Questions tagged [grub]
GNU GRUB (GNU Grand Unified Bootloader) is a boot loader package from the GNU Project.
12
questions
1
vote
2
answers
335
views
Full disk encryption with LUKS?
I encrypted my Ubuntu Desktop 20.04.3 with LVM/LUKS during the installation process. If I turn off the computer, is the brute force the only attack available for getting the password and accessing the ...
- 11
1
vote
0
answers
161
views
Is grub implementation of secure boot inherently flawed?
Definitions
Grub is the second stage bootloader often found in Linux distributions.
shim is the first bootloader ran by the ROM firmware. It is signed by Microsoft.
ROM firmware is the code embedded ...
3
votes
0
answers
256
views
How to prevent grub.cfg from breaking the chain of trust?
First some definitions and common understanding.
The premise of secure boot is that each binary get's verified before
it is loaded. This starts with the firmware in ROM verifying the EFI
application.
...
1
vote
0
answers
175
views
Entered FDE password in GRUB by mistake
For several reasons (I have an external monitor, etc.) when I booted the laptop I typed the FDE (Full Disk Encryption on Linux, LUKS) without looking at the monitor, and I ended up typing the full ...
- 15.7k
1
vote
2
answers
2k
views
Would it add security to set a GRUB password if HDDs are encrypted and UEFI settings can be opened anyway?
So I'm using Debian 9.1 with KDE and have my hard drives encrypted. Now I'm wondering whether to additionally add a GRUB password as described here.
Would that make sense? As the hard drives are ...
- 384
12
votes
3
answers
11k
views
Encrypting the /boot partition in a Linux system can protect from an Evil Maid Attack?
If the boot partition is encrypted (and the passphrase to unlock the device must be entered in GRUB before the boot sequence starts) is the system considerable safe from an Evil Maid Attack?
- 121
2
votes
1
answer
857
views
Is that a way break Linux user password by bypassing grub protected?
The best way to delve into others Linux machine is by editing the grub.
Many will start by, editing the line ro quite splash as rw init=/bin/bash during the startup (usually by pressing button e on ...
- 2,231
49
votes
2
answers
7k
views
What is happening now with the Grub backspace key security vulnerability?
I just read a few articles about a new Grub vulnerability. The article said that you can bypass the password protection by pressing backspace twenty eight times.
I am a security guy and I am ...
- 2,127
5
votes
1
answer
3k
views
Decryption using GRUB and TPM
I'm trying to plan security routine for my new Linux install and few questions came up during searching for solution which meet my needs.
Is it possible to use private key from TPM in GRUB to decrypt ...
- 53
1
vote
2
answers
2k
views
Laptop tampering and boot loader
I try to find out how far I can secure my laptop from physical access and tampering attempts.
Setup: ThinkPad with Linux installation
What I have done so far:
disk encryption using cryptsetup for ...
- 189
3
votes
2
answers
3k
views
How to protect Linux partition from access from Windows partition?
In a dual-boot environment (windows? and linux mint 15) What would be best best way to prevent access to the linux partition(s) when the system is booted into windows 7?
The goal would be to ...
user13779
5
votes
2
answers
2k
views
Impact of Mathew Garrett's Secure GRUB Bootloader on UEFI Secure Boot
My eyebrows rose with Matthew Garrett announcing his Secure GRUB Bootloader less than three hours after no longer being a Red Hat employee. This work and its impact on the trust chain design of the ...
- 3,397