grub 2 password

requiemnoise · 11-05-2009, 10:51 PM

I can't seem to find any documentation on Grub2. Does Grub2 still has a "lock" feature? I looked everywhere, but I can't find this information. I'm not going to rely on the bios password to lock the machine down. This is ridiculous. Am I better off going back to the grub legacy?

Thanks

aus9 · 11-06-2009, 07:57 AM

http://www.gnu.org/software/grub/man....html#Security

http://www.gnu.org/software/grub/man...node/lock.html

http://www.gnu.org/software/grub/man....html#password

be aware that if I can get to your computer and case is unlocked I can still bypass any grub passwd. (I do not want to just letting you know look for other ways to protect yourself if local users are a problem)

requiemnoise · 11-07-2009, 12:24 AM

Quote:

Originally Posted by aus9

http://www.gnu.org/software/grub/man....html#Security

http://www.gnu.org/software/grub/man...node/lock.html

http://www.gnu.org/software/grub/man....html#password

be aware that if I can get to your computer and case is unlocked I can still bypass any grub passwd. (I do not want to just letting you know look for other ways to protect yourself if local users are a problem)

That is grub 0.x (legacy), not grub 1.x to 2.0.
thanks

requiemnoise · 11-08-2009, 06:45 PM

The latest version of Grub doesn't have a lock feature. I don't know why so many distros are making people upgrade to this useless version. I downgraded to the legacy. Everything is working like a charm.

aus9 · 11-09-2009, 09:15 AM

my apols my links go to 0.97 manual....grrrr

maybe you could post to the mailing list? or irc?

http://grub.enbug.org/IrcChannels

JamesChamberlain · 11-09-2009, 09:21 AM

grub passwords?

Generate one with:

# grub-md5-crypt

copy the encryption hash

edit /boot/grub/grub.conf

and put:

password --md5 <insert encryption hash>

Here's an example:

title Ubuntu, kernel 2.6.8.1-2-386 (recovery mode)
root (hd1,2)
kernel /boot/vmlinuz-2.6.8.1-2-386 root=/dev/hdb3 ro single
initrd /boot/initrd.img-2.6.8.1-2-386
password --md5 $1$w7Epf0$vX6rxpozznLAVxZGkcFcs.

See the final entry, this will stop ubuntu from being editied (can still be booted..)

requiemnoise · 11-10-2009, 11:24 AM

Quote:

Originally Posted by JamesChamberlain

grub passwords?

Generate one with:

# grub-md5-crypt

copy the encryption hash

edit /boot/grub/grub.conf

and put:

password --md5 <insert encryption hash>

Here's an example:

title Ubuntu, kernel 2.6.8.1-2-386 (recovery mode)
root (hd1,2)
kernel /boot/vmlinuz-2.6.8.1-2-386 root=/dev/hdb3 ro single
initrd /boot/initrd.img-2.6.8.1-2-386
password --md5 $1$w7Epf0$vX6rxpozznLAVxZGkcFcs.

See the final entry, this will stop ubuntu from being editied (can still be booted..)

That only works with legacy. Also, the password entry doesn't belong there. It has to be located above. For legacy, your will need to use and replace with the "lock" command. Apparently, the lock feature isn't available for the latest version. I will stick with 0.97 until they are ready.