Re: Checking if a volume is a FileVault volume?
Re: Checking if a volume is a FileVault volume?
- Subject: Re: Checking if a volume is a FileVault volume?
- From: Terry Lambert <email@hidden>
- Date: Thu, 17 Jan 2008 16:23:52 -0800
On Jan 17, 2008, at 2:42 PM, Nick Zitzmann wrote:
On Jan 17, 2008, at 3:30 PM, Terry Lambert wrote:
Look at <http://radmind.org/contrib/LISA05/>.
Specifically, look for the loginWindow plugin that does the "create
filevault for user if none exists", since it knows how to check.
That script just looks for the presence of a sparse disk image in a
certain location on disk. That location changed between Panther and
Leopard, and it could change again, which is why I was hoping there
was some way using IOKit to differentiate between regular disk
images and FileVault disk images.
Someone else suggested checking for the presence of ACLs, but that
won't work at all for Panther users, and it will only work for Tiger
users if they're running Server, so that one's out as well.
It's grotty, but you could iterate the mounted volumes to get a list
of volume/device names, and then iterate the devices in the ioreg, and
then from there see if it's a .dmg or a sparse .dmg.
Knowing that it's sparse isn't enough though; you'd then have to look
at the image itself (not sure of O_EXCL is being used), and look at
the header on it, and see if the "encrypted" bit is being set or not.
I couldn't tell you exactly how to do this, though, and I haven't seen
anything on <http://developer.apple.com> about that information being
documented, so I expect it should be treated as highly volatile and
subject to change.
-- Terry
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden