GNU GRUB - Bugs: bug #56924, The cryptomount command should...
You are not allowed to post comments on this tracker with your current authentication level.
bug #56924: The cryptomount command should allow more than one password entry attempt
Submitter: | Matthias Kruzenski <m4dm4x1337> | ||
Submitted: | Fri 20 Sep 2019 05:35:05 PM UTC | ||
Category: | Booting | Severity: | Major |
Priority: | 5 - Normal | Item Group: | Software Error |
Status: | None | Privacy: | Public |
Assigned to: | None | Originator Name: | |
Open/Closed: | Open | Release: | 2.02 |
Release: | Reproducibility: | Intermittent | |
Planned Release: | None |
No files currently attached
Depends on the following items: None found
Items that depend on this one: None found
Carbon-Copy List
There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.
No changes have been made to this item
Powered by Savane 3.13-f8d8.
Corresponding source code
The cryptomount command should allow more than one password entry attempt otherwise there is a possibility that a user will end up in the GRUB rescue shell due to hardware-specific errors.
Background:
-----------
I have a fully encrypted USB stick, the boot directory resists in the root filesystem, and the LUKS password prompt appears immediately after pressing the power button.
The USB stick has a hybrid MBR and everything needed to boot in BIOS and UEFI mode.
So far, I have been able to boot every computer, even the oldest!
Recently I tried to boot an Alienware 17 laptop and found something strange. For some reason, the GRUB rescue shell appears immediately after pressing the power button. It seems like that the BIOS sends somehow a ENTER keystroke to the cryptomount command, or maybe it is a bug in the GRUB source code.
Whatever the reason is, it causes me to end up in the GRUB rescue shell because I do not have a second password entry attempt.
I know that I can start cryptomount again via the GRUB rescue shell, but for an average user this is far too complicated.
While researching the topic, I came across a patch:
https://gitlab.com/jkushmaul/grub2
That's the perfect solution for this problem. Please merge the patch with the GRUB source code, because there exists hardware that make multiple password input attempts mandatory.