bugGNU GRUB - Bugs: bug #56924, The cryptomount command should...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #56924: The cryptomount command should allow more than one password entry attempt

Submitter:  Matthias Kruzenski <m4dm4x1337>
Submitted:  Fri 20 Sep 2019 05:35:05 PM UTC
   
 
Category:  Booting Severity:  Major
Priority:  5 - Normal Item Group:  Software Error
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release:  2.02
Release:  Reproducibility:  Intermittent
Planned Release:  None

Fri 20 Sep 2019 05:35:05 PM UTC, original submission:  

The cryptomount command should allow more than one password entry attempt otherwise there is a possibility that a user will end up in the GRUB rescue shell due to hardware-specific errors.

Background:
-----------

I have a fully encrypted USB stick, the boot directory resists in the root filesystem, and the LUKS password prompt appears immediately after pressing the power button.

The USB stick has a hybrid MBR and everything needed to boot in BIOS and UEFI mode.

So far, I have been able to boot every computer, even the oldest!

Recently I tried to boot an Alienware 17 laptop and found something strange. For some reason, the GRUB rescue shell appears immediately after pressing the power button. It seems like that the BIOS sends somehow a ENTER keystroke to the cryptomount command, or maybe it is a bug in the GRUB source code.

Whatever the reason is, it causes me to end up in the GRUB rescue shell because I do not have a second password entry attempt.

I know that I can start cryptomount again via the GRUB rescue shell, but for an average user this is far too complicated.

While researching the topic, I came across a patch:
https://gitlab.com/jkushmaul/grub2

That's the perfect solution for this problem. Please merge the patch with the GRUB source code, because there exists hardware that make multiple password input attempts mandatory.

Matthias Kruzenski <m4dm4x1337>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by m4dm4x1337 (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    No changes have been made to this item

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code