Merge "aflags: only permit enable/disable with root access." into main

        "libaconfig_protos",

        "libanyhow",

        "libclap",

        "libnix",

        "libprotobuf",

        "libregex",

    ],

protobuf = "3.2.0"

regex = "1.10.3"

aconfig_protos = { path = "../aconfig_protos" }

nix = { version = "0.28.0", features = ["user"] }

//! `aflags` is a device binary to read and write aconfig flags.

use anyhow::{anyhow, Result};

use anyhow::{anyhow, ensure, Result};

use clap::Parser;

mod device_config_source;

use device_config_source::DeviceConfigSource;

#[derive(Clone)]

#[derive(Clone, PartialEq)]

enum FlagPermission {

    ReadOnly,

    ReadWrite,

}

fn set_flag(qualified_name: &str, value: &str) -> Result<()> {

    ensure!(nix::unistd::Uid::current().is_root(), "must be root to mutate flags");

    let flags_binding = DeviceConfigSource::list_flags()?;

    let flag = flags_binding.iter().find(|f| f.qualified_name() == qualified_name).ok_or(

        anyhow!("no aconfig flag '{qualified_name}'. Does the flag have an .aconfig definition?"),

    )?;

    if let FlagPermission::ReadOnly = flag.permission {

        return Err(anyhow!(

            "could not write flag '{qualified_name}', it is read-only for the current release configuration.",

        ));

    }

    ensure!(flag.permission == FlagPermission::ReadWrite,

            format!("could not write flag '{qualified_name}', it is read-only for the current release configuration."));

    DeviceConfigSource::override_flag(&flag.namespace, qualified_name, value)?;