Debian Bug report logs - #387514
[etch-beta3] GRUB password only for editing cmdline

Reply or subscribe to this bug.

Display info messages

Message #5 received at [email protected] (full text, mbox, reply):

From: Uwe Hermann <[email protected]>

To: Debian Bug Tracking System <[email protected]>

Subject: [etch-beta3] GRUB password only for editing cmdline

Date: Thu, 14 Sep 2006 21:44:38 +0200

[Message part 1 (text/plain, inline)]

Package: debian-installer
Severity: normal

Hi,

currently the GRUB password is only used for preventing people to edit
GRUB config lines via 'e'. It would be nice if you could specify in the
installer whether you want to have a password for all entries, i.e.
you cannot boot at all without entering a password.
For that, every "title Debian GNU/Linux..." line in /boot/grub/menu.lst
should be followed by a "password --md5 $1$abcd..." line.

Ideally, you should be able to specify various passwords
per-GRUB-boot-option, so that if you boot kernel A, you have to type
a password different to when you boot kernel B.


HTH, Uwe.
-- 
Uwe Hermann 
http://www.hermann-uwe.de
http://www.it-services-uh.de  | http://www.crazy-hacks.org 
http://www.holsham-traders.de | http://www.unmaintained-free-software.org

[signature.asc (application/pgp-signature, inline)]

Message #14 received at [email protected] (full text, mbox, reply):

From: Cyril Brulebois <[email protected]>

To: Uwe Hermann <[email protected]>, [email protected]

Subject: Re: Bug#387514: [etch-beta3] GRUB password only for editing cmdline

Date: Mon, 17 Mar 2014 01:36:08 +0100

[Message part 1 (text/plain, inline)]

Uwe Hermann <[email protected]> (2006-09-14):
> currently the GRUB password is only used for preventing people to edit GRUB
> config lines via 'e'. It would be nice if you could specify in the installer
> whether you want to have a password for all entries, i.e.  you cannot boot at
> all without entering a password.  For that, every "title Debian GNU/Linux..."
> line in /boot/grub/menu.lst should be followed by a "password --md5
> $1$abcd..." line.

Looking very briefly, it seems to me that the password code in grub-installer
only works with grub/menu.lst and not with grub2/grub.cfg; someone could
probably fix that, before thinking about implementing any further changes.

> Ideally, you should be able to specify various passwords per-GRUB-boot-option,
> so that if you boot kernel A, you have to type a password different to when
> you boot kernel B.

I'm not sure d-i is the right place for that kind of things…

Mraw,
KiBi.

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.