FileVault 2 status incorrect #378

mrcamuti · 2016-01-15T21:03:35Z

Totally possible that I'm screwing something up, but "Encryption Status" on the Storage module is reporting "Encrypted" for disks that do not have encryption turned on.

Affected OS in my setup includes 10.9.5, 10.10.5, and 10.11.2.
I'm running MunkiReport Version 2.7.3.1648

mrcamuti · 2016-01-15T21:09:33Z

I used ARD to run Trouton's filevault_2_status_check.sh to verify, for this example.

bochoven · 2016-01-15T21:57:42Z

Could you please look at #375 as I think that is the same issue

mrcamuti · 2016-01-15T23:19:36Z

Absolutely could be the issue. I'm not familiar enough with the underlying
pieces to say, but my setup matches his description of the symptoms.

On Fri, Jan 15, 2016 at 1:57 PM, Arjen van Bochoven <
notifications@github.com> wrote:

Could you please look at #375
#375 as I think
that is the same issue

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

Partial fix, I think we need to fix this serverside as well

bochoven · 2016-01-15T23:30:16Z

Could you please test if the latest commit fixes the issue?

mrcamuti · 2016-01-16T00:29:47Z

The Storage tab is still incorrectly reporting all drives as "Encrypted".

But... the Security report is correctly tagging computers as unencrypted.
Not sure if this is new behavior or not (I had not found the security
report before troubleshooting this issue).

On Fri, Jan 15, 2016 at 3:30 PM, Arjen van Bochoven <
notifications@github.com> wrote:

Could you please test if the latest commit fixes the issue?

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

mrcamuti · 2016-01-16T01:00:54Z

I just cross-referenced the unencrypted tag in the security report with
actual encryption state on the machines, and it's good, but not perfect.

So far: "Encyrpted" TAG in the security report correlates perfectly with
actual encryption status.
"Unencrypted" TAG is not perfectly correlated with unencrypted status
(10.10.5 rMBP with FV2 on, still reporting as "unencrypted")

On Fri, Jan 15, 2016 at 4:29 PM, steve camuti mrcamuti@gmail.com wrote:

The Storage tab is still incorrectly reporting all drives as "Encrypted".

But... the Security report is correctly tagging computers as unencrypted.
Not sure if this is new behavior or not (I had not found the security
report before troubleshooting this issue).

On Fri, Jan 15, 2016 at 3:30 PM, Arjen van Bochoven <
notifications@github.com> wrote:

Could you please test if the latest commit fixes the issue?

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

bochoven · 2016-01-16T08:30:14Z

Could you post the output of

/usr/local/munki/preflight.d/cache/disk.plist

from the 10.10.5 rMBP with FV2 on, still reporting as "unencrypted"

mrcamuti · 2016-01-19T17:33:22Z

diskplist.zip

Sorry, holiday weekend here in the States. Here's the file you requested. It was captured a full day after the reported behavior, but hoping it's still got what you're looking for.

bochoven · 2016-01-20T16:49:01Z

This machine is not reporting on encryption status which may be a fault in the disk reporting script. Do you have a current version of the disk_reporting script installed? Could you check if /usr/local/munki/preflight.d/disk_info
is the same as
https://github.com/munkireport/munkireport-php/blob/master/app/modules/disk_report/scripts/disk_info

mrcamuti · 2016-01-21T21:59:26Z

I used diff to compare the two scripts and they're identical line by line.
I did just verify that the encryption status is still mis-reporting in the
Security report, as well as the Storage report. (Both say unencrypted, but
on the device, I verified it is encrypted note that I just thought of, we
do use an institutional key, not an individual key for encryption )

On Wed, Jan 20, 2016 at 8:49 AM, Arjen van Bochoven <
notifications@github.com> wrote:

This machine is not reporting on encryption status which may be a fault in
the disk reporting script. Do you have a current version of the
disk_reporting script installed? Could you check if
/usr/local/munki/preflight.d/disk_info
is the same as

https://github.com/munkireport/munkireport-php/blob/master/app/modules/disk_report/scripts/disk_info

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

bochoven · 2016-01-21T22:07:07Z

Could you post the output of

diskutil info -plist /

mrcamuti · 2016-01-22T00:28:03Z

Bootable

BusProtocol

SATA

CanBeMadeBootable

CanBeMadeBootableRequiresDestroy

Content

Apple_HFS

DeviceBlockSize

512

DeviceIdentifier

disk1

DeviceNode

/dev/disk1

DeviceTreePath

IODeviceTree:/PCI0@0/SATA@1F,2/PRT0@0/PMP@0

Ejectable

FilesystemName

Journaled HFS+

FilesystemType

hfs

FilesystemUserVisibleName

Mac OS Extended (Journaled)

FreeSpace

34652688384

GlobalPermissionsEnabled

IOKitSize

249804886016

Internal

JournalOffset

365596672

JournalSize

25165824

LowLevelFormatSupported

MediaName

Macintosh HD

MediaType

Generic

MountPoint

/

OS9DriversInstalled

ParentWholeDisk

disk1

RAIDMaster

RAIDSlice

RecoveryDeviceIdentifier

disk0s3

SMARTStatus

Not Supported

SolidState

SupportsGlobalPermissionsDisable

SystemImage

TotalSize

249804886016

VolumeName

Macintosh HD

VolumeUUID

FD9F3E62-738F-3DF6-9E50-57F1C27C5434

WholeDisk

Writable

WritableMedia

WritableVolume

On Thu, Jan 21, 2016 at 2:08 PM, Arjen van Bochoven <
notifications@github.com> wrote:

Could you post the output of

diskutil info -plist /

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

bochoven · 2016-01-22T09:26:15Z

This is not an encrypted disk. Why do you think it is encrypted? What does it say in the 'Security and Privacy' preference pane?

mrcamuti · 2016-01-22T09:27:00Z

FileVault is On. Institutional key, the usual.

