search for: user_supplied

...ptions 0 (fully blocked with IMPLICIT 0) labelX OPT # OPT not passed with allowoptions 0 One option is to change load_kernel() with an extra argument to know if the supplied command_line is provided via configuration or from the user. Then applied allowoptions, allowimplicit only if the cmdline is user_supplied (of course adding the support for allowoptions in the label path). For command coming from the boot-once, could be considered as not being user_supplied as If one can use syslinux/extlinux to set the boot-once, one can likely also totally change the configuration file anyway. Safety/security here...