Skip to Main Content

Infrastructure Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

How Do You Set a GRUB 2 Boot Menu Password in Solaris 11.1

keesorApr 18 2013 — edited Apr 18 2013
I've done all kinds of searches here and on Google to figure out how to set a GRUB menu password in Solaris 11.1, and can't find anything about it for Solaris 11.1, only for Linux.

We are a government agency, and are required to follow the DISA and CIS benchmarks for locking down a system. Setting the GRUB boot menu password is one of the requirements for x64 servers.

To set the GRUB password in Solaris 10 you did the following:

# Run the grub command
/boot/grub/bin/grub

Type md5crypt at the grub prompt
grub> md5crypt

Enter the password you want to set, and it will show you the encrypted value:
Password: changeme
Encrypted: $1$9jC881$RRf4VaJaotnhN4E8bEkz.1

Edit the /rpool/boot/grub/menu.lst file and add the following line above the entries added by bootadm:
password --md5 $1$9jC881$RRf4VaJaotnhN4E8bEkz.1

Finally add a new line with the text "lock" under the title of each entry you want to protect:
i.e.
title Oracle Solaris 10 8/11 s10x_u10wos_17b X86
lock
...

title Solaris failsafe
lock
...

In GRUB 2, there is no menu.lst file, and no grub command.

Is it still possible to set a boot menu password in GRUB 2?

Thank you in advance!

Matt
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on May 16 2013
Added on Apr 18 2013
2 comments
1,816 views