Re: [Devil-linux-develop] [PATCH] build/scripts/scripts/save-config - security hole?

[Roland P. <pa...@ta...>]

On Tuesday 27 April 2004 22:01, Tim wrote:
> Roland Pabel wrote:
> >On Tuesday 27 April 2004 06:14, Tim Tait wrote:
> >[...]
> >
[...]
>
> DL supports passing the etc.tar.bz2 file location from boot program?
yes, I added that a few weeks ago., See the mailing list archive or press F3 
at the boot screen
The essentials: 
- config=/dev/hda1:backup.tar.bz2 will search for that file on that device 
first
- config=/dev/hda1 will scan that device first
- config=backup.tar.bz2 will scan all devices for that archvie first

> Cool! And is it just isolinux or does Grub and Lilo work too parameter
> passing from hard disk boots? This would solve a major headache for me -
I guess, would surprise me otherwise...but haven't ever booted DL from a 
harddrive...isolinux,grub and lilo can also protect the boot options, making 
them un-editable...

> I don't want DL scanning all 7 or 8 disk partitions and floppies, usb
> etc. I just want to tell it load  the one on hda1, or the floppy. I can
> make grub menu picks for those. Can/does this parameter also get read by
> save-config? My 2nd big concern is a config be written back to somewhere
> other than it came from.
We could add more features like:
- exclusive: scan only one device
- lists: config=/dev/hda1,/dev/hda2 ...

> As Bruce pointed out, the floppy FAT doesn't support ownership
> attributes, so that may not help. But if I can force the etc.tar.bz2
> location from the boot string, which already has a config file that is
> root only access, then a non priveleged user can not overwrite it so
> thats even better.
that shouldn't be a problem...
Roland
-- 
ICQ UIN 49339118	Linux Counter #88774
GPG-Key 1024D/59C6AFA6 2003-02-07 Roland Pabel <ro...@pa...>