Path: csiph.com!aioe.org!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Adam Wilson Newsgroups: linux.debian.user Subject: Re: Password protecting grub Date: Thu, 17 Mar 2016 17:10:01 +0100 Message-ID: References: X-Mailbox-Line: From debian-user-request@lists.debian.org Thu Mar 17 16:04:15 2016 Old-Return-Path: X-Amavis-Spam-Status: No, score=-6.177 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DATE_IN_PAST_06_12=1.543, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate:hard: -6.1 Dkim-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak; t=1458230613; bh=lYecOsm7o8oGlHl+zjXGES/lhKSjdAuWH3VQFAP6ywA=; h=Date:From:To:Subject:In-Reply-To:References:From; b=hr+XRsRE3uO1xpdGorOnGs0803pObE5rlk+nhWtNS0VQXbixWvkVKFImj06lYxABW 48GF6DmyPF0tNBbfHvqispguCiGerk9N82mPNj1DYKKE+igPpICw+ufFfczMHxM1Np o3ZjNhtl5wQ6JYnoPDoSrbyF/efN06BnTP+bE97Y= MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Virus-Status: Clean X-Mailing-List: archive/latest/705021 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/20160317075450.1535f285@riseup.net Approved: robomod@news.nic.it Lines: 28 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Thu, 17 Mar 2016 07:54:50 +0300 X-Original-Message-ID: <20160317075450.1535f285@riseup.net> X-Original-References: <20160316142508.GA7991@alum> Xref: csiph.com linux.debian.user:165533 On Wed, 16 Mar 2016 21:51:02 +0530 Himanshu Shekhar wrote: > I made all possible tries that came to my head with all your > suggestions. Still, password : command not found. > > However, I think all of use should use grub-password, especially when > we use mobile systems (as laptops), *UNLESS YOU USE A BIOS PASSWORD*. > You can check Google for what to do when you forget root password > (perhaps, you all know about that). That's just simple to give root > access to anyone with physical possession of the system. > > I personally don't like BIOS passwords, because you have no simple > way if you forget them. In fact, if you forget the root password, or > even password, there remains an option for Live system, or complete > Format in case the disk is encrypted. But, no way out if you forget > the BIOS password. Your rationale for using a GRUB password doesn't make much sense. You want password-protection earlier on than login to protect your system, yet you don't want a BIOS password because it is harder to work around than a GRUB password. If you want security, use a BIOS password. If you want convenience, don't use any pre-login passwords. I don't really see where a GRUB password fits in to the paradigm.