FileVault2_Scripts icon indicating copy to clipboard operation
FileVault2_Scripts copied to clipboard

Script output contains the password itself

Open dxdlazarev opened this issue 2 years ago • 0 comments

  1. Script version we use in a Jamf policy: https://github.com/jamf/FileVault2_Scripts/blob/master/reissueKey.sh
  2. If user has {, } symbols in a password or their combination (not 100% sure here, but both of our users affected and my test user pass contained both { (before) and } (after)). For the log bellow password was: {12345<abc{abC,abc}
  3. Both script output in a terminal and a Jamf Policy log have a cleartext password: Script result: Prompting dfilevault for their login password. missing close-brace while executing "send {{12345<abc{abC,abc}} send \r log_user 1 expect eof " Successfully Changed FV2 Key button returned:Close

dxdlazarev avatar Aug 04 '23 15:08 dxdlazarev