Solution for the new ransomware on Macs

[flyingout]

Originally Posted by dnanian

If you eject it (don't lock it), and try attaching it to another Mac, you'll see it's locked for anyone else.

Right. No question about that. And if I power off and on, it either mounts automatically or asks for the password depending on if there's a keychain entry. This is how I've used FileVault up till now.

But I want some protection against malware (if it were to strike; I'm not hugely concerned btw) by ejecting the volume (one of many on a firewire chain) and know that only trusted apps can remount it. I'm not seeing that right now.

Either anything can remount it or nobody can. Still figuring out why or what I'm doing wrong.