Josef Siemes
2002-Apr-29 17:16 UTC
[syslinux] 'implicit' doesn't prevent additional parameters?
Hi, just tried the 'implicit 0'-option with pxelinux (btw, 1.73Pre6 - works). What I wanted is preventing tricksters to give additional parameters on the commandline. It prevents giving something different from the 'label'-statement ('Could not find kernel image:..'), but if I give e.g. linux init=/bin/sh it gives me a root shell. It should have taken the 'append'-line from the label statement and nothing else, or even complain about some error loading the image - like above. Have I missed something? Regards, Josef ______________________________________________________________________________ All inclusive! 100 MB Speicher, werbefrei, SMS g?nstiger, Wunschrufnummer, Events, Preisvorteile und mehr unter http://club.web.de/?mc=021104
H. Peter Anvin
2002-Apr-29 18:46 UTC
[syslinux] 'implicit' doesn't prevent additional parameters?
Josef Siemes wrote:> Hi, > > just tried the 'implicit 0'-option with pxelinux (btw, 1.73Pre6 - works). > What I wanted is preventing tricksters to give additional parameters > on the commandline. It prevents giving something different from the > 'label'-statement ('Could not find kernel image:..'), but if I give e.g. > linux init=/bin/sh > it gives me a root shell. It should have taken the 'append'-line > from the label statement and nothing else, or even complain about > some error loading the image - like above. > > Have I missed something? >Yes -- the "implicit" statement doesn't prevent you from adding command line parameters, it just keeps you from specifying a kernel that isn't listed as a label. -hpa
Josef Siemes
2002-Apr-30 09:01 UTC
[syslinux] 'implicit' doesn't prevent additional parameters?
Hi,> Yes -- the "implicit" statement doesn't prevent you from adding command > line parameters, it just keeps you from specifying a kernel that isn't > listed as a label.how much work would it be to prevent command line parameters? Say, e.g. with 'implicit 2'? I consider this a useful feature. Regards, Josef bv ________________________________________________________________ Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr! Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13