also shred LUKS key when done instead of rm it

This commit is contained in:
Thierry Laurion 2019-02-22 10:48:00 -05:00
parent 9fbfb41a71
commit b3a6c285c8
No known key found for this signature in database
GPG Key ID: 79C78E6659DB658F

View File

@ -117,7 +117,7 @@ tpm sealfile2 \
-ix 7 X \
|| die "Unable to seal secret"
rm -f "$KEY_FILE" \
shred -n 10 -z -u "$KEY_FILE" 2> /dev/null \
|| die "Failed to delete key file"
# try it without the owner password first