From 06890e0416256447fd13db870213b975f28ca327 Mon Sep 17 00:00:00 2001
From: yueyuankun <yueyuankun@kylinos.cn>
Date: Mon, 17 Nov 2025 16:38:17 +0800
Subject: [PATCH] add grub2 password for legacy

---
 security-tool.sh   | 2 ++
 security-tool.spec | 5 ++++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/security-tool.sh b/security-tool.sh
index 6520ff4..4780b35 100644
--- a/security-tool.sh
+++ b/security-tool.sh
@@ -918,6 +918,8 @@ function fn_harden_grub2()
     echo -e "cat <<EOF\nset superusers="root"\npassword_pbkdf2 root grub.pbkdf2.sha512.10000.5A45748D892672FDA02DD3B6F7AE390AC6E6D532A600D4AC477D25C7D087644697D8A0894DFED9D86DC2A27F4E01D925C46417A225FC099C12DBD3D7D49A7425.2BD2F5BF4907DCC389CC5D165DB85CC3E2C94C8F9A30B01DACAA9CD552B731BA1DD3B7CC2C765704D55B8CD962D2AEF19A753CBE9B8464E2B1EB39A3BB4EAB08\nEOF\n" >> /etc/grub.d/00_header
     if [ -d /boot/efi/EFI/openEuler -a -d /sys/firmware/efi ]; then
         grub2-mkconfig -o /boot/efi/EFI/openEuler/grub.cfg
+    else
+        grub2-mkconfig -o /boot/grub2/grub.cfg
     fi
 }
 # Function Name: fn_harden_sysctl
diff --git a/security-tool.spec b/security-tool.spec
index 9d07b89..9a86615 100644
--- a/security-tool.spec
+++ b/security-tool.spec
@@ -1,7 +1,7 @@
 Summary: openEuler Security Tool
 Name   : security-tool
 Version: 2.0
-Release: 1.52
+Release: 1.53
 Source0: %{name}-%{version}
 Source1: security
 Source2: security.conf
@@ -127,6 +127,9 @@ fi
 %attr(0500,root,root) %{_sbindir}/dim-tool.sh
 
 %changelog
+* Mon Nov 17 2025 yueyuankun <yueyuankun@kylinos.cn> - 2.0-1.53
+- add grub2 password for legacy
+
 * Fri Jul 25 2025 Tomahawkd <tomahawkd00@outlook.com> - 2.0-1.52
 - fix spec rpm build problem
 
-- 
Gitee