CSEC_PUBLIC/the-practical-linux-hardening-guide
1
0
Fork 0
mirror of https://github.com/trimstray/the-practical-linux-hardening-guide.git synced 2025-12-06 17:22:51 +01:00
Code Issues Packages Projects Releases Wiki Activity

added 'Useful resources'; minor updates

Browse Source 
- signed-off-by: trimstray <trimstray@gmail.com>
This commit is contained in:
trimstray
2019-02-19 10:22:50 +01:00
parent d15c9c4344
commit cbe783518b
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
lib/post_install_tasks/bootloader_configuration.md
View File

@@ -12,7 +12,7 @@ Basically when you want to prohibit unauthorized reconfiguring of your system, o
You can set password for the bootloader for prevents users from entering single user mode, changing settings at boot time, access to the bootloader console, reset the root password, if there is no password for GRUB-menu or access to non-secure operating systems. You can set password for the bootloader for prevents users from entering single user mode, changing settings at boot time, access to the bootloader console, reset the root password, if there is no password for GRUB-menu or access to non-secure operating systems.
###### Generate password hash ##### Generate password hash
```bash ```bash
# Debian like distributions # Debian like distributions
@@ -22,7 +22,7 @@ grub-mkpasswd-pbkdf2
grub2-mkpasswd-pbkdf2 grub2-mkpasswd-pbkdf2
``` ```
###### Updated grub configuration ##### Updated grub configuration
```bash ```bash
cat > /etc/grub.d/01_hash << __EOF__ cat > /etc/grub.d/01_hash << __EOF__
@@ -42,6 +42,10 @@ grub-mkconfig > /boot/grub/grub.cfg
grub2-mkconfig > /boot/grub2/grub.cfg grub2-mkconfig > /boot/grub2/grub.cfg
``` ```
###### Useful resources
- [How To Password Protect GRUB Bootloader In Linux](https://www.ostechnix.com/password-protect-grub-bootloader-linux/)
#### :eight_pointed_black_star: Protect bootloader config files #### :eight_pointed_black_star: Protect bootloader config files
Set the owner and group of `/etc/grub.conf` to the root user: Set the owner and group of `/etc/grub.conf` to the root user: