Josef Siemes
2002-Apr-29 17:16 UTC
[syslinux] 'implicit' doesn't prevent additional parameters?
Hi,
just tried the 'implicit 0'-option with pxelinux (btw, 1.73Pre6 -
works).
What I wanted is preventing tricksters to give additional parameters
on the commandline. It prevents giving something different from the
'label'-statement ('Could not find kernel image:..'), but if I
give e.g.
linux init=/bin/sh
it gives me a root shell. It should have taken the 'append'-line
from the label statement and nothing else, or even complain about
some error loading the image - like above.
Have I missed something?
Regards,
Josef
______________________________________________________________________________
All inclusive! 100 MB Speicher, werbefrei, SMS g?nstiger, Wunschrufnummer,
Events,
Preisvorteile und mehr unter http://club.web.de/?mc=021104
H. Peter Anvin
2002-Apr-29 18:46 UTC
[syslinux] 'implicit' doesn't prevent additional parameters?
Josef Siemes wrote:> Hi, > > just tried the 'implicit 0'-option with pxelinux (btw, 1.73Pre6 - works). > What I wanted is preventing tricksters to give additional parameters > on the commandline. It prevents giving something different from the > 'label'-statement ('Could not find kernel image:..'), but if I give e.g. > linux init=/bin/sh > it gives me a root shell. It should have taken the 'append'-line > from the label statement and nothing else, or even complain about > some error loading the image - like above. > > Have I missed something? >Yes -- the "implicit" statement doesn't prevent you from adding command line parameters, it just keeps you from specifying a kernel that isn't listed as a label. -hpa
Josef Siemes
2002-Apr-30 09:01 UTC
[syslinux] 'implicit' doesn't prevent additional parameters?
Hi,> Yes -- the "implicit" statement doesn't prevent you from adding command > line parameters, it just keeps you from specifying a kernel that isn't > listed as a label.how much work would it be to prevent command line parameters? Say, e.g. with 'implicit 2'? I consider this a useful feature. Regards, Josef bv ________________________________________________________________ Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr! Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13