kristovatlas / osx-config-check

Verify the configuration of your OS X machine.
MIT License
1.25k stars 111 forks source link

add config check: firmware password #183

Open kristovatlas opened 7 years ago

kristovatlas commented 7 years ago

From https://twitter.com/XenoKovah/status/808427455195201536: sudo firmwarepasswd -check -> "Password Enabled: Yes"

This command also has a -setpasswd option.

More manual instructions for setting password here: https://www.cnet.com/news/how-to-set-a-firmware-password-without-rebooting-in-os-x/

This helps mitigate against physical attacks such as: http://blog.frizk.net/2016/12/filevault-password-retrieval.html