="${result}${result:+ }${qarg}"
    148 	done
    149 	printf "%s\n" "$result"
    150 )}
    151 
    152 # Convert arg $1 to a basic regular expression (as in sed)
    153 # that will match the arg.  This works by inserting backslashes
    154 # before characters that are special in basic regular expressions.
    155 # It also inserts backslashes before the extra characters specified
    156 # in $2 (which defaults to "/,").
    157 # XXX: Does not handle embedded newlines.
    158 # Usage: regex="$(bre_quote "${string}")"
    159 bre_quote()
    160 {
    161 	local arg="$1"
    162 	local extra="${2-/,}"
    163 	printf "%s\n" "${arg}" | ${SED} -e 's/[][^$.*\\'"${extra}"']/\\&/g'
    164 }
    165 
    166 # unprefix dir
    167 #	Remove any dir prefix from a list of paths on stdin,
    168 #	and write the result to stdout.  Useful for converting
    169 #	from ${DEST_DIR}/path to /path.
    170 #
    171 unprefix()
    172 {
    173 	[ $# -eq 1 ] || err 3 "USAGE: unprefix dir"
    174 	local prefix="${1%/}"
    175 	prefix="$(bre_quote "${prefix}")"
    176 
    177 	${SED} -e "s,^${prefix}/,/,"
    178 }
    179 
    180 # additem item description
    181 #	Add item to list of supported items to check/fix,
    182 #	which are checked/fixed by default if no item is requested by user.
    183 #
    184 additem()
    185 {
    186 	[ $# -eq 2 ] || err 3 "USAGE: additem item description"
    187 	defaultitems="${defaultitems}${defaultitems:+ }$1"
    188 	eval desc_$1=\"\$2\"
    189 }
    190 
    191 # adddisableditem item description
    192 #	Add item to list of supported items to check/fix,
    193 #	but execute the item only if the user asks for it explicitly.
    194 #
    195 adddisableditem()
    196 {
    197 	[ $# -eq 2 ] || err 3 "USAGE: adddisableditem item description"
    198 	otheritems="${otheritems}${otheritems:+ }$1"
    199 	eval desc_$1=\"\$2\"
    200 }
    201 
    202 # checkdir op dir mode
    203 #	Ensure dir exists, and if not, create it with the appropriate mode.
    204 #	Returns 0 if ok, 1 otherwise.
    205 #
    206 check_dir()
    207 {
    208 	[ $# -eq 3 ] || err 3 "USAGE: check_dir op dir mode"
    209 	_cdop="$1"
    210 	_cddir="$2"
    211 	_cdmode="$3"
    212 	[ -d "${_cddir}" ] && return 0
    213 	if [ "${_cdop}" = "check" ]; then
    214 		msg "${_cddir} is not a directory"
    215 		return 1
    216 	elif ! mkdir -m "${_cdmode}" "${_cddir}" ; then
    217 		msg "Can't create missing ${_cddir}"
    218 		return 1
    219 	else
    220 		msg "Missing ${_cddir} created"
    221 	fi
    222 	return 0
    223 }
    224 
    225 # check_ids op type file srcfile start id ...
    226 #	Check if file of type "users" or "groups" contains the relevant IDs.
    227 #	Use srcfile as a reference for the expected contents.
    228 #	The specified "id" names should be given in numerical order,
    229 #	with the first name corresponding to numerical value "start",
    230 #	and with the special name "SKIP" being used to mark gaps in the
    231 #	sequence.
    232 #	Returns 0 if ok, 1 otherwise.
    233 #
    234 check_ids()
    235 {
    236 	[ $# -ge 6 ] || err 3 "USAGE: checks_ids op type file start srcfile id ..."
    237 	_op="$1"
    238 	_type="$2"
    239 	_file="$3"
    240 	_srcfile="$4"
    241 	_start="$5"
    242 	shift 5
    243 	#_ids="$@"
    244 
    245 	if [ ! -f "${_file}" ]; then
    246 		msg "${_file} doesn't exist; can't check for missing ${_type}"
    247 		return 1
    248 	fi
    249 	if [ ! -r "${_file}" ]; then
    250 		msg "${_file} is not readable; can't check for missing ${_type}"
    251 		return 1
    252 	fi
    253 	_notfixed=""
    254 	if [ "${_op}" = "fix" ]; then
    255 		_notfixed="${NOT_FIXED}"
    256 	fi
    257 	_missing="$(${AWK} -v start=$_start -F: '
    258 		BEGIN {
    259 			for (x = 1; x < ARGC; x++) {
    260 				if (ARGV[x] == "SKIP")
    261 					continue;
    262 				idlist[ARGV[x]]++;
    263 				value[ARGV[x]] = start + x - 1;
    264 			}
    265 			ARGC=1
    266 		}
    267 		{
    268 			found[$1]++
    269 			number[$1] = $3
    270 		}
    271 		END {
    272 			for (id in idlist) {
    273 				if (!(id in found))
    274 					printf("%s (missing)\n", id)
    275 				else if (number[id] != value[id])
    276 					printf("%s (%d != %d)\n", id,
    277 					    number[id], value[id])
    278 				start++;
    279 			}
    280 		}
    281 	' "$@" < "${_file}")"	|| return 1
    282 	if [ -n "${_missing}" ]; then
    283 		msg "Error ${_type}${_notfixed}:" $(echo ${_missing})
    284 		msg "Use the following as a template:"
    285 		set -- ${_missing}
    286 		while [ $# -gt 0 ]
    287 		do
    288 			${GREP} -E "^${1}:" ${_srcfile}
    289 			shift 2
    290 		done | sort -t: -k3n
    291 		msg "and adjust if necessary."
    292 		return 1
    293 	fi
    294 	return 0
    295 }
    296 
    297 # populate_dir op onlynew src dest mode file ...
    298 #	Perform op ("check" or "fix") on files in src/ against dest/
    299 #	If op = "check" display missing or changed files, optionally with diffs.
    300 #	If op != "check" copies any missing or changed files.
    301 #	If onlynew evaluates to true, changed files are ignored.
    302 #	Returns 0 if ok, 1 otherwise.
    303 #
    304 populate_dir()
    305 {
    306 	[ $# -ge 5 ] || err 3 "USAGE: populate_dir op onlynew src dest mode file ..."
    307 	_op="$1"
    308 	_onlynew="$2"
    309 	_src="$3"
    310 	_dest="$4"
    311 	_mode="$5"
    312 	shift 5
    313 	#_files="$@"
    314 
    315 	if [ ! -d "${_src}" ]; then
    316 		msg "${_src} is not a directory; skipping check"
    317 		return 1
    318 	fi
    319 	check_dir "${_op}" "${_dest}" 755 || return 1
    320 
    321 	_cmpdir_rv=0
    322 	for f in "$@"; do
    323 		fs="${_src}/${f}"
    324 		fd="${_dest}/${f}"
    325 		_error=""
    326 		if [ ! -f "${fd}" ]; then
    327 			_error="${fd} does not exist"
    328 		elif ! cmp -s "${fs}" "${fd}" ; then
    329 			if $_onlynew; then	# leave existing ${fd} alone
    330 				continue;
    331 			fi
    332 			_error="${fs} != ${fd}"
    333 		else
    334 			continue
    335 		fi
    336 		if [ "${_op}" = "check" ]; then
    337 			msg "${_error}"
    338 			if [ -n "${DIFF_STYLE}" -a -f "${fd}" ]; then
    339 				diff -${DIFF_STYLE} ${DIFF_OPT} "${fd}" "${fs}"
    340 			fi
    341 			_cmpdir_rv=1
    342 		elif ! rm -f "${fd}" ||
    343 		     ! cp -f "${fs}" "${fd}"; then
    344 			msg "Can't copy ${fs} to ${fd}"
    345 			_cmpdir_rv=1
    346 		elif ! chmod "${_mode}" "${fd}"; then
    347 			msg "Can't change mode of ${fd} to ${_mode}"
    348 			_cmpdir_rv=1
    349 		else
    350 			msg "Copied ${fs} to ${fd}"
    351 		fi
    352 	done
    353 	return ${_cmpdir_rv}
    354 }
    355 
    356 # compare_dir op src dest mode file ...
    357 #	Perform op ("check" or "fix") on files in src/ against dest/
    358 #	If op = "check" display missing or changed files, optionally with diffs.
    359 #	If op != "check" copies any missing or changed files.
    360 #	Returns 0 if ok, 1 otherwise.
    361 #
    362 compare_dir()
    363 {
    364 	[ $# -ge 4 ] || err 3 "USAGE: compare_dir op src dest mode file ..."
    365 	_op="$1"
    366 	_src="$2"
    367 	_dest="$3"
    368 	_mode="$4"
    369 	shift 4
    370 	#_files="$@"
    371 
    372 	populate_dir "$_op" false "$_src" "$_dest" "$_mode" "$@"
    373 }
    374 
    375 # move_file op src dest --
    376 #	Check (op == "check") or move (op != "check") from src to dest.
    377 #	Returns 0 if ok, 1 otherwise.
    378 #
    379 move_file()
    380 {
    381 	[ $# -eq 3 ] || err 3 "USAGE: move_file op src dest"
    382 	_fm_op="$1"
    383 	_fm_src="$2"
    384 	_fm_dest="$3"
    385 
    386 	if [ -f "${_fm_src}" -a ! -f "${_fm_dest}" ]; then
    387 		if [ "${_fm_op}" = "check" ]; then
    388 			msg "Move ${_fm_src} to ${_fm_dest}"
    389 			return 1
    390 		fi
    391 		if ! mv "${_fm_src}" "${_fm_dest}"; then
    392 			msg "Can't move ${_fm_src} to ${_fm_dest}"
    393 			return 1
    394 		fi
    395 		msg "Moved ${_fm_src} to ${_fm_dest}"
    396 	fi
    397 	return 0
    398 }
    399 
    400 # rcconf_is_set op name var [verbose] --
    401 #	Load the rcconf for name, and check if obsolete rc.conf(5) variable
    402 #	var is defined or not.
    403 #	Returns 0 if defined (even to ""), otherwise 1.
    404 #	If verbose != "", print an obsolete warning if the var is defined.
    405 #
    406 rcconf_is_set()
    407 {
    408 	[ $# -ge 3 ] || err 3 "USAGE: rcconf_is_set op name var [verbose]"
    409 	_rcis_op="$1"
    410 	_rcis_name="$2"
    411 	_rcis_var="$3"
    412 	_rcis_verbose="$4"
    413 	_rcis_notfixed=""
    414 	if [ "${_rcis_op}" = "fix" ]; then
    415 		_rcis_notfixed="${NOT_FIXED}"
    416 	fi
    417 	(
    418 		for f in \
    419 		    "${DEST_DIR}/etc/rc.conf" \
    420 		    "${DEST_DIR}/etc/rc.conf.d/${_rcis_name}"; do
    421 			[ -f "${f}" ] && . "${f}"
    422 		done
    423 		eval echo -n \"\${${_rcis_var}}\" 1>&3
    424 		if eval "[ -n \"\${${_rcis_var}}\" \
    425 			    -o \"\${${_rcis_var}-UNSET}\" != \"UNSET\" ]"; then
    426 			if [ -n "${_rcis_verbose}" ]; then
    427 				msg \
    428     "Obsolete rc.conf(5) variable '\$${_rcis_var}' found.${_rcis_notfixed}"
    429 			fi
    430 			exit 0
    431 		else
    432 			exit 1
    433 		fi
    434 	)
    435 }
    436 
    437 # rcvar_is_enabled var
    438 #	Check if rcvar is enabled
    439 #
    440 rcvar_is_enabled()
    441 {
    442 	[ $# -eq 1 ] || err 3 "USAGE: rcvar_is_enabled var"
    443 	_rcie_var="$1"
    444 	(
    445 		[ -f "${DEST_DIR}/etc/rc.conf" ] && . "${DEST_DIR}/etc/rc.conf"
    446 		eval _rcie_val=\"\${${_rcie_var}}\"
    447 		case $_rcie_val in
    448 		#	"yes", "true", "on", or "1"
    449 		[Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1)
    450 			exit 0
    451 			;;
    452 
    453 		*)
    454 			exit 1
    455 			;;
    456 		esac
    457 	)
    458 }
    459 
    460 # find_file_in_dirlist() file message dir1 ... --
    461 #	Find which directory file is in, and sets ${dir} to match.
    462 #	Returns 0 if matched, otherwise 1 (and sets ${dir} to "").
    463 #
    464 #	Generally, check the directory for the "checking from source" case,
    465 #	and then the directory for the "checking from extracted etc.tgz" case.
    466 #
    467 find_file_in_dirlist()
    468 {
    469 	[ $# -ge 3 ] || err 3 "USAGE: find_file_in_dirlist file msg dir1 ..."
    470 
    471 	_file="$1" ; shift
    472 	_msg="$1" ; shift
    473 	_dir1st=	# first dir in list
    474 	for dir in "$@"; do
    475 		: ${_dir1st:="${dir}"}
    476 		if [ -f "${dir}/${_file}" ]; then
    477 			if [ "${_dir1st}" != "${dir}" ]; then
    478 				msg \
    479     "(Checking for ${_msg} from ${dir} instead of ${_dir1st})"
    480 			fi
    481 			return 0
    482 		fi
    483 	done
    484 	msg "Can't find source directory for ${_msg}"
    485 	return 1
    486 }
    487 
    488 # file_exists_exact path
    489 #	Returns true if a file exists in the ${DEST_DIR} whose name
    490 #	is exactly ${path}, interpreted in a case-sensitive way
    491 #	even if the underlying file system is case-insensitive.
    492 #
    493 #	The path must begin with '/' or './', and is interpreted as
    494 #	being relative to ${DEST_DIR}.
    495 #
    496 file_exists_exact()
    497 {
    498 	[ -n "$1" ] || err 3 "USAGE: file_exists_exact path"
    499 	_path="${1#.}"
    500 	[ -h "${DEST_DIR}${_path}" ] || \
    501 		[ -e "${DEST_DIR}${_path}" ] || return 1
    502 	while [ "${_path}" != "/" -a "${_path}" != "." ] ; do
    503 		_dirname="$(dirname "${_path}" 2>/dev/null)"
    504 		_basename="$(basename "${_path}" 2>/dev/null)"
    505 		ls -fa "${DEST_DIR}${_dirname}" 2> /dev/null \
    506 			| ${GREP} -F -x "${_basename}" >/dev/null \
    507 			|| return 1
    508 		_path="${_dirname}"
    509 	done
    510 	return 0
    511 }
    512 
    513 # obsolete_paths op
    514 #	Obsolete the list of paths provided on stdin.
