Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #165520

Re: Password protecting grub

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

I have been trying to achieve something similar on my system. Password
protection in grub2 appears to be quite different from that in grub-legacy.

In grub2, authentication is activated by the lines (from the grub info
manual, the section on security):

set superusers="root"
password_pbkdf2 root grub.pbkdf2.sha512.10000.biglongstring

in the /boot/grub/grub.cfg file

The command grub-mkpasswd-pbkdf2 can be used to generate the password.

On debian systems, it is better to put those two lines in
/etc/grub.d/40_custom to make sure that your changes remain after an
`update-grub' command.

But, be advised that once you do this, all the menu entries in grub will be
inaccessible until the password is supplied.
It would be nice to have a way of requiring a password only if it required
to boot a non-default entry.

On Wed, Mar 16, 2016 at 11:12 PM, Himanshu Shekhar <irm2015006@iiita.ac.in>
wrote:

> Ok! I understand GRUB password and other such passwords are ineffective. I
> am also aware of the fact that hard drive can be read anywhere unless it is
> encrypted.
> The am eager to know a particular way (however bad it may be) to secure a
> system, which I have not known yet.
> All efforts yet just stop at one step :
>            password : command not found. LOL!
>
> Regards
> Himanshu Shekhar
>

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Password protecting grub Himanshu Shekhar <irm2015006@iiita.ac.in> - 2016-03-16 12:40 +0100
  Re: Password protecting grub jdd <jdd@dodin.org> - 2016-03-16 13:10 +0100
    Re: Password protecting grub Himanshu Shekhar <irm2015006@iiita.ac.in> - 2016-03-16 13:20 +0100
      Re: Password protecting grub jdd <jdd@dodin.org> - 2016-03-16 13:30 +0100
        Re: Password protecting grub <tomas@tuxteam.de> - 2016-03-16 13:50 +0100
  Re: Password protecting grub <tomas@tuxteam.de> - 2016-03-16 13:30 +0100
  Re: Password protecting grub David Wright <deblis@lionunicorn.co.uk> - 2016-03-16 15:30 +0100
    Re: Password protecting grub Himanshu Shekhar <irm2015006@iiita.ac.in> - 2016-03-16 17:30 +0100
      Re: Password protecting grub arian <debian@semioptimal.net> - 2016-03-16 17:40 +0100
      Re: Password protecting grub jdd <jdd@dodin.org> - 2016-03-16 18:00 +0100
        Re: Password protecting grub Himanshu Shekhar <irm2015006@iiita.ac.in> - 2016-03-16 18:50 +0100
          Re: Password protecting grub Raj Kiran Grandhi <grajkiran@gmail.com> - 2016-03-17 07:30 +0100
            Re: Password protecting grub David Wright <deblis@lionunicorn.co.uk> - 2016-03-17 18:00 +0100
              Re: Password protecting grub Raj Kiran Grandhi <grajkiran@gmail.com> - 2016-03-18 14:40 +0100
                Re: Password protecting grub David Wright <deblis@lionunicorn.co.uk> - 2016-03-18 16:30 +0100
          Re: Password protecting grub Adam Wilson <moxalt@riseup.net> - 2016-03-17 17:10 +0100
            Re: Password protecting grub Martin Smith <lists@rakupottery.org.uk> - 2016-03-17 18:10 +0100
              Re: Password protecting grub Lisi Reisz <lisi.reisz@gmail.com> - 2016-03-17 18:40 +0100
      Re: Password protecting grub Adam Wilson <moxalt@riseup.net> - 2016-03-17 17:10 +0100

csiph-web