osQuery Management Server (Policy).Full disk encryption enabled (Linux) (SQLite SQL Statements)
SELECT
CASE
WHEN EXISTS (
SELECT 1
FROM mounts m
JOIN disk_encryption d ON m.device_alias = d.name
WHERE d.encrypted = 1 AND m.path = '/'
) THEN 'true'
ELSE 'false'
END AS policy_result;