grub2 password protecting changed?

scar · 2012-07-06 14:24:29

I've newly installed arch on a laptop, and ( paranoid as always ) I wanted to password-protect the menu editing in grub2, as described in the wiki. It always worked until now, but now the entries became password-protected even against booting. (That actually works, when I type in user/password)

What I did was :

generate a hashed pass with

# grub-mkpasswd-pbkdf2

and I've put the following code at the end of /etc/grub.d/00_header:

--------------------------------

cat << EOF

set superusers="myname"
password_pbkdf2 myname grub.pbkdf2.sha512.10000.looooooooooooooongstring

EOF

-------------------------------

I've seen that there was a package update of grub2-common and grub2-bios the 28 june, maybe something has changed upstream?

How can I now setup grub2 to be password-protected only against EDITING and not BOOTING?

[EDIT: I can regenerate the same behaviour on a system running in Virtualbox too.]

Last edited by scar (2012-07-10 07:12:26)

pressh · 2012-07-10 09:13:10

I can replicate this in the 2.00 release as well. I never used password protection so I'm not sure when this behavior was changed. The grub documentation (which refers to some ubuntu documentation) still has the old behavior listed...

I suggest asking on the upstream mailing list if this is an intended change or not.

scar · 2012-07-10 11:00:24

Dank je wel. ( And that was my whole dutch knowledge. )

I will ask upstream.

Arch Linux

#1 2012-07-06 14:24:29

grub2 password protecting changed?

#2 2012-07-10 09:13:10

Re: grub2 password protecting changed?

#3 2012-07-10 11:00:24

Re: grub2 password protecting changed?

Board footer