Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
Radar 14023881 - FileVault 2: Allow encrypted password with fdesetup enable -inputplist
Summary:
When using fdesetup enable -inputplist to enable other accounts, the password in the plist is clear text. I would like to file an enhancement to have the -inputplist plist support hashed passwords.
Steps to Reproduce:
If you run fdesetup enable -inputplist with a hashed password, FileVault 2 is not enabled for the hashed password account.
Expected Results:
Hashed passwords should be supported. I don't want my passwords out in the open!
Actual Results:
fdesetup enable -inputplist only enables accounts with clear text passwords.
Regression:
Notes:
Even if I hide the inputplist from my uses (/private/var/root) for example I still would want the passwords in inputplist to be hashed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment