summaryrefslogtreecommitdiff
path: root/internal/fusefrontend_reverse/ctlsock_interface.go
diff options
context:
space:
mode:
Diffstat (limited to 'internal/fusefrontend_reverse/ctlsock_interface.go')
-rw-r--r--internal/fusefrontend_reverse/ctlsock_interface.go39
1 files changed, 39 insertions, 0 deletions
diff --git a/internal/fusefrontend_reverse/ctlsock_interface.go b/internal/fusefrontend_reverse/ctlsock_interface.go
new file mode 100644
index 0000000..6bf2e6a
--- /dev/null
+++ b/internal/fusefrontend_reverse/ctlsock_interface.go
@@ -0,0 +1,39 @@
+package fusefrontend_reverse
+
+import (
+ "path/filepath"
+ "strings"
+
+ "golang.org/x/sys/unix"
+
+ "github.com/rfjakob/gocryptfs/internal/ctlsocksrv"
+ "github.com/rfjakob/gocryptfs/internal/pathiv"
+)
+
+// Verify that the interface is implemented.
+var _ ctlsocksrv.Interface = &RootNode{}
+
+// EncryptPath implements ctlsock.Backend.
+// This is used for the control socket and for the "-exclude" logic.
+func (rn *RootNode) EncryptPath(plainPath string) (string, error) {
+ if rn.args.PlaintextNames || plainPath == "" {
+ return plainPath, nil
+ }
+ cipherPath := ""
+ parts := strings.Split(plainPath, "/")
+ for _, part := range parts {
+ dirIV := pathiv.Derive(cipherPath, pathiv.PurposeDirIV)
+ encryptedPart := rn.nameTransform.EncryptName(part, dirIV)
+ if rn.args.LongNames && len(encryptedPart) > unix.NAME_MAX {
+ encryptedPart = rn.nameTransform.HashLongName(encryptedPart)
+ }
+ cipherPath = filepath.Join(cipherPath, encryptedPart)
+ }
+ return cipherPath, nil
+}
+
+// DecryptPath implements ctlsock.Backend
+func (rn *RootNode) DecryptPath(cipherPath string) (string, error) {
+ p, err := rn.decryptPath(cipherPath)
+ return p, err
+}