diff options
| author | Pavol Rusnak | 2020-09-05 22:42:15 +0200 |
|---|---|---|
| committer | Jakob Unterwurzacher | 2020-09-12 18:06:54 +0200 |
| commit | 1e624a4cc3aafa57b5fa213c88bcd3689cefd1c3 (patch) | |
| tree | a6e4f51ecb2dc0bac4276b2f65b39a3b426bc4ee /cli_args.go | |
| parent | 6a9c49e9cf23c85622dd4b181cdc615abc72d6bb (diff) | |
Add support for FIDO2 tokens
Diffstat (limited to 'cli_args.go')
| -rw-r--r-- | cli_args.go | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/cli_args.go b/cli_args.go index e4073fa..11bb96e 100644 --- a/cli_args.go +++ b/cli_args.go @@ -32,7 +32,7 @@ type argContainer struct { // Mount options with opposites dev, nodev, suid, nosuid, exec, noexec, rw, ro bool masterkey, mountpoint, cipherdir, cpuprofile, - memprofile, ko, ctlsock, fsname, force_owner, trace string + memprofile, ko, ctlsock, fsname, force_owner, trace, fido2 string // -extpass, -badname, -passfile can be passed multiple times extpass, badname, passfile multipleStrings // For reverse mode, several ways to specify exclusions. All can be specified multiple times. @@ -189,6 +189,7 @@ func parseCliOpts() (args argContainer) { flagSet.StringVar(&args.fsname, "fsname", "", "Override the filesystem name") flagSet.StringVar(&args.force_owner, "force_owner", "", "uid:gid pair to coerce ownership") flagSet.StringVar(&args.trace, "trace", "", "Write execution trace to file") + flagSet.StringVar(&args.fido2, "fido2", "", "Protect the masterkey using a FIDO2 token instead of a password") // Exclusion options flagSet.Var(&args.exclude, "e", "Alias for -exclude") @@ -279,6 +280,10 @@ func parseCliOpts() (args argContainer) { tlog.Fatal.Printf("The options -extpass and -masterkey cannot be used at the same time") os.Exit(exitcodes.Usage) } + if !args.extpass.Empty() && args.fido2 != "" { + tlog.Fatal.Printf("The options -extpass and -fido2 cannot be used at the same time") + os.Exit(exitcodes.Usage) + } if args.idle < 0 { tlog.Fatal.Printf("Idle timeout cannot be less than 0") os.Exit(exitcodes.Usage) |