fritz
10/15/2020, 9:07 PMJulian Scala
10/15/2020, 9:19 PMfritz
10/15/2020, 9:22 PMJulian Scala
10/15/2020, 9:25 PMfritz
10/15/2020, 9:27 PMJulian Scala
10/15/2020, 9:27 PMfritz
10/15/2020, 9:27 PMJulian Scala
10/15/2020, 9:28 PM10.15.17
mostly4.4.0
fritz
10/15/2020, 9:30 PMdiskutil apfs list
The second is from osqueryJulian Scala
10/15/2020, 9:32 PMfritz
10/15/2020, 9:32 PMJulian Scala
10/15/2020, 9:38 PMfritz
10/16/2020, 3:45 PMJulian Scala
10/16/2020, 4:44 PMselect
case when de.encrypted = 1 then "true" else "false" end as filevault
from disk_encryption de
CROSS join mounts m on m.device_alias = de.name where path= '/';
Still getting same results.
I’ll add more info of the device itself to the issue.
Thanks!fritz
10/16/2020, 5:08 PMsudo /usr/libexec/mdmclient QuerySecurityInfo | grep FDE_Enabled
diskutil apfs list
Julian Scala
10/16/2020, 5:59 PMsudo /usr/libexec/mdmclient QuerySecurityInfo | grep FDE_Enabled
returns
[ERROR] Unable to target 'local user' via XPC when running as daemon
[ERROR] Assertion Failed. File: /BuildRoot/Library/Caches/com.apple.xbs/Sources/MCXTools/MCXTools-1170/mcxcommon/Common/XPCUtil.mm Line: 337
"FDE_Enabled" = 0;
While diskutil apfs list
returns
APFS Container (1 found)
|
+-- Container disk1 48574CD8-F9A0-5555-89AA-CBCE79CB930A
====================================================
APFS Container Reference: disk1
Size (Capacity Ceiling): 499963174912 B (500.0 GB)
Capacity In Use By Volumes: 387407650816 B (387.4 GB) (77.5% used)
Capacity Not Allocated: 112555524096 B (112.6 GB) (22.5% free)
|
+-< Physical Store disk0s2 04920AA2-5555-4C96-8452-FA38ABB9347F
| -----------------------------------------------------------
| APFS Physical Store Disk: disk0s2
| Size: 499963174912 B (500.0 GB)
|
+-> Volume disk1s1 27C143C8-5555-4DD9-9B1B-733AC64EBA40
| ---------------------------------------------------
| APFS Volume Disk (Role): disk1s1 (No specific role)
| Name: Macintosh HD (Case-insensitive)
| Mount Point: /
| Capacity Consumed: 375944740864 B (375.9 GB)
| FileVault: No (Encrypted at rest)
|
+-> Volume disk1s2 D7749C98-1757-479E-A112-09333D1203D5
| ---------------------------------------------------
| APFS Volume Disk (Role): disk1s2 (Preboot)
| Name: Preboot (Case-insensitive)
| Mount Point: Not Mounted
| Capacity Consumed: 45330432 B (45.3 MB)
| FileVault: No
|
+-> Volume disk1s3 AEFAAA48-5559DF-92D5-D2D605655AB1
| ---------------------------------------------------
| APFS Volume Disk (Role): disk1s3 (Recovery)
| Name: Recovery (Case-insensitive)
| Mount Point: /Volumes/Recovery
| Capacity Consumed: 518598656 B (518.6 MB)
| FileVault: No
|
+-> Volume disk1s4 E09331A2-9AFE-5555-86FA-0E59CE660D2E
---------------------------------------------------
APFS Volume Disk (Role): disk1s4 (VM)
Name: VM (Case-insensitive)
Mount Point: /private/var/vm
Capacity Consumed: 10737512448 B (10.7 GB)
FileVault: No (Encrypted at rest)
Adding this in a comment on the opened issue.fritz
10/19/2020, 6:22 PMJulian Scala
10/19/2020, 6:43 PMselect name, encrypted, encryption_status, type from disk_encryption
fritz
10/19/2020, 6:50 PMJulian Scala
10/19/2020, 6:51 PMfritz
10/19/2020, 6:51 PMJulian Scala
10/19/2020, 6:51 PMfritz
10/19/2020, 6:52 PMdisk_encryption
misreporting stuff?zwass
Julian Scala
10/19/2020, 6:59 PM