Re: FreeBSD Security Advisory FreeBSD-SA-23:01.geli
Mariusz Zaborski <[email protected]>
| Newsgroups | gmane.os.freebsd.security.general |
|---|---|
| Message-ID | <CAGOYWV_26qGLPO+ZNL6N8p57JhguU=heYQ3ejQqqvFJzYXwv-A@mail.gmail.com> |
To test decryption in dry mode (can be used on the decrypted device): echo -n | geli attach -C -p -k - dev If it succeeds you want to re-encrypt your devices. On Fri, 10 Feb 2023 at 02:48, Mel Pilgrim <[email protected]> wrote: > On 2023-02-08 11:08, FreeBSD Security Advisories wrote: > > > ============================================================================= > > FreeBSD-SA-23:01.geli Security > Advisory > > The FreeBSD > Project > > > > Topic: GELI silently omits the keyfile if read from stdin > > How do I test my existing devices to see if the master key needs to be > encrypted? > > Does the solution change if the keyfiles don't require passwords? I use > GELI keyfiles without passwords for unattended reboots. > >