V8.00.000.2025.06.17

Signed-off-by: Marc S. Weidner <msw@coresecret.dev>

func/4150_setup_grub.sh

@@ -118,7 +118,7 @@ GRUB_BACKGROUND="/etc/default/grub.d/${var_background}"
 # The resolution used on graphical terminal
 # note that you can use only modes which your graphic card supports via VBE
 # you can see them in real GRUB with the command 'vbeinfo'
-GRUB_GFXMODE=1920x1080,1280x1024,800x600
+GRUB_GFXMODE=1920x1080,1280x1024,1024x768,800x600
 GRUB_GFXPAYLOAD_LINUX=keep
 
 EOF
@@ -166,6 +166,11 @@ EOF
 
   [[ "${var_update_grub_required}" == "true" ]] && do_in_target "${TARGET}" update-grub
 
+  ### Setting the permissions to read and write for root only prevents non-root users from seeing the boot parameters or changing them.
+  chown root:root "${TARGET}/boot/grub/grub.cfg"
+  chmod 0600 "${TARGET}/boot/grub/grub.cfg"
+  chmod -R 0700 "${TARGET}/etc/grub.d"
+
   return 0
 }
 # vim: number et ts=2 sw=2 sts=2 ai tw=128 ft=sh