Page 4 of 4 FirstFirst ... 234
Results 31 to 35 of 35

Thread: HOWTO: Password protect your GRUB entries

  1. #31
    Join Date
    Jan 2009
    Beans
    46
    Distro
    Ubuntu 10.10 Maverick Meerkat

    Re: HOWTO: Password protect your GRUB entries

    Did not work...sigh...unexpected?


    grub -v
    Code:
    grub (GNU GRUB 0.97)
    Password entered
    Code:
     
    # e.g. password topsecret
    #      password --md5 $1$gLhU0/$aW78kHK1QfV3P2b2znUoe/
    # password topsecret
    password --md5 $1$MMs0t/$hOKcWtXNu21A529riQJWr/
    Locked the grub
    Code:
    ## should update-grub lock alternative automagic boot options
    ## e.g. lockalternative=true
    ##      lockalternative=false
     lockalternative=true
    grub boot screen did not include the p option to input password. What am i doing wrong?

    Thanks.

  2. #32
    Join Date
    Aug 2010
    Beans
    6

    Re: HOWTO: Password protect your GRUB entries

    I found to two posts of about grub password. But I dont get a good answer for my problem.
    I want to block strangers from passing through Grub menu.
    My /boot/grub/menu.1st is shown below


    # menu.lst - See: grub(8), info grub, update-grub(8)
    # grub-install(8), grub-floppy(8),
    # grub-md5-crypt, /usr/share/doc/grub
    # and /usr/share/doc/grub-legacy-doc/.

    ## default num
    # Set the default entry to the entry number NUM. Numbering starts from 0, and
    # the entry number 0 is the default if the command is not used.
    #
    # You can specify 'saved' instead of a number. In this case, the default entry
    # is the entry saved with the command 'savedefault'.
    # WARNING: If you are using dmraid do not use 'savedefault' or your
    # array will desync and will not let you boot your system.
    default 0

    ## timeout sec
    # Set a timeout, in SEC seconds, before automatically booting the default entry
    # (normally the first entry defined).
    timeout 3

    ## hiddenmenu
    # Hides the menu by default (press ESC to see the menu)
    hiddenmenu

    # Pretty colours
    #color cyan/blue white/blue

    ## password ['--md5'] passwd
    # If used in the first section of a menu file, disable all interactive editing
    # control (menu entry editor and command-line) and entries protected by the
    # command 'lock'
    # e.g. password topsecret
    # password --md5 $1$gLhU0/$aW78kHK1QfV3P2b2znUoe/
    # password topsecret

    #
    # examples
    #
    # title Windows 95/98/NT/2000
    # root (hd0,0)
    # makeactive
    # chainloader +1
    #
    # title Linux
    # root (hd0,1)
    # kernel /vmlinuz root=/dev/hda2 ro
    #

    #
    # Put static boot stanzas before and/or after AUTOMAGIC KERNEL LIST

    ### BEGIN AUTOMAGIC KERNELS LIST
    ## lines between the AUTOMAGIC KERNELS LIST markers will be modified
    ## by the debian update-grub script except for the default options below

    ## DO NOT UNCOMMENT THEM, Just edit them to your needs

    ## ## Start Default Options ##
    ## default kernel options
    ## default kernel options for automagic boot options
    ## If you want special options for specific kernels use kopt_x_y_z
    ## where x.y.z is kernel version. Minor versions can be omitted.
    ## e.g. kopt=root=/dev/hda1 ro
    ## kopt_2_6_8=root=/dev/hdc1 ro
    ## kopt_2_6_8_2_686=root=/dev/hdc2 ro
    # kopt=root=UUID=90dc8506-967b-4a33-b1e8-b3e46559fbb9 ro

    ## default grub root device
    ## e.g. groot=(hd0,0)
    # groot=ff03d393-b4f7-4e41-9b32-a0a7d7a7f900

    ## should update-grub create alternative automagic boot options
    ## e.g. alternative=true
    ## alternative=false
    # alternative=true

    ## should update-grub lock alternative automagic boot options
    ## e.g. lockalternative=true
    ## lockalternative=false
    # lockalternative=false

    ## additional options to use with the default boot option, but not with the
    ## alternatives
    ## e.g. defoptions=vga=791 resume=/dev/hda5
    # defoptions=quiet splash

    ## should update-grub lock old automagic boot options
    ## e.g. lockold=false
    ## lockold=true
    # lockold=false

    ## Xen hypervisor options to use with the default Xen boot option
    # xenhopt=

    ## Xen Linux kernel options to use with the default Xen boot option
    # xenkopt=console=tty0

    ## altoption boot targets option
    ## multiple altoptions lines are allowed
    ## e.g. altoptions=(extra menu suffix) extra boot options
    ## altoptions=(recovery) single
    # altoptions=(recovery mode) single

    ## controls how many kernels should be put into the menu.lst
    ## only counts the first occurence of a kernel, not the
    ## alternative kernel options
    ## e.g. howmany=all
    ## howmany=7
    # howmany=all

    ## specify if running in Xen domU or have grub detect automatically
    ## update-grub will ignore non-xen kernels when running in domU and vice versa
    ## e.g. indomU=detect
    ## indomU=true
    ## indomU=false
    # indomU=detect

    ## should update-grub create memtest86 boot option
    ## e.g. memtest86=true
    ## memtest86=false
    # memtest86=true

    ## should update-grub adjust the value of the default booted system
    ## can be true or false
    # updatedefaultentry=false

    ## should update-grub add savedefault to the default options
    ## can be true or false
    # savedefault=false

    ## ## End Default Options ##

    title Ubuntu 10.10, kernel 2.6.35-30-generic-pae
    uuid ff03d393-b4f7-4e41-9b32-a0a7d7a7f900
    kernel /vmlinuz-2.6.35-30-generic-pae root=UUID=90dc8506-967b-4a33-b1e8-b3e46559fbb9 ro quiet splash
    initrd /initrd.img-2.6.35-30-generic-pae

    title Ubuntu 10.10, kernel 2.6.35-30-generic-pae (recovery mode)
    uuid ff03d393-b4f7-4e41-9b32-a0a7d7a7f900
    kernel /vmlinuz-2.6.35-30-generic-pae root=UUID=90dc8506-967b-4a33-b1e8-b3e46559fbb9 ro single
    initrd /initrd.img-2.6.35-30-generic-pae
    password --md5 $1$3SCpC0$MCX6qgaWkHwDvNqHup7jD.

    title Chainload into GRUB 2
    root ff03d393-b4f7-4e41-9b32-a0a7d7a7f900
    kernel /boot/grub/core.img

    title Ubuntu 10.10, memtest86+
    uuid ff03d393-b4f7-4e41-9b32-a0a7d7a7f900
    kernel /memtest86+.bin

    ### END DEBIAN AUTOMAGIC KERNELS LIST




    Now the password protection is not working. What should I need to do for preventing others from accessing grub or OS. I need to ask a password when we press enter in grub menu. Please Help.

    Thanks for anyone who helps

  3. #33
    Join Date
    Jan 2009
    Beans
    3,964
    Distro
    Ubuntu 13.10 Saucy Salamander

    Re: HOWTO: Password protect your GRUB entries


  4. #34
    Join Date
    Apr 2008
    Beans
    92

    Re: HOWTO: Password protect your GRUB entries

    I wish to password protect my GRUB loader on Kubuntu 11.10 which guide shud I follow ? I dont have a menu.lst in the /boot/grub/

    grub --version

    gives me

    grub (GNU GRUB 0.97)
    Last edited by FrostBlue; February 5th, 2012 at 08:25 AM.

  5. #35
    Join Date
    Apr 2008
    Beans
    92

    Re: HOWTO: Password protect your GRUB entries

    Right I read thru the whole thread and tried to edit grub.cfg which is what I have but the menuentry I tried with simply disappeared.

Page 4 of 4 FirstFirst ... 234

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •