grub.d: add luks-disable-debugshell.cfg.FIXME

Ref: https://insinuator.net/2025/07/insecure-boot-injecting-initramfs-from-a-debug-shell/
This commit is contained in:
Aminda Suomalainen 2025-07-07 11:42:23 +03:00
parent 6b4941d1e8
commit 33e7ba4f40
Signed by: Mikaela
GPG Key ID: 99392F62BAE30723

View File

@ -0,0 +1,8 @@
# Disable access to emergency root/debug shell upon wrong password entered.
# https://insinuator.net/2025/07/insecure-boot-injecting-initramfs-from-a-debug-shell/
# Debian
#GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT panic=0"
# Fedora
#GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT rd.shell=0 rd.emergency=halt"