how to secure Grub with a Password

step1: first generate a Grub password with MD5 algorithm


puppy# grub
grub> md5crypt
Password: ********
Encrypted: $1$2FXKzQ0$I6k7iy22wB27CrkzdVPe70
grub> quit


step2: Sample grub.conf File


default=1
timeout=10
splashimage=(hd0,0)/grub/splash.xpm.gz
password --md5 $1$2FXKzQ0$I6k7iy22wB27CrkzdVPe70
title Red Hat Linux (2.6.7)
root (hd0,0)
kernel /vmlinuz-2.6.7 ro root=LABEL=/
initrd /initrd-2.6.7.img


step3: Protecting a Boot Entry with Grub




title Red Hat Linux (2.6.7)
password --md5 $1$2Q0$I6k7iy22wB27CrkzdVPe70
root (hd0,0)
kernel /vmlinuz-2.6.7 ro root=LABEL=/
initrd /initrd-2.6.7.img


step4: you need to ensure the grub.conf file has suitable ownership and permissions to
ensure only those authorized can work with the file. Enter the following:


puppy# chown root:root /etc/grub.conf
puppy# chmod 0600 /etc/grub.conf