[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: personal script
From: |
Jordan Uggla |
Subject: |
Re: personal script |
Date: |
Wed, 9 Jan 2013 14:38:09 -0800 |
Please keep help-grub CCd.
On Wed, Jan 9, 2013 at 2:23 PM, Filippo Galante
<address@hidden> wrote:
> Well mostly security... and also because i don't like very much the Grub2
> menu...
This scheme doesn't increase security. If you want security you might
add a grub password,
http://www.gnu.org/software/grub/manual/grub.html#Security but also
keep in mind the comment made in that documentation:
By default, the boot loader interface is accessible to anyone with
physical access to the console: anyone can select and edit any menu
entry, and anyone can get direct access to a GRUB shell prompt. For
most systems, this is reasonable since anyone with direct physical
access has a variety of other ways to gain full access, and requiring
authentication at the boot loader level would only serve to make it
difficult to recover broken systems.
If this isn't a physically locked down kiosk then adding any type of
obstacle to the bootloader won't prevent an intruder from booting from
other media, replacing the hard drive, adding a hardware keylogger, or
any multitude of other options available to someone with physical
access to the machine.
--
Jordan Uggla (Jordan_U on irc.freenode.net)