The fapolicyd framework trusts files contained in the RPM database. You can modify fapolicyd.trust or the files in /etc/fapolicyd/trust.d either directly using a text editor or through fapolicyd-cli commands. In this configuration, the SSS threshold t is set to 1 and the clevis luks bind command successfully reconstructs the secret …
Read More »