How Do I Secure Grub Boot Loader?

Grub 부트로더 에디트를 함부로 하지 못하게 pasword 설정법 입니다.

#1: Create A Password For Grub

Type grub-md5-crypt command to create password in MD5 format:

# grub-md5-crypt

Output:

Password:<ENTER-YOUR-PASSWORD>
Retype password:<ENTER-YOUR-PASSWORD>
$1$NYoR71$Sgv6pxQ6LG4GXpfihIJyL0

Please note that you need to copy and paste the MD5 password ($1$NYoR71$Sgv6pxQ6LG4GXpfihIJyL0) to your configuration file. Use mouse to copy the same.

#2 Add MD5 Password To Grub Configuration File

Under Debian GNU/Linux the Grub configuration file is located at /boot/grub/menu.lst. (Red Hat / Fedora user use /boot/grub/grub.conf file)

# vi /boot/grub/menu.lst
or 
# vi /etc/grub.conf

Edit file and add a password line as follows:

password --md5 $1$NYoR71$Sgv6pxQ6LG4GXpfihIJyL0

Here is my sample config file:

default         0
timeout         5
password --md5 $1$NYoR71$Sgv6pxQ6LG4GXpfihIJyL0
title           Debian GNU/Linux, kernel 2.6.13.4-cust-en-smp
root           (hd0,0)
kernel        /boot/vmlinuz root=/dev/hda3 ro
savedefault
boot

출처 : http://www.cyberciti.biz/tips/how-do-i-secure-grub-boot-loader.html

추가 적으로 root password 를 삭제 하는 방법
grub 화면에서 e (edit)로 들어가서 2번째 라인에서 e (edit) 후 마지막에 1 추가후 b (boot) 하신후
/etc/shadow 파일 에서 root 부분의 password 부분 삭제 ( root:: ) 하시면 됩니다.

How Do I Secure Grub Boot Loader?

댓글 0개