    515 #	Each path should start with '/' or './', and
    516 #	will be interpreted relative to ${DEST_DIR}.
    517 #
    518 obsolete_paths()
    519 {
    520 	[ -n "$1" ] || err 3 "USAGE: obsolete_paths fix|check"
    521 	op="$1"
    522 
    523 	failed=0
    524 	while read ofile; do
    525 		if ! ${file_exists_exact} "${ofile}"; then
    526 			continue
    527 		fi
    528 		ofile="${DEST_DIR}${ofile#.}"
    529 		cmd="rm"
    530 		ftype="file"
    531 		if [ -h "${ofile}" ]; then
    532 			ftype="link"
    533 		elif [ -d "${ofile}" ]; then
    534 			ftype="directory"
    535 			cmd="rmdir"
    536 		elif [ ! -e "${ofile}" ]; then
    537 			continue
    538 		fi
    539 		if [ "${op}" = "check" ]; then
    540 			msg "Remove obsolete ${ftype} ${ofile}"
    541 			failed=1
    542 		elif ! eval "${cmd} \"\${ofile}\""; then
    543 			msg "Can't remove obsolete ${ftype} ${ofile}"
    544 			failed=1
    545 		else
    546 			msg "Removed obsolete ${ftype} ${ofile}"
    547 		fi
    548 	done
    549 	return ${failed}
    550 }
    551 
    552 # obsolete_libs dir
    553 #	Display the minor/teeny shared libraries in dir that are considered
    554 #	to be obsolete.
    555 #
    556 #	The implementation supports removing obsolete major libraries
    557 #	if the awk variable AllLibs is set, although there is no way to
    558 #	enable that in the enclosing shell function as this time.
    559 #
    560 obsolete_libs()
    561 {
    562 	[ $# -eq 1 ] || err 3 "USAGE: obsolete_libs dir"
    563 	dir="$1"
    564 
    565 	_obsolete_libs "${dir}"
    566 	_obsolete_libs "/usr/libdata/debug/${dir}"
    567 }
    568 
    569 exclude()
    570 {
    571 	local dollar
    572 	case "$1" in
    573 	-t)
    574 		dollar='$'
    575 		shift
    576 		;;
    577 	*)
    578 		dollar=
    579 		;;
    580 	esac
    581 	if [ -z "$*" ]; then
    582 		cat
    583 	else
    584 		eval ${GREP} -v -E "'(^$(echo $* | \
    585 		    ${SED} -e s/\\./\\\\./g -e 's/ /'${dollar}'|^/'g)${dollar})'"
    586 	fi
    587 }
    588 
    589 #
    590 # find all the target symlinks of shared libraries and exclude them
    591 # from consideration for removal
    592 #
    593 exclude_libs()
    594 {
    595 	local target="$(ls -l -d lib*.so.* 2> /dev/null \
    596 	    | ${AWK} '{ print $11; }' \
    597 	    | ${SED} -e 's@.*/@@' | ${SORT} -u)"
    598 	exclude -t ${target}
    599 }
    600 
    601 _obsolete_libs()
    602 {
    603 	dir="$1"
    604 
    605 	(
    606 
    607 	if [ ! -e "${DEST_DIR}/${dir}" ]
    608 	then
    609 		return 0
    610 	fi
    611 
    612 	cd "${DEST_DIR}/${dir}" || err 2 "can't cd to ${DEST_DIR}/${dir}"
    613 	echo lib*.so.* \
    614 	| tr ' ' '\n' \
    615 	| ${AWK} -v LibDir="${dir}/" '
    616 #{
    617 
    618 function digit(v, c, n) { return (n <= c) ? v[n] : 0 }
    619 
    620 function checklib(results, line, regex) {
    621 	if (! match(line, regex))
    622 		return
    623 	lib = substr(line, RSTART, RLENGTH)
    624 	rev = substr($0, RLENGTH+1)
    625 	if (! (lib in results)) {
    626 		results[lib] = rev
    627 		return
    628 	}
    629 	orevc = split(results[lib], orev, ".")
    630 	nrevc = split(rev, nrev, ".")
    631 	maxc = (orevc > nrevc) ? orevc : nrevc
    632 	for (i = 1; i <= maxc; i++) {
    633 		res = digit(orev, orevc, i) - digit(nrev, nrevc, i)
    634 		if (res < 0) {
    635 			print LibDir lib results[lib]
    636 			results[lib] = rev
    637 			return
    638 		} else if (res > 0) {
    639 			print LibDir lib rev
    640 			return
    641 		}
    642 	}
    643 }
    644 
    645 /^lib.*\.so\.[0-9]+\.[0-9]+(\.[0-9]+)?(\.debug)?$/ {
    646 	if (AllLibs)
    647 		checklib(minor, $0, "^lib.*\\.so\\.")
    648 	else
    649 		checklib(found, $0, "^lib.*\\.so\\.[0-9]+\\.")
    650 }
    651 
    652 /^lib.*\.so\.[0-9]+$/ {
    653 	if (AllLibs)
    654 		checklib(major, $0, "^lib.*\\.so\\.")
    655 }
    656 
    657 #}' | exclude_libs
    658 
    659 	)
    660 }
    661 
    662 # obsolete_stand dir
    663 #	Prints the names of all obsolete files and subdirs below the
    664 #	provided dir.  dir should be something like /stand/${MACHINE}.
    665 #	The input dir and all output paths are interpreted
    666 #	relative to ${DEST_DIR}.
    667 #
    668 #	Assumes that the numerically largest subdir is current, and all
    669 #	others are obsolete.
    670 #
    671 obsolete_stand()
    672 {
    673 	[ $# -eq 1 ] || err 3 "USAGE: obsolete_stand dir"
    674 	local dir="$1"
    675 	local subdir
    676 
    677 	if ! [ -d "${DEST_DIR}${dir}" ]; then
    678 		msg "${DEST_DIR}${dir} doesn't exist; can't check for obsolete files"
    679 		return 1
    680 	fi
    681 
    682 	( cd "${DEST_DIR}${dir}" && ls -1d [0-9]*[0-9]/. ) \
    683 	| ${GREP} -v '[^0-9./]' \
    684 	| sort -t. -r -n -k1,1 -k2,2 -k3,3 \
    685 	| tail -n +2 \
    686 	| while read subdir ; do
    687 		subdir="${subdir%/.}"
    688 		find "${DEST_DIR}${dir}/${subdir}" -depth -print
    689 	done \
    690 	| unprefix "${DEST_DIR}"
    691 }
    692 
    693 # modify_file op srcfile scratchfile awkprog
    694 #	Apply awkprog to srcfile sending output to scratchfile, and
    695 #	if appropriate replace srcfile with scratchfile.
    696 #
    697 modify_file()
    698 {
    699 	[ $# -eq 4 ] || err 3 "USAGE: modify_file op file scratch awkprog"
    700 
    701 	_mfop="$1"
    702 	_mffile="$2"
    703 	_mfscratch="$3"
    704 	_mfprog="$4"
    705 	_mffailed=0
    706 
    707 	${AWK} "${_mfprog}" < "${_mffile}" > "${_mfscratch}"
    708 	if ! cmp -s "${_mffile}" "${_mfscratch}"; then
    709 		diff "${_mffile}" "${_mfscratch}" > "${_mfscratch}.diffs"
    710 		if [ "${_mfop}" = "check" ]; then
    711 			msg "${_mffile} needs the following changes:"
    712 			_mffailed=1
    713 		elif ! rm -f "${_mffile}" ||
    714 		     ! cp -f "${_mfscratch}" "${_mffile}"; then
    715 			msg "${_mffile} changes not applied:"
    716 			_mffailed=1
    717 		else
    718 			msg "${_mffile} changes applied:"
    719 		fi
    720 		while read _line; do
    721 			msg "	${_line}"
    722 		done < "${_mfscratch}.diffs"
    723 	fi
    724 	return ${_mffailed}
    725 }
    726 
    727 
    728 # contents_owner op directory user group
    729 #	Make sure directory and contents are owned (and group-owned)
    730 #	as specified.
    731 #
    732 contents_owner()
    733 {
    734 	[ $# -eq 4 ] || err 3 "USAGE: contents_owner op dir user group"
    735 
    736 	_op="$1"
    737 	_dir="$2"
    738 	_user="$3"
    739 	_grp="$4"
    740 
    741 	if [ "${_op}" = "check" ]; then
    742 		_files=$(find "${_dir}" \( \( ! -user "${_user}" \) -o \
    743 		                \( ! -group "${_grp}" \) \) )
    744 		_error=$?
    745 		if [ ! -z "$_files" ] || [ $_error != 0 ]; then
    746 			msg "${_dir} and contents not all owned by" \
    747 			    "${_user}:${_grp}"
    748 			return 1
    749 		else
    750 			return 0
    751 		fi
    752 	elif [ "${_op}" = "fix" ]; then
    753 		find "${_dir}" \( \( ! -user "${_user}" \) -o \
    754 		\( ! -group "${_grp}" \) \) \
    755 		-exec chown "${_user}:${_grp}" -- {} \;
    756 	fi
    757 }
    758 
    759 # get_makevar var ...
    760 #	Retrieve the value of a user-settable system make variable
    761 get_makevar()
    762 {
    763 	$SOURCEMODE || err 3 "get_makevar must be used in source mode"
    764 	[ $# -eq 0 ] && err 3 "USAGE: get_makevar var ..."
    765 
    766 	for _var in "$@"; do
    767 		_value="$(echo '.include <bsd.own.mk>' | \
    768 		    ${MAKE} -f - -V "\${${_var}}")"
    769 
    770 		eval ${_var}=\"\${_value}\"
    771 	done
    772 }
    773 
    774 # detect_x11
    775 #	Detect if X11 components should be analysed and set values of
    776 #	relevant variables.
    777 detect_x11()
    778 {
    779 	if $SOURCEMODE; then
    780 		get_makevar MKX11 X11ROOTDIR X11SRCDIR
    781 	else
    782 		if [ -f "${SRC_DIR}/etc/mtree/set.xetc" ]; then
    783 			MKX11=yes
    784 			X11ROOTDIR=/this/value/isnt/used/yet
    785 		else
    786 			MKX11=no
    787 			X11ROOTDIR=
    788 		fi
    789 		X11SRCDIR=/nonexistent/xsrc
    790 	fi
    791 }
    792 
    793 #
    794 #	find out where MAKEDEV lives, set MAKEDEV_DIR appropriately
    795 #
    796 find_makedev()
    797 {
    798 	if [ -e "${DEST_DIR}/dev/MAKEDEV" ]; then
    799 		MAKEDEV_DIR="${DEST_DIR}/dev"
    800 	elif [ -e "${DEST_DIR}/etc/MAKEDEV" ]; then
    801 		MAKEDEV_DIR="${DEST_DIR}/etc"
    802 	else
    803 		MAKEDEV_DIR="${DEST_DIR}/dev"
    804 	fi
    805 }
    806 
    807 
    808 #
    809 #	items
    810 #	-----
    811 #
    812 # NOTE: Keep these items sorted, except for obsolete* which are listed last.
    813 #
    814 
    815 #
    816 #	atf
    817 #
    818 
    819 handle_atf_user()
    820 {
    821 	local op="$1"
    822 	local failed=0
    823 
    824 	local conf="${DEST_DIR}/etc/atf/common.conf"
    825 	if grep '[^#]*unprivileged-user[ \t]*=.*_atf' "${conf}" >/dev/null
    826 	then
    827 		if [ "$1" = "fix" ]; then
    828 			${SED} -e \
    829 			    "/[^#]*unprivileged-user[\ t]*=/s/_atf/_tests/" \
    830 			    "${conf}" >"${conf}.new"
    831 			failed=$(( ${failed} + $? ))
    832 			mv "${conf}.new" "${conf}"
    833 			failed=$(( ${failed} + $? ))
    834 			msg "Set unprivileged-user=_tests in ${conf}"
    835 		else
    836 			msg "unprivileged-user=_atf in ${conf} should be" \
    837 			    "unprivileged-user=_tests"
    838 			failed=1
    839 		fi
    840 	fi
    841 
    842 	return ${failed}
    843 }
    844 
    845 additem atf "install missing atf configuration files and validate them"
    846 do_atf()
    847 {
    848 	[ -n "$1" ] || err 3 "USAGE: do_atf fix|check"
    849 	op="$1"
    850 	failed=0
    851 
    852 	# Ensure atf configuration files are in place.
    853 	if find_file_in_dirlist NetBSD.conf "NetBSD.conf" \
    854 	    "${SRC_DIR}/external/bsd/atf/etc/atf" \
    855 	    "${SRC_DIR}/etc/atf"; then
    856 			# ${dir} is set by find_file_in_dirlist()
    857 		populate_dir "${op}" true "${dir}" "${DEST_DIR}/etc/atf" 644 \
    858 		    NetBSD.conf common.conf || failed=1
    859 	else
    860 		failed=1
    861 	fi
    862 	if find_file_in_dirlist atf-run.hooks "atf-run.hooks" \
    863 	    "${SRC_DIR}/external/bsd/atf/dist/tools/sample" \
    864 	    "${SRC_DIR}/etc/atf"; then
    865 			# ${dir} is set by find_file_in_dirlist()
    866 		populate_dir "${op}" true "${dir}" "${DEST_DIR}/etc/atf" 644 \
    867 		    atf-run.hooks || failed=1
    868 	else
    869 		failed=1
    870 	fi
    871 
    872 	# Validate the _atf to _tests user/group renaming.
