From 97880e4f41288dc822b5df5257f3ab0945b78822 Mon Sep 17 00:00:00 2001 From: shimun Date: Fri, 3 Jul 2020 16:03:35 +0200 Subject: [PATCH] refuse removal while crypttab depends on keyscript --- initramfs-tools/Makefile | 1 + 1 file changed, 1 insertion(+) diff --git a/initramfs-tools/Makefile b/initramfs-tools/Makefile index 3043ce9..621726f 100644 --- a/initramfs-tools/Makefile +++ b/initramfs-tools/Makefile @@ -6,5 +6,6 @@ install: cp -f keyscript.sh /lib/cryptsetup/scripts/fido2luks update-initramfs -u remove: + sh -c "grep 'keyscript=fido2luks' -i /etc/crypttab && ( echo 'ERROR: your system is still setup to use fido2luks during boot' && exit 1) || exit 0" rm /etc/initramfs-tools/hooks/fido2luks.sh /lib/cryptsetup/scripts/fido2luks update-initramfs -u