I have HDD with GPT, 1 MiB BIOS boot partition and LUKS encrypted volume group with data. When I boot the computer, GRUB asks for passphrase.

However, I want to run some untrusted application which MAY have full HDD access. Could it insert some malware into boot sector to record the passphrase somewhere and then steal it when possible?

If yes, is it possible to protect against it?

  • Are you running the untrusted application as root? Don't do that. If necessary, run it in a vm. – AndrolGenhald May 7 at 19:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy