From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with archive (Exim 4.43) id 1NHLzD-0002Rb-Hk for mharc-grub-devel@gnu.org; Sun, 06 Dec 2009 13:37:35 -0500 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NHLzB-0002P7-Ns for grub-devel@gnu.org; Sun, 06 Dec 2009 13:37:33 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1NHLz6-0002IC-Pe for grub-devel@gnu.org; Sun, 06 Dec 2009 13:37:33 -0500 Received: from [199.232.76.173] (port=47597 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NHLz6-0002Hw-Fs for grub-devel@gnu.org; Sun, 06 Dec 2009 13:37:28 -0500 Received: from mail-fx0-f213.google.com ([209.85.220.213]:46764) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1NHLz6-0005YN-4S for grub-devel@gnu.org; Sun, 06 Dec 2009 13:37:28 -0500 Received: by fxm5 with SMTP id 5so3998122fxm.8 for ; Sun, 06 Dec 2009 10:37:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :x-enigmail-version:content-type; bh=I6ZK/bYPG4uTgy42t2vAMm7gMQo237PhNwYnc8YRMZs=; b=f0/IBm4n+V/2OWacwZa0lRtu27CkUATo6uIR8jb7S58m8fORPXnYVWNAGuambbQtUH M0OaUCNxmzGVmxisRt1ykaH9uAY/U/ViTd3KxxEVywrvqYPPl3FUqqk9DFxgWZunt8Cm ReQqj11FQy/FiY6xO4Big02GmRkso3eH1KxSU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:x-enigmail-version:content-type; b=aTiNWM2LvGar//0fvxfj25jIvTqPZ3Raaf8uQPlUiptPgKcuBfVuqWJq8RI/jQwaeY guXyTwJ8sXMK6lgIYwwtDWPeP8p//zGltlyXgQ9DCgybONI76T6SOqWUT7GiJA2ZGnjg Gvsj5sfYjH0iwe6UNAVYhroN6KVtzIBBULMXQ= Received: by 10.86.11.26 with SMTP id 26mr4754004fgk.72.1260124647338; Sun, 06 Dec 2009 10:37:27 -0800 (PST) Received: from debian.bg45.phnet ([81.62.189.176]) by mx.google.com with ESMTPS id d6sm7095525fga.14.2009.12.06.10.37.26 (version=TLSv1/SSLv3 cipher=RC4-MD5); Sun, 06 Dec 2009 10:37:26 -0800 (PST) Message-ID: <4B1BF9DE.3070003@gmail.com> Date: Sun, 06 Dec 2009 19:37:18 +0100 From: =?UTF-8?B?VmxhZGltaXIgJ8+GLWNvZGVyL3BoY29kZXInIFNlcmJpbmVua28=?= User-Agent: Mozilla-Thunderbird 2.0.0.22 (X11/20091109) MIME-Version: 1.0 To: The development of GNU GRUB References: <4B1BF3BF.9010900@gmail.com> <4B1BF841.5000804@gmail.com> In-Reply-To: <4B1BF841.5000804@gmail.com> X-Enigmail-Version: 0.95.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="------------enig6D22AC702816510C4B4CA02D" X-detected-operating-system: by monty-python.gnu.org: GNU/Linux 2.6 (newer, 2) Subject: Re: meaning of absent --users prameters. X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: The development of GNU GRUB List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Dec 2009 18:37:34 -0000 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig6D22AC702816510C4B4CA02D Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Bruce Dubbs wrote: > Vladimir '=CF=86-coder/phcoder' Serbinenko wrote: >> Hello. Currently authentication system works as following: >> >> menuentry "name" --users "a,b,c" { >> } >> Means that only superusers and users "a", "b" and "c" are permitted to= >> boot this menuentry. To allow only superusers to boot an entry one wou= ld >> need: >> menuentry "name" --users "" { >> } >> And absence of --users means "anyone can choose this entry". >> Unfortunately this is error-prone. Does anyone oppose to change it to:= >> No --users: only superusers >> To have an unlocked entry you have to add --unlocked > > First, what is the definition of a 'superuser'? Where does GRUB get > the information to make a decision. > Superusers are set on per-configuration basis with set superusers=3D these users are allowed to invoke shell and edit menu entries so there is no reason to restrict which entries they are allowed to boot. > In any case, I'd recommend > > --users: superusers only > > or even > > --users: superusers I don't get what you mean > ------- > -- Bruce > > > _______________________________________________ > Grub-devel mailing list > Grub-devel@gnu.org > http://lists.gnu.org/mailman/listinfo/grub-devel > --=20 Regards Vladimir '=CF=86-coder/phcoder' Serbinenko --------------enig6D22AC702816510C4B4CA02D Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iF4EAREKAAYFAksb+eUACgkQNak7dOguQgnNBAD/VSx+kCmdBNwSu+FEkoNJUBW0 RaWuamG+wDtcxxuookcA/0u6H6Jc/nmZecO97ahcOxJ+ZSjv05J4/PglHyQIndVT =EEnd -----END PGP SIGNATURE----- --------------enig6D22AC702816510C4B4CA02D--