install:
	mkdir -p $(DESTDIR)/etc/ssh/sshd_config.d
	install -m0600 sshd_hardening.conf $(DESTDIR)/etc/ssh/sshd_config.d
	install -m0644 issue $(DESTDIR)/etc/issue.sconfigs
	install -m0644 issue.net $(DESTDIR)/etc/issue.sconfigs.net
	install -m0644 motd $(DESTDIR)/etc/motd.sconfigs
	mkdir -p $(DESTDIR)/etc/xdg
	install -m0644 kscreenlockerrc $(DESTDIR)/etc/xdg/kscreenlockerrc
	mkdir -p $(DESTDIR)/etc/modprobe.d
	install -m0644 restrict_fs_modules.conf $(DESTDIR)/etc/modprobe.d
	install -m0644 restrict_net_modules.conf $(DESTDIR)/etc/modprobe.d
	mkdir -p $(DESTDIR)/etc/sysctl.d
	install -m0644 95-kernel-hardening.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 96-network-hardening.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 96-network-disable-IPv6.conf $(DESTDIR)/etc/sysctl.d
	install -m0644 96-disable-coredumps.conf $(DESTDIR)/etc/sysctl.d
	mkdir -p $(DESTDIR)/etc/security/limits.d
	install -m0644 90-disable-coredumps.conf $(DESTDIR)/etc/security/limits.d
	mkdir -p $(DESTDIR)/usr/libexec/sconfigs
	install -m0755 modprobe-disabled-module.sh $(DESTDIR)/usr/libexec/sconfigs
	# SELinux labels of /etc/sconfigs/audit-rules are aliased to /etc/audit/rules.d in ROSA's selinux-policy
	mkdir -p $(DESTDIR)/etc/sconfigs/audit-rules
	install -m0600 20-basic-audit.rules $(DESTDIR)/etc/sconfigs/audit-rules
	install -m0600 30-detailed-audit.rules $(DESTDIR)/etc/sconfigs/audit-rules

rpm:
	rpmbuild --define "_sourcedir $$PWD" -bb sconfigs.spec
