{"id":6424,"date":"2017-01-08T17:06:01","date_gmt":"2017-01-08T09:06:01","guid":{"rendered":"http:\/\/rmohan.com\/?p=6424"},"modified":"2017-01-08T17:06:01","modified_gmt":"2017-01-08T09:06:01","slug":"grub-password-solaris-11","status":"publish","type":"post","link":"https:\/\/mohan.sg\/?p=6424","title":{"rendered":"GRUB password solaris 11"},"content":{"rendered":"

GRUB password<\/h3>\n
<\/div>\n
Nowadays I’d say it’s hard to believe that anything is really secure.
\nNevertheless one can keep going adding more and more barriers.
\nThe idea is not to be selected as an easier path to attack.
\nBut again, if someone is determined who can tell…<\/p>\n

Despite this gave introduction, my goal is to repeat one known tiny bit:
\nHelp preventing unauthorized GRUB configuration change by adding a password.
\nThe method below isn’t for GRUB2 (the next generation), but for the older version.<\/p>\n

Locate the grub menu file where to configure the password:<\/p>\n

# bootadm list-menu<\/b>
\nthe location\u00a0… is: \/rpool\/boot\/grub\/menu.lst
\ndefault 4
\ntimeout 15
\n…<\/p>\n

Invoke the grub binary\u00a0to create the password.
\nTake note of the resulting encrypyted hash.<\/p>\n

# \/boot\/grub\/bin\/grub<\/b><\/p>\n

GNU GRUB\u00a0 version 0.97\u00a0 (640K lower \/ 65536K upper memory)
\n[\u00a0…
\n…
\n… ]<\/p>\n

grub> md5crypt<\/b><\/p>\n

Password: ***************<\/b>
\nEncrypted: $1$…<\/p>\n

grub> quit<\/b><\/p>\n

Edit the grub menu file and include the generated password hash as shown below:<\/p>\n

# head -7 \/rpool\/boot\/grub\/menu.lst<\/b>
\nsplashimage \/boot\/grub\/splash.xpm.gz
\nforeground 343434
\nbackground F7FbFF
\ndefault 4
\ntimeout 15
\npassword –md5 $1$…
\n#———- ADDED BY BOOTADM – DO NOT EDIT ———-
\n…<\/p>\n

That’s all what’s need for GRUB1.
\nFor GRUB2 I’m still trying to learn how to do it.<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

GRUB password Nowadays I’d say it’s hard to believe that anything is really secure. Nevertheless one can keep going adding more and more barriers. The idea is not to be selected as an easier path to attack. But again, if someone is determined who can tell…<\/p>\n

Despite this gave introduction, my goal is to repeat […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[39],"tags":[],"_links":{"self":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6424"}],"collection":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6424"}],"version-history":[{"count":1,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6424\/revisions"}],"predecessor-version":[{"id":6425,"href":"https:\/\/mohan.sg\/index.php?rest_route=\/wp\/v2\/posts\/6424\/revisions\/6425"}],"wp:attachment":[{"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mohan.sg\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}