    873 	if [ -f "${DEST_DIR}/etc/atf/common.conf" ]; then
    874 		handle_atf_user "${op}" || failed=1
    875 	else
    876 		failed=1
    877 	fi
    878 
    879 	return ${failed}
    880 }
    881 
    882 
    883 #
    884 #	autofsconfig
    885 #
    886 
    887 additem autofsconfig "automounter configuration files"
    888 do_autofsconfig()
    889 {
    890 	[ -n "$1" ] || err 3 "USAGE: do_autofsconfig fix|check"
    891 	local autofs_files="
    892 include_ldap
    893 include_nis
    894 special_hosts
    895 special_media
    896 special_noauto
    897 special_null
    898 "
    899 	op="$1"
    900 	failed=0
    901 	if [ "$op" = "fix" ]; then
    902 		mkdir -p "${DEST_DIR}/etc/autofs"
    903 	fi
    904 	failed=$(( ${failed} + $? ))
    905 	populate_dir "$op" true "${SRC_DIR}/etc" \
    906 	    "${DEST_DIR}/etc" \
    907 	    644 \
    908 	    auto_master
    909 	failed=$(( ${failed} + $? ))
    910 	populate_dir "$op" true "${SRC_DIR}/etc/autofs" \
    911 	    "${DEST_DIR}/etc/autofs" \
    912 	    644 \
    913 	    ${autofs_files}
    914 	return ${failed}
    915 }
    916 
    917 
    918 #
    919 #	blocklist
    920 #
    921 
    922 fixblock()
    923 {
    924 	local op="$1"
    925 	local target="${DEST_DIR}$2"
    926 
    927 	if [ ! -f "${target}" ]; then
    928 		continue
    929 	fi
    930 
    931 	if ${GREP} '[bB]lack' "${target}" > /dev/null; then
    932 		if [ "$1" = "check" ]; then
    933 			msg "Fix old configuration file(s)."
    934 			return 1
    935 		else
    936 			local p=$(${STAT} -f %Lp "${target}")
    937 			chmod u+w "${target}" || return 1
    938 			if [ "$2" = "/etc/npf.conf" ]; then
    939 				${SED} -i -e 's/"blacklistd"/"blocklistd"/g' "${target}"
    940 			else
    941 				${SED} -i -e 's/\([bB]\)lacklist/\1locklist/g' "${target}"
    942 			fi
    943 			chmod "${p}" "${target}"
    944 		fi
    945 	fi
    946 }
    947 
    948 additem blocklist "rename old files to blocklist"
    949 do_blocklist()
    950 {
    951 	[ -n "$1" ] || err 3 "USAGE: do_blocklist fix|check"
    952 	local op="$1"
    953 
    954 	# if we are actually using blocklistd
    955 	for i in /var/db/blacklist.db /etc/blacklistd.conf; do
    956 		local old="${DEST_DIR}${i}"
    957 		if [ ! -f "${old}" ]; then
    958 			continue
    959 		elif [ "$1" = "check" ]; then
    960 			msg "Rename old file(s)."
    961 			return 1
    962 		fi
    963 		local new=$(echo "${old}" | ${SED} s/black/block/)
    964 		mv "${old}" "${new}" || return 1
    965 	done
    966 
    967 	for i in /etc/rc.conf /etc/npf.conf /etc/blocklistd.conf \
    968 	    /etc/defaults/rc.conf; do
    969 		fixblock "${op}" "${i}" || return 1
    970 	done
    971 }
    972 
    973 
    974 #
    975 #	bluetooth
    976 #
    977 
    978 additem bluetooth "Bluetooth configuration is up to date"
    979 do_bluetooth()
    980 {
    981 	[ -n "$1" ] || err 3 "USAGE: do_bluetooth fix|check"
    982 	op="$1"
    983 	failed=0
    984 
    985 	populate_dir "${op}" true \
    986 		"${SRC_DIR}/etc/bluetooth" "${DEST_DIR}/etc/bluetooth" 644 \
    987 		hosts protocols btattach.conf btdevctl.conf
    988 	failed=$(( ${failed} + $? ))
    989 
    990 	move_file "${op}" "${DEST_DIR}/var/db/btdev.xml" \
    991 			"${DEST_DIR}/var/db/btdevctl.plist"
    992 	failed=$(( ${failed} + $? ))
    993 
    994 	notfixed=""
    995 	if [ "${op}" = "fix" ]; then
    996 		notfixed="${NOT_FIXED}"
    997 	fi
    998 	for _v in btattach btconfig btdevctl; do
    999 		if rcvar_is_enabled "${_v}"; then
   1000 			msg \
   1001     "${_v} is obsolete in rc.conf(5)${notfixed}: use bluetooth=YES"
   1002 			failed=$(( ${failed} + 1 ))
   1003 		fi
   1004 	done
   1005 
   1006 	return ${failed}
   1007 }
   1008 
   1009 
   1010 #
   1011 #	catpages
   1012 #
   1013 
   1014 obsolete_catpages()
   1015 {
   1016 	basedir="$2"
   1017 	section="$3"
   1018 	mandir="${basedir}/man${section}"
   1019 	catdir="${basedir}/cat${section}"
   1020 	test -d "$mandir" || return 0
   1021 	test -d "$catdir" || return 0
   1022 	(cd "$mandir" && find . -type f) | {
   1023 	failed=0
   1024 	while read manpage; do
   1025 		manpage="${manpage#./}"
   1026 		case "$manpage" in
   1027 		*.Z)
   1028 			catname="$catdir/${manpage%.*.Z}.0"
   1029 			;;
   1030 		*.gz)
   1031 			catname="$catdir/${manpage%.*.gz}.0"
   1032 			;;
   1033 		*)
   1034 			catname="$catdir/${manpage%.*}.0"
   1035 			;;
   1036 		esac
   1037 		test -e "$catname" -a "$catname" -ot "$mandir/$manpage" || continue
   1038 		if [ "$1" = "fix" ]; then
   1039 			rm "$catname"
   1040 			failed=$(( ${failed} + $? ))
   1041 			msg "Removed obsolete cat page $catname"
   1042 		else
   1043 			msg "Obsolete cat page $catname"
   1044 			failed=1
   1045 		fi
   1046 	done
   1047 	exit $failed
   1048 	}
   1049 }
   1050 
   1051 additem catpages "remove outdated cat pages"
   1052 do_catpages()
   1053 {
   1054 	failed=0
   1055 	for manbase in /usr/share/man /usr/X11R6/man /usr/X11R7/man; do
   1056 		for sec in 1 2 3 4 5 6 7 8 9; do
   1057 			obsolete_catpages "$1" "${DEST_DIR}${manbase}" "${sec}"
   1058 			failed=$(( ${failed} + $? ))
   1059 			if [ "$1" = "fix" ]; then
   1060 				rmdir "${DEST_DIR}${manbase}/cat${sec}"/* \
   1061 					2>/dev/null
   1062 				rmdir "${DEST_DIR}${manbase}/cat${sec}" \
   1063 					2>/dev/null
   1064 			fi
   1065 		done
   1066 	done
   1067 	return $failed
   1068 }
   1069 
   1070 
   1071 #
   1072 #	ddbonpanic
   1073 #
   1074 
   1075 additem ddbonpanic "verify ddb.onpanic is configured in sysctl.conf"
   1076 do_ddbonpanic()
   1077 {
   1078 	[ -n "$1" ] || err 3 "USAGE: do_ddbonpanic fix|check"
   1079 
   1080 	if ${GREP} -E '^#*[[:space:]]*ddb\.onpanic[[:space:]]*\??=[[:space:]]*[[:digit:]]+' \
   1081 		"${DEST_DIR}/etc/sysctl.conf" >/dev/null 2>&1
   1082 	then
   1083 		result=0
   1084 	else
   1085 		if [ "$1" = check ]; then
   1086 			msg \
   1087     "The ddb.onpanic behaviour is not explicitly specified in /etc/sysctl.conf"
   1088 			result=1
   1089 		else
   1090 			echo >> "${DEST_DIR}/etc/sysctl.conf"
   1091 			${SED} < "${SRC_DIR}/etc/sysctl.conf" \
   1092 			   -e '/^ddb\.onpanic/q' | \
   1093 			       ${SED} -e '1,/^$/d' >> \
   1094 			    "${DEST_DIR}/etc/sysctl.conf"
   1095 			result=$?
   1096 		fi
   1097 	fi
   1098 	return ${result}
   1099 }
   1100 
   1101 
   1102 #
   1103 #	defaults
   1104 #
   1105 
   1106 additem defaults "/etc/defaults/ being up to date"
   1107 do_defaults()
   1108 {
   1109 	[ -n "$1" ] || err 3 "USAGE: do_defaults fix|check"
   1110 	local op="$1"
   1111 	local failed=0
   1112 	local etcsets=$(getetcsets)
   1113 
   1114 	local rc_exclude_scripts=""
   1115 	if $SOURCEMODE; then
   1116 		# For most architectures rc.conf(5) should be the same as the
   1117 		# one obtained from a source directory, except for the ones
   1118 		# that have an append file for it.
   1119 		local rc_conf_app="${SRC_DIR}/etc/etc.${MACHINE}/rc.conf.append"
   1120 		if [ -f "${rc_conf_app}" ]; then
   1121 			rc_exclude_scripts="rc.conf"
   1122 
   1123 			# Generate and compare the correct rc.conf(5) file
   1124 			mkdir "${SCRATCHDIR}/defaults"
   1125 
   1126 			cat "${SRC_DIR}/etc/defaults/rc.conf" "${rc_conf_app}" \
   1127 			    > "${SCRATCHDIR}/defaults/rc.conf"
   1128 
   1129 			compare_dir "${op}" "${SCRATCHDIR}/defaults" \
   1130 			    "${DEST_DIR}/etc/defaults" \
   1131 			    444 \
   1132 			    "rc.conf"
   1133 			failed=$(( ${failed} + $? ))
   1134 		fi
   1135 	fi
   1136 
   1137 	find_file_in_dirlist pf.boot.conf "pf.boot.conf" \
   1138 	    "${SRC_DIR}/usr.sbin/pf/etc/defaults" "${SRC_DIR}/etc/defaults" \
   1139 	    || return 1
   1140 	# ${dir} is set by find_file_in_dirlist()
   1141 	compare_dir "$op" "${dir}" "${DEST_DIR}/etc/defaults" 444 pf.boot.conf
   1142 	failed=$(( ${failed} + $? ))
   1143 
   1144 	rc_exclude_scripts="${rc_exclude_scripts} pf.boot.conf"
   1145 
   1146 	local rc_default_conf_files="$(select_set_files /etc/defaults/ \
   1147 	    "/etc/defaults/\([^[:space:]]*\.conf\)" ${etcsets} | \
   1148 	    exclude ${rc_exclude_scripts})"
   1149 	compare_dir "$op" "${SRC_DIR}/etc/defaults" "${DEST_DIR}/etc/defaults" \
   1150 		444 \
   1151 		${rc_default_conf_files}
   1152 	failed=$(( ${failed} + $? ))
   1153 
   1154 
   1155 	return ${failed}
   1156 }
   1157 
   1158 
   1159 #
   1160 #	dhcpcd
   1161 #
   1162 
   1163 additem dhcpcd "dhcpcd configuration is up to date"
   1164 do_dhcpcd()
   1165 {
   1166 	[ -n "$1" ] || err 3 "USAGE: do_dhcpcd fix|check"
   1167 	op="$1"
   1168 	failed=0
   1169 
   1170 	find_file_in_dirlist dhcpcd.conf "dhcpcd.conf" \
   1171 	    "${SRC_DIR}/external/bsd/dhcpcd/dist/src" \
   1172 	    "${SRC_DIR}/etc" || return 1
   1173 			# ${dir} is set by find_file_in_dirlist()
   1174 	populate_dir "$op" true "${dir}" "${DEST_DIR}/etc" 644 dhcpcd.conf
   1175 	failed=$(( ${failed} + $? ))
   1176 
   1177 	check_dir "${op}" "${DEST_DIR}/var/db/dhcpcd" 755
   1178 	failed=$(( ${failed} + $? ))
   1179 
   1180 	move_file "${op}" \
   1181 		"${DEST_DIR}/etc/dhcpcd.duid" \
   1182 		"${DEST_DIR}/var/db/dhcpcd/duid"
   1183 	failed=$(( ${failed} + $? ))
   1184 
   1185 	move_file "${op}" \
   1186 		"${DEST_DIR}/etc/dhcpcd.secret" \
   1187 		"${DEST_DIR}/var/db/dhcpcd/secret"
   1188 	failed=$(( ${failed} + $? ))
   1189 
   1190 	move_file "${op}" \
   1191 		"${DEST_DIR}/var/db/dhcpcd-rdm.monotonic" \
   1192 		"${DEST_DIR}/var/db/dhcpcd/rdm_monotonic"
   1193 	failed=$(( ${failed} + $? ))
   1194 
   1195 	for lease in "${DEST_DIR}/var/db/dhcpcd-"*.lease*; do
   1196 		[ -f "${lease}" ] || continue
   1197 		new_lease=$(basename "${lease}" | ${SED} -e 's/dhcpcd-//')
   1198 		new_lease="${DEST_DIR}/var/db/dhcpcd/${new_lease}"
   1199 		move_file "${op}" "${lease}" "${new_lease}"
   1200 		failed=$(( ${failed} + $? ))
   1201 	done
   1202 
   1203 	chroot_dir="${DEST_DIR}/var/chroot/dhcpcd"
   1204 	move_file "${op}" \
   1205 		"${chroot_dir}/var/db/dhcpcd/duid" \
   1206 		"${DEST_DIR}/var/db/dhcpcd/duid"
   1207 	failed=$(( ${failed} + $? ))
   1208 
   1209 	move_file "${op}" \
   1210 		"${chroot_dir}/var/db/dhcpcd/secret" \
   1211 		"${DEST_DIR}/var/db/dhcpcd/secret"
   1212 	failed=$(( ${failed} + $? ))
   1213 
   1214 	move_file "${op}" \
   1215 		"${chroot_dir}/var/db/dhcpcd/rdm_monotonic" \
   1216 		"${DEST_DIR}/var/db/dhcpcd/rdm_monotonic"
   1217 	failed=$(( ${failed} + $? ))
   1218 
   1219 	for lease in "${chroot_dir}/var/db/dhcpcd/"*.lease*; do
   1220 		[ -f "${lease}" ] || continue
   1221 		new_lease="${DEST_DIR}/var/db/dhcpcd/$(basename ${lease})"
   1222 		move_file "${op}" "${lease}" "${new_lease}"
   1223 		failed=$(( ${failed} + $? ))
   1224 	done
   1225 
   1226 	# Ensure chroot is now empty
   1227 	for dir in \
   1228 		$(find ${chroot_dir} ! -type d) \
   1229 		$(find ${chroot_dir} -type d -mindepth 1 | sort -r)
   1230 	do
   1231 		echo "/var/chroot/dhcpcd${dir##${chroot_dir}}"
   1232 	done | obsolete_paths "${op}"
   1233 	failed=$(( ${failed} + $? ))
   1234 
   1235 	contents_owner "${op}" "${DEST_DIR}/var/db/dhcpcd" root wheel
   1236 	failed=$(( ${failed} + $? ))
   1237 
   1238 	return ${failed}
   1239 }
   1240 
   1241 
   1242 #
   1243 #	dhcpcdrundir
   1244 #
   1245 
   1246 additem dhcpcdrundir "accidentally created /@RUNDIR@ does not exist"
   1247 do_dhcpcdrundir()
   1248 {
   1249 	[ -n "$1" ] || err 3 "USAGE: do_dhcpcdrundir fix|check"
   1250 	op="$1"
   1251 	failed=0
   1252 
   1253 	if [ -d "${DEST_DIR}/@RUNDIR@" ]; then
   1254 		if [ "${op}" = "check" ]; then
   1255 			msg "Remove erroneously created /@RUNDIR@"
   1256 			failed=1
   1257 		elif ! rm -r "${DEST_DIR}/@RUNDIR@"; then
   1258 			msg "Failed to remove ${DEST_DIR}/@RUNDIR@"
   1259 			failed=1
   1260 		else
   1261 			msg "Removed erroneously created ${DEST_DIR}/@RUNDIR@"
   1262 		fi
   1263 	fi
   1264 	return ${failed}
   1265 }
   1266 
   1267 
   1268 #
   1269 #	envsys
   1270 #
   1271 
   1272 additem envsys "envsys configuration is up to date"
   1273 do_envsys()
   1274 {
   1275 	[ -n "$1" ] || err 3 "USAGE: do_envsys fix|check"
   1276 	local op="$1"
   1277 	local failed=0
   1278 	local etcsets=$(getetcsets)
   1279 
   1280 	populate_dir "$op" true "${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 \
   1281 		envsys.conf
   1282 	failed=$(( ${failed} + $? ))
   1283 
   1284 	local powerd_scripts="$(select_set_files /etc/powerd/scripts/ \
   1285 	    "/etc/powerd/scripts/\([^[:space:]/]*\)" ${etcsets})"
   1286 
   1287 	populate_dir "$op" true "${SRC_DIR}/etc/powerd/scripts" \
   1288 		"${DEST_DIR}/etc/powerd/scripts" \
   1289 		555 \
   1290 		${powerd_scripts}
   1291 	failed=$(( ${failed} + $? ))
   1292 
   1293 	return ${failed}
   1294 }
   1295 
   1296 
   1297 #
   1298 #	fontconfig
   1299 #
   1300 
   1301 additem fontconfig "X11 font configuration is up to date"
   1302 do_fontconfig()
   1303 {
   1304 	[ -n "$1" ] || err 3 "USAGE: do_fontconfig fix|check"
   1305 	op="$1"
   1306 	failed=0
   1307 
   1308 	# First, check for updates we can handle.
