kernel-packages team mailing list archive

[Tabris <theangeltabris@xxxxxxxxx>]

Public bug reported:

Following this guide: https://help.ubuntu.com/community/Grub2/Passwords
you can set a superuser to prevent anyone from editing grub lines, but
allowing them to boot anyway. Back in Ubuntu 12.04, you just edit
/etc/grub/40_custom with:

set superusers="John"
password John foo
export superusers

then you execute sudo update-grub2 and that's it. You can't edit grub
entries without the password but you can boot.

Now in Ubuntu 14.04, GRUB will ask for the password even when you just
want to boot.

A workaround is editing /etc/grub.d/10_linux with:

CLASS="--class gnu-linux --class gnu --class os --unrestricted"

The "--unsrestricted" option does the trick. But the "way to go" should
be adding a line in /etc/default/grub so the grub-mkconfig will auto-
edit the 10_linux file.

** Affects: grub2 (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: grub password security trusty

** Package changed: linux (Ubuntu) => grub2 (Ubuntu)

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1311302

Title:
  GRUB2 asks for password when booting

Status in “grub2” package in Ubuntu:
  New

Bug description:
  Following this guide:
  https://help.ubuntu.com/community/Grub2/Passwords you can set a
  superuser to prevent anyone from editing grub lines, but allowing them
  to boot anyway. Back in Ubuntu 12.04, you just edit
  /etc/grub/40_custom with:

  set superusers="John"
  password John foo
  export superusers

  then you execute sudo update-grub2 and that's it. You can't edit grub
  entries without the password but you can boot.

  Now in Ubuntu 14.04, GRUB will ask for the password even when you just
  want to boot.

  A workaround is editing /etc/grub.d/10_linux with:

  CLASS="--class gnu-linux --class gnu --class os --unrestricted"

  The "--unsrestricted" option does the trick. But the "way to go"
  should be adding a line in /etc/default/grub so the grub-mkconfig will
  auto-edit the 10_linux file.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1311302/+subscriptions