From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with archive (Exim 4.43) id 1NHLsQ-0005QJ-RM for mharc-grub-devel@gnu.org; Sun, 06 Dec 2009 13:30:34 -0500 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NHLsP-0005NW-Bh for grub-devel@gnu.org; Sun, 06 Dec 2009 13:30:33 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1NHLsK-0005Cz-IS for grub-devel@gnu.org; Sun, 06 Dec 2009 13:30:32 -0500 Received: from [199.232.76.173] (port=35680 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NHLsK-0005Co-At for grub-devel@gnu.org; Sun, 06 Dec 2009 13:30:28 -0500 Received: from mail-yx0-f191.google.com ([209.85.210.191]:50635) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1NHLsK-000584-2U for grub-devel@gnu.org; Sun, 06 Dec 2009 13:30:28 -0500 Received: by yxe29 with SMTP id 29so10483804yxe.14 for ; Sun, 06 Dec 2009 10:30:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=OkwE3Z2HVGhJOfRmAuKiBcGUsC5sKSSlaMG7um4lKR4=; b=YqyapN80QBqG43pytUoWWj01dAcnDZmccErQWlUm7luf/av6s44wlffkb0mG0GSfsV vuc+VhBq02FeYUloNEhQGWIQch1nE2DwGOwG/sj246/0kXQ6BHcIeRGAHa4mD9j8iUPP QmR/k94Cbc55XzO9OkJhfJ1WPxECEjfr0gods= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; b=LiSy/KUQ6yoLLBKxNVx8wVSLNlTHbDz1VjxrFxp9B9BCusFq5KSYNE5Zk2Bww1VB1N pMFjhxPW8/ZGq2R0hEOIrnOnQx39PWmJBxN1Zp/6mLua0b4g40YltoTsIOcTgZMivktK R8X/ksERSLA7ny/kbE9mnfs+gTSq1+iLyhZG4= Received: by 10.150.71.31 with SMTP id t31mr2001089yba.18.1260124227019; Sun, 06 Dec 2009 10:30:27 -0800 (PST) Received: from ?192.168.0.75? (cpe-66-69-97-231.satx.res.rr.com [66.69.97.231]) by mx.google.com with ESMTPS id 9sm1765724ywf.35.2009.12.06.10.30.25 (version=TLSv1/SSLv3 cipher=RC4-MD5); Sun, 06 Dec 2009 10:30:26 -0800 (PST) Message-ID: <4B1BF841.5000804@gmail.com> Date: Sun, 06 Dec 2009 12:30:25 -0600 From: Bruce Dubbs User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.16) Gecko/20080722 SeaMonkey/1.1.11 MIME-Version: 1.0 To: The development of GNU GRUB References: <4B1BF3BF.9010900@gmail.com> In-Reply-To: <4B1BF3BF.9010900@gmail.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 2) Subject: Re: meaning of absent --users prameters. X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: The development of GNU GRUB List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Dec 2009 18:30:33 -0000 Vladimir 'φ-coder/phcoder' Serbinenko wrote: > Hello. Currently authentication system works as following: > > menuentry "name" --users "a,b,c" { > } > Means that only superusers and users "a", "b" and "c" are permitted to > boot this menuentry. To allow only superusers to boot an entry one would > need: > menuentry "name" --users "" { > } > And absence of --users means "anyone can choose this entry". > Unfortunately this is error-prone. Does anyone oppose to change it to: > No --users: only superusers > To have an unlocked entry you have to add --unlocked First, what is the definition of a 'superuser'? Where does GRUB get the information to make a decision. In any case, I'd recommend --users: superusers only or even --users: superusers ------- -- Bruce