add filesystem hardening (mounting external filesystems read-only, nosuid, and so on)

[schsh.git] / Makefile

diff --git a/Makefile b/Makefile
index bd9e5b00214f84f2649fdfeea43f8f610fb91e85..5ee18ce65444ece4d373618eaef784a1071fed75 100644 (file)
--- a/Makefile
+++ b/Makefile
@@ -2,6 +2,8 @@ TARGET := /usr/local
 SCHROOT := /etc/schroot
 
 install:
-       install -o root -g root schsh makeschsh $(TARGET)/bin/
-       install -o root -g root -d $(SCHROOT)/user/
-       install -o root -g root -m 644 schroot/user/* $(SCHROOT)/user/
+       install -o root -g root -m 755 schsh makeschsh schsh-rrsync $(TARGET)/bin/
+       install -o root -g root -m 755 -d $(SCHROOT)/schsh/
+       install -o root -g root -m 644 schroot/schsh/* $(SCHROOT)/schsh/
+       install -o root -g root -m 755 schroot/setup.d/* $(SCHROOT)/setup.d/
+       install -o root -g root -m 755 -d /var/lib/schsh/