Bug 146530

Summary: grub password lost after update
Product: [openSUSE] SUSE Linux 10.1 Reporter: Christian Boltz <suse-beta>
Component: Update ProblemsAssignee: Olaf Dabrunz <odabrunz>
Status: VERIFIED FIXED QA Contact: Klaus Kämpf <kkaempf>
Severity: Critical    
Priority: P5 - None CC: Andreas.Stieger, duwe
Version: Beta 2   
Target Milestone: ---   
Hardware: Other   
OS: Other   
Whiteboard:
Found By: Other Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: y2logs (from installed system, I hope installation is included)

Description Christian Boltz 2006-01-29 21:23:26 UTC
After updating to 10.1 beta2, the "password" setting is lost from the global part of my grub configuration.

Before (menu.lst from 10.0):

color white/blue black/light-gray
default 0
timeout 8
gfxmenu (hd0,4)/boot/message
password --md5 $1..[shortened]..


After update to 10.1 beta2, there's no password setting in the global part of menu.lst:

color white/blue black/light-gray
default
timeout 8
gfxmenu (hd0,6)/boot/message


(major because the missing password is very bad for security - anyone can enter any boot option including the infamous init=/bin/bash)

BTW: Nice grub image - too bad that setting the password forces text mode :-(
Comment 1 Michael Gross 2006-01-30 11:52:00 UTC
This could be a problem with yast rather than with grub itself, so please attach the yast logfiles of this machine.

Taking Torsten into CC: Thorsten, does grub really enforce text mode when using a boot password? This sounds a little odd to me.
Comment 2 Christian Boltz 2006-01-30 18:51:23 UTC
Created attachment 65739 [details]
y2logs (from installed system, I hope installation is included)

BTW: Yes, grub really switches to text mode if I set a password in the global section. At least grub from 10.0 did - I like the 10.1 boot picture so much that I didn't re-add the password ;)
Comment 3 Andreas Stieger 2006-03-02 15:21:43 UTC
The YaST bootloader module also deletes those lines in the global section of /boot/grub/menu.lst, they have to be added manually afterwards.

serial --unit=0 --speed=38400 --word=8 --parity=no --stop=1
terminal --timeout=10 serial console
Comment 4 Stefan Fent 2006-04-10 17:32:03 UTC
The password setting is kept with beta9 (Just tested update from 10.0 -> 10.1Beta9)
Comment 5 Christian Boltz 2006-06-24 22:51:58 UTC
The grub password was kept when updating 10.0 to 10.1 final :-)

Thanks!