diff --git a/source4/build/smb_build/TODO b/source4/build/smb_build/TODO
index be79bd984da..aa1b3ce3cea 100644
--- a/source4/build/smb_build/TODO
+++ b/source4/build/smb_build/TODO
@@ -1,3 +1,4 @@
+- let the build system implement some make functions($(patsubst),$(wildcard),...)
 - make --enable-dso the default
  - fix module loading for selftest during non-developer builds
 - clearer distinction between dcerpc and ndr. seperate interface tables?
diff --git a/source4/heimdal_build/config.mk b/source4/heimdal_build/config.mk
index 21310189069..481e82818eb 100644
--- a/source4/heimdal_build/config.mk
+++ b/source4/heimdal_build/config.mk
@@ -455,7 +455,7 @@ include perl_path_wrapper.sh et_deps.pl heimdal/lib/krb5/krb5_err.et|
 heimdal/lib/roken/vis.h: heimdal/lib/roken/vis.hin
 heimdal/lib/roken/err.h: heimdal/lib/roken/err.hin
 
-$(patsubst heimdal/lib/des/%.h,heimdal/lib/des/hcrypto/%.h,$(wildcard heimdal/lib/des/*.h)): heimdal/lib/des/hcrypto
+include hcrypto-deps.pl heimdal/lib/des/*.h|
 
 heimdal/lib/des/hcrypto: 
 	rm -f $@; ln -s ./../des $@
diff --git a/source4/heimdal_build/hcrypto-deps.pl b/source4/heimdal_build/hcrypto-deps.pl
new file mode 100755
index 00000000000..89054bf1fa7
--- /dev/null
+++ b/source4/heimdal_build/hcrypto-deps.pl
@@ -0,0 +1,9 @@
+#!/usr/bin/perl
+use strict;
+
+foreach (@ARGV) {
+	my $old = $_;
+	my $new = $old; $new =~ s/des/des\/hcrypto/g;
+	my $dir = $old; 
+	print "$new: $old heimdal/lib/des/hcrypto\n";
+}