From e0ba419f2abc52ad4359964796f5c11c60c9168d Mon Sep 17 00:00:00 2001
From: Marc Beninca <git@marc.beninca.link>
Date: Sun, 30 Mar 2025 12:53:39 +0200
Subject: [PATCH] cs/root

---
 sh/cryptsetup.sh | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/sh/cryptsetup.sh b/sh/cryptsetup.sh
index c76735e..0f2629c 100644
--- a/sh/cryptsetup.sh
+++ b/sh/cryptsetup.sh
@@ -4,6 +4,7 @@ RWX_CRYPT_ROOT="${HOME}/home/crypt"
 
 rwx_crypt() {
 	local action="${1}"
+	shift
 	local action_close="close"
 	local action_open="open"
 	local mapper="/dev/mapper"
@@ -11,10 +12,12 @@ rwx_crypt() {
 	local crypt_arg crypt_file crypt_map crypt_mount pass_phrase
 	case "${action}" in
 	"${action_close}" | "${action_open}")
-		shift
-		if [ -z "${1}" ]; then
-			rwx_log_error 1 "No files"
-		fi
+		local user_id
+		user_id="$(id --user)"
+		[ "${user_id}" -eq 0 ] ||
+			rwx_log_error 1 "Not root"
+		[ -n "${1}" ] ||
+			rwx_log_error 2 "No files"
 		[ "${action}" = "${action_open}" ] &&
 			pass_phrase="$(rwx_read_passphrase)"
 		for crypt_arg in "${@}"; do
@@ -29,6 +32,7 @@ rwx_crypt() {
 					# TODO find next available device
 					# TODO connect device
 					# TODO open device
+					echo "${pass_phrase}"
 					# TODO make mount directory
 					# TODO mount file system
 					;;
@@ -42,7 +46,7 @@ rwx_crypt() {
 				*) ;;
 				esac
 			else
-				rwx_log_error 2 "Not a file"
+				rwx_log_error 3 "Not a file"
 			fi
 		done
 		;;