From e329fed20d76f9ec5ddfedf0e8afa1bf1d91a4f2 Mon Sep 17 00:00:00 2001 From: ItsDrike Date: Tue, 10 Aug 2021 14:55:57 +0200 Subject: [PATCH] Add grub credentials config --- root/etc/grub.d/09_credentials | 13 +++++++++++++ root/etc/grub.d/40_custom | 1 + 2 files changed, 14 insertions(+) create mode 100755 root/etc/grub.d/09_credentials diff --git a/root/etc/grub.d/09_credentials b/root/etc/grub.d/09_credentials new file mode 100755 index 0000000..b033251 --- /dev/null +++ b/root/etc/grub.d/09_credentials @@ -0,0 +1,13 @@ +#!/bin/sh +exec tail -n +3 $0 + +# Setup GRUB credentials so that it isn't possible for anyone to change the +# boot parameters or use the command line, unless they know user/password pair +#set superusers="admin" +#password admin [unsafe plaintext password] +#password_pbkdf2 admin [safe grub-mkpasswd-pbkdf2 password] + + +# Make OS Entries unrestricted, so that they can be booted into without prompting +# for user/password pair set above +#menuentry_id_option="--unrestricted $menuentry_id_option" diff --git a/root/etc/grub.d/40_custom b/root/etc/grub.d/40_custom index 36bc370..f6fb8dc 100755 --- a/root/etc/grub.d/40_custom +++ b/root/etc/grub.d/40_custom @@ -9,3 +9,4 @@ if [ ${grub_platform} == "efi" ]; then fwsetup } fi +