Re: [RFC] Support menuentry options in simple configuration interface

[Michael Chang]

On Mon, Jun 01, 2015 at 11:35:49AM +0800, Michael Chang wrote:
> On Sat, May 30, 2015 at 10:39:06AM +0300, Andrei Borzenkov wrote:
> > В Tue, 26 May 2015 15:53:14 +0800
> > Michael Chang <address@hidden> пишет:
> > 
> > > This patch provides settings in simple configuration interface that can 
> > > set
> > > common options to menuentry. One of the use cases is specifying the 
> > > security
> > > settings thus it won't be overwritten by grub-mkconfig. For eg.
> > > 
> > > GRUB_MENU_ENTRY_OPTION_LINUX="--unrestricted"
> > > GRUB_MENU_ENTRY_OPTION_OSPROBER="--users user1"
> > > 
> > 
> > I'm not sure. I actually feel like configurations that need detailed
> > per user authorizations simply do not fit into simplistic
> > grub-mkconfig. Next someone will miss per-menuentry user list.
> 
> Thanks for comment. I'm also not sure as per menu entry options not fit
> well with global options context provided by simple interface. But from
> my understanding, generic options settings maybe more welcome from
> upstream POV, so that's why I send it here as RFC patch. :)
> 
> > 
> > Most common request is really to allow menu boot while restricting
> > command line, so I think that adding support for this to grub-mkconfig
> > would be fine. 
> 
> Yes. We have quite many users request the password protection to work
> the same way as legacy grub, that is actually what --unrestricted could
> provide them, but they need to manually patch grub scripts to keep their
> settings persist as currently distribution tools have no way to
> integrate it by lacking of inteface in simple config. We can extend that
> on our own, of course, but it seems better to coordinated on upstream if
> possible.
> 
> How do you think proposed option like this ?
> 
>   GRUB_UNRESTRICTED_MENU_ENTRY="true"

Hi Andrei,

Do you have any comment on the new setting? I am absolutely happy to
work on the patch if it's the way to go.

If not, do you have any other recommends or be it a down-stream settings
is more feasible here ?

Thanks,
Michael
> 
> to have generated menu-entry with --unrestricted options set?
> 
> > Otherwise something more detailed should really be left
> > to distribution specific tools or manual creation of grub.cfg.
> 
> Agreed.
> 
> Thanks,
> Michael
> 
> > 
> > _______________________________________________
> > Grub-devel mailing list
> > address@hidden
> > https://lists.gnu.org/mailman/listinfo/grub-devel
> 
> _______________________________________________
> Grub-devel mailing list
> address@hidden
> https://lists.gnu.org/mailman/listinfo/grub-devel