2.5.1.2 Remediation

[MorningstarZero]

In 2_Security_Audit_Compliance.sh:
When the script runs on our systems (which have encrypted APFS volumes) this check was failing even though the volumes were encrypted. I tracked the issue to line 528:

ENCRYPTION=$(echo "$APVOLINFO" | awk '/FileVault/ {print $3;exit}')

This is returning the value "(Unlocked)"

I changed the script to the following:
ENCRYPTION=$(echo "$APVOLINFO" | awk '/FileVault/ {print $2;exit}')

It now returns "Yes" and the check passes properly.