Public bug reported: Following this guide: https://help.ubuntu.com/community/Grub2/Passwords you can set a superuser to prevent anyone from editing grub lines, but allowing them to boot anyway. Back in Ubuntu 12.04, you just edit /etc/grub/40_custom with:
set superusers="John" password John foo export superusers then you execute sudo update-grub2 and that's it. You can't edit grub entries without the password but you can boot. Now in Ubuntu 14.04, GRUB will ask for the password even when you just want to boot. A workaround is editing /etc/grub.d/10_linux with: CLASS="--class gnu-linux --class gnu --class os --unrestricted" The "--unsrestricted" option does the trick. But the "way to go" should be adding a line in /etc/default/grub so the grub-mkconfig will auto- edit the 10_linux file. ** Affects: grub2 (Ubuntu) Importance: Undecided Status: New ** Tags: grub password security trusty ** Package changed: linux (Ubuntu) => grub2 (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1311302 Title: GRUB2 asks for password when booting To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1311302/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs