[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Cannot transition from submenu back to main menu with empty superuse
Re: Cannot transition from submenu back to main menu with empty superusers
Wed, 15 Feb 2017 14:41:16 -0600
Thanks for the info, I came up with a similar patch to remove the
authentication check when transitioning back from the submenu.
On Feb 15, 2017 1:01 PM, "Andrei Borzenkov" <address@hidden> wrote:
15.02.2017 19:54, Robert Kliewer пишет:
> I am running grub in such a way that only menu/submenu entries may be
> executed by a user (command line and entry editing are disabled). I have
> 'superusers' set to blank (""), all menu/submenu entries have the
> '--unrestricted' parameter, and I am exporting the 'superusers' so that
> security posture carries over to the submenu. However, when I press
> in a submenu I get the password prompt as I would if I were trying to use
> the command line or edit an entry and cannot get back to the original
> menu. Any help would be appreciated. Thanks.
Yes, it has already been reported and the reason is security
considerations. See thread with title
[PATCH] broken ESC navigation if authentication is used
on grub-devel list. Code needs to be audited to decide how to allow
return from nested menu in safe way.