Deceptive security?

[Dirk Zöllner]

Hi.

I wanted to lock some menu entries in the grub menu.

I cite info grub -> Section Security: [...], so only administrators can start the interactive operations (i.e. editing menu entries and [...]

I entered the grub shell, generated the MD5 password and inserted it in the file grub.conf. The appropriate menu entry:

title Redhat 8.0
password --md5 something_secret
root (hd0,0)
kernel /boot/...
initrd /boot/...

With this entry I can't start the OS, that's OK. Without using the password, I can edit this entry via 'e' command, delete via 'd' the 'password --md5 ....' line and press 'b' to boot the OS. :-((


And I tried this:

title Redhat 8.0
lock
root (hd0,0)
kernel /boot/...
initrd /boot/...

with no effect. Is this a misconfiguration or a bug?


My system: Redhat 8.0 with grub 0.92


Kind regards

Dirk Zöllner



_______________________________________________
Bug-grub mailing list
[EMAIL PROTECTED]
http://mail.gnu.org/mailman/listinfo/bug-grub