Add Admin Condition for FileVault Status

conditionals/AdminCondition FileVault Enabled/.gitignore

@@ -0,0 +1,5 @@
+# .DS_Store files!
+.DS_Store
+
+# our build directory
+build/

conditionals/AdminCondition FileVault Enabled/build-info.plist

@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>distribution_style</key>
+	<false/>
+	<key>identifier</key>
+	<string>com.github.munki.pkg.AdminConditionFileVaultEnabled</string>
+	<key>install_location</key>
+	<string>/</string>
+	<key>name</key>
+	<string>AdminConditionFileVaultEnabled-${version}.pkg</string>
+	<key>ownership</key>
+	<string>recommended</string>
+	<key>postinstall_action</key>
+	<string>none</string>
+	<key>suppress_bundle_relocation</key>
+	<true/>
+	<key>version</key>
+	<string>1.0</string>
+</dict>
+</plist>

conditionals/AdminCondition FileVault Enabled/payload/usr/local/munki/conditions/filevault-enabled.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+# This is a bash conditional script which outputs a key with a value of the current filevault enabled status
+
+# Read the location of the ManagedInstallDir from ManagedInstall.plist
+managedinstalldir="$(defaults read /Library/Preferences/ManagedInstalls ManagedInstallDir)"
+# Make sure we're outputting our information to "ConditionalItems.plist" 
+plist_loc="$managedinstalldir/ConditionalItems"
+
+statusOn=`/usr/bin/fdesetup status | grep On`
+
+if [ ! -z "$statusOn" ]; then
+	defaults write "$plist_loc" "filevault_enabled" -bool true
+else
+	defaults write "$plist_loc" "filevault_enabled" -bool false
+fi
+
+# convert plist to xml
+plutil -convert xml1 "$plist_loc".plist
+
+exit 0

conditionals/AdminCondition FileVault Enabled/scripts/postinstall

@@ -0,0 +1,3 @@
+#!/bin/bash
+
+chmod +x /usr/local/munki/conditions/filevault-enabled.sh