Calm down. The password is required to *edit* GRUB's configuration from GRUB itself. Not to boot a kernel. Notice that editing GRUB's configuration is the easiest way to get root's privileges: just add the keyword "single" to the boot line. However, and as I wrote, GRUB's password is not much of a security. You only need a live system to read or remove this password. GNU GRUB's documentation agrees: By default, the boot loader interface is accessible to anyone with physical access to the console: anyone can select and edit any menu entry, and anyone can get direct access to a GRUB shell prompt. For most systems, this is reasonable since anyone with direct physical access has a variety of other ways to gain full access, and requiring authentication at the boot loader level would only serve to make it difficult to recover broken systems.

Again, I invite anybody who wants to get both side of the discussions to read this thread.

Reply via email to