64 replies to this topic

[Phoenixs]

The version of GRUB that I am using is 0.4.4.

When you start do not show me anything that has to see the password. Directly shows me the GRUB menu.

[Wonko the Sane]

Directly shows me the GRUB menu.

The grub4dos menu OR the grub4dos prompt?

This is how the grub4dos prompt looks like:
http://diddy.boot-la...iles/basics.htm

This is how a grub4dos menu looks like:
http://www.msfn.org/...o...129399&st=5

Can you see the (gfx) background image?
Can you see the menu.lst entries:

• title 1 - WinPE
• title 2 - WAREZ Boot CD 9
• title 6 - Kaspersky Rescue Disk

Re-check your menu.lst (after having READ about the difference between a "general" protection and a "per entry" one, you have BOTH in the above menu.lst.

Can you see the [p] privileged access text ?:
http://diddy.boot-la...nu.htm#password


Wonko

[Phoenixs]

Yes. I can see the background image. The bottom line is like this:

http://dc225.4shared...c7f541/menu.JPG

Title 1 - WinPE
Title 2 - WAREZ Boot CD 9
Title 3 - Kaspersky Rescue Disk

I continue to try to add a password before showing me the menu but still I could not do it.

[Wonko the Sane]

I continue to try to add a password before showing me the menu but still I could not do it.

Temporarily comment out the gfxmenu, i.e. change:

gfxmenu=/boot/fondo.png

to:

#gfxmenu=/boot/fondo.png

Can you see the [p] text?


Wonko

[Phoenixs]

is

/boot/boot.gfx

[Wonko the Sane]

is

/boot/boot.gfx

I don't get it.
Then change it from:

gfxmenu=/boot/boot.gfx

to:

#gfxmenu=/boot/boot.gfx

Wonko

[laddanator]

color blue/green yellow/red white/magenta white/magenta <-your existing colour settings timeout 30 <-your existing timeout settings default /default <-your existing default settings (if any) password <- this is the line you insert title Something <-your existing FIRST menu.lst entry title .... <- whatever is ALREADY in your FIRST menu.lst entry

 

Been awhile and I just gave up on trying to password protect my menu.lst with the password being in the header but since I found this, I will post my issue.

 

Using g4d Oct 02 2012 and I have tried this both ways. The password works fine under any title menu item but cannot get it to work in the header. Even opened up grldr and tried added the password to embedded menu

 

I have tried

 

 

password --md5 $1$A$hzYlFap3SLNNQ/tA7c3.S.
timeout 15
color white/blue
write 0x8274 0x2001

 

 and

 

 

timeout 15
color white/blue
write 0x8274 0x2001
password --md5 $1$A$hzYlFap3SLNNQ/tA7c3.S.


title......

 

and still do not get prompt for password and my menu.lst loads as normal but if I use that same password code in a title line

 

 

*Knoppix 7.0.4
iftitle [if exist %USBDrive%/boot/isolinux/linux] Knoppix 7.0.4 From %USBDrive%\nLinux Recovery
password --md5 $1$A$hzYlFap3SLNNQ/tA7c3.S.

 

I get prompted for a password. I would like the menu not to load at all unless your prompt and enter the correct password first?

[steve6375]

You misunderstand, if password is before a title entry, the menu displays as normal.

If the user  types p and then the correct password, then he has full access to the grub4dos command shell (e.g. he can hit C and get to the grub4dos shell) - otherwise the user cannot edit the menu, see any passwords in the menu or get to the shell.

Someone (?) may have written a grub4dos guide which you could read sometime!

P.S. read the next section in the guide about chkpass.

[laddanator]

You misunderstand, if password is before a title entry, the menu displays as normal. If the user types p and then the correct password, then he has full access to the grub4dos command shell (e.g. he can hit C and get to the grub4dos shell) - otherwise the user cannot edit the menu, see any passwords in the menu or get to the shell. Someone (?) may have written a grub4dos guide which you could read sometime! P.S. read the next section in the guide about chkpass.

 

Yes I misunderstood. I knew along time ago that added the password to header would not prompt for password but lock down c command and such but the last time I tried it was years ago. I thought something new had come about since then from Wonko's post (I was wrong). steve6375, didn't you make a md5 g4d password generator?

[steve6375]

Please read my  grub4dos guide !!!

 

I think what you want is described in there  (e.g. hiddenmenu --chkpass).

 

Also maybe Tutorial 57 and this.

[Wonko the Sane]

Using some fantasy .

Have the embedded menu.lst  password protected (to avoid user getting to command line with "c").

Have in the embedded menu.lst a single entry (also password protected) *like*:

 

 

title Password protected - select and input password
password --md5 $1$A$hzYlFap3SLNNQ/tA7c3.S.
configfile /<whatever>

 

Wouldn't do nicely?

 

Wonko

[steve6375]

depends what ladd's wants! 

@laddanator - you spec it, we'll craft it!

[laddanator]

depends what ladd's wants! @laddanator - you spec it, we'll craft it!

 

When I first learned about the password deal back in the day, we were using nothing but g4d Boot CD and DVD and my Techs would leave the disc in the customers machine and we had programs that we pay for on the disc we didn't want others outside of our shop to have and thought it would be great if you could add a password to the header like so

 

 

 

password --md5 $1$A$hzYlFap3SLNNQ/tA7c3.S. 


timeout 15

 
color white/blue write 0x8274 0x2001

 

 

so when the disc (now we use USB 99% of the time) booted, the first thing you are prompted for is the password before the menu.lst would load period and then you wouldn't need to password protect each menu item as you had a master password set in order for the menu.lst to load.

 

[steve6375]

Here are two menus for you

 

 

# user must press ESC within 3 seconds and then enter the password - otherwise system will reboot
timeout 3
default 0
password rm
hiddenmenu --chkpass

title Reboot
reboot

 

-------

 

 

# User must press F10 within 3 seconds and enter password or else system will halt
timeout 3
default 0
password rm
# hit F10 and enter password to remain on this menu
hiddenmenu --chkpass=0x4400

title Halt
halt

 

 

 

[laddanator]

Thanks, steve6375. Will give your menu.lst a test tomorrow.