Skip to content

Commit

Permalink
mxgrub: Restrict access to submenu
Browse files Browse the repository at this point in the history
Allowing access to a submenu allows users to enter the command-line
interface by pressing the key *c*.

So, restrict the access. As a result, unprivileged users only can choose
the default Linux kernel.

[1]: https://www.gnu.org/software/grub/manual/grub/grub.html#Security
[2]: https://philosophos.github.io/articles/20170304~Password-Protection-of-GRUB-Menu/
  • Loading branch information
pmenzel committed Nov 29, 2019
1 parent 361e5f4 commit 02fda33
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion mxgrub/mxgrub
Original file line number Diff line number Diff line change
Expand Up @@ -271,7 +271,7 @@ else
menuentry "$MARIUX_DEFAULT" { set chosen="$submenu>$MARIUX_DEFAULT" ; save_env chosen ; linux /boot/bzImage.x86_64 root=LABEL=root $KERNEL_PARAMETER ; initrd /boot/grub/initramfs.igz }
submenu "$submenu" --unrestricted {
submenu "$submenu" {
$kernellist
}
if [ \$chosen ]; then
Expand Down

0 comments on commit 02fda33

Please sign in to comment.