init

hardening-work/lock.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+set -euo pipefail
+
+cd ~
+sudo umount /secure-projects
+sudo cryptsetup close secure_projects
+echo 'VERIFY LOCKED — should report "inactive"'
+status_output="$(sudo cryptsetup status secure_projects)"
+echo "$status_output"
+echo "$status_output" | grep -q 'inactive'