Update get-udev-unrecognized-devices.sh

Author: ProjectZeroDays

src/get-udev-unrecognized-devices.sh

@@ -19,15 +19,36 @@ recognized=`ls -l /dev/disk/by-uuid |grep -v ^total |rev |cut -d'/' -f1 |rev |so
 # but at this stage we are interested only in non-UUID ones, while
 # UUID partitions are already processed, and are removed below
 
-lsblk |grep " 0 part" |egrep -v "(K|M)  0 part" |tr -d '─├└' |cut -d' ' -f1 |egrep -v "($recognized)"
-
-
-# TODO: filter out LUKS-encrypted Linux swap partitions:
-# https://wiki.archlinux.org/title/Dm-crypt/Swap_encryption
-#
-# these are tricky, since:
-# - they can have any size
-# - they HAVE UUID while initialized and attached as swap at current system run
-# - they have different UUID after each reboot
-# - they no longer have UUID (and are totally unrecognized) after removing
-#   them from /etc/crypttab and reboot
+lsblk -b -P -o NAME,TYPE,SIZE,FSTYPE,MOUNTPOINT,UUID,PARTTYPE | awk -v recognized="$recognized" '
+BEGIN {
+    split(recognized, uuids, "|");
+    for (i in uuids) {
+        if (uuids[i] != "") {
+            known[uuids[i]] = 1;
+        }
+    }
+}
+$0 ~ /TYPE="part"/ {
+    name = size = fstype = mount = uuid = parttype = "";
+    for (i = 1; i <= NF; i++) {
+        split($i, kv, "=");
+        key = kv[1];
+        val = kv[2];
+        gsub(/^"/, "", val);
+        gsub(/"$/, "", val);
+        if (key == "NAME") name = val;
+        else if (key == "SIZE") size = val;
+        else if (key == "FSTYPE") fstype = val;
+        else if (key == "MOUNTPOINT") mount = val;
+        else if (key == "UUID") uuid = val;
+        else if (key == "PARTTYPE") parttype = val;
+    }
+    if (size + 0 < 1073741824) next;
+    if (uuid != "" && uuid in known) next;
+    if (fstype == "swap" || mount == "[SWAP]") next;
+    if (fstype == "crypto_LUKS") next;
+    if (parttype ~ /0657FD6D-A4AB-43C4-84E5-0933C84B4F4F/i) next;
+    if (parttype == "0x82") next;
+    print name;
+}
+'