Configure the boot loader to request a password when booting a non-default image or when supplying parameters from the command line. [Reference: Arch Linux] .:: www.arc.agric.za ::. .:: telescope.ac ::. .:: management.ju.edu.jo ::. .:: chromewebstore.google.com ::. .:: quicknote.io ::. .:: www.vhs80.com ::.
This prevents someone from dialing in during the boot sequence and booting the kernel with options to take control of the machine, as in [Recursion Repositories] .:: b8prolive8.blogspot.com ::. Example 4-1.
The password should not be the same as the BIOS or root passwords.