opal: Do not verify passphrase by default on luksErase.

Verify passphrase should be default only when creatng
a new passphrase, here it will fail if the passphrase
is wrong.
This commit is contained in:
Milan Broz
2023-12-19 12:35:50 +01:00
parent 6b1f13fd0f
commit cd576666fc

View File

@@ -2942,7 +2942,7 @@ static int opal_erase(struct crypt_device *cd, bool factory_reset) {
r = tools_get_key(factory_reset ? _("Enter OPAL PSID: ") : _("Enter OPAL Admin password: "),
&password, &password_size, ARG_UINT64(OPT_KEYFILE_OFFSET_ID),
ARG_UINT32(OPT_KEYFILE_SIZE_ID), ARG_STR(OPT_KEY_FILE_ID),
ARG_UINT32(OPT_TIMEOUT_ID), verify_passphrase(1),
ARG_UINT32(OPT_TIMEOUT_ID), verify_passphrase(0),
!ARG_SET(OPT_FORCE_PASSWORD_ID), cd);
if (r < 0)
return r;