On Friday, January 22, 2016, Arjen van Bochoven notifications@github.com
wrote:

This is not an encrypted disk. Why do you think it is encrypted? What does
it say in the 'Security and Privacy' preference pane?

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

mrcamuti · 2016-01-22T09:27:23Z

I can send a screenshot, if that would help.

On Friday, January 22, 2016, steve camuti mrcamuti@gmail.com wrote:

FileVault is On. Institutional key, the usual.

On Friday, January 22, 2016, Arjen van Bochoven <notifications@github.com
javascript:_e(%7B%7D,'cvml','notifications@github.com');> wrote:

This is not an encrypted disk. Why do you think it is encrypted? What
does it say in the 'Security and Privacy' preference pane?

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

bochoven · 2016-01-22T09:29:47Z

What does

fdesetup status

report?

mrcamuti · 2016-01-22T18:13:49Z

FileVault is turned on.

On Fri, Jan 22, 2016 at 1:29 AM, Arjen van Bochoven <
notifications@github.com> wrote:

What does

fdesetup status

report?

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

bochoven · 2016-01-22T19:08:26Z

And

diskutil cs list

mrcamuti · 2016-01-22T19:40:29Z

Redacted LVVM info.

On Fri, Jan 22, 2016 at 11:08 AM, Arjen van Bochoven <
notifications@github.com> wrote:

And

diskutil cs list

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

mrcamuti · 2016-01-22T19:43:52Z

And just to make super sure I'm not missing something obvious with the
/usr/local/munki/preflight.d/disk_info
comparison, I used diff -yI /github_version_local_copy
/emailed_version_from_client and got no output, which, as I understand it,
means they're identical. Please confirm I haven't gone nuts.

On Fri, Jan 22, 2016 at 11:40 AM, steve camuti mrcamuti@gmail.com wrote:

Redacted LVVM info.

On Fri, Jan 22, 2016 at 11:08 AM, Arjen van Bochoven <
notifications@github.com> wrote:

And

diskutil cs list

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

bochoven · 2016-01-22T21:03:56Z

The corestorage output did not come through

mrcamuti · 2016-01-22T21:49:12Z

Just added it on GH to the comment that mentioned it.

bochoven · 2016-01-28T14:40:10Z

I would like some output from this machine to see what's going on with the disk_reporting script. Would you be able to provide the output of:

 /usr/sbin/diskutil list -plist
 /usr/sbin/diskutil info -plist disk1
 /usr/sbin/diskutil cs info -plist disk1

With unredacted ID strings (or globally replaced by another string)

bochoven · 2016-03-03T14:21:44Z

Any progress on this?

mrcamuti · 2016-03-03T14:30:00Z

I had zipped the files you asked for and then uploaded them through the
github web interface. I'm hoping you got them, yeah?

On Thursday, March 3, 2016, Arjen van Bochoven notifications@github.com
wrote:

Any progress on this?

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

bochoven · 2016-03-03T14:32:50Z

I don't have those files (maybe I lost them), could you send them again?

mrcamuti · 2016-03-03T14:46:41Z

I'm traveling right now, but once I'm home next week I will see if I have
them still.

And thanks for following up on this.

On Thursday, March 3, 2016, Arjen van Bochoven notifications@github.com
wrote:

I don't have those files (maybe I lost them), could you send them again?

—
Reply to this email directly or view it on GitHub
#378 (comment)
.

bochoven · 2017-09-17T18:15:49Z

Please open this issue again if this is still relevant.

bochoven added a commit that referenced this issue Jan 15, 2016

Fix for #375 and #378

9dfb38c

Partial fix, I think we need to fix this serverside as well

bochoven closed this as completed Sep 17, 2017

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

FileVault 2 status incorrect #378

FileVault 2 status incorrect #378

mrcamuti commented Jan 15, 2016

mrcamuti commented Jan 15, 2016

bochoven commented Jan 15, 2016

mrcamuti commented Jan 15, 2016

bochoven commented Jan 15, 2016

mrcamuti commented Jan 16, 2016

mrcamuti commented Jan 16, 2016

bochoven commented Jan 16, 2016

mrcamuti commented Jan 19, 2016

bochoven commented Jan 20, 2016

mrcamuti commented Jan 21, 2016

bochoven commented Jan 21, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 28, 2016

bochoven commented Mar 3, 2016

mrcamuti commented Mar 3, 2016

bochoven commented Mar 3, 2016

mrcamuti commented Mar 3, 2016

bochoven commented Sep 17, 2017

FileVault 2 status incorrect #378

FileVault 2 status incorrect #378

Comments

mrcamuti commented Jan 15, 2016

mrcamuti commented Jan 15, 2016

bochoven commented Jan 15, 2016

mrcamuti commented Jan 15, 2016

bochoven commented Jan 15, 2016

mrcamuti commented Jan 16, 2016

mrcamuti commented Jan 16, 2016

bochoven commented Jan 16, 2016

mrcamuti commented Jan 19, 2016

bochoven commented Jan 20, 2016

mrcamuti commented Jan 21, 2016

bochoven commented Jan 21, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 22, 2016

mrcamuti commented Jan 22, 2016

bochoven commented Jan 28, 2016

bochoven commented Mar 3, 2016

mrcamuti commented Mar 3, 2016

bochoven commented Mar 3, 2016

mrcamuti commented Mar 3, 2016

bochoven commented Sep 17, 2017