diff options
| author | invis-z | 2023-11-21 18:12:01 +0000 |
|---|---|---|
| committer | rfjakob | 2024-04-19 22:36:55 +0200 |
| commit | 4b6b9553c4a2e14fd809754f6bf187957ff3cdfd (patch) | |
| tree | c020acb7b2ebfb6121725082ec03944c8a6aa1cd /cli_args.go | |
| parent | f5007b28c366d1a9671146710975679a154f30f8 (diff) | |
Add option to set FIDO2 verificatoin option
Add an option to specify user verification options for `fido2-assert -t`
Options will be saved to config file
Provide same functionality to #705 with simpler implementation
Resolve #702
Diffstat (limited to 'cli_args.go')
| -rw-r--r-- | cli_args.go | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/cli_args.go b/cli_args.go index 75df4d1..2e9e796 100644 --- a/cli_args.go +++ b/cli_args.go @@ -35,7 +35,10 @@ type argContainer struct { // Mount options with opposites dev, nodev, suid, nosuid, exec, noexec, rw, ro, kernel_cache, acl bool masterkey, mountpoint, cipherdir, cpuprofile, - memprofile, ko, ctlsock, fsname, force_owner, trace, fido2 string + memprofile, ko, ctlsock, fsname, force_owner, trace string + // FIDO2 + fido2 string + fido2_assert_options []string // -extpass, -badname, -passfile can be passed multiple times extpass, badname, passfile []string // For reverse mode, several ways to specify exclusions. All can be specified multiple times. @@ -208,6 +211,7 @@ func parseCliOpts(osArgs []string) (args argContainer) { flagSet.StringVar(&args.force_owner, "force_owner", "", "uid:gid pair to coerce ownership") flagSet.StringVar(&args.trace, "trace", "", "Write execution trace to file") flagSet.StringVar(&args.fido2, "fido2", "", "Protect the masterkey using a FIDO2 token instead of a password") + flagSet.StringArrayVar(&args.fido2_assert_options, "fido2-assert-option", nil, "Options to be passed with `fido2-assert -t`") // Exclusion options flagSet.StringArrayVar(&args.exclude, "e", nil, "Alias for -exclude") |