Grub hardening and password protection

[artem-sidorenko]

It would be cool to have it here, similar to the puppet PR dev-sec/puppet-os-hardening#137

[Miftahunajat]

Can you explain a bit of the detail ? @artem-sidorenko

[artem-sidorenko]

@Miftahunajat the idea is to have the password protection for grub, so you can't easily manipulate the kernel parameters during the boot process of the system. Example puppet implementation is here https://github.com/dev-sec/puppet-os-hardening/pull/137/files