Your message dated Mon, 28 Mar 2011 13:59:17 +0100
with message-id <[email protected]>
and subject line Re: Bug#611624: Upgrading grub2 removes password items
has caused the Debian Bug report #611624,
regarding Upgrading grub2 removes password items
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
611624: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611624
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: grub2
Severity: normal
-- System Information:
Debian Release: 6.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
When grub2 is upgraded - e.g. by apt-get upgrade - then all superuser, users
and password items are removed from grub.cfg, so that the admin is forced to
insert them again. At least a warning should be issued; otherwise this bug
means a grave security problem.
--- End Message ---
--- Begin Message ---
On Mon, Jan 31, 2011 at 12:36:42PM +0000, Colin Watson wrote:
> On Mon, Jan 31, 2011 at 01:10:26PM +0100, Wolfgang Gruhn wrote:
> > When grub2 is upgraded - e.g. by apt-get upgrade - then all superuser,
> > users and password items are removed from grub.cfg, so that the admin
> > is forced to insert them again. At least a warning should be issued;
> > otherwise this bug means a grave security problem.
>
> You should modify the scripts in /etc/grub.d/ rather than editing
> /boot/grub/grub.cfg directly. This is documented at the top of
> /boot/grub/grub.cfg.
Closing for this reason. Bug #545163 is about integrating this better
into grub-mkconfig.
Thanks,
--
Colin Watson [[email protected]]
--- End Message ---
