Report filevault2 status in MunkiWebAdmin

[natewalck]

Issue by natewalck
Friday Sep 19, 2014 at 07:08 GMT
Originally opened as munki/munki#250

---

From tacki...@reed.edu on June 16, 2013 07:24:54

Enable MunkiWebAdmin to report current filevault2 status on systems running 10.7 or greater.

It might be possible to use rtrouton's filevault2 encryption check script as a starting point: https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/filevault_2_encryption_check

Original issue: http://code.google.com/p/munki/issues/detail?id=250

[natewalck]

Comment by natewalck
Friday Sep 19, 2014 at 07:08 GMT

---

From AR...@hq.bill.com on July 30, 2013 13:13:17

This is a little bit of a convoluted solution, but you COULD write a script and package it such that the install fails if

$(fdesetup isactive) = 0

Add the package to autoinstall, then look through MWA and see who is persistently erroring out on that package.

Note: I'm almost certain that script will only work on 10.8.x

[natewalck]

Comment by natewalck
Friday Sep 19, 2014 at 07:08 GMT

---

From AR...@hq.bill.com on July 30, 2013 13:20:50

I meant the opposite of that... fdesetup isactive returns 0 if Filevault IS enabled. So you would write a script that fails if that command does NOT equal 0.