Re: Cannot transition from submenu back to main menu with empty superusers

[Robert Kliewer]

Thanks for the info, I came up with a similar patch to remove the
authentication check when transitioning back from the submenu.


On Feb 15, 2017 1:01 PM, "Andrei Borzenkov" <address@hidden> wrote:

15.02.2017 19:54, Robert Kliewer пишет:
> I am running grub in such a way that only menu/submenu entries may be
> executed by a user (command line and entry editing are disabled).  I have
> 'superusers' set to blank (""), all menu/submenu entries have the
> '--unrestricted' parameter, and I am exporting the 'superusers' so that
the
> security posture carries over to the submenu.  However, when I press
escape
> in a submenu I get the password prompt as I would if I were trying to use
> the command line or edit an entry and cannot get back to the original
> menu.  Any help would be appreciated.  Thanks.

Yes, it has already been reported and the reason is security
considerations. See thread with title

[PATCH] broken ESC navigation if authentication is used

on grub-devel list. Code needs to be audited to decide how to allow
return from nested menu in safe way.