2024 Audit- SEC-01-005 WP3: Boot Loader Password Not Set

[zenmonkeykstop]

The boot loader lacks a password on the app (10.20.2.2) and mon (10.20.3.2) servers.
This enables unauthorized individuals with physical access to the server to set command
line boot parameters, potentially breaching system security.

Adding a boot loader password would provide extra protection in the event of someone getting temporary server access, but for it to make a significant difference we'd need other measures in place (for example, FDE). We will consider further work on this.