bugGNU GRUB - Bugs: bug #56924, The cryptomount command should...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #56924: The cryptomount command should allow more than one password entry attempt

Submitted by:  Matthias Kruzenski <m4dm4x1337>
Submitted on:  Fri 20 Sep 2019 05:35:05 PM UTC  
 
Category:  Booting Severity:  Major
Priority:  5 - Normal Item Group:  Software Error
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release: 
Release:  2.02 Reproducibility:  Intermittent
Planned Release:  None

Fri 20 Sep 2019 05:35:05 PM UTC, original submission:  

The cryptomount command should allow more than one password entry attempt otherwise there is a possibility that a user will end up in the GRUB rescue shell due to hardware-specific errors.

Background:
-----------

I have a fully encrypted USB stick, the boot directory resists in the root filesystem, and the LUKS password prompt appears immediately after pressing the power button.

The USB stick has a hybrid MBR and everything needed to boot in BIOS and UEFI mode.

So far, I have been able to boot every computer, even the oldest!

Recently I tried to boot an Alienware 17 laptop and found something strange. For some reason, the GRUB rescue shell appears immediately after pressing the power button. It seems like that the BIOS sends somehow a ENTER keystroke to the cryptomount command, or maybe it is a bug in the GRUB source code.

Whatever the reason is, it causes me to end up in the GRUB rescue shell because I do not have a second password entry attempt.

I know that I can start cryptomount again via the GRUB rescue shell, but for an average user this is far too complicated.

While researching the topic, I came across a patch:
https://gitlab.com/jkushmaul/grub2

That's the perfect solution for this problem. Please merge the patch with the GRUB source code, because there exists hardware that make multiple password input attempts mandatory.

Matthias Kruzenski <m4dm4x1337>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by m4dm4x1337 (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

     

     

    No changes have been made to this item

    Back to the top


    Powered by Savane 3.5