From 151e8965fa3a9c8f65e316430f9df0fa763fb02d Mon Sep 17 00:00:00 2001 From: "Joe Richey joerichey@google.com" Date: Tue, 15 Aug 2017 18:11:29 -0700 Subject: cmd/fscrypt: purge command now clears cache --- cmd/fscrypt/flags.go | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'cmd/fscrypt/flags.go') diff --git a/cmd/fscrypt/flags.go b/cmd/fscrypt/flags.go index d54a3bd..a06b952 100644 --- a/cmd/fscrypt/flags.go +++ b/cmd/fscrypt/flags.go @@ -158,6 +158,14 @@ var ( "fscrypt unlock" will need to be run in order to use the directory.`, } + dropCachesFlag = &boolFlag{ + Name: "drop-caches", + Usage: `After purging the keys from the keyring, drop the + inode and dentry cache for the purge to take effect. + Without this flag, cached encrypted files may still have + their plaintext visible. Requires root privileges.`, + Default: true, + } ) // Option flags: used to specify options instead of being prompted for them -- cgit v1.2.3