From 37c866e1e16a6d2dded11ba93c2e04af3764a139 Mon Sep 17 00:00:00 2001
From: "Joe Richey joerichey@google.com" <joerichey@google.com>
Date: Wed, 21 Jun 2017 10:21:21 -0700
Subject: cmd/fscrypt: setup, encrypt, unlock commands

This commit adds in the framework for adding commands and subcommands to
the fscrypt tool. This commit adds in the "setup", "encrypt", and
"unlock" commands. Additional information can be found by running:
    fscrypt <command> --help.

This commit defines how flags are parsed and errors are handled. It also
creates an extensible framework for prompting the user for information.

Change-Id: I159d7f44ee2b2bbc5e072f0802850e082d9a13ce
---
 cmd/fscrypt/setup.go | 77 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 77 insertions(+)
 create mode 100644 cmd/fscrypt/setup.go

(limited to 'cmd/fscrypt/setup.go')

diff --git a/cmd/fscrypt/setup.go b/cmd/fscrypt/setup.go
new file mode 100644
index 0000000..4f2375c
--- /dev/null
+++ b/cmd/fscrypt/setup.go
@@ -0,0 +1,77 @@
+/*
+ * strings.go - File containing the functionality initializing directories and
+ * the global config file.
+ *
+ * Copyright 2017 Google Inc.
+ * Author: Joe Richey (joerichey@google.com)
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"); you may not
+ * use this file except in compliance with the License. You may obtain a copy of
+ * the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+ * License for the specific language governing permissions and limitations under
+ * the License.
+ */
+
+package main
+
+import (
+	"fmt"
+	"io"
+	"os"
+
+	"fscrypt/actions"
+)
+
+// createGlobalConfig creates (or overwrites) the global config file
+func createGlobalConfig(w io.Writer, path string) error {
+	if os.Getuid() != 0 {
+		return ErrMustBeRoot
+	}
+
+	// Ask to create or replace the config file
+	_, err := os.Stat(path)
+	switch {
+	case err == nil:
+		err = askConfirmation(fmt.Sprintf("Replace %q?", path), false, "")
+		if err == nil {
+			err = os.Remove(path)
+		}
+	case os.IsNotExist(err):
+		err = askConfirmation(fmt.Sprintf("Create %q?", path), true, "")
+	}
+	if err != nil {
+		return err
+	}
+
+	fmt.Fprintln(w, "Customizing passphrase hashing difficulty for this system...")
+	err = actions.CreateConfigFile(timeTargetFlag.Value, legacyFlag.Value)
+	if err != nil {
+		return err
+	}
+
+	fmt.Fprintf(w, "Created global config file at %q.\n", path)
+	return nil
+}
+
+// setupFilesystem creates the directories for a filesystem to use fscrypt.
+func setupFilesystem(w io.Writer, path string) error {
+	ctx, err := actions.NewContextFromMountpoint(path)
+	if err != nil {
+		return err
+	}
+
+	if err = ctx.Mount.Setup(); err != nil {
+		return err
+	}
+
+	fmt.Fprintf(w, "Metadata directories created at %q.\n", ctx.Mount.BaseDir())
+	fmt.Fprintf(w, "Filesystem %q (%s) ready for use with %s encryption.\n",
+		ctx.Mount.Path, ctx.Mount.Device, ctx.Mount.Filesystem)
+	return nil
+}
-- 
cgit v1.2.3