add filesystem hardening (mounting external filesystems read-only, nosuid, and so on)

[schsh.git] / Makefile

diff --git a/Makefile b/Makefile
index 5700d338b4cfebaf4f961ee17e9f7cfbb14b6feb..5ee18ce65444ece4d373618eaef784a1071fed75 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -2,6 +2,8 @@ TARGET := /usr/local
 SCHROOT := /etc/schroot
 
 install:
 SCHROOT := /etc/schroot
 
 install:

-       install -o root -g root schsh makeschsh $(TARGET)/bin/
-       install -o root -g root -d $(SCHROOT)/schsh/
+       install -o root -g root -m 755 schsh makeschsh schsh-rrsync $(TARGET)/bin/
+       install -o root -g root -m 755 -d $(SCHROOT)/schsh/

        install -o root -g root -m 644 schroot/schsh/* $(SCHROOT)/schsh/
        install -o root -g root -m 644 schroot/schsh/* $(SCHROOT)/schsh/

+       install -o root -g root -m 755 schroot/setup.d/* $(SCHROOT)/setup.d/
+       install -o root -g root -m 755 -d /var/lib/schsh/