How To Password Protect Your Linux Box (OS) With GRUB

GRUB, the Only bootloader for Linux OS, as NTLDR works in windows..

here , the basic idea for Securing the Linux box wiht GRUB is, we implies sum security on GRUB itself..The MOst basic Phase in Loading Of An Operating System.

 

However , Gettin bypassed with GRUb is also not that much difficult, its as easy as Burning a MATCH STICk, bt guys, i wud tell u that somehow later.

So wt the basic idea is, If you don't want someone booting your machine without permission, you can add a password to your GRUB entries. You can add a password only to specific entries if you wish; this will require a user to enter a password before loading only those boot entries you protect. This can be useful when done on your Recovery Mode entries, which bring up a passwordless root login by default.

To get started, let's first encrypt the password we want to use. Open up a terminal and enter the grub command. This brings up a grub shell. In this shell, enter the md5crypt command. When prompted, type in the password you want on your grub entries. (Don't worry, this won't write anything to your files!) After pressing Enter, you will be given an encrypted password string. Copy the string to your clipboard. Enter quit to exit the grub shell and return to bash.

Code:

GNU GRUB  version 0.95  (640K lower / 3072K upper memory)

 [ Minimal BASH-like line editing is supported.  For the first word, TAB
   lists possible command completions.  Anywhere else TAB lists the possible
   completions of a device/filename. ]

grub> md5crypt

Password: *************
Encrypted: $1$w7Epf0$vX6rxpozznLAVxZGkcFcs.

grub>

Now that we have an encrypted password, it's time to add it to grub. Using sudo, open up /boot/grub/menu.lst using your favorite text editor.

 

Note : if ur version of linux Box does not Encrypts password as such, Then you may have to Copy The encrypted passwrd frm the Shadow Fiel..(If U r having this case, do ask me, n i wud tell u the whole game IN step wise step manner)
After the "initrd" line for each entry you want to password protect, start a new line beginning with password --md5 and paste in your newly-encrypted password. Using the above example password on the i386 recovery entry, this:

Code:

title Ubuntu, kernel 2.6.8.1-2-386 (recovery mode)
        root (hd1,2)
        kernel /boot/vmlinuz-2.6.8.1-2-386 root=/dev/hdb3 ro single
        initrd /boot/initrd.img-2.6.8.1-2-386

Becomes this:

Code:

title Ubuntu, kernel 2.6.8.1-2-386 (recovery mode)
        root (hd1,2)
        kernel /boot/vmlinuz-2.6.8.1-2-386 root=/dev/hdb3 ro single
        initrd /boot/initrd.img-2.6.8.1-2-386
        password --md5 $1$w7Epf0$vX6rxpozznLAVxZGkcFcs.

You must add such a line after every entry you want to password protect. As I mentioned earlier, I password protected my recovery mode entries out of sheer paranoia.

Save the file, and reboot. (The first time you try this, I suggest only doing it to one entry so you can test it to make sure it works, and you can still use another entry to boot your machine in case something went wrong.)

For a bit of added peace of mind, you can prevent everyone except root from reading /boot/grub/menu.lst by doing:

Code:

sudo chmod 600 /boot/grub/menu.lst

______________________________________________________________________________

Thats it u r finished with it.

Hopes u enjoy this., have fun. Enjoy Hacking.. Enjoy

Block and Enable usage of USB Removable Disks

This tip will allow you to block usage of USB removable disks, but will continue to allow usage of USB mice, keyboards or any other USB-based device that is NOT a portable disk.

Block usage of USB Removable Disks

To block your computer's ability to use USB Removable Disks follow these steps:

1. Open Registry Editor.

2. In Registry Editor, navigate to the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\USBSTOR

3. Locate the following value (DWORD):Start and give it a value of 4(four).

4. Close Registry Editor.

You do not need to reboot the computer for changes to apply.

Enable usage of USB Removable Disks

To return to the default configuration and enable your computer's ability to use USB Removable Disks follow these steps:

1. Go to the registry path found above.

2. Locate the following value: Start and give it a value of 3(three).

Improve menushowdelay time of Start Menu

Sometimes Start Menu so much time to appear, but now you can speed up things, by changing the registry entry:

HKEY_CURRENT_USER/Control Panel/Desktop/MenuShowDelay

from the default 400 to something a little snappier. Like 0.

Automatic Window refresh - Cool Computer Tricks

Whenever you make a change to your windows you have to press F5 or do a manual refresh sometimes its very annoying Now with this trick you can tell windows to increase the rate at which it does the refreshing.

Just follow given steps:

1) Type Regedit in run.

2) In Registry editor window go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Update.

3) Create a new DWORD value, or modify the existing value, named UpdateMode and set it to equal 0 for faster updates. Restart Windows for the change to take effect.

Its done.

Sticky Menus

Normally when you move the mouse over the Start Menu or over some Programs, it will automatically cascade and show the submenus. But if you want menus to open submenus only when you actually click on them, then those menus are known as sticky menus so here are steps to make sticky menus, you need to make some changes in regestiry just follow these steps:

1. Go to run and type Regedit.
2. In registry editor window, browse to HKEY_CURRENT_USER \ Deafault \ Control Panel \ Desktop.
3. Check if there is any string named MenuShowDelay, If it not there, create a string called MenuShowDelay.


4. Give it a value of 65534.
Its done.

Change windows Default Location - Cool Computer Tricks

You can chnage the windows default location where windows look for its installation files. To change windows default drive you have to make some changes in windows registry just follow these steps:

1) Go to RUN.

2) Type regedit and press Enter.

3)Then in Registry Editor window go to

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\ CurrentVersion\Setup\SourcePath

4) Here you can edit as you wish.

Its done.