I built GRUBST: An open-source tool to lock down the GRUB bootloader in 30 seconds with a physical USB rescue key

Hi everyone, Many Linux users rely on their account login password for security, but without bootloader protection, basic physical security is essentially non-existent. If someone has physical access to an unattended machine for just a minute, they can press 'e' in GRUB, append 'init=/bin/bash' to the kernel line, boot directly into a root shell...