Re: 'password' command in GRUB 2?

[Vladimir 'phcoder' Serbinenko]

On Fri, Jun 5, 2009 at 7:36 PM, Colin Watson<address@hidden> wrote:
> Hi,
>
> I was asked today whether GRUB 2 had a 'password' command yet, as it's
> more or less the last major feature regression from GRUB Legacy from our
> point of view. I see from the Subversion repository that it doesn't yet,
> but there have been a number of attempts in the past. Rather than
> reinventing the wheel, if we were to look at pushing this up the hill to
> inclusion, where would be the best place to start?
Once I merge savedefault password protection is the last feature
needed for debian to migrate (according to Robert Millan)
>
> Previous attempts I have found:
>
>  http://lists.gnu.org/archive/html/grub-devel/2007-08/msg00034.html
>    "[PATCH] password command implementation", Julien RANC, August 2007
>  http://lists.gnu.org/archive/html/grub-devel/2008-05/msg00135.html
>    "[RFC] Grub2 lock and password implementation", Julien Ranc, May 2008
I don't know if he has copyright assignment. If he doesn't, copyright
assignment takes a lot of time
>  http://lists.gnu.org/archive/html/grub-devel/2008-08/msg00308.html
>    "Idea: implementation of the password command", Bean, August 2008
>  http://lists.gnu.org/archive/html/grub-devel/2009-02/msg00376.html
>    "Menu locks / password authentication", Robert Millan, February 2009
>
> I agreed with Robert in the last link above that it would be best to
> implement lock/password first and worry about something more extensible
> later if required (on the "you ain't gonna need it" principle),
Yes but I'm uncomfortable with authntication handled in scripts. We
all know SQL injection problems. The main question is whether we want
something simple to use or something very extendable. My approach
would be:
http://lists.gnu.org/archive/html/grub-devel/2009-03/msg00156.html
> Thanks,
>
> --
> Colin Watson                                       address@hidden
>
>
> _______________________________________________
> Grub-devel mailing list
> address@hidden
> http://lists.gnu.org/mailman/listinfo/grub-devel
>



-- 
Regards
Vladimir 'phcoder' Serbinenko