   1309 	if ! $SOURCEMODE; then
   1310 		FONTCONFIG_DIR="${SRC_DIR}/etc/fonts/conf.avail"
   1311 	else
   1312 		FONTCONFIG_DIR="${XSRC_DIR}/external/mit/fontconfig/dist/conf.d"
   1313 	fi
   1314 
   1315 	if [ ! -d "${FONTCONFIG_DIR}" ]; then
   1316 		msg "${FONTCONFIG_DIR} is not a directory; skipping check"
   1317 		return 0
   1318 	fi
   1319 	local regular_fonts="
   1320 10-autohint.conf
   1321 10-scale-bitmap-fonts.conf
   1322 10-sub-pixel-bgr.conf
   1323 10-sub-pixel-none.conf
   1324 10-sub-pixel-rgb.conf
   1325 10-sub-pixel-vbgr.conf
   1326 10-sub-pixel-vrgb.conf
   1327 10-unhinted.conf
   1328 11-lcdfilter-default.conf
   1329 11-lcdfilter-legacy.conf
   1330 11-lcdfilter-light.conf
   1331 20-unhint-small-vera.conf
   1332 25-unhint-nonlatin.conf
   1333 30-metric-aliases.conf
   1334 40-nonlatin.conf
   1335 45-generic.conf
   1336 45-latin.conf
   1337 49-sansserif.conf
   1338 50-user.conf
   1339 51-local.conf
   1340 60-generic.conf
   1341 60-latin.conf
   1342 65-fonts-persian.conf
   1343 65-khmer.conf
   1344 65-nonlatin.conf
   1345 69-unifont.conf
   1346 70-no-bitmaps.conf
   1347 70-yes-bitmaps.conf
   1348 80-delicious.conf
   1349 90-synthetic.conf
   1350 "
   1351 	populate_dir "$op" false "${FONTCONFIG_DIR}" \
   1352 	    "${DEST_DIR}/etc/fonts/conf.avail" \
   1353 	    444 \
   1354 	    ${regular_fonts}
   1355 	failed=$(( ${failed} + $? ))
   1356 
   1357 	if ! $SOURCEMODE; then
   1358 		FONTS_DIR="${SRC_DIR}/etc/fonts"
   1359 	else
   1360 		FONTS_DIR="${SRC_DIR}/external/mit/xorg/lib/fontconfig/etc"
   1361 	fi
   1362 
   1363 	populate_dir "$op" false "${FONTS_DIR}" "${DEST_DIR}/etc/fonts" 444 \
   1364 		fonts.conf
   1365 	failed=$(( ${failed} + $? ))
   1366 
   1367 	# We can't modify conf.d easily; someone might have removed a file.
   1368 
   1369 	# Look for old files that need to be deleted.
   1370 	obsolete_fonts="
   1371 10-autohint.conf
   1372 10-no-sub-pixel.conf
   1373 10-sub-pixel-bgr.conf
   1374 10-sub-pixel-rgb.conf
   1375 10-sub-pixel-vbgr.conf
   1376 10-sub-pixel-vrgb.conf
   1377 10-unhinted.conf
   1378 25-unhint-nonlatin.conf
   1379 65-khmer.conf
   1380 70-no-bitmaps.conf
   1381 70-yes-bitmaps.conf
   1382 "
   1383 	failed_fonts=""
   1384 	for i in ${obsolete_fonts}; do
   1385 	    if [ -f "${DEST_DIR}/etc/fonts/conf.d/$i" ]; then
   1386 		    conf_d_failed=1
   1387 		    failed_fonts="$failed_fonts $i"
   1388 	    fi
   1389 	done
   1390 
   1391 	if [ -n "$failed_fonts" ]; then
   1392 		msg \
   1393     "Broken fontconfig configuration found; please delete these files:"
   1394 		msg "[$failed_fonts]"
   1395 		failed=$(( ${failed} + 1 ))
   1396 	fi
   1397 
   1398 	return ${failed}
   1399 }
   1400 
   1401 
   1402 #
   1403 #	gid
   1404 #
   1405 
   1406 additem gid "required groups in /etc/group"
   1407 do_gid()
   1408 {
   1409 	[ -n "$1" ] || err 3 "USAGE: do_gid fix|check"
   1410 
   1411 	check_ids "$1" groups "${DEST_DIR}/etc/group" \
   1412 	    "${SRC_DIR}/etc/group" 14 \
   1413 	    named ntpd sshd SKIP _pflogd _rwhod staff _proxy _timedc \
   1414 	    _sdpd _httpd _mdnsd _tests _tcpdump _tss _gpio _rtadvd SKIP \
   1415 	    _unbound _nsd nvmm _dhcpcd
   1416 }
   1417 
   1418 
   1419 #
   1420 #	gpio
   1421 #
   1422 
   1423 additem gpio "gpio configuration is up to date"
   1424 do_gpio()
   1425 {
   1426 	[ -n "$1" ] || err 3 "USAGE: do_gpio fix|check"
   1427 	op="$1"
   1428 	failed=0
   1429 
   1430 	populate_dir "$op" true "${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 \
   1431 		gpio.conf
   1432 	failed=$(( ${failed} + $? ))
   1433 
   1434 	return ${failed}
   1435 }
   1436 
   1437 
   1438 #
   1439 #	hosts
   1440 #
   1441 
   1442 additem hosts "/etc/hosts being up to date"
   1443 do_hosts()
   1444 {
   1445 	[ -n "$1" ] || err 3 "USAGE: do_hosts fix|check"
   1446 
   1447 	modify_file "$1" "${DEST_DIR}/etc/hosts" "${SCRATCHDIR}/hosts" '
   1448 		/^(127\.0\.0\.1|::1)[ 	]+[^\.]*$/ {
   1449 			print $0, "localhost."
   1450 			next
   1451 		}
   1452 		{ print }
   1453 	'
   1454 	return $?
   1455 }
   1456 
   1457 
   1458 #
   1459 #	iscsi
   1460 #
   1461 
   1462 additem iscsi "/etc/iscsi is populated"
   1463 do_iscsi()
   1464 {
   1465 	[ -n "$1" ] || err 3 "USAGE: do_iscsi fix|check"
   1466 
   1467 	populate_dir "${op}" true \
   1468 	    "${SRC_DIR}/etc/iscsi" "${DEST_DIR}/etc/iscsi" 600 auths
   1469 	populate_dir "${op}" true \
   1470 	    "${SRC_DIR}/etc/iscsi" "${DEST_DIR}/etc/iscsi" 644 targets
   1471 	return $?
   1472 }
   1473 
   1474 
   1475 #
   1476 #	mailerconf
   1477 #
   1478 
   1479 adddisableditem mailerconf "update /etc/mailer.conf after sendmail removal"
   1480 do_mailerconf()
   1481 {
   1482 	[ -n "$1" ] || err 3 "USAGE: do_mailterconf fix|check"
   1483 	op="$1"
   1484 
   1485 	failed=0
   1486 	mta_path="$(${AWK} '/^sendmail[ \t]/{print$2}' \
   1487 		"${DEST_DIR}/etc/mailer.conf")"
   1488 	old_sendmail_path="/usr/libexec/sendmail/sendmail"
   1489 	if [ "${mta_path}" = "${old_sendmail_path}" ]; then
   1490 	    if [ "$op" = check ]; then
   1491 		msg "mailer.conf points to obsolete ${old_sendmail_path}"
   1492 		failed=1;
   1493 	    else
   1494 		populate_dir "${op}" false \
   1495 		"${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 mailer.conf
   1496 		failed=$?
   1497 	    fi
   1498 	fi
   1499 
   1500 	return ${failed}
   1501 }
   1502 
   1503 
   1504 #
   1505 #	makedev
   1506 #
   1507 
   1508 additem makedev "/dev/MAKEDEV being up to date"
   1509 do_makedev()
   1510 {
   1511 	[ -n "$1" ] || err 3 "USAGE: do_makedev fix|check"
   1512 	failed=0
   1513 
   1514 	if [ -f "${SRC_DIR}/etc/MAKEDEV.tmpl" ]; then
   1515 			# generate MAKEDEV from source if source is available
   1516 		env MACHINE="${MACHINE}" \
   1517 		    MACHINE_ARCH="${MACHINE_ARCH}" \
   1518 		    NETBSDSRCDIR="${SRC_DIR}" \
   1519 		    ${AWK} -f "${SRC_DIR}/etc/MAKEDEV.awk" \
   1520 		    "${SRC_DIR}/etc/MAKEDEV.tmpl" > "${SCRATCHDIR}/MAKEDEV"
   1521 	fi
   1522 
   1523 	find_file_in_dirlist MAKEDEV "MAKEDEV" \
   1524 	    "${SCRATCHDIR}" "${SRC_DIR}/dev" \
   1525 	    || return 1
   1526 			# ${dir} is set by find_file_in_dirlist()
   1527 	find_makedev
   1528 	compare_dir "$1" "${dir}" "${MAKEDEV_DIR}" 555 MAKEDEV
   1529 	failed=$(( ${failed} + $? ))
   1530 
   1531 	find_file_in_dirlist MAKEDEV.local "MAKEDEV.local" \
   1532 	    "${SRC_DIR}/etc" "${SRC_DIR}/dev" \
   1533 	    || return 1
   1534 			# ${dir} is set by find_file_in_dirlist()
   1535 	compare_dir "$1" "${dir}" "${DEST_DIR}/dev" 555 MAKEDEV.local
   1536 	failed=$(( ${failed} + $? ))
   1537 
   1538 	return ${failed}
   1539 }
   1540 
   1541 
   1542 #
   1543 #	man.conf
   1544 #
   1545 
   1546 additem manconf "check for a mandoc usage in /etc/man.conf"
   1547 do_manconf()
   1548 {
   1549 	[ -n "$1" ] || err 3 "USAGE: do_manconf fix|check"
   1550 	op="$1"
   1551 	failed=0
   1552 
   1553 	[ -f "${DEST_DIR}/etc/man.conf" ] || return 0
   1554 	if ${GREP} -w "mandoc" "${DEST_DIR}/etc/man.conf" >/dev/null 2>&1;
   1555 	then
   1556 		failed=0;
   1557 	else
   1558 		failed=1
   1559 		notfixed=""
   1560 		if [ "${op}" = "fix" ]; then
   1561 			notfixed="${NOT_FIXED}"
   1562 		fi
   1563 		msg "The file /etc/man.conf has not been adapted to mandoc usage; you"
   1564 		msg "probably want to copy a new version over. ${notfixed}"
   1565 	fi
   1566 
   1567 	return ${failed}
   1568 }
   1569 
   1570 
   1571 #
   1572 #	motd
   1573 #
   1574 
   1575 additem motd "contents of motd"
   1576 do_motd()
   1577 {
   1578 	[ -n "$1" ] || err 3 "USAGE: do_motd fix|check"
   1579 
   1580 	if ${GREP} -i 'http://www.NetBSD.org/Misc/send-pr.html' \
   1581 		"${DEST_DIR}/etc/motd" >/dev/null 2>&1 \
   1582 	    || ${GREP} -i 'https*://www.NetBSD.org/support/send-pr.html' \
   1583 		"${DEST_DIR}/etc/motd" >/dev/null 2>&1
   1584 	then
   1585 		tmp1="$(mktemp /tmp/postinstall.motd.XXXXXXXX)"
   1586 		tmp2="$(mktemp /tmp/postinstall.motd.XXXXXXXX)"
   1587 		${SED} '1,2d' <"${SRC_DIR}/etc/motd" >"${tmp1}"
   1588 		${SED} '1,2d' <"${DEST_DIR}/etc/motd" >"${tmp2}"
   1589 
   1590 		if [ "$1" = check ]; then
   1591 			cmp -s "${tmp1}" "${tmp2}"
   1592 			result=$?
