[bug #37020] grub password protection behaviour changed? BUG OR FEATURE?

[mate biro]

URL:
  <http://savannah.gnu.org/bugs/?37020>

                 Summary: grub password protection behaviour changed? BUG OR
FEATURE?
                 Project: GNU GRUB
            Submitted by: arch_scar
            Submitted on: Fri 03 Aug 2012 06:42:04 AM CEST
                Category: Configuration
                Severity: Major
                Priority: 5 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: Mate Biro
        Originator Email: address@hidden
             Open/Closed: Open
         Discussion Lock: Any
                 Release: 
                 Release: other
         Reproducibility: Every Time
         Planned Release: None

    _______________________________________________________

Details:

Software version is: grub-common-2.0.0-1
                     grub-bios-2.0.0-1

Find the original bug post at the arch linux forums.

( https://bbs.archlinux.org/viewtopic.php?id=144572 )

I've newly installed arch on a laptop, and ( paranoid as always  ) I wanted to
password-protect the menu editing in grub2, as described in the wiki. It
always worked until now, but now the entries became password-protected even
against booting. (That actually works, when I type in user/password)

What I did was :

generate a hashed pass with

# grub-mkpasswd-pbkdf2

and I've put the following code at the end of /etc/grub.d/00_header:

--------------------------------

cat << EOF

set superusers="myname"
password_pbkdf2 myname grub.pbkdf2.sha512.10000.looooooooooooooongstring

EOF

-------------------------------

I've seen that there was a package update of grub2-common and grub2-bios the
28 june, maybe something has changed upstream?

How can I now setup grub2 to be password-protected only against EDITING and
not BOOTING?

[EDIT: I can regenerate the same behaviour on a system running in Virtualbox
too.]




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?37020>

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/