9.7. Use a boot loader password
Configure the boot loader to request a password when booting a
non-default image or when supplying parameters from the command
line.
This prevents someone from dialing in during the boot
sequence and booting the kernel with options to take control of the
machine, as in Example 4-1.
The password should not be the same as the
BIOS or root passwords.