[Bug 392158] Re: grub2 doesn't support security features, such as password
... and support for hashed passwords is now in lucid, which only leaves figuring out how to make them a bit more convenient to use in conjunction with grub-mkconfig, I think. ** Summary changed: - grub2 doesn't support security features, such as password + passwords are awkward to use with grub-mkconfig -- passwords are awkward to use with grub-mkconfig https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 392158] Re: grub2 doesn't support security features, such as password
experimental branch supports now encrypted/hashed passwords. See here how to use them: http://grub.enbug.org/Authentication My PPA has it now included: https://launchpad.net/~fzielcke/+archive/grub-ppa/ -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 392158] Re: grub2 doesn't support security features, such as password
i'd like to politely add that this only supports plain text passwords as opposed to hashed (eg: md5 which old grub had). it would be nice to have support for hashed passwords (like sha1/sha256) in this grub, so this is no longer a regression. thanks! -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 392158] Re: grub2 doesn't support security features, such as password
Hashed passwords are still being discussed / worked on upstream. -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 392158] Re: grub2 doesn't support security features, such as password
Well, you could just add
echo 'set superusers=myusername'
echo 'password myusername mypassword'
to /etc/grub.d/00_header and change 'menuentry $1 {' to 'menuentry $1
--users myusername {' in 10_linux or 30_os-prober.
After that, run 'update-grub' as root.
--
grub2 doesn't support security features, such as password
https://bugs.launchpad.net/bugs/392158
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 392158] Re: grub2 doesn't support security features, such as password
Could someone post some example scripts for this? That would be a great help. -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 392158] Re: grub2 doesn't support security features, such as password
I'm unmarking this as a regression now, as the core facility is implemented even though it's not as convenient to use as it might be. (You can write an /etc/grub.d/ script to emit the appropriate commands, for instance.) ** Tags removed: regression-potential -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 392158] Re: grub2 doesn't support security features, such as password
There's now basic support for this (in 1.97~beta1), but it probably needs to be glued into grub-mkconfig somehow as well. Still, this may be enough for some people. 2009-08-25 Vladimir Serbinenko phco...@gmail.com Authentication support. * commands/password.c: New file. * conf/common.rmk (pkglib_MODULES): Add password.mod. (password_mod_SOURCES): New variable. (password_mod_CFLAGS): Likewise. (password_mod_LDFLAGS): Likewise. (normal_mod_SOURCES): Add normal/auth.c. * conf/i386-coreboot.rmk (grub_emu_SOURCES): Add commands/password.c and normal/auth.c. * conf/i386-efi.rmk (grub_emu_SOURCES): Likewise. * conf/i386-ieee1275.rmk (grub_emu_SOURCES): Likewise. * conf/i386-pc.rmk (grub_emu_SOURCES): Likewise. * conf/powerpc-ieee1275.rmk (grub_emu_SOURCES): Likewise. * conf/sparc64-ieee1275.rmk (grub_emu_SOURCES): Likewise. * conf/x86_64-efi.rmk (grub_emu_SOURCES): Likewise. * include/grub/auth.h: New file. * include/grub/err.h (grub_err_t): New enum value GRUB_ERR_ACCESS_DENIED. * include/grub/menu.h (grub_menu_entry): New fields 'restricted' and 'users'. * include/grub/normal.h (grub_cmdline_get): New argument 'history'. * normal/cmdline.c (grub_cmdline_get): New argument 'history'. All users updated. * normal/auth.c: New file. * normal/main.c (grub_normal_add_menu_entry): Handle --users option. (grub_cmdline_run): Don't allow to go to command line without authentication. * normal/menu.c (grub_menu_execute_entry): Handle restricted entries. * normal/menu_entry.c (grub_menu_entry_run): Don't allow editing menuentry without superuser rights. * normal/menu_viewer.c (grub_menu_viewer_show_menu): Don't exit if user isn't a superuser. -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 392158] Re: grub2 doesn't support security features, such as password
Am Donnerstag, den 03.09.2009, 10:59 + schrieb Colin Watson: There's now basic support for this (in 1.97~beta1), but it probably needs to be glued into grub-mkconfig somehow as well. Still, this may be enough for some people. I documented it a bit in the official Wiki how to use it: http://grub.enbug.org/Authentication -- Felix Zielcke Proud Debian Maintainer -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 392158] Re: grub2 doesn't support security features, such as password
Likely to be an upstream priority for 1.97. ** Changed in: grub2 (Ubuntu) Status: Confirmed = Triaged -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 392158] Re: grub2 doesn't support security features, such as password
** Tags added: regression-potential ** Changed in: grub2 (Ubuntu) Importance: Undecided = Medium -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 392158] Re: grub2 doesn't support security features, such as password
A (rather long) list of missing feature is at http://grub.enbug.org/CommandList. ** Changed in: grub2 (Ubuntu) Status: New = Confirmed -- grub2 doesn't support security features, such as password https://bugs.launchpad.net/bugs/392158 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
