+install %{SOURCE1} $RPM_BUILD_ROOT/etc/rc.d/init.d/firestarter
+cp -a firestarter.pam $RPM_BUILD_ROOT/etc/pam.d/firestarter
+
+install -d $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/inbound
+install -d $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/outbound
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/configuration
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/events-filter-hosts
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/events-filter-ports
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/firestarter.sh
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/firewall
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/sysctl-tuning
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/user-pre
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/user-post
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/inbound/allow-from
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/inbound/allow-service
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/inbound/forward
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/inbound/setup
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/outbound/allow-from
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/outbound/allow-service
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/outbound/allow-to
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/outbound/deny-from
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/outbound/deny-service
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/outbound/deny-to
+touch $RPM_BUILD_ROOT%{_sysconfdir}/firestarter/outbound/setup
+
+mv $RPM_BUILD_ROOT{%{_bindir},%{_sbindir}}/firestarter
+
+# TODO: use .desktop magic for this
+cat <<'EOF' > $RPM_BUILD_ROOT%{_bindir}/firestarter
+#!/bin/sh
+if [ -x %{_bindir}/gksudo ] ; then
+ exec gksudo -g %{_sbindir}/firestarter
+elif [ -x %{_bindir}/kdesu ] ; then
+ exec kdesu %{_sbindir}/firestarter
+else
+ exec %{_sbindir}/firestarter
+fi
+EOF
+
+[ -d $RPM_BUILD_ROOT%{_datadir}/locale/sr@latin ] || \
+ mv -f $RPM_BUILD_ROOT%{_datadir}/locale/sr@{Latn,latin}