GRUB security. -How do I properly set, and double check the grub bootloader password?

bwilky11 · 11-02-2012, 02:50 PM

Running Debian squeeze with grub.

I am trying to set the grub password and there are way to many suggestions online.

grub-md5-crypt (not found)

grub2-mkpasswd-pbkdf2 (not found)

So I edited /boot/grub/menu.lst to include

timeout 3
password --md5 "my password"

But 1. I dont know if that worked and 2. I dont know how to test that or get in to boot loader

yancek · 11-02-2012, 05:30 PM

My recollection from installing Debian Squeeze is that it uses Grub2? Not sure. You could check the site below if you are using Grub Legacy and menu.lst which explains the process for Grub Legacy.

http://ubuntuforums.org/showthread.php?t=7353

or you could go to the actual Grub Manual site below:

http://www.gnu.org/software/grub/man....html#Security

craigevil · 11-02-2012, 06:47 PM

Kymera Tech Tips: Setting GRUB2 Password on Debian Squeeze (6.0.5) - http://blog.kymera-it.com/2012/09/se...on-debian.html

widget · 11-02-2012, 08:22 PM

You will need to edit the /etc/grub.d/00_header file.

This is probably the best source for password protection around.

I am familiar with the guy mainly responcible for this and the research and testing he put into it.
https://help.ubuntu.com/community/Grub2/Passwords

Even if it is from an Ubuntu site I would use it.