老生常谈-linux 引导加密

sjhf

               
                        这是一个老生长谈的话题，我只是为了记录自己的学习过程，暂时写下来，自己写得东西并不多，因为技术经历有限，于是，开始吧

        让linux启动引导时加密方法
#vi /boot/grub/grub.conf
# grub.conf generated by anaconda
#
# Note that you do not have to rerun grub after making changes to this file
# NOTICE:  You have a /boot partition.  This means that
#          all kernel and initrd paths are relative to /boot/, eg.
#          root (hd0,0)
#          kernel /vmlinuz-version ro root=/dev/sda2
#          initrd /initrd-version.img
#boot=/dev/sda
default=0
timeout=10
splashimage=(hd0,0)/grub/splash.xpm.gz
title Red Hat Linux (2.4.18-3)
        [color="#ff0000"]password 12345678
        root (hd0,0)
        kernel /vmlinuz-2.4.18-3 ro root=/dev/sda2
        initrd /initrd-2.4.18-3.img
~
~
"/boot/grub/grub.conf" 17L, 569C written
[root@localhost root]# reboot



出现以上提示输入：12345678

系统才可以引导

[color="#ff0000"]注意：远程勿试！
[color="#ff0000"]
[color="#000000"]以密文方式

[root@localhost root]# grub-md5-crypt
Password:
$1$jQORq$BbVuVrnQ60b87FlXP/aau/
[root@localhost root]# vi /boot/grub/grub.conf

# grub.conf generated by anaconda
#
# Note that you do not have to rerun grub after making changes to this file
# NOTICE:  You have a /boot partition.  This means that
#          all kernel and initrd paths are relative to /boot/, eg.
#          root (hd0,0)
#          kernel /vmlinuz-version ro root=/dev/sda2
#          initrd /initrd-version.img
#boot=/dev/sda
default=0
timeout=10
splashimage=(hd0,0)/grub/splash.xpm.gz
title Red Hat Linux (2.4.18-3)
        [color="#ff0000"]password --md5 $1$jQORq$BbVuVrnQ60b87FlXP/aau/
        root (hd0,0)
        kernel /vmlinuz-2.4.18-3 ro root=/dev/sda2
        initrd /initrd-2.4.18-3.img
~
~
"/boot/grub/grub.conf" 17L, 598C written
[root@localhost root]# reboot


               

本文来自ChinaUnix博客，如果查看原文请点：http://blog.chinaunix.net/u3/93926/showart_1872805.html