install:
	mkdir -p $(DESTDIR)/etc/ssh/sshd_config.d
	install -m0600 sshd_hardening.conf $(DESTDIR)/etc/ssh/sshd_config.d
	install -m0644 issue $(DESTDIR)/etc/issue.sconfigs
	install -m0644 issue.net $(DESTDIR)/etc/issue.sconfigs.net
	install -m0644 motd $(DESTDIR)/etc/motd.sconfigs
	mkdir -p $(DESTDIR)/etc/xdg
	install -m0644 kscreenlockerrc $(DESTDIR)/etc/xdg/kscreenlockerrc
	mkdir -p $(DESTDIR)/etc/modprobe.d
	install -m0644 restrict_fs_modules.conf $(DESTDIR)/etc/modprobe.d
	install -m0644 restrict_net_modules.conf $(DESTDIR)/etc/modprobe.d
	mkdir -p $(DESTDIR)/etc/sysctl.d
	# 95-kernel-hardening.conf is replaced by individual packages
	install -m0644 95-dmesg-restrict.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-kptr-restrict.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-perf-event-paranoid.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-randomize-va-space.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-unprivileged-bpf-disabled.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-bpf-jit-harden.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-protected-fifos.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-protected-hardlinks.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-protected-symlinks.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-suid-dumpable.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-ldisc-autoload.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-disable-sysrq.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 95-ctrl-alt-del.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 96-network-hardening.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 96-network-disable-IPv6.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 96-disable-coredumps.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 97-unprivileged-userfaultfd.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 97-disable-tty-legacy-tiocsti.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 97-fs-protected-regular.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 97-disable-kexec-load.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 97-disable-ptrace.conf $(DESTDIR)/etc/sysctl.d
	mkdir -p $(DESTDIR)/etc/security/limits.d
	install -m0644 90-disable-coredumps.conf $(DESTDIR)/etc/security/limits.d
	mkdir -p $(DESTDIR)/usr/libexec/sconfigs
	install -m0755 modprobe-disabled-module.sh $(DESTDIR)/usr/libexec/sconfigs
	# SELinux labels of /etc/sconfigs/audit-rules are aliased to /etc/audit/rules.d in ROSA's selinux-policy
	mkdir -p $(DESTDIR)/etc/sconfigs/audit-rules
	install -m0600 20-basic-audit.rules $(DESTDIR)/etc/sconfigs/audit-rules
	install -m0600 30-detailed-audit.rules $(DESTDIR)/etc/sconfigs/audit-rules

rpm:
	rpmbuild --define "_sourcedir $$PWD" -bb sconfigs.spec
