How Do I Secure Grub Boot Loader?

Grub 부트로더 에디트를 함부로 하지 못하게 pasword 설정법 입니다.

#1: Create A Password For Grub

Type grub-md5-crypt command to create password in MD5 format:
# grub-md5-crypt
Output:
Password:<ENTER-YOUR-PASSWORD> Retype password:<ENTER-YOUR-PASSWORD> $1$NYoR71$Sgv6pxQ6LG4GXpfihIJyL0
Please note that you need to copy and paste the MD5 password ($1$NYoR71$Sgv6pxQ6LG4GXpfihIJyL0) to your configuration file. Use mouse to copy the same.


#2 Add MD5 Password To Grub Configuration File

Under Debian GNU/Linux the Grub configuration file is located at /boot/grub/menu.lst. (Red Hat / Fedora user use /boot/grub/grub.conf file)
# vi /boot/grub/menu.lst or # vi /etc/grub.conf

Edit file and add a password line as follows:
password --md5 $1$NYoR71$Sgv6pxQ6LG4GXpfihIJyL0

Here is my sample config file:
default 0 timeout 5 password --md5 $1$NYoR71$Sgv6pxQ6LG4GXpfihIJyL0 title Debian GNU/Linux, kernel 2.6.13.4-cust-en-smp root (hd0,0) kernel /boot/vmlinuz root=/dev/hda3 ro savedefault boot

출처 : http://www.cyberciti.biz/tips/how-do-i-secure-grub-boot-loader.html

추가 적으로 root password 를 삭제 하는 방법
grub 화면에서 e (edit)로 들어가서 2번째 라인에서 e (edit) 후 마지막에 1 추가후 b (boot) 하신후
/etc/shadow 파일 에서 root 부분의 password 부분 삭제 ( root:: ) 하시면 됩니다.