How to password-protect the GRUB2 boot menu in RHEL 7 and above

Solution Verified - Updated -


  • How to password-protect boot menu in RHEL 7 or RHEL 8 or RHEL 9?
  • How to enforce a password for the single user mode?
  • How to prevent user from getting into single-user mode or runlevel 1 without a password?
  • Goal: a Red Hat Enterprise Linux 7 or 8 or 9 system that requires manual entry of a bootloader password in order to modify kernel parameters. System can boot kernel without the entry of password if no kernel parameters modification


  • Red Hat Enterprise Linux 7 and later

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content