diff --git a/include/tests_crypto b/include/tests_crypto index a643b6c0..b7279163 100644 --- a/include/tests_crypto +++ b/include/tests_crypto @@ -217,6 +217,27 @@ fi # ################################################################################# +# + # Test : CRYP-7932 + # Description : Determine if system has enabled macOS FileVault encryption + Register --test-no CRYP-7932 --os macOS --weight L --network NO --category crypto --description "Determine if system has enabled macOS FileVault encryption" + if [ ${SKIPTEST} -eq 0 ]; then + filevault_status=$(fdesetup status) + + case "$filevault_status" in + *"FileVault is On."*) + LogText "Result: FileVault is enabled." + Display --indent 2 --text "- FileVault is enabled." --result "${STATUS_OK}" --color GREEN + Report "encryption[]=filevault" + ;; + *) + LogText "Result: FileVault is not enabled." + Display --indent 2 --text "- FileVault is not enabled." --result "${STATUS_WARNING}" --color RED + ;; + esac + fi +# +################################################################################# # # Test : CRYP-8002 # Description : Gather available kernel entropy