#!/usr/bin/make -f
# -*- makefile -*-

# Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1

# shorewall version
export VFULL=`grep "^VERSION=" install.sh | head -n 1 | cut -f 2 -d "="`
export V=`grep "^VERSION=" install.sh | head -n 1 | cut -f 2 -d "=" | cut -f 1-3 -d "."`
VMAJOR:=$(shell echo $(V) |cut -f 1 -d .)
VMINOR:=$(shell echo $(V) |cut -f 2 -d .)
VPATCH:=$(shell echo $(V) |cut -f 3 -d .)
NEXTPATCH:=$(shell expr $(VPATCH) + 1 2>/dev/null || expr `echo $(VPATCH) | cut -f 1 -d - ` + 1)

SRWL=$(CURDIR)/debian/shorewall

%:
	dh $@ 

debian/po/templates.pot: debian/shorewall.templates
	@debconf-updatepo

override_dh_auto_configure:
	true

override_dh_auto_build:
	true

override_dh_install:
	echo 'shorewall:current=$(VMAJOR).$(VMINOR).$(VPATCH)~' \
		>> debian/shorewall.substvars
	echo 'shorewall:next=$(VMAJOR).$(VMINOR).$(NEXTPATCH)~' \
		>> debian/shorewall.substvars
	DESTDIR=$(SRWL) $(CURDIR)/install.sh $(CURDIR)/debian/shorewallrc
	rmdir $(SRWL)/sbin

override_dh_installinit:
	dh_installinit --onlyscripts --no-start

override_dh_fixperms:
	# Temporary zones are only available to root
	chmod 750 $(SRWL)/var/lib/shorewall
	# By default, configuration is not world-readable
	chmod 640 $(SRWL)/etc/shorewall/*
	# These should not be executable
	chmod 644 $(SRWL)/etc/shorewall/shorewall.conf
	if [ -f $(SRWL)/etc/shorewall/Makefile ] ; then chmod 644 $(SRWL)/etc/shorewall/Makefile ; fi
	# Global configuration has to be fully readable
	chmod 644 $(SRWL)/usr/share/shorewall/*
	chmod 755 $(SRWL)/usr/share/shorewall/compiler.pl
	chmod 755 $(SRWL)/usr/share/shorewall/getparams
	chmod 755 $(SRWL)/usr/share/shorewall/Shorewall/
	chmod 755 $(SRWL)/usr/share/shorewall/configfiles/
	chmod 755 $(SRWL)/usr/share/shorewall/deprecated/
	dh_fixperms -Xetc/shorewall -Xvar/lib/shorewall