%global _hardened_build 1

Name:       firejail
Version:    0.9.38
Release:    3%{?dist}
Summary:    A SUID sandbox program

License:    GPLv2+
URL:        https://github.com/netblue30/firejail
Source0:    https://github.com/netblue30/firejail/archive/%{version}.tar.gz#/%{name}-%{version}.tar.gz

Requires:   %{name}-filesystem = %{version}-%{release}

%description
Firejail is a SUID security sandbox program that reduces the risk of security
breaches by restricting the running environment of untrusted applications using
Linux namespaces and seccomp-bpf. It allows a process and all its descendants
to have their own private view of the globally shared kernel resources, such as
the network stack, process table, and mount table.


%package filesystem
Summary:   Directories for %{name}
BuildArch: noarch

%description filesystem
Directories for %{name}.


%prep
%setup -qn %{name}-%{version}


%build
# Fix libdir.
sed -i -e 's#/usr/lib#%{_libdir}#g' etc/disable-devel.inc

%configure
make %{?_smp_mflags}


%install
make install DESTDIR=%{buildroot}
chmod +x %{buildroot}/%{_libdir}/firejail/*.so

# Install documentation ourselves.
rm -rf %{buildroot}/%{_docdir}/firejail/


%files
%doc README README.md RELNOTES
%license COPYING

%attr(4755,root,root) %{_bindir}/firejail
%attr(0755,root,root) %{_bindir}/firemon
%dir %{_datadir}/bash-completion
%dir %{_datadir}/bash-completion/completions
%{_datadir}/bash-completion/completions/firejail
%{_datadir}/bash-completion/completions/firemon
%{_mandir}/man1/firejail.1*
%{_mandir}/man1/firemon.1*
%{_mandir}/man5/firejail-login.5*
%{_mandir}/man5/firejail-profile.5*

%dir %{_libdir}/firejail
%{_libdir}/firejail/fshaper.sh
%{_libdir}/firejail/ftee
%{_libdir}/firejail/libtrace.so
%{_libdir}/firejail/libtracelog.so

%config(noreplace) %{_sysconfdir}/firejail/*.profile
%config(noreplace) %{_sysconfdir}/firejail/*.inc
%config(noreplace) %{_sysconfdir}/firejail/*.users
%config(noreplace) %{_sysconfdir}/firejail/*.net

%files filesystem
%dir %{_sysconfdir}/firejail

%changelog
* Tue Feb 02 2016 Jamie Nguyen <jamielinux@fedoraproject.org> - 0.9.36-2
- own bash-completion directory
- fix libdir in disable-devel.inc

* Sat Jan 23 2016 Jamie Nguyen <jamielinux@fedoraproject.org> - 0.9.36-1
- initial package