GRUB menu edit protection only

I set up the GRUB password protection on my Ubuntu LTS 14 64bits. To do that I generated a hash of the password with grub-mkpasswd-pbkdf2. Then I edited /etc/grub.d/40_custom to add those 2 lines:

set superusers="admin"
password_pbkdf2 admin grub.pbkdf2.sha512.10000.EC81D.............

After updating the Grub and rebooting, the password is present BUT everywhere. If I want to boot on Ubuntu, I have to enter my password. I’d like to set up the password only for ‘e’ editing GRUB menu. (to avoid single user mode)

Any Ideas ?

Thanks

Answer

I just found the solution.
I just need to add the unrestricted attribute to the menuentry in 10_linux file as described here:
http://daniel-lange.com/archives/75-Securing-the-grub-boot-loader.html

It will keep the password while editing.

Attribution
Source : Link , Question Author : ctaf , Answer Author : ctaf

Leave a Comment