From 76e9071d9e73bb737793586866539860c85160c4 Mon Sep 17 00:00:00 2001
From: Nick Anderson <nick@cmdln.org>
Date: Fri, 13 Feb 2026 15:24:42 -0600
Subject: [PATCH] Add cryptsetup and dmsetup to stdlib paths for all Linux
 platforms

Adds path[cryptsetup] and (where missing) path[dmsetup] to the
redhat, debian, opensuse, suse|sles, and archlinux|manjaro sections.
Paths verified in containers for each platform:
- archlinux: /usr/bin (all of /sbin, /usr/sbin -> /usr/bin)
- redhat, debian, opensuse, suse|sles: /usr/sbin

Used by the inventory-fde module (cfengine/modules#123) for LUKS
keyslot metadata inspection.
---
 lib/paths.cf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/lib/paths.cf b/lib/paths.cf
index a9d849c035..601279d70e 100644
--- a/lib/paths.cf
+++ b/lib/paths.cf
@@ -193,7 +193,9 @@ bundle common paths
       "path[df]"                string => "/usr/bin/df";
       "path[diff]"              string => "/usr/bin/diff";
       "path[dig]"               string => "/usr/bin/dig";
+      "path[cryptsetup]"        string => "/usr/bin/cryptsetup";
       "path[dmidecode]"         string => "/usr/bin/dmidecode";
+      "path[dmsetup]"           string => "/usr/bin/dmsetup";
       "path[echo]"              string => "/usr/bin/echo";
       "path[egrep]"             string => "/usr/bin/egrep";
       "path[ethtool]"           string => "/usr/bin/ethtool";
@@ -376,6 +378,7 @@ bundle common paths
       "path[diff]"          string => "/usr/bin/diff";
       "path[dig]"           string => "/usr/bin/dig";
       "path[dmidecode]"     string => "/usr/sbin/dmidecode";
+      "path[cryptsetup]"    string => "/usr/sbin/cryptsetup";
       "path[dmsetup]"       string => "/usr/sbin/dmsetup";
       "path[domainname]"    string => "/bin/domainname";
       "path[echo]"          string => "/bin/echo";
@@ -475,6 +478,7 @@ bundle common paths
       "path[df]"            string => "/bin/df";
       "path[diff]"          string => "/usr/bin/diff";
       "path[dig]"           string => "/usr/bin/dig";
+      "path[cryptsetup]"    string => "/usr/sbin/cryptsetup";
       "path[dmidecode]"     string => "/usr/sbin/dmidecode";
       "path[dmsetup]"       string => "/usr/sbin/dmsetup";
       "path[domainname]"    string => "/bin/domainname";
@@ -550,7 +554,9 @@ bundle common paths
       "path[df]"        string => "/usr/bin/df";
       "path[diff]"      string => "/usr/bin/diff";
       "path[dig]"       string => "/usr/bin/dig";
+      "path[cryptsetup]" string => "/usr/sbin/cryptsetup";
       "path[dmidecode]" string => "/usr/sbin/dmidecode";
+      "path[dmsetup]"   string => "/usr/sbin/dmsetup";
       "path[echo]"      string => "/usr/bin/echo";
       "path[egrep]"     string => "/usr/bin/egrep";
       "path[ethtool]"   string => "/usr/sbin/ethtool";
@@ -599,7 +605,9 @@ bundle common paths
       "path[df]"            string => "/bin/df";
       "path[diff]"          string => "/usr/bin/diff";
       "path[dig]"           string => "/usr/bin/dig";
+      "path[cryptsetup]"    string => "/usr/sbin/cryptsetup";
       "path[dmidecode]"     string => "/usr/sbin/dmidecode";
+      "path[dmsetup]"       string => "/usr/sbin/dmsetup";
       "path[domainname]"    string => "/bin/domainname";
       "path[echo]"          string => "/bin/echo";
       "path[egrep]"         string => "/usr/bin/egrep";