   1593 			if [ "${result}" -ne 0 ]; then
   1594 				msg \
   1595     "Bug reporting messages do not seem to match the installed release"
   1596 			fi
   1597 		else
   1598 			head -n 2 "${DEST_DIR}/etc/motd" >"${tmp1}"
   1599 			${SED} '1,2d' <"${SRC_DIR}/etc/motd" >>"${tmp1}"
   1600 			cp "${tmp1}" "${DEST_DIR}/etc/motd"
   1601 			result=0
   1602 		fi
   1603 
   1604 		rm -f "${tmp1}" "${tmp2}"
   1605 	else
   1606 		result=0
   1607 	fi
   1608 
   1609 	return ${result}
   1610 }
   1611 
   1612 
   1613 #
   1614 #	mtree
   1615 #
   1616 
   1617 additem mtree "/etc/mtree/ being up to date"
   1618 do_mtree()
   1619 {
   1620 	[ -n "$1" ] || err 3 "USAGE: do_mtree fix|check"
   1621 	failed=0
   1622 
   1623 	compare_dir "$1" "${SRC_DIR}/etc/mtree" "${DEST_DIR}/etc/mtree" 444 special
   1624 	failed=$(( ${failed} + $? ))
   1625 
   1626 	if ! $SOURCEMODE; then
   1627 		MTREE_DIR="${SRC_DIR}/etc/mtree"
   1628 	else
   1629 		/bin/rm -rf "${SCRATCHDIR}/obj"
   1630 		mkdir "${SCRATCHDIR}/obj"
   1631 		${MAKE} -s -C "${SRC_DIR}/etc/mtree" TOOL_AWK="${AWK}" \
   1632 		    MAKEOBJDIR="${SCRATCHDIR}/obj" emit_dist_file > \
   1633 		    "${SCRATCHDIR}/NetBSD.dist"
   1634 		MTREE_DIR="${SCRATCHDIR}"
   1635 		/bin/rm -rf "${SCRATCHDIR}/obj"
   1636 	fi
   1637 	compare_dir "$1" "${MTREE_DIR}" "${DEST_DIR}/etc/mtree" 444 NetBSD.dist
   1638 	failed=$(( ${failed} + $? ))
   1639 
   1640 	return ${failed}
   1641 }
   1642 
   1643 
   1644 #
   1645 #	named
   1646 #
   1647 
   1648 additem named "named configuration update"
   1649 do_named()
   1650 {
   1651 	[ -n "$1" ] || err 3 "USAGE: do_named fix|check"
   1652 	op="$1"
   1653 
   1654 	move_file "${op}" \
   1655 		"${DEST_DIR}/etc/namedb/named.conf" \
   1656 		"${DEST_DIR}/etc/named.conf"
   1657 
   1658 	compare_dir "${op}" "${SRC_DIR}/etc/namedb" "${DEST_DIR}/etc/namedb" \
   1659 		644 \
   1660 		root.cache
   1661 }
   1662 
   1663 
   1664 #
   1665 #	opensslcerts
   1666 #
   1667 
   1668 additem opensslcerts "build /etc/openssl/certs cache of HTTPS CA certificates"
   1669 do_opensslcerts()
   1670 {
   1671 	[ -n "$1" ] || err 3 "USAGE: do_opensslcerts fix|check"
   1672 
   1673 	case $1 in
   1674 	check)	# XXX Anything to check?
   1675 		return 0
   1676 		;;
   1677 	fix)	# This runs openssl(1), which is not available as a
   1678 		# build-time tool.  So for now, restrict it to running
   1679 		# on the installed system.
   1680 		case $DEST_DIR in
   1681 		''|/)	;;
   1682 		*)	msg "opensslcerts limited to DEST_DIR=/"
   1683 			return 1
   1684 			;;
   1685 		esac
   1686 		certctl rehash
   1687 		;;
   1688 	*)	err 3 "USAGE: do_opensslcerts fix|check"
   1689 		;;
   1690 	esac
   1691 }
   1692 
   1693 
   1694 #
   1695 #	pam
   1696 #
   1697 
   1698 additem pam "/etc/pam.d is populated"
   1699 do_pam()
   1700 {
   1701 	[ -n "$1" ] || err 3 "USAGE: do_pam fix|check"
   1702 	op="$1"
   1703 	failed=0
   1704 
   1705 	populate_dir "${op}" true "${SRC_DIR}/etc/pam.d" \
   1706 		"${DEST_DIR}/etc/pam.d" 644 \
   1707 		README cron display_manager ftpd gdm imap kde login other \
   1708 		passwd pop3 ppp racoon rexecd rsh sshd su system telnetd \
   1709 		xdm xserver
   1710 
   1711 	failed=$(( ${failed} + $? ))
   1712 
   1713 	return ${failed}
   1714 }
   1715 
   1716 
   1717 #
   1718 #	periodic
   1719 #
   1720 
   1721 additem periodic "/etc/{daily,weekly,monthly,security} being up to date"
   1722 do_periodic()
   1723 {
   1724 	[ -n "$1" ] || err 3 "USAGE: do_periodic fix|check"
   1725 
   1726 	compare_dir "$1" "${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 \
   1727 		daily weekly monthly security
   1728 }
   1729 
   1730 
   1731 #
   1732 #	pf
   1733 #
   1734 
   1735 additem pf "pf configuration being up to date"
   1736 do_pf()
   1737 {
   1738 	[ -n "$1" ] || err 3 "USAGE: do_pf fix|check"
   1739 	op="$1"
   1740 	failed=0
   1741 
   1742 	find_file_in_dirlist pf.os "pf.os" \
   1743 	    "${SRC_DIR}/dist/pf/etc" "${SRC_DIR}/etc" \
   1744 	    || return 1
   1745 			# ${dir} is set by find_file_in_dirlist()
   1746 	populate_dir "${op}" true \
   1747 	    "${dir}" "${DEST_DIR}/etc" 644 \
   1748 	    pf.conf
   1749 	failed=$(( ${failed} + $? ))
   1750 
   1751 	compare_dir "${op}" "${dir}" "${DEST_DIR}/etc" 444 pf.os
   1752 	failed=$(( ${failed} + $? ))
   1753 
   1754 	return ${failed}
   1755 }
   1756 
   1757 
   1758 #
   1759 #	ptyfsoldnodes
   1760 #
   1761 
   1762 additem ptyfsoldnodes "remove legacy device nodes when using ptyfs"
   1763 do_ptyfsoldnodes()
   1764 {
   1765 	[ -n "$1" ] || err 3 "USAGE: do_ptyfsoldnodes fix|check"
   1766 	_ptyfs_op="$1"
   1767 
   1768 	# Check whether ptyfs is in use
   1769 	failed=0;
   1770 	if ! ${GREP} -E "^ptyfs" "${DEST_DIR}/etc/fstab" > /dev/null; then
   1771 		msg "ptyfs is not in use"
   1772 		return 0
   1773 	fi
   1774 
   1775 	if [ ! -e "${DEST_DIR}/dev/pts" ]; then
   1776 		msg "ptyfs is not properly configured: missing /dev/pts"
   1777 		return 1
   1778 	fi
   1779 
   1780 	# Find the device major numbers for the pty master and slave
   1781 	# devices, by parsing the output from "MAKEDEV -s pty0".
   1782 	#
   1783 	# Output from MAKEDEV looks like this:
   1784 	# ./ttyp0 type=char device=netbsd,5,0 mode=666 gid=0 uid=0
   1785 	# ./ptyp0 type=char device=netbsd,6,0 mode=666 gid=0 uid=0
   1786 	#
   1787 	# Output from awk, used in the eval statement, looks like this:
   1788 	# maj_ptym=6; maj_ptys=5;
   1789 	#
   1790 	find_makedev
   1791 	eval "$(
   1792 	    ${HOST_SH} "${MAKEDEV_DIR}/MAKEDEV" -s pty0 2>/dev/null \
   1793 	    | ${AWK} '\
   1794 	    BEGIN { before_re = ".*device=[a-zA-Z]*,"; after_re = ",.*"; }
   1795 	    /ptyp0/ { maj_ptym = gensub(before_re, "", 1, $0);
   1796 		      maj_ptym = gensub(after_re, "", 1, maj_ptym); }
   1797 	    /ttyp0/ { maj_ptys = gensub(before_re, "", 1, $0);
   1798 		      maj_ptys = gensub(after_re, "", 1, maj_ptys); }
   1799 	    END { print "maj_ptym=" maj_ptym "; maj_ptys=" maj_ptys ";"; }
   1800 	    '
   1801 	    )"
   1802 	#msg "Major numbers are maj_ptym=${maj_ptym} maj_ptys=${maj_ptys}"
   1803 	if [ -z "$maj_ptym" ] || [ -z "$maj_ptys" ]; then
   1804 		msg "Cannot find device major numbers for pty master and slave"
   1805 		return 1
   1806 	fi
   1807 
   1808 	# look for /dev/[pt]ty[p-zP-T][0-9a-zA-Z], and check that they
   1809 	# have the expected device major numbers.  ttyv* is typically not a
   1810 	# pty device, but we check it anyway.
   1811 	#
   1812 	# The "for d1" loop is intended to avoid overflowing ARG_MAX;
   1813 	# otherwise we could have used a single glob pattern.
   1814 	#
   1815 	# If there are no files that match a particular pattern,
   1816 	# then stat prints something like:
   1817 	#    stat: /dev/[pt]tyx?: lstat: No such file or directory
   1818 	# and we ignore it.  XXX: We also ignore other error messages.
   1819 	#
   1820 	_ptyfs_tmp="$(mktemp /tmp/postinstall.ptyfs.XXXXXXXX)"
   1821 	for d1 in p q r s t u v w x y z P Q R S T; do
   1822 		${STAT} -f "%Hr %N" "${DEST_DIR}/dev/"[pt]ty${d1}? 2>&1
   1823 	done \
   1824 	| while read -r major node ; do
   1825 		case "$major" in
   1826 		${maj_ptym}|${maj_ptys}) echo "$node" ;;
   1827 		esac
   1828 	done >"${_ptyfs_tmp}"
   1829 
   1830 	_desc="legacy device node"
   1831 	while read node; do
   1832 		if [ "${_ptyfs_op}" = "check" ]; then
   1833 			msg "Remove ${_desc} ${node}"
   1834 			failed=1
   1835 		else # "fix"
   1836 			if rm "${node}"; then
   1837 				msg "Removed ${_desc} ${node}"
   1838 			else
   1839 				warn "Failed to remove ${_desc} ${node}"
   1840 				failed=1
   1841 			fi
   1842 		fi
   1843 	done < "${_ptyfs_tmp}"
   1844 	rm "${_ptyfs_tmp}"
   1845 
   1846 	return ${failed}
   1847 }
   1848 
   1849 
   1850 #
   1851 #	pwd_mkdb
   1852 #
   1853 
   1854 additem pwd_mkdb "passwd database version"
   1855 do_pwd_mkdb()
   1856 {
   1857 	[ -n "$1" ] || err 3 "USAGE: do_pwd_mkdb fix|check"
   1858 	op="$1"
   1859 	failed=0
   1860 
   1861 	# XXX Ideally, we should figure out the endianness of the
   1862 	# target machine, and add "-E B"/"-E L" to the db(1) flags,
   1863 	# and "-B"/"-L" to the pwd_mkdb(8) flags if the target is not
   1864 	# the same as the host machine.  It probably doesn't matter,
   1865 	# because we don't expect "postinstall fix pwd_mkdb" to be
   1866 	# invoked during a cross build.
   1867 
   1868 	set -- $(${DB} -q -Sb -Ub -To -N hash "${DEST_DIR}/etc/pwd.db" \
   1869 		'VERSION\0')
   1870 	case "$2" in
   1871 	'\001\000\000\000') return 0 ;; # version 1, little-endian
   1872 	'\000\000\000\001') return 0 ;; # version 1, big-endian
   1873 	esac
   1874 
   1875 	if [ "${op}" = "check" ]; then
   1876 		msg "Update format of passwd database"
   1877 		failed=1
   1878 	elif ! ${PWD_MKDB} -V 1 -d "${DEST_DIR:-/}" \
   1879 			"${DEST_DIR}/etc/master.passwd";
   1880 	then
   1881 		msg "Can't update format of passwd database"
   1882 		failed=1
   1883 	else
   1884 		msg "Updated format of passwd database"
   1885 	fi
   1886 
   1887 	return ${failed}
   1888 }
   1889 
   1890 
   1891 #
   1892 #	rc
   1893 #
   1894 
   1895 # There is no info in src/distrib or /etc/mtree which rc* files
   1896 # can be overwritten unconditionally on upgrade. See PR/54741.
   1897 rc_644_files="
   1898 rc
   1899 rc.subr
   1900 rc.shutdown
   1901 "
   1902 
   1903 rc_obsolete_vars="
   1904 amd amd_master
   1905 btcontrol btcontrol_devices
   1906 critical_filesystems critical_filesystems_beforenet
   1907 mountcritlocal mountcritremote
   1908 network ip6forwarding
   1909 network nfsiod_flags
   1910 sdpd sdpd_control
   1911 sdpd sdpd_groupname
   1912 sdpd sdpd_username
   1913 sysctl defcorename
   1914 "
   1915 
   1916 update_rc()
   1917 {
   1918 	local op=$1
   1919 	local dir=$2
   1920 	local name=$3
   1921 	local bindir=$4
   1922 	local rcdir=$5
   1923 
   1924 	if [ ! -x "${DEST_DIR}/${bindir}/${name}" ]; then
   1925 		return 0
   1926 	fi
   1927 
   1928 	if ! find_file_in_dirlist "${name}" "${name}" \
   1929 	    "${rcdir}" "${SRC_DIR}/etc/rc.d"; then
   1930 		return 1
   1931 	fi
   1932 	populate_dir "${op}" false "${dir}" "${DEST_DIR}/etc/rc.d" 555 "${name}"
   1933 	return $?
