Re: grub2 security problem

[Joe Pfeiffer <pfeiffer@cs.nmsu.edu>]

Michael Fothergill <michael.fothergill@googlemail.com> writes:

> Dear Folks,
>
> I noticed some articles suggesting that there is a security problem in
> grub2.
>
> E.g.
>
> http://thehackernews.com/2015/12/hack-linux-grub-password.html
>
> ​Is there any substance to this?

Yes, for the microscopic proportion of people who put a password on
their bootloader in the first place, and for whom it is possible for
someone to to access their console to defeat it but not possible for
them to simply take the disk out and steal it.