-
Notifications
You must be signed in to change notification settings - Fork 103
Description
Removing login protector fails.
`
➜ fscrypt status /mnt
ext4 filesystem "/mnt" has 2 protectors and 1 policy
PROTECTOR LINKED DESCRIPTION
e9c9ed7ea8188b59 Yes (/) login protector for kamen
eb043cdbd9a92c9d No custom protector "transferprot"
POLICY UNLOCKED PROTECTORS
1b2353ac3ff97803 Yes e9c9ed7ea8188b59, eb043cdbd9a92c9d
➜ fscrypt metadata remove-protector-from-policy --protector=/mnt:e9c9ed7ea8188b59 --policy=/mnt:1b2353ac3ff97803 --verbose
2020/10/24 03:56:07 parsed flag: mountpoint="/mnt" descriptor=e9c9ed7ea8188b59
2020/10/24 03:56:07 Reading config from "/etc/fscrypt.conf"
2020/10/24 03:56:07 creating context for "kamen"
2020/10/24 03:56:07 mnt_dir /run/snapd/ns/ufw.mnt: not a directory
2020/10/24 03:56:07 getting mnt_dir: /run/user/123/gvfs: permission denied
2020/10/24 03:56:07 mnt_dir /run/snapd/ns/snap-store.mnt: not a directory
2020/10/24 03:56:07 mnt_dir /run/snapd/ns/keepassxc.mnt: not a directory
2020/10/24 03:56:07 found ext4 filesystem "/mnt" (/dev/sdc8)
2020/10/24 03:56:07 Getting protector e9c9ed7ea8188b59
2020/10/24 03:56:07 could not read metadata at "/mnt/.fscrypt/protectors/e9c9ed7ea8188b59"
fscrypt metadata remove-protector-from-policy: filesystem /mnt: descriptor e9c9ed7ea8188b59: could not find metadata
`
I created a encrypted system on one machine with a login protector and then moved to another machine. I need to make a new login protector. Meanwhile I created a custom protector to get by. The problem is I can not remove it neither on the new machine nor on the old. I will loose the old machine in a few hours so if it is needed then this is urgent so please help.