site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com On Jan 17, 2008, at 3:30 PM, Terry Lambert wrote: Look at <http://radmind.org/contrib/LISA05/>. -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... On Jan 17, 2008, at 2:42 PM, Nick Zitzmann wrote: Specifically, look for the loginWindow plugin that does the "create filevault for user if none exists", since it knows how to check. That script just looks for the presence of a sparse disk image in a certain location on disk. That location changed between Panther and Leopard, and it could change again, which is why I was hoping there was some way using IOKit to differentiate between regular disk images and FileVault disk images. Someone else suggested checking for the presence of ACLs, but that won't work at all for Panther users, and it will only work for Tiger users if they're running Server, so that one's out as well. It's grotty, but you could iterate the mounted volumes to get a list of volume/device names, and then iterate the devices in the ioreg, and then from there see if it's a .dmg or a sparse .dmg. Knowing that it's sparse isn't enough though; you'd then have to look at the image itself (not sure of O_EXCL is being used), and look at the header on it, and see if the "encrypted" bit is being set or not. I couldn't tell you exactly how to do this, though, and I haven't seen anything on <http://developer.apple.com> about that information being documented, so I expect it should be treated as highly volatile and subject to change. This email sent to site_archiver@lists.apple.com