   1934 }
   1935 
   1936 # select non-obsolete files in a sets file
   1937 # $1: directory pattern
   1938 # $2: file pattern
   1939 # $3: filename
   1940 select_set_files()
   1941 {
   1942 	local qdir="$(echo $1 | ${SED} -e s@/@\\\\/@g -e s/\\./\\\\./g)"
   1943 	${SED} -n -e /obsolete/d \
   1944 	    -e "/^\.${qdir}/s@^.$2[[:space:]].*@\1@p" $3
   1945 }
   1946 
   1947 # select obsolete files in a sets file
   1948 # $1: directory pattern
   1949 # $2: file pattern
   1950 # $3: setname
   1951 select_obsolete_files()
   1952 {
   1953 	if $SOURCEMODE; then
   1954 		${SED} -n -e "/obsolete/s@\.$1$2[[:space:]].*@\1@p" \
   1955 		    "${SRC_DIR}/distrib/sets/lists/$3/mi"
   1956 		return
   1957 	fi
   1958 
   1959 	# On upgrade builds we don't extract the "etc" set so we
   1960 	# try to use the source set instead. See PR/54730 for
   1961 	# ways to better handle this.
   1962 
   1963 	local obsolete_dir
   1964 
   1965 	if [ $3 = "etc" ] ;then
   1966 		obsolete_dir="${SRC_DIR}/var/db/obsolete"
   1967 	else
   1968 		obsolete_dir="${DEST_DIR}/var/db/obsolete"
   1969 	fi
   1970 	${SED} -n -e "s@\.$1$2\$@\1@p" "${obsolete_dir}/$3"
   1971 }
   1972 
   1973 getetcsets()
   1974 {
   1975 	if $SOURCEMODE; then
   1976 		echo "${SRC_DIR}/distrib/sets/lists/etc/mi"
   1977 	else
   1978 		echo "${SRC_DIR}/etc/mtree/set.etc"
   1979 	fi
   1980 }
   1981 
   1982 additem rc "/etc/rc* and /etc/rc.d/ being up to date"
   1983 do_rc()
   1984 {
   1985 	[ -n "$1" ] || err 3 "USAGE: do_rc fix|check"
   1986 	local op="$1"
   1987 	local failed=0
   1988 	local generated_scripts=""
   1989 	local etcsets=$(getetcsets)
   1990 	if [ "${MKX11}" != "no" ]; then
   1991 		generated_scripts="${generated_scripts} xdm xfs"
   1992 	fi
   1993 
   1994 	# Directories of external programs that have rc files (in bsd)
   1995 	local rc_external_files="blocklist nsd unbound"
   1996 
   1997 	# rc* files in /etc/
   1998 	# XXX: at least rc.conf and rc.local shouldn't be updated. PR/54741
   1999 	#local rc_644_files="$(select_set_files /etc/rc \
   2000 	#    "/etc/\(rc[^[:space:]/]*\)" ${etcsets})"
   2001 
   2002 	# no-obsolete rc files in /etc/rc.d
   2003 	local rc_555_files="$(select_set_files /etc/rc.d/ \
   2004 	    "/etc/rc\.d/\([^[:space:]]*\)" ${etcsets} | \
   2005 	    exclude ${rc_external_files})"
   2006 
   2007 	# obsolete rc file in /etc/rc.d
   2008 	local rc_obsolete_files="$(select_obsolete_files /etc/rc.d/ \
   2009 	    "\([^[:space:]]*\)" etc)"
   2010 
   2011 	compare_dir "${op}" "${SRC_DIR}/etc" "${DEST_DIR}/etc" 644 \
   2012 		${rc_644_files}
   2013 	failed=$(( ${failed} + $? ))
   2014 
   2015 	local extra_scripts
   2016 	if ! $SOURCEMODE; then
   2017 		extra_scripts="${generated_scripts}"
   2018 	else
   2019 		extra_scripts=""
   2020 	fi
   2021 
   2022 	compare_dir "${op}" "${SRC_DIR}/etc/rc.d" "${DEST_DIR}/etc/rc.d" 555 \
   2023 		${rc_555_files} \
   2024 		${extra_scripts}
   2025 	failed=$(( ${failed} + $? ))
   2026 
   2027 	for i in ${rc_external_files}; do
   2028 	    local rc_file
   2029 	    case $i in
   2030 	    *d) rc_file=${i};;
   2031 	    *)	rc_file=${i}d;;
   2032 	    esac
   2033 
   2034 	    update_rc "${op}" "${dir}" ${rc_file} /sbin \
   2035 		"${SRC_DIR}/external/bsd/$i/etc/rc.d"
   2036 	    failed=$(( ${failed} + $? ))
   2037 	done
   2038 
   2039 	if $SOURCEMODE && [ -n "${generated_scripts}" ]; then
   2040 		# generate scripts
   2041 		mkdir "${SCRATCHDIR}/rc"
   2042 		for f in ${generated_scripts}; do
   2043 			${SED} -e "s,@X11ROOTDIR@,${X11ROOTDIR},g" \
   2044 			    < "${SRC_DIR}/etc/rc.d/${f}.in" \
   2045 			    > "${SCRATCHDIR}/rc/${f}"
   2046 		done
   2047 		compare_dir "${op}" "${SCRATCHDIR}/rc" \
   2048 		    "${DEST_DIR}/etc/rc.d" 555 \
   2049 		    ${generated_scripts}
   2050 		failed=$(( ${failed} + $? ))
   2051 	fi
   2052 
   2053 		# check for obsolete rc.d files
   2054 	for f in ${rc_obsolete_files}; do
   2055 		local fd="/etc/rc.d/${f}"
   2056 		[ -e "${DEST_DIR}${fd}" ] && echo "${fd}"
   2057 	done | obsolete_paths "${op}"
   2058 	failed=$(( ${failed} + $? ))
   2059 
   2060 		# check for obsolete rc.conf(5) variables
   2061 	set -- ${rc_obsolete_vars}
   2062 	while [ $# -gt 1 ]; do
   2063 		if rcconf_is_set "${op}" "$1" "$2" 1; then
   2064 			failed=1
   2065 		fi
   2066 		shift 2
   2067 	done
   2068 
   2069 	return ${failed}
   2070 }
   2071 
   2072 
   2073 #
   2074 #	sendmail
   2075 #
   2076 
   2077 adddisableditem sendmail "remove obsolete sendmail configuration files and scripts"
   2078 do_sendmail()
   2079 {
   2080 	[ -n "$1" ] || err 3 "USAGE: do_sendmail fix|check"
   2081 	op="$1"
   2082 	failed=0
   2083 
   2084 	# Don't complain if the "sendmail" package is installed because the
   2085 	# files might still be in use.
   2086 	if /usr/sbin/pkg_info -qe sendmail >/dev/null 2>&1; then
   2087 		return 0
   2088 	fi
   2089 
   2090 	for f in /etc/mail/helpfile /etc/mail/local-host-names \
   2091 	    /etc/mail/sendmail.cf /etc/mail/submit.cf /etc/rc.d/sendmail \
   2092 	    /etc/rc.d/smmsp /usr/share/misc/sendmail.hf \
   2093 	    $( ( find "${DEST_DIR}/usr/share/sendmail" -type f ; \
   2094 	         find "${DEST_DIR}/usr/share/sendmail" -type d \
   2095 	       ) | unprefix "${DEST_DIR}" ) \
   2096 	    /var/log/sendmail.st \
   2097 	    /var/spool/clientmqueue \
   2098 	    /var/spool/mqueue
   2099 	do
   2100 		[ -e "${DEST_DIR}${f}" ] && echo "${f}"
   2101 	done | obsolete_paths "${op}"
   2102 	failed=$(( ${failed} + $? ))
   2103 
   2104 	return ${failed}
   2105 }
   2106 
   2107 
   2108 #
   2109 #	ssh
   2110 #
   2111 
   2112 additem ssh "ssh configuration update"
   2113 do_ssh()
   2114 {
   2115 	[ -n "$1" ] || err 3 "USAGE: do_ssh fix|check"
   2116 	op="$1"
   2117 
   2118 	failed=0
   2119 	_etcssh="${DEST_DIR}/etc/ssh"
   2120 	if ! check_dir "${op}" "${_etcssh}" 755; then
   2121 		failed=1
   2122 	fi
   2123 
   2124 	if [ ${failed} -eq 0 ]; then
   2125 		for f in \
   2126 			    ssh_known_hosts ssh_known_hosts2 \
   2127 			    ssh_host_dsa_key ssh_host_dsa_key.pub \
   2128 			    ssh_host_rsa_key ssh_host_rsa_key.pub \
   2129 			    ssh_host_key ssh_host_key.pub \
   2130 		    ; do
   2131 			if ! move_file "${op}" \
   2132 			    "${DEST_DIR}/etc/${f}" "${_etcssh}/${f}" ; then
   2133 				failed=1
   2134 			fi
   2135 		done
   2136 		for f in sshd.conf ssh.conf ; do
   2137 				# /etc/ssh/ssh{,d}.conf -> ssh{,d}_config
   2138 				#
   2139 			if ! move_file "${op}" \
   2140 			    "${_etcssh}/${f}" "${_etcssh}/${f%.conf}_config" ;
   2141 			then
   2142 				failed=1
   2143 			fi
   2144 				# /etc/ssh{,d}.conf -> /etc/ssh/ssh{,d}_config
   2145 				#
   2146 			if ! move_file "${op}" \
   2147 			    "${DEST_DIR}/etc/${f}" \
   2148 			    "${_etcssh}/${f%.conf}_config" ;
   2149 			then
   2150 				failed=1
   2151 			fi
   2152 		done
   2153 	fi
   2154 
   2155 	sshdconf=""
   2156 	for f in \
   2157 	    "${_etcssh}/sshd_config" \
   2158 	    "${_etcssh}/sshd.conf" \
   2159 	    "${DEST_DIR}/etc/sshd.conf" ; do
   2160 		if [ -f "${f}" ]; then
   2161 			sshdconf="${f}"
   2162 			break
   2163 		fi
   2164 	done
   2165 	if [ -n "${sshdconf}" ]; then
   2166 		modify_file "${op}" "${sshdconf}" "${SCRATCHDIR}/sshdconf" '
   2167 			/^[^#$]/ {
   2168 				kw = tolower($1)
   2169 				if (kw == "hostkey" &&
   2170 				    $2 ~ /^\/etc\/+ssh_host(_[dr]sa)?_key$/ ) {
   2171 					sub(/\/etc\/+/, "/etc/ssh/")
   2172 				}
   2173 				if (kw == "rhostsauthentication" ||
   2174 				    kw == "verifyreversemapping" ||
   2175 				    kw == "reversemappingcheck") {
   2176 					sub(/^/, "# DEPRECATED:\t")
   2177 				}
   2178 			}
   2179 			{ print }
   2180 		'
   2181 		failed=$(( ${failed} + $? ))
   2182 	fi
   2183 
   2184 	if ! find_file_in_dirlist moduli "moduli" \
   2185 	    "${SRC_DIR}/crypto/external/bsd/openssh/dist" "${SRC_DIR}/etc" ; then
   2186 		failed=1
   2187 			# ${dir} is set by find_file_in_dirlist()
   2188 	elif ! compare_dir "${op}" "${dir}" "${DEST_DIR}/etc" 444 moduli; then
   2189 		failed=1
   2190 	fi
   2191 
   2192 	if ! check_dir "${op}" "${DEST_DIR}/var/chroot/sshd" 755 ; then
   2193 		failed=1
   2194 	fi
   2195 
   2196 	if rcconf_is_set "${op}" sshd sshd_conf_dir 1; then
   2197 		failed=1
   2198 	fi
   2199 
   2200 	return ${failed}
   2201 }
   2202 
   2203 
   2204 #
   2205 #	tcpdumpchroot
   2206 #
   2207 
   2208 additem tcpdumpchroot "remove /var/chroot/tcpdump/etc/protocols"
   2209 do_tcpdumpchroot()
   2210 {
   2211 	[ -n "$1" ] || err 3 "USAGE: do_tcpdumpchroot fix|check"
   2212 
   2213 	failed=0;
   2214 	if [ -r "${DEST_DIR}/var/chroot/tcpdump/etc/protocols" ]; then
   2215 		if [ "$1" = "fix" ]; then
   2216 			rm "${DEST_DIR}/var/chroot/tcpdump/etc/protocols"
   2217 			failed=$(( ${failed} + $? ))
   2218 			rmdir "${DEST_DIR}/var/chroot/tcpdump/etc"
   2219 			failed=$(( ${failed} + $? ))
   2220 		else
   2221 			failed=1
   2222 		fi
   2223 	fi
   2224 	return ${failed}
   2225 }
   2226 
   2227 
   2228 #
   2229 #	uid
   2230 #
   2231 
   2232 additem uid "required users in /etc/master.passwd"
   2233 do_uid()
   2234 {
   2235 	[ -n "$1" ] || err 3 "USAGE: do_uid fix|check"
   2236 
   2237 	check_ids "$1" users "${DEST_DIR}/etc/master.passwd" \
   2238 	    "${SRC_DIR}/etc/master.passwd" 12 \
   2239 	    postfix SKIP named ntpd sshd SKIP _pflogd _rwhod SKIP _proxy \
   2240 	    _timedc _sdpd _httpd _mdnsd _tests _tcpdump _tss SKIP _rtadvd \
   2241 	    SKIP _unbound _nsd SKIP _dhcpcd
   2242 }
   2243 
   2244 
   2245 #
   2246 #	varrwho
   2247 #
   2248 
   2249 additem varrwho "required ownership of files in /var/rwho"
   2250 do_varrwho()
   2251 {
   2252 	[ -n "$1" ] || err 3 "USAGE: do_varrwho fix|check"
   2253 
   2254 	contents_owner "$1" "${DEST_DIR}/var/rwho" _rwhod _rwhod
   2255 }
   2256 
   2257 
   2258 #
   2259 #	varshm
   2260 #
   2261 
   2262 additem varshm "check for a tmpfs mounted on /var/shm"
   2263 do_varshm()
   2264 {
   2265 	[ -n "$1" ] || err 3 "USAGE: do_varshm fix|check"
   2266 	op="$1"
   2267 	failed=0
   2268 
   2269 	[ -f "${DEST_DIR}/etc/fstab" ] || return 0
   2270 	if ${GREP} -E "^var_shm_symlink" "${DEST_DIR}/etc/rc.conf" >/dev/null 2>&1;
   2271 	then
   2272 		failed=0;
   2273 	elif ${GREP} -w "/var/shm" "${DEST_DIR}/etc/fstab" >/dev/null 2>&1;
   2274 	then
   2275 		failed=0;
   2276 	else
   2277 		if [ "${op}" = "check" ]; then
   2278 			failed=1
   2279 			msg "No /var/shm mount found in ${DEST_DIR}/etc/fstab"
   2280 		elif [ "${op}" = "fix" ]; then
   2281 			printf '\ntmpfs\t/var/shm\ttmpfs\trw,-m1777,-sram%%25\n' \
   2282 				>> "${DEST_DIR}/etc/fstab"
   2283 			msg "Added tmpfs with 25% ram limit as /var/shm"
   2284 
   2285 		fi
   2286 	fi
   2287 
   2288 	return ${failed}
   2289 }
   2290 
   2291 
   2292 #
   2293 #	wscons
   2294 #
   2295 
   2296 additem wscons "wscons configuration file update"
   2297 do_wscons()
   2298 {
   2299 	[ -n "$1" ] || err 3 "USAGE: do_wscons fix|check"
   2300 	op="$1"
   2301 
   2302 	[ -f "${DEST_DIR}/etc/wscons.conf" ] || return 0
   2303 
   2304 	failed=0
   2305 	notfixed=""
   2306 	if [ "${op}" = "fix" ]; then
   2307 		notfixed="${NOT_FIXED}"
   2308 	fi
   2309 	while read _type _arg1 _rest; do
   2310 		if [ "${_type}" = "mux" -a "${_arg1}" = "1" ]; then
   2311 			msg \
   2312     "Obsolete wscons.conf(5) entry \""${_type} ${_arg1}"\" found.${notfixed}"
   2313 			failed=1
   2314 		fi
   2315 	done < "${DEST_DIR}/etc/wscons.conf"
   2316 
   2317 	return ${failed}
   2318 }
   2319 
   2320 
   2321 #
   2322 #	x11
   2323 #
   2324 
   2325 additem x11 "x11 configuration update"
   2326 do_x11()
   2327 {
   2328 	[ -n "$1" ] || err 3 "USAGE: do_x11 fix|check"
   2329 	op="$1"
   2330 
   2331 	failed=0
   2332 	_etcx11="${DEST_DIR}/etc/X11"
   2333 	_libx11=""
   2334 	if [ ! -d "${_etcx11}" ]; then
   2335 		msg "${_etcx11} is not a directory; skipping check"
   2336 		return 0
   2337 	fi
   2338 	if [ -d "${DEST_DIR}/usr/X11R6/." ]
   2339 	then
   2340 		_libx11="${DEST_DIR}/usr/X11R6/lib/X11"
   2341 		if [ ! -d "${_libx11}" ]; then
   2342 			msg "${_libx11} is not a directory; skipping check"
   2343 			return 0
   2344 		fi
   2345 	fi
   2346 
   2347 	_notfixed=""
   2348 	if [ "${op}" = "fix" ]; then
   2349 		_notfixed="${NOT_FIXED}"
   2350 	fi
   2351 
   2352 	# check if /usr/X11R6/lib/X11 needs to migrate to /etc/X11
   2353 	if [ -n "${_libx11}" ]; then
   2354 		for d in \
   2355 			    fs lbxproxy proxymngr rstart twm xdm xinit xserver xsm \
   2356 		    ; do
   2357 			sd="${_libx11}/${d}"
   2358 			ld="/etc/X11/${d}"
   2359 			td="${DEST_DIR}${ld}"
   2360 			if [ -h "${sd}" ]; then
   2361 				continue
   2362 			elif [ -d "${sd}" ]; then
   2363 				tdfiles="$(find "${td}" \! -type d)"
   2364 				if [ -n "${tdfiles}" ]; then
   2365 					msg "${sd} exists yet ${td} already" \
   2366 					    "contains files${_notfixed}"
   2367 				else
   2368 					msg "Migrate ${sd} to ${td}${_notfixed}"
   2369 				fi
   2370 				failed=1
   2371 			elif [ -e "${sd}" ]; then
   2372 				msg "Unexpected file ${sd}${_notfixed}"
   2373 				continue
   2374 			else
   2375 				continue
   2376 			fi
   2377 		done
   2378 	fi
   2379 
   2380 	# check if xdm resources have been updated
   2381 	if [ -r ${_etcx11}/xdm/Xresources ] && \
   2382 	    ! ${GREP} 'inpColor:' ${_etcx11}/xdm/Xresources > /dev/null; then
   2383 		msg "Update ${_etcx11}/xdm/Xresources${_notfixed}"
   2384 		failed=1
   2385 	fi
   2386 
   2387 	return ${failed}
   2388 }
   2389 
   2390 
   2391 #
   2392 #	xkb
   2393 #
   2394 # /usr/X11R7/lib/X11/xkb/symbols/pc used to be a directory, but changed
   2395 # to a file on 2009-06-12.  Fixing this requires removing the directory
   2396 # (which we can do) and re-extracting the xbase set (which we can't do),
   2397 # or at least adding that one file (which we may be able to do if X11SRCDIR
   2398 # is available).
   2399 #
   2400 
   2401 additem xkb "clean up for xkbdata to xkeyboard-config upgrade"
   2402 do_xkb()
   2403 {
   2404 	[ -n "$1" ] || err 3 "USAGE: do_xkb fix|check"
   2405 	op="$1"
   2406 	failed=0
   2407 
   2408 	pcpath="/usr/X11R7/lib/X11/xkb/symbols/pc"
   2409 	pcsrcdir="${X11SRCDIR}/external/mit/xkeyboard-config/dist/symbols"
   2410 
   2411 	filemsg="\
   2412 ${pcpath} was a directory, should be a file.
   2413     To fix, extract the xbase set again."
   2414 
   2415 	_notfixed=""
   2416 	if [ "${op}" = "fix" ]; then
   2417 		_notfixed="${NOT_FIXED}"
   2418 	fi
   2419 
   2420 	if [ ! -d "${DEST_DIR}${pcpath}" ]; then
   2421 		return 0
   2422 	fi
   2423 
   2424 	# Delete obsolete files in the directory, and the directory
   2425 	# itself.  If the directory contains unexpected extra files
   2426 	# then it will not be deleted.
   2427 	( [ -f "${DEST_DIR}"/var/db/obsolete/xbase ] \
   2428 	    &&  ${SORT} -ru "${DEST_DIR}"/var/db/obsolete/xbase \
   2429 	    | ${GREP} -E "^\\.?${pcpath}/" ;
   2430 	    echo "${pcpath}" ) \
   2431 	| obsolete_paths "${op}"
   2432 	failed=$(( ${failed} + $? ))
   2433 
   2434 	# If the directory was removed above, then try to replace it with
   2435 	# a file.
   2436 	if [ -d "${DEST_DIR}${pcpath}" ]; then
   2437 		msg "${filemsg}${_notfixed}"
   2438 		failed=$(( ${failed} + 1 ))
   2439 	else
   2440 		if ! find_file_in_dirlist pc "${pcpath}" \
   2441 			"${pcsrcdir}" "${SRC_DIR}${pcpath%/*}"
   2442 		then
   2443 			msg "${filemsg}${_notfixed}"
   2444 			failed=$(( ${failed} + 1 ))
   2445 		else
   2446 			# ${dir} is set by find_file_in_dirlist()
   2447 			populate_dir "${op}" true \
   2448 				"${dir}" "${DEST_DIR}${pcpath%/*}" 444 \
   2449 				pc
   2450 			failed=$(( ${failed} + $? ))
   2451 		fi
   2452 	fi
   2453 
   2454 	return $failed
   2455 }
   2456 
   2457 
   2458 #
   2459 #	obsolete_stand
   2460 #	obsolete_stand_debug
   2461 #
   2462 
   2463 obsolete_stand_internal()
   2464 {
   2465 	local prefix="$1"
   2466 	shift
   2467 	[ -n "$1" ] || err 3 "USAGE: do_obsolete_stand fix|check"
   2468 	local op="$1"
   2469 	local failed=0
   2470 
   2471 	for dir in \
   2472 	    ${prefix}/stand/${MACHINE} \
   2473 	    ${prefix}/stand/${MACHINE}-4xx \
   2474 	    ${prefix}/stand/${MACHINE}-booke \
   2475 	    ${prefix}/stand/${MACHINE}-xen \
   2476 	    ${prefix}/stand/${MACHINE}pae-xen
   2477 	do
   2478 		[ -d "${DEST_DIR}${dir}" ] && obsolete_stand "${dir}"
   2479 	done | obsolete_paths "${op}"
   2480 	failed=$(( ${failed} + $? ))
   2481 
   2482 	return ${failed}
   2483 }
   2484 
   2485 adddisableditem obsolete_stand "remove obsolete files from /stand"
   2486 do_obsolete_stand()
   2487 {
   2488 	obsolete_stand_internal "" "$@"
   2489 	return $?
   2490 }
   2491 
   2492 adddisableditem obsolete_stand_debug "remove obsolete files from /usr/libdata/debug/stand"
   2493 do_obsolete_stand_debug()
   2494 {
   2495 	obsolete_stand_internal "/usr/libdata/debug" "$@"
   2496 	return $?
   2497 }
   2498 
   2499 
   2500 #
   2501 #	obsolete
   2502 #
   2503 # NOTE: This item is last to allow other items to move obsolete files.
   2504 #
   2505 
   2506 listarchsubdirs()
   2507 {
   2508 	if ! $SOURCEMODE; then
   2509 		echo "@ARCHSUBDIRS@"
   2510 	else
   2511 		${SED} -n -e '/ARCHDIR_SUBDIR/s/[[:space:]]//gp' \
   2512 		    "${SRC_DIR}/compat/archdirs.mk"
   2513 	fi
   2514 }
   2515 
   2516 getarchsubdirs()
   2517 {
   2518 	local m
   2519 	case ${MACHINE_ARCH} in
   2520 	*arm*|*aarch64*)	m=arm;;
   2521 	x86_64)			m=amd64;;
   2522 	*)			m=${MACHINE_ARCH};;
   2523 	esac
   2524 
   2525 	for i in $(listarchsubdirs); do
   2526 		echo $i
   2527 	done | ${SORT} -u | ${SED} -n -e "/=${m}/s@.*=${m}/\(.*\)@\1@p"
   2528 }
   2529 
   2530 getcompatlibdirs()
   2531 {
   2532 	for i in $(getarchsubdirs); do
   2533 		if [ -d "${DEST_DIR}/usr/lib/$i" ]; then
   2534 			echo /usr/lib/$i
   2535 		fi
   2536 	done
   2537 }
   2538 
   2539 additem obsolete "remove obsolete file sets and minor libraries"
   2540 do_obsolete()
   2541 {
   2542 	[ -n "$1" ] || err 3 "USAGE: do_obsolete fix|check"
   2543 	op="$1"
   2544 	failed=0
   2545 
   2546 	${SORT} -ru "${DEST_DIR}"/var/db/obsolete/* | obsolete_paths "${op}"
   2547 	failed=$(( ${failed} + $? ))
   2548 
   2549 	(
   2550 		obsolete_libs /lib
   2551 		obsolete_libs /usr/lib
   2552 		obsolete_libs /usr/lib/i18n
   2553 		obsolete_libs /usr/X11R6/lib
   2554 		obsolete_libs /usr/X11R7/lib
   2555 		for i in $(getcompatlibdirs); do
   2556 			obsolete_libs $i
   2557 		done
   2558 	) | obsolete_paths "${op}"
   2559 	failed=$(( ${failed} + $? ))
   2560 
   2561 	return ${failed}
   2562 }
   2563 
   2564 
   2565 #
   2566 #	end of items
   2567 #	------------
   2568 #
   2569 
   2570 
   2571 help()
   2572 {
   2573 	cat << _USAGE_
   2574 Usage: ${PROGNAME} [-a ARCH] [-d DEST_DIR] [-m MACHINE] [-s SRC_ARG] [-x XSRC_DIR] OPERATION ...
   2575        ${PROGNAME} -?
   2576 
   2577 	Perform post-installation checks and/or fixes on a system's
   2578 	configuration files.
   2579 	If no items are provided, a default set of checks or fixes is applied.
   2580 
   2581 	Options:
   2582 	-?		Display this help, and exit.
   2583 	-a ARCH		Set \$MACHINE_ARCH to ARCH.	[${MACHINE_ARCH}]
   2584 	-d DEST_DIR	Destination directory to check. [${DEST_DIR:-/}]
   2585 	-m MACHINE	Set \$MACHINE to MACHINE.	[${MACHINE}]
   2586 	-s SRC_ARG	Location of the source files.  This may be any of
   2587 			the following:
   2588 			-s SRC_DIR	A directory that contains a NetBSD
   2589 					source tree.
   2590 			-s TGZ_DIR	A directory in which one or both of
   2591 					"etc.tgz" and "xetc.tgz" have been
   2592 					extracted.
   2593 			-s TGZ_FILE	A distribution set file such as
   2594 					"etc.tgz" or "xetc.tgz".
   2595 					May be specified multipled times.
   2596 							[${SRC_DIR:-/usr/src}]
   2597 	-x XSRC_DIR	Location of the X11 source files.  This must be
   2598 			a directory that contains a NetBSD xsrc tree.
