Ubuntu
grub2 package

  1. Bug #718670
  2. Comment #13

Comment 13 for bug 718670

Revision history for this message
Mike Long (oreodoh) wrote :

This guide to Grub2 password protection references the fix in post #11.

https://help.ubuntu.com/community/Grub2/Passwords#Superuser_.26_Password_Designation_.28Required.29

~~~~
set superusers="root"
export superusers
password_pbkdf2 root ...
~~~~

However, in their example, instead of placing "export superusers" immediately after "set superusers", they place it after the "password/password_pbkdf2" line.

set superusers="John"
password John foo
export superusers

I'm using the latter on Ubuntu 12.04.4 LTS x86_64 just because it's from a more official source, but I'm thinking it might be better from a security perspective to follow post #11 and export superusers immediately after its been defined.

Can anyone provide any insight into what would be best practice here?