This application prompts end users for username and password to automatically reissue a recovery key.
License: GNU General Public License v3.0
👯 I’m looking to collaborate on anything in goLang, C++, Swift, or similar languages
💬 Ask me about python, goLang, C++, Swift, CDN, Powershell
📫 How to reach me [email protected]
⚡ Fun fact I am a big DIY'er, I try to do anything and everything
I set up the postscript (just set the admin and password), packaged and deployed using Jamf Pro.
The postscript defines the variable $app as "app="/var/tmp/Filevault Reissue.app/Contents/MacOS/Filevault Reissue"
But when deploying in Jamf it will install to a random tmp sandbox folder.
I suspect this is why the postinstall script is failing, but i'm not sure.
Snippets from install.log:
PackageKit: Extracting file://localhost/Library/Application%20Support/JAMF/Downloads/Filevault-ReissueInstaller-FieldEditor.pkg (destination=/Library/InstallerSandboxes/.PKInstallSandboxManager/382D52EA-8ED2-410D-A57B-18C7997E24F9.activeSandbox/Root, uid=0)
PackageKit: Executing script "postinstall" in /tmp/PKInstallSandbox.fd9htT/Scripts/com.github.cybertunnel.Filevault-Reissue.Installer.vqqbqh
./postinstall: 2022-08-04 11:33:39.800 Filevault Reissue[17530:79211] dataFromGeneratingCandidatesForSelectedRange received error Error Domain=NSCocoaErrorDomain Code=4099 "The connection to service named mul-xpc (Apple)_OpenStep was invalidated: failed at lookup with error 3 - No such process." UserInfo={NSDebugDescription=The connection to service named mul-xpc (Apple)_OpenStep was invalidated: failed at lookup with error 3 - No such process.}
Some preference keys are not being respected when the app is launched.
I've tried using both a mobileconfig and .plist variety and issuing sudo killall cfprefsd between attempts after using Xcode to build both the 1.1 release and the current Development branch code.
What I've noticed that don't apply:
viewLogoPath
usernamePlaceholder
passwordPlaceholder
moreInformationText
Other keys like viewTitle and viewInstructions appear to be respected just fine.
Looks like if you are monitoring the logs, you could see the recovery key that gets issued and could lead to an adversary to be able to pull it and unlock the drive if offline.
It was requested by a few folks to auto rotate the recovery key after someone uses it.
Looks like fdesetup usingrecoverykey might work. Testing would need to be done to confirm or deny the functionality of the command.
Additionally, application would need to be written as an agent and a on-off functionality.
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
