Bug#611624: Upgrading grub2 removes password items

[Colin Watson]

On Mon, Jan 31, 2011 at 01:10:26PM +0100, Wolfgang Gruhn wrote:
> When grub2 is upgraded - e.g. by apt-get upgrade - then all superuser,
> users and password items are removed from grub.cfg, so that the admin
> is forced to insert them again. At least a warning should be issued;
> otherwise this bug means a grave security problem. 

You should modify the scripts in /etc/grub.d/ rather than editing
/boot/grub/grub.cfg directly.  This is documented at the top of
/boot/grub/grub.cfg.

-- 
Colin Watson                                       [cjwatson at debian.org]