Add module to query disk/full disk encryption status

[April King]

It would be great to be able to query whether a given file, directory or disk is encrypted by full disk encryption systems such as FileVault, Bitlocker, and LUKS. It's not as important for servers, but if mig ends up on a bunch of clients, it will be great to see if these systems (particularly ones that may have been rebuilt from scratch) are using FDE.

[Malhar Vora]

@marumari I believe it would be a standard module and not persistent one. Am I correct ?

[Julien Vehent]

Correct, this would be a regular module.

[April King]

Indeed, that's what I was aiming for.

[Malhar Vora]

@april Can I hack on this ?

[Malhar Vora]

I am trying to find that how can we check for FDE status pragmatically.

[April King]

Please, go right ahead. I assume most OSes come with some kind of command line tool that you can use to query it.

[Malhar Vora]

@april @jvehent We don't need to check for single file/dir as entire disk is encrypted using FDE. Am I correct ?

[April King]

I think at this point let's just worry about entire disk encryption, and not single directory. We can always add onto it later. :)

[Malhar Vora]

Ok Cool.