What | Removed | Added |
---|---|---|
Status | NEW | RESOLVED |
Resolution | --- | INVALID |
The test is not valid as the file(1) command can return anything as the testfile below .private is encrypted without a magic byte sequence. In my case I see file .private/testfile .private/testfile: Atari DEGAS Elite bitmap 320 x 200 x 16, color palette 0000 0000 0006 9725 00ab ... which can not be true. The expected value at https://confluence.suse.com/pages/viewpage.action?pageId=968033193#SLES15SP4SecurityFIPSRegressionTest(RCphase)-SLE15SP4FIPSRegressionTest(RC,aarch64 is simply a fully random chance and depends on the version of the file package. Do use the file(1) command only and only if the encypted result has a magic byte in the very first few starting bytes. AFAIK this is not the case for ecryptfs.