Skip to content

Instantly share code, notes, and snippets.

@gmarnin
Created June 10, 2015 18:22
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
Star You must be signed in to star a gist
Save gmarnin/e17eb746e23d2e75fe1b to your computer and use it in GitHub Desktop.
Radar 14023881 - FileVault 2: Allow encrypted password with fdesetup enable -inputplist
Summary:
When using fdesetup enable -inputplist to enable other accounts, the password in the plist is clear text. I would like to file an enhancement to have the -inputplist plist support hashed passwords.
Steps to Reproduce:
If you run fdesetup enable -inputplist with a hashed password, FileVault 2 is not enabled for the hashed password account.
Expected Results:
Hashed passwords should be supported. I don't want my passwords out in the open!
Actual Results:
fdesetup enable -inputplist only enables accounts with clear text passwords.
Regression:
Notes:
Even if I hide the inputplist from my uses (/private/var/root) for example I still would want the passwords in inputplist to be hashed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment