On Fri, 29 Nov 2019, 15:17 Paul Menzel, <pmen...@molgen.mpg.de> wrote:
> Dear GRUB folks, > > > Is it possible to allow unprivileged users to access a submenu but > not enter the command-line interface? > > Reading the documentation [1] it’s not clear to me how to do that, > and my tests to do that also failed. > > The warning in [2] also hints that it’s not possible. > You need to export variables related to security > > > Warning — Adding --unrestricted to a menu entry with submenuentry > > will allow ANYONE gain superuser authority in the submenuentry ! So > > make sure the --unrestricted option is not used for a menu entry with > > submenuentry, Or add GRUB_DISABLE_SUBMENU=y to /etc/default/grub / > > /etc/sysconfig/grub to disable submenu. > > > Kind regards, > > Paul > > > [1]: https://www.gnu.org/software/grub/manual/grub/grub.html#Security > [2]: > https://philosophos.github.io/articles/20170304~Password-Protection-of-GRUB-Menu/ > > _______________________________________________ > Grub-devel mailing list > Grub-devel@gnu.org > https://lists.gnu.org/mailman/listinfo/grub-devel >
_______________________________________________ Grub-devel mailing list Grub-devel@gnu.org https://lists.gnu.org/mailman/listinfo/grub-devel
