From cd576666fc477e09b2464beac1f8bd6c07e5cd64 Mon Sep 17 00:00:00 2001 From: Milan Broz Date: Tue, 19 Dec 2023 12:35:50 +0100 Subject: [PATCH] opal: Do not verify passphrase by default on luksErase. Verify passphrase should be default only when creatng a new passphrase, here it will fail if the passphrase is wrong. --- src/cryptsetup.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/cryptsetup.c b/src/cryptsetup.c index 88e928d6..d12776be 100644 --- a/src/cryptsetup.c +++ b/src/cryptsetup.c @@ -2942,7 +2942,7 @@ static int opal_erase(struct crypt_device *cd, bool factory_reset) { r = tools_get_key(factory_reset ? _("Enter OPAL PSID: ") : _("Enter OPAL Admin password: "), &password, &password_size, ARG_UINT64(OPT_KEYFILE_OFFSET_ID), ARG_UINT32(OPT_KEYFILE_SIZE_ID), ARG_STR(OPT_KEY_FILE_ID), - ARG_UINT32(OPT_TIMEOUT_ID), verify_passphrase(1), + ARG_UINT32(OPT_TIMEOUT_ID), verify_passphrase(0), !ARG_SET(OPT_FORCE_PASSWORD_ID), cd); if (r < 0) return r;