bugGNU GRUB - Bugs: bug #66523, Locking kernel options

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #66523: Locking kernel options

Submitter:  Alberto Salvia Novella <es20490446e>
Submitted:  Tue 03 Dec 2024 05:09:13 PM UTC
   
 
Category:  Security Severity:  Major
Priority:  5 - Normal Item Group:  Feature Request
Status:  None Privacy:  Public
Assigned to:  None Originator Name: 
Open/Closed:  Open Release:  Git master
Release:  Reproducibility:  Every Time
Planned Release:  None

Sun 13 Apr 2025 09:15:37 AM UTC, comment #1: 
Thomas Bertels <tbertels>
Tue 03 Dec 2024 05:09:13 PM UTC, original submission:  

If you enter the grub menu, and edit the kernel options, you can set "init=/bin/sh" to automatically log in as superuser without a password.

Doesn't this create a false sense of security for most users, if they have already set a password on the login screen?

Won't most users have their system unsecured, without them knowing it?

Isn't it important to have editing kernel options, and grub console, locked by default, or at least having an option on "/etc/default/grub" for doing this automatically?

Related:
https://gitlab.com/es20490446e/grub-smart/-/blob/main/root/etc/default/grub-smart/default?ref_type=heads#L102

Alberto Salvia Novella <es20490446e>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by tbertels (Posted a comment)
  • -email is unavailable- added by es20490446e (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    No changes have been made to this item

    Back to the top

    Powered by Savane 3.15-e6e5.
    Corresponding source code