Re: confused for booting security

2011-01-09 Thread Parshwa Murdia
On Sun, Jan 9, 2011 at 5:26 PM, Tim wrote: Options for stanzas are read from within them, top to bottom. In this > case, the first one sets the password, the second line halts further > processing until the password is entered. Once entered, it would > process the next two commands. > * *I di

Re: confused for booting security

2011-01-09 Thread Genes MailLists
On 01/09/2011 02:18 PM, Tim wrote: > 13.2.10 password > > > -- Command: password [`--md5'] passwd [new-config-file] > Well it seems to have changed in F14 which is different. ... Thus, GRUB provides a "password" feature, so that only administrators can start the interacti

Re: confused for booting security

2011-01-09 Thread Tim
Parshwa Murdia: >>> password --md5 $differentpassword Genes MailLists: >Is -md5 documented ? When I check info grub I see > > password --encrypted > > where grub-crypt is suggested to be used to encrypt. > > grub-crypt indeed has an md5 option tho sha-512 seems to be the default. Yes,

Re: confused for booting security

2011-01-09 Thread Genes MailLists
On 01/09/2011 06:56 AM, Tim wrote: >> >> password --md5 $differentpassword >> > Is -md5 documented ? When I check info grub I see password --encrypted where grub-crypt is suggested to be used to encrypt. grub-crypt indeed has an md5 option tho sha-512 seems to be the default. (f14

Re: confused for booting security

2011-01-09 Thread Tim
On Sun, 2011-01-09 at 11:56 +0100, Parshwa Murdia wrote: > But if a different password is required, we should enter it above the > line > > title Memtest86+ (2.11) > > so that it looks: > > password --md5 $differentpassword > > title Memtest86+ (2.11) >lock >root (hd0,1) >

Re: confused for booting security

2011-01-09 Thread Parshwa Murdia
On Sun, Jan 9, 2011 at 10:04 AM, Tim wrote: #boot=/dev/sda > default=0 > timeout=5 > splashimage=(hd0,1)/grub/splash.xpm.gz > password --md5 $supercalifragilistic. > > title Fedora (2.6.27.25-78.2.56.fc9.i686) >lock >root (hd0,1) >kernel /vmlinuz-2.6.27.25-78.2.56.fc9.i686

Re: confused for booting security

2011-01-09 Thread Tim
On Sun, 2011-01-09 at 19:34 +1030, Tim wrote: > In the grub.conf file, when there's a password and lock command above > all the boot choices, they'll need to enter the password before they > can do anything (pick a choice, temporarily edit what grub will do). > It's where you place the lock command

Re: confused for booting security

2011-01-09 Thread Tim
On Sun, 2011-01-09 at 13:32 +0530, Parshwa Murdia wrote: > which are just below the name of the OS in > the /boot/grub/grub.conf file):- > > password --md5 $1$X58Kw/$v71Qlprzt8f4U9uOu46nk0 > lock > > and after that I press 'b' to boot without entering the encrypted > password during the booting

confused for booting security

2011-01-09 Thread Parshwa Murdia
hi, As someone earlier let me know about the encrypting of passwords, I did the following: after becoming the root, used the command: md5crypt to get the encrypted string of passwords for using in /boot/grub/grub.conf This is the password which is NOT the password of the user who logs-in. But w