mirror of
https://github.com/fleetdm/fleet
synced 2026-04-24 15:07:29 +00:00
This adds a new check about whether all APFS volumes are encrypted. I needed to add a new table, and I took that opportunity to add another so that osquery has all information from `diskutil apfs list -plist`. Note that it is somewhat unclear whether to use the `encryption` or `filevault` field in the query. FileVault is about whether the volume is encrypted with a password and Encryption is about whether it is encrypted at all, since all modern macs have hardware-backed disk encryption. |
||
|---|---|---|
| .. | ||
| apfs_darwin.go | ||
| apfs_darwin_test.go | ||