   2599 							[${XSRC_DIR:-/usr/src/../xsrc}]
   2600 
   2601 	Supported values for OPERATION:
   2602 	help		Display this help, and exit.
   2603 	list		List available items.
   2604 	check ITEM ...	Perform post-installation checks on ITEMs.
   2605 	diff [-bcenpuw] ITEM ...
   2606 			Similar to 'check' but also output difference of files,
   2607 			using diff with the provided options.
   2608 	fix ITEM ...	Apply fixes that 'check' determines need to be applied.
   2609 	usage		Display this help, and exit.
   2610 _USAGE_
   2611 }
   2612 
   2613 usage()
   2614 {
   2615 	help 1>&2
   2616 	exit 2
   2617 }
   2618 
   2619 
   2620 list()
   2621 {
   2622 	echo "Default set of items (to apply if no items are provided by user):"
   2623 	echo " Item                 Description"
   2624 	echo " ----                 -----------"
   2625 	for i in ${defaultitems}; do
   2626 		eval desc=\"\${desc_${i}}\"
   2627 		printf " %-20s %s\n" "${i}" "${desc}"
   2628 	done
   2629 	echo "Items disabled by default (must be requested explicitly):"
   2630 	echo " Item                 Description"
   2631 	echo " ----                 -----------"
   2632 	for i in ${otheritems}; do
   2633 		eval desc=\"\${desc_${i}}\"
   2634 		printf " %-20s %s\n" "${i}" "${desc}"
   2635 	done
   2636 }
   2637 
   2638 
   2639 main()
   2640 {
   2641 	DIRMODE=false		# true if "-s" specified a directory
   2642 	ITEMS=			# items to check|diff|fix. [${defaultitems}]
   2643 	N_SRC_ARGS=0		# number of "-s" args in SRC_ARGLIST
   2644 	SOURCEMODE=false	# true if "-s" specified a source directory
   2645 	SRC_ARGLIST=		# quoted list of one or more "-s" args
   2646 	SRC_DIR="${SRC_ARG}"	# set default value for early usage()
   2647 	TGZLIST=		# quoted list list of tgz files
   2648 	TGZMODE=false		# true if "-s" specifies a tgz file
   2649 	XSRC_DIR="${SRC_ARG}/../xsrc"
   2650 	XSRC_DIR_FIX=
   2651 
   2652 	case "$(uname -s)" in
   2653 	Darwin)
   2654 		# case sensitive match for case insensitive fs
   2655 		file_exists_exact=file_exists_exact
   2656 		;;
   2657 	*)
   2658 		file_exists_exact=:
   2659 		;;
   2660 	esac
   2661 
   2662 		# Validate options.
   2663 		#
   2664 	while getopts :a:d:m:s:x: ch; do
   2665 		case "${ch}" in
   2666 		a)
   2667 			MACHINE_ARCH="${OPTARG}"
   2668 			;;
   2669 		d)
   2670 			DEST_DIR="${OPTARG}"
   2671 			;;
   2672 		m)
   2673 			MACHINE="${OPTARG}"
   2674 			;;
   2675 		s)
   2676 			qarg="$(shell_quote "${OPTARG}")"
   2677 			N_SRC_ARGS=$(( $N_SRC_ARGS + 1 ))
   2678 			SRC_ARGLIST="${SRC_ARGLIST}${SRC_ARGLIST:+ }-s ${qarg}"
   2679 			if [ -f "${OPTARG}" ]; then
   2680 				# arg refers to a *.tgz file.
   2681 				# This may happen twice, for both
   2682 				# etc.tgz and xetc.tgz, so we build up a
   2683 				# quoted list in TGZLIST.
   2684 				TGZMODE=true
   2685 				TGZLIST="${TGZLIST}${TGZLIST:+ }${qarg}"
   2686 				# Note that, when TGZMODE is true,
   2687 				# SRC_ARG is used only for printing
   2688 				# human-readable messages.
   2689 				SRC_ARG="${TGZLIST}"
   2690 			elif [ -d "${OPTARG}" ]; then
   2691 				# arg refers to a directory.
   2692 				# It might be a source directory, or a
   2693 				# directory where the sets have already
   2694 				# been extracted.
   2695 				DIRMODE=true
   2696 				SRC_ARG="${OPTARG}"
   2697 				if [ -f "${OPTARG}/etc/Makefile" ]; then
   2698 					SOURCEMODE=true
   2699 				fi
   2700 			else
   2701 				err 2 "Invalid argument for -s option"
   2702 			fi
   2703 			;;
   2704 		x)
   2705 			if [ -d "${OPTARG}" ]; then
   2706 				# arg refers to a directory.
   2707 				XSRC_DIR="${OPTARG}"
   2708 				XSRC_DIR_FIX="-x ${OPTARG} "
   2709 			else
   2710 				err 2 "Not a directory for -x option"
   2711 			fi
   2712 			;;
   2713 		"?")
   2714 			if [ "${OPTARG}" = "?" ]; then
   2715 				help
   2716 				return	# no further processing or validation
   2717 			fi
   2718 			warn "Unknown option -${OPTARG}"
   2719 			usage
   2720 			;;
   2721 
   2722 		:)
   2723 			warn "Missing argument for option -${OPTARG}"
   2724 			usage
   2725 			;;
   2726 
   2727 		*)
   2728 			err 3 "Unimplemented option -${ch}"
   2729 			;;
   2730 		esac
   2731 	done
   2732 	shift $((${OPTIND} - 1))
   2733 	if [ $# -eq 0 ] ; then
   2734 		warn "Missing operation"
   2735 		usage
   2736 	fi
   2737 	op="$1"
   2738 	shift
   2739 
   2740 	if [ "$N_SRC_ARGS" -gt 1 ] && $DIRMODE; then
   2741 		err 2 "Multiple -s args are allowed only with tgz files"
   2742 	fi
   2743 	if [ "$N_SRC_ARGS" -eq 0 ]; then
   2744 		# The default SRC_ARG was set elsewhere
   2745 		DIRMODE=true
   2746 		SOURCEMODE=true
   2747 		SRC_ARGLIST="-s $(shell_quote "${SRC_ARG}")"
   2748 	fi
   2749 
   2750 		# Validate 'diff' first, as it becomes 'check'
   2751 		#
   2752 	case "${op}" in
   2753 
   2754 	diff)
   2755 		op=check
   2756 		DIFF_STYLE=n			# default style is RCS
   2757 		OPTIND=1
   2758 		while getopts :bcenpuw ch; do
   2759 			case "${ch}" in
   2760 			c|e|n|u)
   2761 				if [ "${DIFF_STYLE}" != "n" -a \
   2762 				    "${DIFF_STYLE}" != "${ch}" ]; then
   2763 					warn "diff: conflicting output style: -${ch}"
   2764 					usage
   2765 				fi
   2766 				DIFF_STYLE="${ch}"
   2767 				;;
   2768 			b|p|w)
   2769 				DIFF_OPT="${DIFF_OPT} -${ch}"
   2770 				;;
   2771 			"?")
   2772 				# NOTE: not supporting diff -?
   2773 				warn "diff: Unknown option -${OPTARG}"
   2774 				usage
   2775 				;;
   2776 			:)
   2777 				warn "diff: Missing argument for option -${OPTARG}"
   2778 				usage
   2779 				;;
   2780 			*)
   2781 				err 3 "diff: Unimplemented option -${ch}"
   2782 				;;
   2783 			esac
   2784 		done
   2785 		shift $((${OPTIND} - 1))
   2786 		;;
   2787 
   2788 	esac
   2789 
   2790 		# Validate operation and items.
   2791 		#
   2792 	case "${op}" in
   2793 
   2794 	check|fix)
   2795 		ITEMS="$*"
   2796 		: ${ITEMS:="${defaultitems}"}
   2797 
   2798 		# ensure that all supplied items are valid
   2799 		#
   2800 		for i in ${ITEMS}; do
   2801 			eval desc=\"\${desc_${i}}\"
   2802 			[ -n "${desc}" ] || err 2 "Unsupported ${op} '"${i}"'"
   2803 		done
   2804 		;;
   2805 
   2806 	help|usage)
   2807 		help
   2808 		return	# no further processing or validation
   2809 		;;
   2810 
   2811 	list)
   2812 		# processed below
   2813 		;;
   2814 
   2815 	*)
   2816 		warn "Unknown operation '"${op}"'"
   2817 		usage
   2818 		;;
   2819 
   2820 	esac
   2821 
   2822 	#
   2823 	# If '-s' arg or args specified tgz files, extract them
   2824 	# to a scratch directory.
   2825 	#
   2826 	if $TGZMODE; then
   2827 		ETCTGZDIR="${SCRATCHDIR}/etc.tgz"
   2828 		echo "Note: Creating temporary directory ${ETCTGZDIR}"
   2829 		if ! mkdir "${ETCTGZDIR}"; then
   2830 			err 2 "Can't create ${ETCTGZDIR}"
   2831 		fi
   2832 		( # subshell to localise changes to "$@"
   2833 			eval "set -- ${TGZLIST}"
   2834 			for tgz in "$@"; do
   2835 				echo "Note: Extracting files from ${tgz}"
   2836 				cat "${tgz}" | (
   2837 					cd "${ETCTGZDIR}" &&
   2838 					tar -zxf -
   2839 				) || err 2 "Can't extract ${tgz}"
   2840 			done
   2841 		)
   2842 		SRC_DIR="${ETCTGZDIR}"
   2843 	else
   2844 		SRC_DIR="${SRC_ARG}"
   2845 	fi
   2846 
   2847 	[ -d "${SRC_DIR}" ]	|| err 2 "${SRC_DIR} is not a directory"
   2848 	[ -d "${DEST_DIR}" ]	|| err 2 "${DEST_DIR} is not a directory"
   2849 	[ -n "${MACHINE}" ]	|| err 2 "\${MACHINE} is not defined"
   2850 	[ -n "${MACHINE_ARCH}" ] || err 2 "\${MACHINE_ARCH} is not defined"
   2851 	if ! $SOURCEMODE && ! [ -f "${SRC_DIR}/etc/mtree/set.etc" ]; then
   2852 		err 2 "Files from the etc.tgz set are missing"
   2853 	fi
   2854 
   2855 		# If directories are /, clear them, so various messages
   2856 		# don't have leading "//".   However, this requires
   2857 		# the use of ${foo:-/} to display the variables.
   2858 		#
   2859 	[ "${SRC_DIR}" = "/" ]	&& SRC_DIR=""
   2860 	[ "${DEST_DIR}" = "/" ]	&& DEST_DIR=""
   2861 
   2862 	detect_x11
   2863 
   2864 		# Perform operation.
   2865 		#
   2866 	case "${op}" in
   2867 
   2868 	check|fix)
   2869 		[ -n "${ITEMS}" ] || err 2 "${op}: missing items"
   2870 
   2871 		echo "Source directory: ${SRC_DIR:-/}"
   2872 		if $TGZMODE; then
   2873 			echo " (extracted from: ${SRC_ARG})"
   2874 		fi
   2875 		echo "Target directory: ${DEST_DIR:-/}"
   2876 		items_passed=
   2877 		items_failed=
   2878 		for i in ${ITEMS}; do
   2879 			echo "${i} ${op}:"
   2880 			( eval do_${i} ${op} )
   2881 			if [ $? -eq 0 ]; then
   2882 				items_passed="${items_passed} ${i}"
   2883 			else
   2884 				items_failed="${items_failed} ${i}"
   2885 			fi
   2886 		done
   2887 
   2888 		if [ "${op}" = "check" ]; then
   2889 			plural="checks"
   2890 		else
   2891 			plural="fixes"
   2892 		fi
   2893 
   2894 		echo "${PROGNAME} ${plural} passed:${items_passed}"
   2895 		echo "${PROGNAME} ${plural} failed:${items_failed}"
   2896 		if [ -n "${items_failed}" ]; then
   2897 		    exitstatus=1;
   2898 		    if [ "${op}" = "check" ]; then
   2899 			[ "$MACHINE" = "$(uname -m)" ] && m= || m=" -m $MACHINE"
   2900 			cat <<_Fix_me_
   2901 To fix, run:
   2902     ${HOST_SH} ${0} ${SRC_ARGLIST} ${XSRC_DIR_FIX}-d ${DEST_DIR:-/}$m fix${items_failed}
   2903 Note that this may overwrite local changes.
   2904 _Fix_me_
   2905 		    fi
   2906 		fi
   2907 		;;
   2908 
   2909 	list)
   2910 		echo "Source directory: ${SRC_DIR:-/}"
   2911 		echo "Target directory: ${DEST_DIR:-/}"
   2912 		if $TGZMODE; then
   2913 			echo " (extracted from: ${SRC_ARG})"
   2914 		fi
   2915 		list
   2916 		;;
   2917 
   2918 	*)
   2919 			# diff, help, usage handled during operation validation
   2920 		err 3 "Unimplemented operation '"${op}"'"
   2921 		;;
   2922 
   2923 	esac
   2924 }
   2925 
   2926 if [ -n "$POSTINSTALL_FUNCTION" ]; then
   2927 	eval "$POSTINSTALL_FUNCTION"
   2928 	exit 0
   2929 fi
   2930 
   2931 # defaults
   2932 #
   2933 PROGNAME="${0##*/}"
   2934 SRC_ARG="/usr/src"
   2935 DEST_DIR="/"
   2936 : ${MACHINE:="$( uname -m )"}	# assume native build if $MACHINE is not set
   2937 : ${MACHINE_ARCH:="$( uname -p )"}# assume native build if not set
   2938 
   2939 DIFF_STYLE=
   2940 DIFF_OPT=
   2941 NOT_FIXED=" (FIX MANUALLY)"
   2942 SCRATCHDIR="$( mkdtemp )" || err 2 "Can't create scratch directory"
   2943 trap "/bin/rm -rf \"\${SCRATCHDIR}\" ; exit 0" 1 2 3 15	# HUP INT QUIT TERM
   2944 
   2945 umask 022
   2946 exec 3>/dev/null
   2947 exec 4>/dev/null
   2948 exitstatus=0
   2949 
   2950 main "$@"
   2951 /bin/rm -rf "${SCRATCHDIR}"
   2952 exit $exitstatus
   2953