Hard Drive Protection and Fog Client

[Joe Schmitt]

@Max-Kern I don’t know what hard drive protection solution you are using, but almost all ship with some kind of whitelist feature, where you can select certain files to persist between boots. Without that feature many pieces of software, such as the FOG Client, would not function.

[Max Kern]

Hi,
in this solution there is no way for a whitelist.
All other Programms are working fine.
There is also no way to change this software because as a school we cannot quit this licens.

I only need the call of the PHP script which perform the action of resetting the encryption data until we have another solution.

Ive read something about users with dual boot system which have a simular issue is there a solution for that kind of Problem?

[Max Kern]

@Joe-Schmitt maybe thats a point, but this is not a solution for my Problem.
I dont want to reset the token without authentication, i want to reset the token from the fog Server itselfe, with a cron Job.
Maybe there will be a Security issue, but it is only Imaging and manage a Client and no real sensitiv Data.

I also can search in the Script for the function call of the encryption data, but this is no clean way.

[Wayne Workman]

@Joe-Schmitt said in Hard Drive Protection and Fog Client:

e.g. deep freeze has thaw sections

Centurion Smart Shield, a locking software I have experience with, also has what they call “Persistent” partitions. A.K.A. the P:\ drive.

[Wayne Workman]

@Max-Kern said in Hard Drive Protection and Fog Client:

i want to reset the token from the fog Server itselfe, with a cron Job.

That’s not as bad. I can write a script for you to do it.What OS are you using for the FOG Server?

EDIT
duh, read wayne. You’re using Debian.

[Max Kern]

Thank you @Wayne-Workman.
Maybe this is also a solution for People with simular Problems.

[Joe Schmitt]

@Max-Kern for reference what hard drive protection software are you using?

[Wayne Workman]

The below script should do it, and it should work in Cron fine since I pathed out the mysql command dynamically.

The software the forums uses, nodeBB, has a bug in it lately where it removes spaces from BASH scripts. In the below script where you see [[ and ]] There needs to be a space after [[ and a space before ]]

#!/bin/bash

#----- MySQL Credentials -----#
snmysqluser=""
snmysqlpass=""
snmysqlhost=""
# If user and pass is blank, leave just a set of double quotes like ""
# if the db is local, set the host to just double quotes "" or "127.0.0.1" or "localhost"


#----- Begin Program -----#

mysql=$(command -v mysql)

resetEncryptionForAll="UPDATE hosts SET hostPubKey=\"\", hostSecToken=\"\", hostSecTime=\"0000-00-00 00:00:00\""

#Test lines to make sure the sql looks good.
#echo
#echo $resetEncryptionForAll
#echo

options="-sN"
if [[ $snmysqlhost != "" ]]; then
        options="$options -h$snmysqlhost"
fi
if [[ $snmysqluser != "" ]]; then
        options="$options -u$snmysqluser"
fi
if [[ $snmysqlpass != "" ]]; then
        options="$options -p$snmysqlpass"
fi
options="$options -D fog -e"


#Do it
$mysql $options "$resetEncryptionForAll"

[Max Kern]

@Joe-Schmitt it is a german solution named "Dr. Kaiser PC-Wächter/Drive "

[Max Kern]

@Wayne-Workman Ah, ok it all goes over the DB.

So if want to reset only one Group in, this example Group with id 2, i can do also:

UPDATE hosts AS h INNER JOIN groupMembers AS s on h.hostID=s.gmhostID SET hostPubKey="", hostSecToken="", hostSecTime="0000-00-00 00:00:00" WHERE s.gmGroupID=2;

If i want ít with the Group Name i must do a second join, but that shouldnt be the Problem.

[Wayne Workman]

@Max-Kern Well just try and see. Clearly you know some SQL, I don’t think you need my help any further lol. All I ask is that if you tweak the script, share it here.