How Do You Set a GRUB 2 Boot Menu Password in Solaris 11.1
keesorApr 18 2013 — edited Apr 18 2013I've done all kinds of searches here and on Google to figure out how to set a GRUB menu password in Solaris 11.1, and can't find anything about it for Solaris 11.1, only for Linux.
We are a government agency, and are required to follow the DISA and CIS benchmarks for locking down a system. Setting the GRUB boot menu password is one of the requirements for x64 servers.
To set the GRUB password in Solaris 10 you did the following:
# Run the grub command
/boot/grub/bin/grub
Type md5crypt at the grub prompt
grub> md5crypt
Enter the password you want to set, and it will show you the encrypted value:
Password: changeme
Encrypted: $1$9jC881$RRf4VaJaotnhN4E8bEkz.1
Edit the /rpool/boot/grub/menu.lst file and add the following line above the entries added by bootadm:
password --md5 $1$9jC881$RRf4VaJaotnhN4E8bEkz.1
Finally add a new line with the text "lock" under the title of each entry you want to protect:
i.e.
title Oracle Solaris 10 8/11 s10x_u10wos_17b X86
lock
...
title Solaris failsafe
lock
...
In GRUB 2, there is no menu.lst file, and no grub command.
Is it still possible to set a boot menu password in GRUB 2?
Thank you in advance!
Matt