shell-things/etc/default/grub.d/luks-disable-debugshell.cfg.FIXME

9 lines
336 B
Plaintext

# Disable access to emergency root/debug shell upon wrong password entered.
# https://insinuator.net/2025/07/insecure-boot-injecting-initramfs-from-a-debug-shell/
# Debian
#GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT panic=0"
# Fedora
#GRUB_CMDLINE_LINUX_DEFAULT="$GRUB_CMDLINE_LINUX_DEFAULT rd.shell=0 rd.emergency=halt"