[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Cannot transition from submenu back to main menu with empty superuse
From: |
Andrei Borzenkov |
Subject: |
Re: Cannot transition from submenu back to main menu with empty superusers |
Date: |
Wed, 15 Feb 2017 22:01:56 +0300 |
User-agent: |
Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.7.0 |
15.02.2017 19:54, Robert Kliewer пишет:
> I am running grub in such a way that only menu/submenu entries may be
> executed by a user (command line and entry editing are disabled). I have
> 'superusers' set to blank (""), all menu/submenu entries have the
> '--unrestricted' parameter, and I am exporting the 'superusers' so that the
> security posture carries over to the submenu. However, when I press escape
> in a submenu I get the password prompt as I would if I were trying to use
> the command line or edit an entry and cannot get back to the original
> menu. Any help would be appreciated. Thanks.
Yes, it has already been reported and the reason is security
considerations. See thread with title
[PATCH] broken ESC navigation if authentication is used
on grub-devel list. Code needs to be audited to decide how to allow
return from nested menu in safe way.