How to Set Password for Grub Bootloader in Linux

ByContributor

GRand Unified Bootloader (GRUB) is a default bootloader in all Unix-like operating systems. As promised in our earlier article “How to reset a forgotten root password“, here we are going to review how to protect GRUB with a password.

As we mentioned before, someone can log in to single-user mode and change system settings, which is a big security risk. To stop unauthorized access, we need to protect Grub with a password in RHEL-based distributions such as Fedora, CentOS Stream, Rocky, and Alma Linux.

Here, we’ll learn how to stop users from getting into single-user mode and changing system settings, especially if they can directly access the system physically.

How to Password Protect GRUB Bootloader in Linux

Create a password for GRUB, be a root user, and open the command prompt, type the below command.

grub2-setpassword

When prompted type grub password twice and press enter.

Generate GRUB Password
Generate GRUB Password

This will generate a hashed GRUB bootloader password in the file /boot/grub2/user.cfg file and can be viewed using the cat command as shown.

cat /boot/grub2/user.cfg
Grub Bootloader Password
Grub Bootloader Password

How to Generate New GRUB Configuration File

After creating the GRUB password, you need to re-create the new GRUB configuration file by running the following command.

grub2-mkconfig -o /boot/grub2/grub.cfg
Create Grub Configuration
Create Grub Configuration

The above command will set the grub password in the configuration file. Now, reboot the system and check if the new GRUB password is set properly.

# reboot

How to Test GRUB Password Protection

After your system restarts, you will get the following GRUB screen, where you will get 5 seconds to break the normal boot process. So quickly press e key to breaking the boot process.

Grub Menu
Grub Menu

Once you press the e key it will prompt you to enter the GRUB password as shown.

GRUB Password
GRUB Password

After entering the right username and password, you can edit GRUB parameters as shown.

Edit GRUB Configuration
Edit GRUB Configuration

How to Remove GRUB Password Protection

To remove GRUB password-protect from the boot menu, simply delete the file /boot/grub2/user.cfg.

rm /boot/grub2/user.cfg
Remove GRUB Password
Remove GRUB Password

This is how we can protect GRUB with passwords. Let us know how you secure your system? via comments.

Similar Posts

How to Clear RAM Memory Cache, Buffer, and Swap on Linux

How to Clear RAM Memory Cache, Buffer, and Swap on Linux

The post How to Clear RAM Memory Cache, Buffer and Swap Space on Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides .

Like any other operating system, GNU/Linux has implemented memory management efficiently and even more than that. However, if any process is eating away your memory

The post How to Clear RAM Memory Cache, Buffer and Swap Space on Linux first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

20 Must-Know Advanced Linux Commands for Mid-Level Users

20 Must-Know Advanced Linux Commands for Mid-Level Users

The post Level Up Linux: 20 Advanced Commands for Mid-Level Users first appeared on Tecmint: Linux Howtos, Tutorials & Guides .

You may have found the first article, ‘Useful Commands for Beginners‘ very helpful, as it was intended for newbies, this article is tailored for middle-level

The post Level Up Linux: 20 Advanced Commands for Mid-Level Users first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

Linux Networking: A Simplified Guide to IP Addresses and Routing

Linux Networking: A Simplified Guide to IP Addresses and Routing

Linux Networking: A Simplified Guide to IP Addresses and Routing

by George Whittaker

Introduction

Every Linux enthusiast or administrator, at some point, encounters the need to configure or troubleshoot network settings. While the process can appear intimidating, with the right knowledge and tools, mastering Linux networking can be both enlightening and empowering. In this guide, we’ll explore the essentials of configuring IP addresses and routing on Linux systems.

Understanding Basic Networking Concepts

What is an IP address? Every device connected to a network has a unique identifier known as an IP address. This serves as its ‘address’ in the vast interconnected world of the Internet.

  • IPv4 vs. IPv6: While IPv4 is still prevalent, its successor, IPv6, offers a larger address space and improved features. IPv4 addresses look like 192.168.1.1, whereas IPv6 addresses resemble 1200:0000:AB00:1234:0000:2552:7777:1313.

  • Public vs. Private IPs: Public IPs are globally unique and directly reachable over the Internet. Private IPs are reserved for internal network use and are not routable on the public Internet.

Subnet Masks and Gateways: A subnet mask determines which portion of an IP address is the network and which is the host. The gateway, typically a router, connects local networks to external networks.

Routing: At its core, routing is the mechanism that determines how data should travel from its source to its destination across interconnected networks.

Network Configuration Tools in Linux

Linux offers both traditional tools like ifconfig and route and modern ones like ip, nmcli, and nmtui. The choice of tool often depends on the specific distribution and the administrator’s preference.

NetworkManager and systemd-networkd have also modernized network management, providing both CLI and GUI tools for configuration.

Configuring IP Addresses in Linux

  1. Using the ip command:

    • Display Current Configuration: ip addr show
    • Assign a Static IP: ip addr add 192.168.1.10/24 dev eth0
    • Remove an IP Address: ip addr del 192.168.1.10/24 dev eth0

  2. Using nmcli for NetworkManager:

Go to Full Article

How to Use 'head' Command to Manage Files Effectively

How to Use ‘head’ Command to Manage Files Effectively

The post How to Use ‘head’ Command in Linux [8 Useful Examples] first appeared on Tecmint: Linux Howtos, Tutorials & Guides .

In Linux, there are various commands available to display the contents of the text file. Some of the popular and most frequently used commands are

The post How to Use ‘head’ Command in Linux [8 Useful Examples] first appeared on Tecmint: Linux Howtos, Tutorials & Guides.

Ubuntu Server Security Best Practices

Ubuntu Server Security Best Practices

Introduction Ubuntu Server is a highly sought-after, open source operating system that serves as the backbone of many infrastructure setups across the globe. The efficiency and user-friendly nature of Ubuntu Server make it a go-to choice for organizations. However, just like any other system, Ubuntu servers are susceptible to various security threats that can have…