@@ -64,7 +64,7 @@ func unlockZFSHandler(w http.ResponseWriter, r *http.Request) {
unlockMutex.Lock()
defer unlockMutex.Unlock()
cmd := exec.CommandContext(ctx, unlockCommand)
cmd := exec.CommandContext(ctx, "sudo", unlockCommand)
cmd.Stdin = strings.NewReader(payload.Passphrase)
The note is not visible to the blocked user.